Garacesh

So, hypothetically.. On a scale of one to absolutely f:censored:g trolleyed...

Had that a couple of weeks ago. Googling the number showed that they were actually spoofing HMRC's real phone number. You'd have thought by now the networks would have fixed phone number spoofing

You can set your volume above 100% with VLC Media Player. You could also try re-encoding the video with Handbrake, that has a volume adjustment option.

Huh. Weird. C:\Windows\SIMS.ini just points to the local %PROGRAMFILESx86% paths. [setup] SIMSDotNetDirectory=C:\Program Files (x86)\SIMS\SIMS .net FinanceDirectory=C:\Program Files (x86)\SIMS\FMSSQL It doesn't have a SIMSDirectory= There's also no SIMS.ini in the VirtualStore\Windows, just a ODBC.ini containing: [ODBC 32 bit Data Sources] SIMS_FMS_DATABASE=SQL Native Client (32 bit) [sIMS_FMS_DATABASE] Driver32=C:\WINDOWS\SysWOW64\sqlncli.dll I've ripped a copy of SIMS.ini from the other Options user's PC, the user is back in tomorrow, hopefully that'll fix the issue! Danke!

My File Stream has signed me back in. GMail seems to be up again for me, too.

You got a non-paywalled version of that? Sounds an interesting read, even if not related at all. Edit: Is it this about SolarWinds kit?

I do hate to necrobump.. Sorry! I've given the user full control over the OPTIONS folder in the SIMS share, and the Options Online User group. Yet still she gets the password file not found issue. What am I missing?

Aye, if I tell the unauthenticated rule to match users and use the captive portal it throws that login prompt to any and all web requests, but my suspicion is that doing it that way is likely to screw up apps on mobile devices (especially Apple kit) when it signs them out for inactivity etc. Although even with the SecurityAppliance_SSL_CA installed I still get a certificate error on the login page, NET::ERR_CERT_COMMON_NAME_INVALID*. I could just do it over HTTP but I don't really wanna do that on a page that's handling user credentials. Ideally, what I want is a passive solution, where you just slap the credentials into the proxy information and Sophos sees that and says "Yep, you're Joe Bloggs, go right ahead".. That way there's no faffing about for the end-user once it's set up. It looks like RADIUS might indeed be the way forward, something for me to do some digging on. For now I think I'm going to just have to leave them as they are - unauthenticated with pupil filtering, and a login button on the block page. I think it's reasonable middleground for now, until I've got the time to dig into it further. * which apparently actually means that the certificate isn't presenting a fully-qualified hostname, which looking at the certificate itself appears to be right.

We've recently had an XG box fitted and I can't say I've got many complaints. BUT! (because there's always a but ) I'm having some difficulty tagging WiFi traffic from non-domain devices to a user. All of our on-domain Windows devices authenticate over STAS, but that's obviously not an option for phones and iPads and the like. So, I connect an iPad to the WiFi, give it the Root CA certificate, and browse to a website. It works. Awesome! Except it doesn't know who I am, even though I put a username and password into the Authentication settings of the WiFi network (domain\user format, though I've also tried the user@domain format that Sophos displays). If I go to a site that's blocked, I get the correct block page, but it says my username is blank. Web filter logs confirm this, there's no username. So, it's clearly putting me on the Pupil filtering, since Default group is set as the kids in Configure / Authentication / Services I faffed about with settings for a bit, and got it to throw a credential prompt. I think this was after I turned AD SSO on for WiFi. On my iPad where I had credentials: awesome! It's now logging the user. On my Android phone where I had no credentials set, it asked for credentials. Yay! ... except, that's not quite right. Because if I delete the user credentials (or just make the username bogus) it still allows traffic. And it still tags traffic to that user. Even if I turn AD SSO off, it still tags traffic to that user. So it's obviously not looking at the credentials at all. It's just throwing that credential prompt once and then tagging everything to that user, which is probably functionally correct, it's not technically correct. MAC address binding is disabled for the user groups (and checking there's no MAC address list for my test users, there isn't), so it ain't that.. Bit stumped now

Hmm. I did eventually get it to work but I've changed that many things I'm not sure which one it was.. Oops I did start whitelisting more control panel stuff, though, so it's likely to be either be whitelisting Microsoft.DevicesAndPrinters (even though I could get to it anyway..?) or possibly Microsoft.Sound

Struggling with this one. Thanks to COVID, management have invested in a bunch of bluetooth headsets so that staff can walk around the room but still communicate with the kids that're isolating through Google Meet. My test user can plug in a USB Bluetooth adapter and Windows will pick it up, the Bluetooth icon shows in the system tray, and double-clicking it brings up the 'Bluetooth & other devices' section of Settings. However, clicking on 'Add Bluetooth or other device' does naught. The clicking animation plays, the icon gets smaller, the text goes bold, but then... Nothing. The Bluetooth adapter shows up in Device Manager and Devices and Printers as expected, with no warnings. Nothing obvious showing in a gpresult. Is there a policy I'm missing somewhere?

Bit of another bump, y'know when you realise you didn't quite get it right? The script posted above copies the most recent version to CurrentVersion only if current version does not exist If CurrentVersion already exists, you end up with CurrentVersion\VersionNumber The following script fixes that [color="#008000"]# Google Drive File Stream creates a new directory each time it updates. # This results in the shortcut in the redirected start menu becoming invalid or pointing to older versions. # This script copies the latest version to the same folder to keep the newest version at the same destination with each update.[/color] [color="#000080"]If[/color] ([color="#0000FF"]Test-Path[/color] [color="#000080"]-Path[/color] [color="#800000"]"C:\Program Files\Google\Drive File Stream"[/color]) { [color="#008000"]# Get latest version folder path.[/color] [color="#000080"]ForEach[/color] ([color="#FF8C00"]$Property[/color] [color="#000080"]in[/color] ([color="#0000FF"]Get-ChildItem[/color] [color="#800000"]"C:\Program Files\Google\Drive File Stream"[/color] [color="#000080"]-Directory[/color] | [color="#0000FF"]Where[/color] {[color="#FF8C00"]$_[/color].Name [color="#A9A9A9"]-inotmatch[/color] [color="#800000"]"Drivers|CurrentVersion"[/color]} | [color="#0000FF"]Select-Object[/color] [color="#000080"]-Last[/color] [color="#EE82EE"]1[/color])) { [color="#FF8C00"]$LatestVer[/color] = [color="#FF8C00"]$Property[/color].Name [color="#FF8C00"]$LatestVerFullPath[/color] = [color="#FF8C00"]$Property[/color].FullName } [color="#008000"]# Create CurrentVersion folder if it doesn't already exist, copy the latest version into it, overwrite any existing files.[/color] [color="#000080"]If[/color] ([color="#A9A9A9"]![/color]([color="#0000FF"]Test-Path[/color] [color="#800000"]"C:\Program Files\Google\Drive File Stream\CurrentVersion"[/color])) { [color="#0000FF"]New-Item[/color] [color="#000080"]-ItemType[/color] [color="#EE82EE"]Directory[/color] [color="#000080"]-Path[/color] [color="#800000"]"C:\Program Files\Google\Drive File Stream\CurrentVersion"[/color] [color="#000080"]-Force[/color] } [color="#0000FF"]Copy-Item[/color] [color="#000080"]-Path[/color] [color="#FF8C00"]$LatestVerFullPath[/color][color="#EE82EE"]\*[/color] [color="#000080"]-Destination[/color] [color="#800000"]"C:\Program Files\Google\Drive File Stream\CurrentVersion\"[/color] [color="#000080"]-Recurse -Force[/color] [color="#008000"]# Delete all but the latest version.[/color] [color="#0000FF"]Get-ChildItem[/color] [color="#000080"]-Path[/color] [color="#800000"]"C:\Program Files\Google\Drive File Stream"[/color] [color="#000080"]-Directory[/color] | [color="#0000FF"]Where[/color] {[color="#FF8C00"]$_[/color].Name [color="#A9A9A9"]-inotmatch[/color] [color="#800000"]"Drivers|CurrentVersion|[/color][color="#FF8C00"]$LatestVer[/color][color="#800000"]"[/color]} | [color="#0000FF"]Remove-Item[/color] [color="#000080"]-Recurse -Force[/color] }

I was scheduled to go to Denmark for Christmas, spend it with the Mrs and her family, then come back for New Year and spend that with Mum & Stepdad (and likely stepbrothers). Doesn't look like that one's going to happen now, which sucks, as the Mrs and I haven't seen each other since August, which sucks, but that's the sacrifice I'm willing to make for the greater good. (The grea'r good! SHUT IT!) Shame a sizable chunk of UK aren't willing to make the same sacrifices. If they open up shopping centres and mixing bubbles for Christmas, we're going to see a big jump in cases come January There's supposed to be some official statement going out today.. We'll see..

My council contact has said it's extended until 31/8/2021?

After some digging, it turned out one of my Hyper-V hosts had died over the weekend, and for some reason when it brought the DC back up it hadn't bothered to connect it to the virtual switch But since that was a CLI-only VM (because...? Reasons? I didn't build it), it was only doing DNS and authenticating logins, and we've got three others, I decided just to nix it entirely. Big thanks to @BKGarry for his assistance

Ooooooh, tha's not good! Starting test: Replications [Replications Check,DC-Zero] A recent replication attempt failed: From DC-Two to DC-Zero Naming Context: DC=ForestDnsZones,DC=domain,DC=local The replication generated an error (1256): The remote system is not available. For information about network troubleshooting, see Windows The failure occurred at 2020-11-17 13:35:32. The last success occurred at 2020-11-16 23:46:57. 41 failures have occurred since the last success. [DC-Two] DsBindWithSpnEx() failed with error 1722, The RPC server is unavailable.. [Replications Check,DC-Zero] A recent replication attempt failed: From DC-Two to DC-Zero Naming Context: DC=DomainDnsZones,DC=domain,DC=local The replication generated an error (1256): The remote system is not available. For information about network troubleshooting, see Windows The failure occurred at 2020-11-17 13:35:32. The last success occurred at 2020-11-16 23:42:01. 41 failures have occurred since the last success. [Replications Check,DC-Zero] A recent replication attempt failed: From DC-Two to DC-Zero Naming Context: CN=Schema,CN=Configuration,DC=domain,DC=local The replication generated an error (1722): The RPC server is unavailable. The failure occurred at 2020-11-17 13:36:56. The last success occurred at 2020-11-16 01:49:54. 98 failures have occurred since the last success. The source remains down. Please check the machine. [Replications Check,DC-Zero] A recent replication attempt failed: From DC-Two to DC-Zero Naming Context: CN=Configuration,DC=domain,DC=local The replication generated an error (1722): The RPC server is unavailable. The failure occurred at 2020-11-17 13:36:14. The last success occurred at 2020-11-16 23:48:07. 41 failures have occurred since the last success. The source remains down. Please check the machine. [Replications Check,DC-Zero] A recent replication attempt failed: From DC-Two to DC-Zero Naming Context: DC=domain,DC=local The replication generated an error (1722): The RPC server is unavailable. The failure occurred at 2020-11-17 13:35:32. The last success occurred at 2020-11-16 23:47:04. 41 failures have occurred since the last success. The source remains down. Please check the machine. ......................... DC-Zero failed test Replications Starting test: Replications [Replications Check,DC-Three] A recent replication attempt failed: From DC-two to DC-Three Naming Context: DC=ForestDnsZones,DC=domain,DC=local The replication generated an error (1256): The remote system is not available. For information about network troubleshooting, see Windows Help. The failure occurred at 2020-11-17 13:46:12. The last success occurred at 2020-11-16 23:45:38. 41 failures have occurred since the last success. [DC-Two] DsBindWithSpnEx() failed with error 1722, The RPC server is unavailable.. [Replications Check,DC-Three] A recent replication attempt failed: From DC-Two to DC-Three Naming Context: DC=DomainDnsZones,DC=domain,DC=local The replication generated an error (1256): The remote system is not available. For information about network troubleshooting, see Windows Help. The failure occurred at 2020-11-17 13:46:12. The last success occurred at 2020-11-16 23:45:38. 41 failures have occurred since the last success. [Replications Check,DC-Three] A recent replication attempt failed: From DC-Two to DC-Three Naming Context: CN=Schema,CN=Configuration,DC=domain,DC=local The replication generated an error (1722): The RPC server is unavailable. The failure occurred at 2020-11-17 13:47:37. The last success occurred at 2020-11-16 23:45:38. 41 failures have occurred since the last success. The source remains down. Please check the machine. [Replications Check,DC-Three] A recent replication attempt failed: From DC-Two to DC-Three Naming Context: CN=Configuration,DC=domain,DC=local The replication generated an error (1722): The RPC server is unavailable. The failure occurred at 2020-11-17 13:46:54. The last success occurred at 2020-11-16 23:45:32. 41 failures have occurred since the last success. The source remains down. Please check the machine. [Replications Check,DC-Three] A recent replication attempt failed: From DC-Two to DC-Three Naming Context: DC=domain,DC=local The replication generated an error (1722): The RPC server is unavailable. The failure occurred at 2020-11-17 13:46:12. The last success occurred at 2020-11-16 23:46:32. 41 failures have occurred since the last success. The source remains down. Please check the machine. ......................... DC-Three failed test Replications Similar results from the others, except for the primary one, which says everything is A-OK, just nothing since half past midnight.

Currently myself and my tech's profiles are local. We have a homedrive set on our AD user object (Z:) just like anybody else but unlike everyone else there's no folder redirection in place, so if our machines die that's goodbye to a lot of stuff. Obviously this is not ideal. So I create a folder redirection policy, mapping Documents to Z:\, Videos, Music and Pictures to Follow the documents folder, and explicitly naming Downloads and Favourites as respective subfolders of Z: since the follow option isn't available. None of these policies have the Grant the user exclusive rights..., Move the contents... or Also apply redirection policy to Windows 2000... boxes ticked. Awesome! GPUpdate, reboot, show me the money desktop! Aaand nope. Nada. GPResult says: The system calls to access specified file completed. \\domain.local\SysVol\domain.local\Policies\{GUID}\gpt.ini The call failed after 0 milliseconds. The processing of Group Policy failed. Windows attempted to read the file \\domain.local\SysVol\domain.local\Policies\{GUID}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following: a) Name Resolution/Network Connectivity to the current domain controller. b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller). c) The Distributed File System (DFS) client has been disabled Except that \\domain.local\SysVol\domain.local\Policies\{GUID}\gpt.ini absolutely exists, and has Read & Execute permissions for Authenticated Users (amongst other ACL's) But here's where it gets really weird. With this failed GPO in place, I can't change any GPO's. It's like it screws up my domain admin rights or something. If I try to make changes, I get Network access is denied. I can, however, delete the GPO link, reboot, and get my permissions back. Why on earth would a failed folder redirection GPO be screwing up administrative permissions? Or is something bigger more fundamentally broken than I'm realising? Extra/random info I've also tried %HOMESHARE%, also Redirect to the user's home directory for the Documents redirection. The event logs did originally read Windows failed to apply the Folder Redirection settings. Folder Redirection settings might have its own log file. Please click on the "More information" link. which was, of course, a dead link, and carry an error code of 1003. Bizarrely, I can't seem to find these logs any more. The folder redirection GPO is created from scratch, and has exactly the same permissions as every other GPO.

Unfortunately, I've had to resign. I guess I'm not cut out for being a wrestler. It's such a shame, but I've had to give in my too weak notice.

Did anyone use, or has anyone used, parentseveningsystem.co.uk* for video conferencing? SLT here say we use it for bookings, and their support page does have some comprehensive video calling info, just wondering if anyone can tell me how reliable it is. * Edit: Looks like they're also known as roombookingsystem.co.uk and schoolcloud.co.uk too.

Absolutely A+ - I should've mentioned that! I did eventually end up buying one of these which is absolutely fantastic and holds its water for way longer, but some kitchen roll and baking parchment will absolutely set you right for a long while. I do have a .txt document of 'recipes' on my PC though. Nothing worse than trying to figure out how you did something 6 months ago!

Le necrobump, a bit. Since we use the Remove common program groups from Start Menu GPO, plus a non-modifiable desktop for staff, so far none of the fixed folks have come up with would be applicable here. However in my testing, it doesn't look like File Stream cares what the path is. It's not hard coded. It can be C:\Program Files\Google\Drive File Stream\43.0.8.0 just as much as it could be C:\Gewuigowiehgowqghwgb\WTHAmIDoingWithMyLife. So, I've whipped together a little startup script should do the trick: [color="#008000"]# Directory paths[/color] [color="#800000"]$GDFSPath[/color] = [color="#800000"]"C:\Program Files\Google\Drive File Stream"[/color] [color="#800000"]$GDFSCurVer[/color] = [color="#800000"]"C:\Program Files\Google\Drive File Stream\CurrentVersion"[/color] [color="#008000"]# Get latest version of GDFS[/color] [color="#800000"]$LatestVer[/color] = ([color="#0000FF"]Get-ChildItem[/color] [color="#800000"]$GDFSPath[/color] [color="#000080"]-Directory[/color] | [color="#0000FF"]Where[/color] {[color="#800000"]$_[/color].Name [color="#808080"]-inotmatch[/color] [color="#800000"]"Drivers|CurrentVersion"[/color]} | [color="#0000FF"]Select-Object[/color] [color="#000080"]-Last[/color] [color="#4B0082"]1[/color]).FullName [color="#008000"]#Copy to CurrentVersion folder[/color] [color="#0000FF"]Copy-Item[/color] [color="#000080"]-Path[/color] [color="#800000"]"$LatestVer"[/color] [color="#000080"]-Destination[/color] [color="#800000"]"$GDFSCurVer"[/color] [color="#000080"]-Recurse -Force[/color] This should allow GDFS to update itself and still keep the shortcut location permanent. Going to run some tests with it, but this should work. (And that'd be Copy-Item -Path ((Get-ChildItem "C:\Program Files\Google\Drive File Stream" -Directory | Where {$_.Name -inotmatch "Drivers|CurrentVersion"} | Select-Object -Last 1).FullName) -Destination "C:\Program Files\Google\Drive File Stream\CurrentVersion" -Recurse -Force if anybody wants it shortened down) Edit: Testing has shown this to work just fine, no errors at all so far. After some tweaking, I've settled on: # Google Drive File Stream creates a new directory each time it updates. # This results in the shortcut in the redirected start menu becoming invalid or pointing to older versions. # This script copies the latest version to the same folder to keep the newest version at the same destination with each update. If (Test-Path -Path "C:\Program Files\Google\Drive File Stream") { # Get latest version folder path. ForEach ($Property in (Get-ChildItem "C:\Program Files\Google\Drive File Stream" -Directory | Where {$_.Name -inotmatch "Drivers|CurrentVersion"} | Select-Object -Last 1)) { $LatestVer = $Property.Name $LatestVerFullPath = $Property.FullName } # Copy the latest version to CurrentVersion folder, creates the folder if it doesn't already exist. Copy-Item -Path $LatestVerFullPath -Destination "C:\Program Files\Google\Drive File Stream\CurrentVersion" -Recurse -Force # Delete all but the latest version. Get-ChildItem -Path "C:\Program Files\Google\Drive File Stream" -Directory | Where {$_.Name -inotmatch "Drivers|CurrentVersion|$LatestVer"} | Remove-Item -Recurse -Force } This copies the newest version (which keeps the %ProgramData% shortcut correct, just in case) and deletes the rest. A shortcut to C:\Program Files\Google\Drive File Stream\CurrentVersion\GoogleDriveFS.exe will then always be the latest version and will work for any user. (We have a scheduled task to shut computers down at 8pm so at most it'll be a day out of date)

I've been meaning to pick up some of that, but I've heard people say the difference isn't really noticeable unless you're airbrushing.

A steady hand, 3 good brushes (basecoat, drybrush, detail), and some patience are all you need to get a tabletop-ready standard. Base coat a few bits of sprue or components you aren't using and use them to get your technique/thinning ratios/layers sorted - nobody wants to be stripping models! There's a great YouTube channel called Midwinter Minis that covers a lot of beginner-friendly tips that'll get your models ready in no time. Personally I've found some good results with contrast paints if you're looking to save a bit of time. I wouldn't recommend doing a full model with them, because of their transparency you'd need to be super precise, but applying a thin base coat of somewhere between grey and white and then putting contrast on top gets some good effects. Don't believe GW that you have to use Wraithbone, you absolutely don't. I'm just using standard Hycote grey plastic primer. So far I've used Pallid Wych Flesh + Skeleton Horde for bones, Pallid Wych Flesh + Aethermatic Blue + Pallid Wych Flesh again for ghostly-blue skin, and I'm using straight Flesh Tearer's Red for my under-armour (or Flesh Tearer's Red drybrushed with Pallid Wych Flesh for the Wracks and other such flesh abominations) For brushes, I personally swear by Army Painter's 'Wargamer' range of brushes, but they can get expensive! I only have the Detail brush at the moment but I do plan on picking up a few more. Aside from that, for the love of Get-Random("Gork","Mork","Slaanesh","Khorne","Tzeentch","Nurgle","Ynnead") do not buy nylon brushes! The ends will always end up curled and you'll have to throw them away. Buy sable/horse hair brushes. At the moment I'm using these and they're doing me well. I hope at least some of that is helpful

I always preferred "There are 2 types of people in the world. Those that can extrapolate from incomplete data."

I do both, although D&D is all through Discord at the moment. HeroForge's complete rebuild lookin' reeeaaaal tempting, though..