jthompson

This thread is going around in circles.

From The Guardian: Stranded dog saved from rising tide after rescuers attach sausage to drone

gam create|update alias user|group|target e.g. gam create alias [email protected] user [email protected]

In each instance of Google Cloud Password Sync (one on each of your DCs) it will have the AD attribute it uses to match with Google accounts. By default that's 'mail'. From your description, it sounds as though once your Google accounts have a match to the 'mail' value somewhere in the list of aliases (i.e. either the main account address or one of the alternate addresses), the the password sync will work. Do you have your users' Google addresses in AD, just in an attribute other than 'mail'? If so, you could perhaps update each instance of Google Cloud Password Sync to match on that attribute instead of 'mail'. You then wouldn't need to add alternate addresses to users' Google accounts. Edit: just noticed that this was only affecting a subset of your users, so adjusting the GCPS configuration to use a different attribute might break things for other users. I'd be surprised if GAM couldn't be used to add the alternate addresses to accounts. Assuming that it can, you'll be able to perform a CSV action to do a bunch of users in one go.

Is this stuff just basically our civilisation's version of the myths and legends from ancients times? The point not being the truthfulness of them at all but rather the sense of satisfaction that the stories give to people collectively? I'm trying to think what dumb things I've done that I believed were worth pursuing: I've sure I've wasted many hours/days playing computer games just for some of the rarer achievements. To other people that's quite a thick thing to spend your time doing, even though I know it's not worth the time.

It's a fun game. Reminds me a lot of Mastermind (not the TV quiz).

A word of warning to those of us in the UK. The words are from American English, despite the creator of the game having a totally British accent when interviewed on Radio 4 about it.

A key thing, I think, is that there is now a business model behind the propogation of [engaging] garbage. Either through chasing greater engagement on social platforms, or by selling merch to followers. There'll be plenty of people happy to sell you a flat-Earth t-shirt, a Q hat or a common law constable ID card, all of which reinforces a sense of purpose and mission amongst followers. [okay, maybe not 'plenty'].

You can have each team member set up their own instance, but all be using copies of the same API key files. That way they can each launch Cloud Shell and use GAM from their respective Google accounts, but you only need to set up a GAM project the once. Store the API key files securely in a password manager (or encrypted-at-rest in some other way) so that you can add them to future instances of GAM as needed.

I'm not sure how/whether updates that are pulled from the MS catalogue also get pulled from WSUS. I'm guessing that they would become expired, rather than disappeared. If you've declined the update and checked that it's then not still being queued up by clients, you're probably okay. Until February.

If it turns out that the authorities made a mistake in cancelling his visa, I suppose that would mean that it was all down to a Fed-error.

That's a bit of an Open question. Some would love to see him deported, whilst other think he deserves a break.

Very surprised at this news that Russian authorities have actually decided to bust a Russian ransomware gang. BBC News - REvil ransomware gang arrested in Russia https://www.bbc.co.uk/news/technology-59998925

Only twice a week for about the last 18 months or whatever. It's a lot of steps, granted, but I figure it's info that somebody somewherewill need. Parties can certainly be difficult to diagnose. Often they're really just a work meeting but with nibbles, or they can actually be a shooting party... just a normal, regular shooting party.

Hopefully the proportion of people prepared to lie into a government website is so vanishingly small that the honesty box model will function well enough, most of the time.

This pun is ace.

I think you'd need to have some measure or how many of those 'missing' tests were actually instances of people wanting a test but not getting one, as opposed to people not needing a test in the first place.

I'd strongly recommend looking at using Google Cloud Shell for this, rather than setting it up on a PC. In this other thread, @paulkerton linked to a great set of instructions for doing exactly that. Not sure what's happened with the Terms of Service thing in your screenshots, but give the Cloud Shell setup a whirl. It could be a proxy or filtering issue in your environment that's tripping it up (dunno).

This might/will need further investigation before applying to your live servers, but I'm thinking that if the update is downloaded but has not yet started to install, you could maybe stop the BITS and Windows Update services, clear the contents of %WINDIR%\SoftwareDistribution and then restart the services. If the update has already started to install, or is installed and awaiting a restart in order to complete, then don't do this. That's generally what you'd do if you had an update package corrupted on a system and getting stuck. It would prompt the system to download a fresh copy of any updates that it needs, and in this case, provided the update in question is no longer approved, it just wouldn't download in again. The other option might be to take a good backup prior to the installation starting and be in a position to restore the server right away if it runs into problems after installing the update.

This may not be very helpful to those of you struggling with these updates, but to follow up on my post from yesterday, our 2019 DC that initially failed the update installed it successfully last night with no apparent issues coming into this morning.

Much fun has been had about the fact that Novak Djokovic's first name sounds like No-Vax, but did you know that his surname, roughly translated from Serbian, means "I don't even bother with washing my hands, mate"?

A little off topic but just to underline the point about security with GAM or GAM-ADV, be very careful about the oauth2 and secrets files that you generate for them. Don't leave them sitting around anywhere as they're basically the keys to the kingdom! A bad actor getting hold of those can trash your entire Google tenancy. That's probably the main reason for installing GAM on Google Cloud Shell, so that those key files aren't sitting on a Windows network. The fact that it's very convenient is a nice bonus. If you do want to store those key files somewhere else, do it in a password manager or something.

Regarding KB5009557 (2022-01 CU for Server 2019), some of our servers have installed it successfully, some are yet to try. One of our DCs rebooted overnight but is showing KB5009557 as having failed. Thankfully not boot looping. The .NET CU installed successfully on that one, though. All our servers are 2019. It took an age to install when I was doing a couple manually yesterday, but that could just be down to some coincidental issues in our environment at present. Not seeing any issues with the Win10 CU. Really don't need a wonky update messing with the servers at the minute.

Haven't tried to do anything quite so granular within a shared drive, but one way to achieve it would be to have your SubSubFolder1 and SubSubFolder2 up at the root level, so that you can set up whatever privileges are needed on them, and then place shortucts to them in SubFolderA as required. It means that users can navigate to them via SubFolderA, but the folders themselves are not inheriting any privileges from it.

My first inclination is to yawn, but I have to be fair and say that I've not managed to get all of the way through the trailer yet. It looks a bit like a non-playable, boring version of Grand Theft Auto.