Jump to content

Garacesh

Members
  • Posts

    16,316
  • Joined

  • Last visited

Everything posted by Garacesh

  1. Well, bugger. If true, that completely negates what I'm trying to achieve. I can appreciate opening the file resetting the timer, but that's fine, because they're probably using that file, so it can stay. I know 'low space' is its default setting but I was hoping that changing that to daily would make it run regardless of file space. That's certainly how the GPO's help text makes it sound, to me..
  2. Our Art dept want to use OneDrive on their devices so kids can easily pick up work between their own devices and school computers. Makes sense, but the file sizes of RAW photos and Premiere Pro files? Not a fun time! Well Windows' Storage Sense should fix that, right? GPO:\Computer Configuration\Policies\Administrative Templates\OneDrive Enable OneDrive Files On-Demand: Enabled GPO:\Computer Configuration\Policies\Administrative Templates\System\Storage Sense Allow Storage Sense: Enabled Allow Storage Sense Temporary Files cleanup: Enabled Configure Storage Sense cadence: Enabled (Every day) Configure Storage Sense Cloud Content dehydration threshold: Enabled (1) Configure Storage Sense Recycle Bin cleanup threshold: Enabled (1) Well, womp womp, no it doesn't. In fact, that doesn't seem to do anything I opened a file on Thursday, Monday morning it was still there, even after several reboots. Well, can I script it with PowerShell? Well, yes, but actually no. I can use a combination of Get-ChildItem and Where-Object {$_.LastWriteTime to dump files that have a LastWriteTime -gt 2, but that assumes that the user has deleted them and dumps them from OneDrive. Not quite what I'm after. So next I try looking into ATTRIB, a file that's downloaded from OneDrive has the O attribute, whereas one that hasn't doesn't. Awesome, pipe Get-ChildItem and Where-Object {$_.LastWriteTime into ATTRIB -O, right? Nooope. Still nada. Command appears to complete successfully, certainly there's no errors, but nothing actually changes. So now I'm kind of stuck here. I can't just slap OneDrive on the machine or it'll be rendered useless once the disk fills up, and the official way of doing it doesn't seem to work. Is there another method I'm missing? Something wacky about Storage Sense I'm not in the know on?
  3. AutoAdminLogon and a shortcut in shell:startup should do the trick HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon Value name: AutoAdminLogon, Value type: REG_SZ, Value data: 1 Value name: DefaultPassword, Value type: REG_SZ, Value data: $YourAccountPassword Value name: DefaultUserName, Value type: REG_SZ, Value data: $YourAccountUsername (probably want to pair this with disabling balloon/toast notifications) Then stick a shortcut to "C:\Program Files\Google\Chrome\Application\chrome.exe" "YourURLGoesHere" --start-fullscreen in shell:startup for that user account Edit: Or the shortcut to the software you want running on that one Of course, this does mean you've got account credentials in cleartext in the machine's registry, so make sure the machine is locked down appropriately.
  4. I used to have done and got a tonne of use out of it. If you're wired, it's pretty much a super-low-latency RDP. If you want to extend your pc to another room, I'd say yeah, keep hold of it. It's pretty much deigned to work in steam's Big Picture mode though so using it as a full-fat pc might be more difficult. (and if you're considering selling it.. What's your price? I'd be interested 😛)
  5. There's already plenty of dodgy randobrand chargers with questionable-at-best electrical safety floating around Amazon, eBay et al.. I don't think Apple will make it much worse even with £19 chargers
  6. I read that as Hull Live was its new name and thought that was a bit of a rubbish name for a soft drink..
  7. Forgot to post this one on Saturday! Second Screamer-Killer painted in the new scheme. Haven't attempted to strip the first one yet! All magnetised, each of the scything talons, the head, and the top part of the carapace are all removable/swappable. (Also, curse having to shrink my images, apparently my phone camera is too good )
  8. Of the new colour scheme, just those 2.5, the Neurothrope, the Hormagaunt and the ripper on the Parasite base. And my second Screamer is about 50% done. Once that's finished I'll be doing the Parasite since its base is now done and I primed the model yesterday. I've also done the bases for 3x actual Rippers, 4x Warriors (well, 3 warriors and 1 with an interchangeable torso for Tyranid Prime) and 1x Tervigon so they just need priming and painting. I do have, I think, 3 Zoanthropes, a Hive Tyrant, a Winged Hive Tyrant, a Termagant and a Hormagaunt of my old scheme to repaint. Though they've all been varnished, and I haven't tried stripping them yet.
  9. A few tests on smaller models, just a standard Hormagaunt, and the ripper is actually the Parasite of Mortrex base. The nebula effect doesn't quite work as well on the smaller scale, but I think when you've got all of them together on the tabletop it'll still look good
  10. So far I have a Hive Tyrant, a Flying Hive Tyrant, 3 Zoanthropes, a Screamer-Killer, a test Hormagaunt, and a test Termagant painted with my old scheme, so it's not toooo much to re-paint. I'm not sure how well the varnish is going to strip, though...
  11. Well, I took some time to step away, reset, and come up with something a little better.. I'm proud to present Hive Fleet Tarrasque's new paint job.
  12. No, that's for M.2 SATA drives, not M.2 NVMe drives. M.2 is the form factor, whereas SATA and NVMe are the actual technology
  13. Well that's annoying, I've just gone to get the link for you again and it's doubled in price!! I wonder if the listing I gave you was for business accounts and it's cheaper there or something.. This is the link to the product I was mentioning but at £70 I'm not sure I can so easily recommend it.
  14. NGFF and M.2 are the same thing, NGFF (Next Generation Form Factor was just the original name for it) so I'd expect that to work, just based off of it's name. How does it 'not fit'? Does your drive enclosure only have screw mounts for longer/full length drives, or is the notch wrong? Edit: Derp I keep forgetting pin counts are on both sides, so based on you having 29 pins visible (and an assumed 29 pins on the other side), that 58 pins, putting your notch at pins 59-66. That means you need an M-keyed M.2 slot with PCIe x4 / SATA compatibility. This one by StarTech should do you. There's cheaper fly-by-night options if you don't care about brand names, but IMO StarTech's stuff is decent for a reasonable price.
  15. I think that final bit as you suggest, is indeed just CYA for houses with weak WiFi. But yes. Pokemon go is a geolocation-based game, which involves wandering around the great outdoors activating objectives and whatnot. The ability to play it in just one room without going anywhere severely diminishes the experience. Personally, I'd say no. Well, actually... I'd kick it up the chain and let somebody else say no, because chances are they're less likely to push back against someone higher up that can actually reprimand them. School devices are to be used in the course of fulfilling the child's education. Pokemon Go ain't that. Plus the aforementioned wandering around being a liability, and the addition of microtransactions, definitely a no-go.
  16. 7 pages to Godwin's Law, is that a new record? Whilst I agree that penalising the MAT does indirectly take money away from the children and impact their learning, what else are you supposed to do? The school - operating as a business entity - has been deemed to have broken the law, therefore the school - as a business entity - has to be on the hook for rectifying that. Whilst I'm not keen on the school paying out a massive wedge in principle, nor am I keen on Bromcom throwing the sueball around again, I also couldn't on similar principle condone them suffering no punishment for this at all if procedures haven't been followed as they should be. We could blame individual members of staff but something of this magnitude would go through a lot of people, you can't realistically finger-point in a scenario like this.
  17. Interesting correction, thank you So essentially invisible costs don't exist in procurement-world?
  18. False equivalency. The rest of us have been members for years and post in many threads, including technical threads which helps solidify our reason to be here. A user registering this month (likely this day as it was their first post), posting firstly and only in a highly contentious thread, is always going to smell a bit astroturfy. I'd say the same about an anti-Bromcom user that registered today/recently and had only posted in this thread. That being said, and to stay on topic, I don't know the full details of this lawsuit and I'm far too busy to read them at work, but I might have a good peruse later. From what I can gather, a MAT decided to not pick Bromcom. Bromcom alleges this was favouritism because several schools in the trust already used Arbor. But.. good? I don't think I see that as a bad thing. I feel like that's just.. sensible? If the school are ditching SIMS, and already have not-SIMS somewhere else, that should 100% absolutely get an input (as should all the schools like do like SIMS, if there were any, should have had a say in ditching it) I'm aware that they have said those schools were excluded from the tender process, but in my absolutely-not-a-lawyer view, I don't think they should have been. Aren't we constantly asking for recommendations/reviews/accounts of first-hand experiences? If they needed a product, and they knew that Arbor definitely did what they need it to, then why wouldn't they pick Arbor if the prices were even relatively close? That's not only a bunch of schools you don't have to retrain, but also a considerable wealth of knowledge held by folks that probably already do things the way you want them to because you're part of the same MAT, and I can't fathom why a MAT of that size wouldn't have centralised their data formatting/procedures/etc. Even if Bromcom were, let's say 10% cheaper, in my mind I'd still want to be be heavily considering Arbor in that scenario if the rest of my schools were happy with it and it met our requirements. You really can't put a price on that kind of already customised/tailored knowledge at your fingertips. I'm of the opinion that "Cost-effective" isn't just "what's cheapest". But again, I'll express that I haven't read the court docs yet and I might be getting entirely the wrong end of the stick here, so take the above with a pinch, dash, bucket, wheelbarrow or ocean's-worth of salt, to taste. Edit1: To summarise: The courts have clearly decided there's a legal case here, based on the letter of the law, but I'm not convinced (based upon my own admittedly vague understanding) that there's a moral one. Edit2: Modifying a few phrases, since I'm not actually in the situation and want to make my post distinctly and legally clear.
  19. To be fair, I wouldn't expect a vegetarian muffin to be suitable for vegetarians. Vegetarians are still made of meat, after all.
  20. Here's a real head-scratcher for you.. Our Hypervisors (Windows Server 2022 Datacentre, 21H2 20348.1487 build) have been experiencing weird network inconsistencies... but only on the Hyper-V SET interfaces. Each SET is 3 out of 6 available interfaces on the same VLAN. Both static addresses. Both have the same subnet mask, default gateway and DNS servers. Both have a similar, but different MAC address that match the vendor range. IPv6 is disabled on both SET interfaces and both have the domain.tld manually set in the DNS suffic for this connection: option of Advanced TCP/IP settings, with both Register this connection's addresses in DNS and Use this connection's DNS suffix in DNS registration ticked. Yet one of them works, and one of them doesn't. It isn't always this way, both were showing Public network until I started breaking the ports (see switch info below) on the switch to make sure the port-to-switch documentation was correct, after which Team A decided it was Domain and Team B still stays as-is even after doing the same to Team B's ports. I tried remaking the teams (hence the 2.0) with the following PowerShell commands, which didn't fix the issue new-vmswitch "TeamA 2.0" -NetAdapterName "SLOT 2 Port 1","SLOT 6 Port 1","SLOT 8 Port 1" -EnableEmbeddedTeaming $true -Notes "3 QLogic SLOT X Port 1 interfaces" new-vmswitch "TeamB 2.0" -NetAdapterName "SLOT 2 Port 2","SLOT 6 Port 2","SLOT 8 Port 2" -EnableEmbeddedTeaming $true -Notes "3 QLogic SLOT X Port 2 interfaces" All 6 ports on the switch it's connected to are configured identically. interface 1/1/[color="#FF0000"]x[/color] no shutdown description HypervisorHostname - Team [color="#FF0000"]X[/color] - S[color="#FF0000"]#[/color]P[color="#FF0000"]#[/color] no routing vlan trunk native 1 vlan trunk allowed [color="#FF0000"]##[/color],[color="#FF0000"]##[/color],[color="#FF0000"]##[/color],[color="#FF0000"]##[/color] Initially I thought oh, put the vlan trunk native to match the VLAN the servers are on! Nope, bricks the link. NlaSvc's event log (Event Viewer, Microsoft, Windows, NlaSvc, Operational) has the following events: Gateway resolution failed on interface {d54340f1-8e7b-4a97-b376-1c2adc94687c} for [color="#FF0000"]IP[/color].[color="#FF0000"]of[/color].[color="#FF0000"]Gateway[/color].[color="#FF0000"]254[/color] with error: 0x43 LDAP authentication on interface {D54340F1-8E7B-4A97-B376-1C2ADC94687C} ([color="#FF0000"]IP[/color].[color="#FF0000"]of[/color].[color="#FF0000"]Host[/color].[color="#FF0000"]Server[/color]) failed with error 0x51 Other random-but-possibly-relevant bits PS C:\Windows\system32> get-vmswitchteam "TeamA 2.0" | Select * Name : TeamA 2.0 Id : 49873dc8-fd70-437d-b7b8-151bd39c11a1 NetAdapterInterfaceDescription : {QLogic BCM57810 10 Gigabit Ethernet (NDIS VBD Client) #5, QLogic BCM57810 10 Gigabit Ethernet (NDIS VBD Client) #6, QLogic BCM57810 10 Gigabit Ethernet (NDIS VBD Client) #3} NetAdapterInterfaceGuid : {96231111-35fa-489d-a212-6bc36b0210ce, 3cff025b-3118-484d-93d0-b4face212df5, c52107aa-bcaf-4cf0-902b-d8558b4718a1} TeamingMode : SwitchIndependent LoadBalancingAlgorithm : Dynamic PS C:\Windows\system32 > get-vmswitchteam "TeamB 2.0" | Select * Name : TeamB 2.0 Id : 33a363a6-e757-4b2f-87c1-9698b4517ddb NetAdapterInterfaceDescription : {QLogic BCM57810 10 Gigabit Ethernet (NDIS VBD Client), QLogic BCM57810 10 Gigabit Ethernet (NDIS VBD Client) #2, QLogic BCM57810 10 Gigabit Ethernet (NDIS VBD Client) #4} NetAdapterInterfaceGuid : {821f55b6-e05c-4566-bc37-2213359e19bf, 6cd7e5f1-d711-43b4-8893-6b78df590e37, ec428132-cd24-44a9-8c2f-f878f61bc442} TeamingMode : SwitchIndependent LoadBalancingAlgorithm : Dynamic PS C:\Windows\system32> Get-VMSwitch -name "TeamA 2.0" | Select * DefaultQueueVmmqQueuePairs : 16 DefaultQueueVmmqQueuePairsRequested : 16 Name : TeamA 2.0 Id : 49873dc8-fd70-437d-b7b8-151bd39c11a1 Notes : 3 QLogic 'SLOT X Port 1' interfaces Extensions : {Microsoft Windows Filtering Platform, Microsoft NDIS Capture} BandwidthReservationMode : Absolute PacketDirectEnabled : False EmbeddedTeamingEnabled : True AllowNetLbfoTeams : False IovEnabled : False SwitchType : External AllowManagementOS : True NetAdapterInterfaceDescription : Teamed-Interface NetAdapterInterfaceDescriptions : {QLogic BCM57810 10 Gigabit Ethernet (NDIS VBD Client) #5, QLogic BCM57810 10 Gigabit Ethernet (NDIS VBD Client) #6, QLogic BCM57810 10 Gigabit Ethernet (NDIS VBD Client) #3} NetAdapterInterfaceGuid : {96231111-35fa-489d-a212-6bc36b0210ce, 3cff025b-3118-484d-93d0-b4face212df5, c52107aa-bcaf-4cf0-902b-d8558b4718a1} IovSupport : False IovSupportReasons : {This network adapter does not support SR-IOV.} AvailableIPSecSA : 0 NumberIPSecSAAllocated : 0 AvailableVMQueues : 516096 NumberVmqAllocated : 10 IovQueuePairCount : 72 IovQueuePairsInUse : 13 IovVirtualFunctionCount : 0 IovVirtualFunctionsInUse : 0 PacketDirectInUse : False DefaultQueueVrssEnabledRequested : True DefaultQueueVrssEnabled : True DefaultQueueVmmqEnabledRequested : True DefaultQueueVmmqEnabled : False DefaultQueueVrssMaxQueuePairsRequested : 16 DefaultQueueVrssMaxQueuePairs : 16 DefaultQueueVrssMinQueuePairsRequested : 1 DefaultQueueVrssMinQueuePairs : 1 DefaultQueueVrssQueueSchedulingModeRequested : StaticVrss DefaultQueueVrssQueueSchedulingMode : StaticVrss DefaultQueueVrssExcludePrimaryProcessorRequested : False DefaultQueueVrssExcludePrimaryProcessor : False SoftwareRscEnabled : True RscOffloadEnabled : False BandwidthPercentage : 10 DefaultFlowMinimumBandwidthAbsolute : 300000000 DefaultFlowMinimumBandwidthWeight : 0 CimSession : CimSession: . ComputerName : [color="#FF0000"]HypervisorHostname[/color] IsDeleted : False PS C:\Windows\system32> Get-VMSwitch -name "TeamB 2.0" | Select * DefaultQueueVmmqQueuePairs : 16 DefaultQueueVmmqQueuePairsRequested : 16 Name : TeamB 2.0 Id : 33a363a6-e757-4b2f-87c1-9698b4517ddb Notes : 3 QLogic 'SLOT X Port 2' interfaces Extensions : {Microsoft Windows Filtering Platform, Microsoft NDIS Capture} BandwidthReservationMode : Absolute PacketDirectEnabled : False EmbeddedTeamingEnabled : True AllowNetLbfoTeams : False IovEnabled : False SwitchType : External AllowManagementOS : True NetAdapterInterfaceDescription : Teamed-Interface NetAdapterInterfaceDescriptions : {QLogic BCM57810 10 Gigabit Ethernet (NDIS VBD Client), QLogic BCM57810 10 Gigabit Ethernet (NDIS VBD Client) #2, QLogic BCM57810 10 Gigabit Ethernet (NDIS VBD Client) #4} NetAdapterInterfaceGuid : {821f55b6-e05c-4566-bc37-2213359e19bf, 6cd7e5f1-d711-43b4-8893-6b78df590e37, ec428132-cd24-44a9-8c2f-f878f61bc442} IovSupport : False IovSupportReasons : {This network adapter does not support SR-IOV.} AvailableIPSecSA : 0 NumberIPSecSAAllocated : 0 AvailableVMQueues : 516096 NumberVmqAllocated : 1 IovQueuePairCount : 72 IovQueuePairsInUse : 4 IovVirtualFunctionCount : 0 IovVirtualFunctionsInUse : 0 PacketDirectInUse : False DefaultQueueVrssEnabledRequested : True DefaultQueueVrssEnabled : True DefaultQueueVmmqEnabledRequested : True DefaultQueueVmmqEnabled : False DefaultQueueVrssMaxQueuePairsRequested : 16 DefaultQueueVrssMaxQueuePairs : 16 DefaultQueueVrssMinQueuePairsRequested : 1 DefaultQueueVrssMinQueuePairs : 1 DefaultQueueVrssQueueSchedulingModeRequested : StaticVrss DefaultQueueVrssQueueSchedulingMode : StaticVrss DefaultQueueVrssExcludePrimaryProcessorRequested : False DefaultQueueVrssExcludePrimaryProcessor : False SoftwareRscEnabled : True RscOffloadEnabled : False BandwidthPercentage : 3 DefaultFlowMinimumBandwidthAbsolute : 100000000[b][color="#FF0000"]*[/color][/b] DefaultFlowMinimumBandwidthWeight : 0 CimSession : CimSession: . ComputerName : [color="#FF0000"]HypervisorHostname[/color] IsDeleted : False * This was originally 300000000 until I brought it in line with TeamA just in case, but that didn't work Really can't get my head around this one. Short of rain dances and blood sacrifices, I'm out of ideas.
  21. Should be, pupil devices throw certificate errors without our SBB certificate adding to their devices.
  22. Trying to run off a report of a pupil's internet traffic over an hour-long period and I can't find a way to give me an actual 'this is the requested resource' URL. For example, if I go to bbc.co.uk/news on my test device/user and browse some articles, if I point the report at that user, all I get is https://bbc.co.uk:443, which needless to say is pretty useless. Is there some option I'm missing here? I only seem to have URI and related options, not URL.
  23. Removing the user's modify permissions over the directory would be sufficient. I know the software is reasonably portable, but I'd imagine just whacking it in Program Files would be good enough?
  24. I have a device here that's now supervised, enrolled into Intune/Endpoint Manager. It's got the configuration profiles on that mandate it downloads Sign In App from it, and runs it in Kiosk mode. All is well. Except Sign In App can't use the camera, because it doesn't have the permissions to, but because the device is in Kiosk mode I'm unable to grant it them. Sure, I could just take the profile off the iPad, do it manually, and re-add it, but I'm trying to make things as light-touch as possible. I've found Intune/Endpoint Manager's App Configuration Policies section, and created a new policy, platform iOS/iPadOS; targeted app Sign In App Visitor Management; and assigned to the same device group that does the Sign In App stuff This policy has allowCamera and allowBluetoothModification* both set as boolean/true. I found allowCamera and allowBluetoothModifcation in this Apple dev document, but I have a nagging suspicion that this is the wrong document and it's instead talking about OS restrictions. And now the policy's Device install status has been sat at 'Pending' for over two hours. Anybody able to confirm that I've done this right or wrong (and hopefully point me in the right direction if it's the latter!) * There's a badge/label printer connected via bluetooth Edit: Bugger Both devices now have Status: Succeeded and a nice big green tick, and yet Sign In App still complains Privacy options have blocked access to the camera, even after a reboot.
  25. I was reading an article about a bloke that fell into the local water supply. I guess he couldn't see that well.
×
×
  • Create New...