FN-GM

The second one worked a treat (I didn’t try the first!). Thanks so much. I have made a couple of scripts and will use it more! I am going to have a play with using it for 2 queries (2 domains). That should be fun! Thanks again!

Thanks - got it! I will give this a shot and report back. Thanks again!

Thanks for the reply. Forgive me, I am not a coder by any means so might need some hand holding. If the below was the Get-aduser command, how would that fit in with your logic please? Get-ADUser -Filter * -SearchBase "OU=Finance,OU=UserAccounts,DC=FABRIKAM,DC=COM" Thank you!

Hello, I am writing a script that will send an email notification from data returned from a Get-ADuser command. For example users that are expiring. 9 / 10 times there won't be anything returned by the script. But I don't want it to send emails with no data. That will get annoying pretty quickly! Is there a way to exit the script with no further action if there are no results returned from the Get-Aduser command please? Thanks

@jthompson thanks for this. It works a treat!

Thanks to a server failure I ran out of time to check properly. But I quickly ran this and it does the trick. Thanks very much!

Hello, It must be the lack of sleep, but I am struggling to find what I am looking for! I am looking for a Powershell command to list AD accounts that are both Enabled Beyond the account expiry date (note not the password expiry) Can anyone assist plase? Thanks

& Dissolved!

Holding short of saying an attack from Russia.... Isn't this essentially a modern version of what they had during the cold war, then didn't maintain after the collapse of the USSR?

It also sounds like a failing on their procurement processes as well. This type of thing should be picked up before the purchase. When I purchase equipment and services I expect to plan out the operational costs throughout it's lifecycle.

You can download the IOS for the 9200L without a support contract. You also get lifetime warranty. @Aprice how is the warranty with Aruba better please? I don’t have any experience with it. It’s worth mentioning that this isn’t just Cisco. It’s very common for software and hardware vendors not to provide software updates unless you have an active support agreement.

i have been installing Cisco Catalyst 9200L for a while now. Very versatile switches. Additional stacking modules and PSU can be added. Can be layer 3 if needed and reasonably priced.

I had no issues with this. I didn't have to inject any drivers or legacy adapters. However, I had to configure the MAC address on the VM to be static and not dynamically assigned. It kept changing causing headaches!

Cocaine Bear A daft movie, but so bad it was funny. It was easy to watch and killed some time this evening. I would watch it again!

Is the Bett Logo stuck or has someone forgot to remove it?

Thanks Arthur. I haven’t looked at it properly but it’s looks promising! Thanks again.

We have multiple 1 & 10gig backup connections. It's not just the internet that can fail. There can but routing issues with OSPF, BGP, firewall faults etc. Having so much fault tolerance greats a whole new set of issues. If it can't be done on Windows I will look at a hardware option or we may end up migrate to a new Linux box.

Yes. That’s basically it.

We already have it working on Linux but the OS will be out of support in in the next 18 months or so. In general I am trying to simplify where I can as we already have a vast and complex system as a whole. We have a monitoring system that monitors absolutely everything. Servers, switches IOT devices etc. Critical functions are monitored and we receive alerts via various methods. But if there are issues getting out the the internet we need to know and the comms need to be via another method as the internet is broken. The email part is basically the method of producing the alert by the monitoring system, it sends the email message and this goes via SMTP to the current Linux box and that device converts it to SMS and alerts relevant parties.

Hello, I haven’t found a thread on this so apologies if I missed it! The April 2023 windows updates will have an impact on AD in 3 areas and thought I would make you aware. 1. AD Permissions Issue becomes enforced. https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-42291 https://support.microsoft.com/en-us/topic/kb5008383-active-directory-permissions-updates-cve-2021-42291-536d5555-ffba-4248-a60e-d6cbc849cde1 2. Kerberos PAC changes - 3rd Deployment Phase. https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-37967 https://support.microsoft.com/en-us/topic/kb5020805-how-to-manage-kerberos-protocol-changes-related-to-cve-2022-37967-997e9acc-67c5-48e1-8d0d-190269bf4efb#timing 3. NetLogon RPC initial enforcement. https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-38023 https://support.microsoft.com/en-us/topic/kb5021130-how-to-manage-the-netlogon-protocol-changes-related-to-cve-2022-38023-46ea3067-3989-4d40-963c-680fd9e8ee25

The SIM itself has no ability for data, it’s data only. We currently have this running on a Linux box and looking to lifecycle it. The monitoring system is on premise. I don’t want to use a cloud SMS service as the message is sent over the internet. If the internet, firewalls etc is down the notification won’t get there. We don’t want to touch the monitoring systems as it has over 5,000 devices. It would be a huge task to migrate to something news. That wouldn’t be permitted. Plus it won’t work as the SIM has no data at all. We don’t have any servers in the main LAN internet access. Anything that does need internet is in a DMZ and it whitelisted. Where I work is quite security sensitive and the type of place you need to be vetted for to work there.

Thanks - but the solution we are looking for would be Windows based. The current device is Linux, but for various reasons that I won’t discuss here we are looking to switch OS.

Ideally something off the shelf so it’s easier for other people to support as and when required.

We have plenty of backup connections. But if the firewalls fall over or there is a routing issue the traffic won’t get there. That’s why we want SMS as it will be completely independent of all this.

This did cross the mind but it won’t comply with the security policies. We can’t have a device connected to a unprotected internet connection like that. Thanks anyway though.