Jump to content

jamesb

Members
  • Posts

    2,502
  • Joined

  • Last visited

Everything posted by jamesb

  1. SID is the S-blah blah number, and unique to each user. If you use $_.UserID rather than $_.Message to identify the events then it should check whether the SID is in your ignore list rather than trying to hunt down a string in a string. So you script ends up as: $IgnoreList = ("Acc1", "Acc2", .... "Acc8")foreach ($event in Get-WinEvent -ComputerName ($ComputerName + "." + $env:USERDNSDOMAIN) -FilterHashtable @{ProviderName="Microsoft-Windows-Security-Auditing"; ID="4624"; Data="C:\Windows\System32\winlogon.exe"} -MaxEvents ($MaxEvents) | Where-Object {$IgnoreList -notcontains [b]$_.UserID[/b]}) { [array]$Logins += (($event.timecreated).ToString("dd/MM/yyyy, HH:mm:ss") + ($($event.message -split "`r`n")[12]) + "`n`r") } -inotmatch will match (or not in this case) two strings, but doesn't handle arrays. -notcontains will check whether an item is in an array - in this case the UserIDs you want to ignore should be in the $IgnoreList array. It saves you needing a second loop, which is the only other option I can see. If you'd prefer to use usernames I can find a snippet that'll convert SIDs to usernames, or vice-versa.
  2. If you can get the SID of the users instead of username, maybe: Where-Object {$IgnoreList -notcontains $_.UserID}) might help?
  3. A second here for Microsoft qualifications - I'd recommend the MCSE. You can self-study with the books and take the exam quite cheaply, and the school might be willing to subsidise/pay for the books for you. If you're working in Microsoft-land (most places) then an MCSE will often get you an interview - particularly combined with a bit of backing experience. It's a good one to start your career with due to the wide recognition and you can work from there. A lot of people will scoff about the qualification, but it does help to give you a leg up.
  4. I use evernote myself, but that's mainly because I tie in to IFTTT for all sorts of pointless but fun things.
  5. If it's a case of each student having a VM in their home drive I don't think multiuser is necessarily important.
  6. If you really want to go small DSL might be worth a look. At 50MB it's pretty slim. Or you can go one further with Tiny Core Linux instead, which'll be 10MB. Or if you really, really want to push it and go for something a little different MenuetOS fits on an old floppy. Good luck.
  7. It's as newsworthy as it's made. I've seen a lot of people saying that it's not a big thing, and shouldn't be a story because it isn't particularly remarkable. But it is remarkable, and it is noteworthy, otherwise it wouldn't be drumming up so much discussion. Normally if someone doesn't think a story is newsworthy they'll sigh and turn to the next one, however in this case they're engaging with the story - purely to register dislike of it. That says something about it at the very least. And I have been waiting for a bent iPhone joke to pop up since this morning. Can we now agree it's been made and move on?
  8. Task Scheduler can run PowerShell. PowerShell sitting on one of your never-off servers can run the script given here: MS PowerShell: Please explain how this wake-on-LAN script works - Stack Overflow Import MAC addresses from a CSV (populated with https://gallery.technet.microsoft.com/scriptcenter/b780c4e4-e986-40a3-9296-65caadd31211 from a list of names maybe) and you can have task scheduled WoL.
  9. No problem, hope it helped. I did suspect there was a miscommunication somewhere along the line.
  10. Just to check, you copied the ProgramData\Discover folder from a working machine, to the problem machine as @glen_j suggested and it stopped the working machine from working? That seems to be what you're saying.
  11. I think you misread his comment. Emphasis below mine. On both client and server? I'm generally clutching at straws here with general troubleshooting, not being overly familiar with Discover (it came along after my day). Maybe try what glen_j suggested, particularly as it does seem that file was responsible?
  12. Fairly simple really. The CEO of one of the most wealthy/valuable companies in the world has felt it necessary to release a statement about his sexuality - including explaining why he has done so. The explanation in his statement seems worthy to me, so as he is an influential person various media sources have picked up the story and started sharing and commenting on his statement. Certainly seems more newsworthy to me than some phone being launched. Actually he didn't hide it as such, it seems that it was pretty much an open secret - at least within Apple and among those who knew him personally. This is more of an open statement of support, hoping to give people who might not be in such a fortunate position as him a metaphorical helping hand.
  13. That does make more sense, but I don't see that anyone suggested that, hence my confusion. Anything in event logs?
  14. If copying a folder from a working machine stops it working, I think you have bigger problems going on with your systems. There's no way that I can think of that making a copy of a folder from one machine to another would affect the source machine. As 'unknown error' doesn't help much with troubleshooting have you had a look in your event logs on the clients and server to try and get a little more details on the issue?
  15. It sounds like it's something specific to the machine. How is it different to your others?
  16. Out of curiousity which tech forums? I need to know so that I don't accidentally join them.
  17. While it was on Hyper-V, we did find that 1 virtual processor and 8GB RAM was fine for ours. That was a small server though. Your best bet is to set up resource monitoring, and see whether or not it actually appears constrained at any time. Do you have any performance issues? If not, then it's probably fine.
  18. I've only run it on Hyper-V myself, but VMWare do have a best practice guide for Exchange 2013 which might help you: http://www.vmware.com/files/pdf/Exchange_2013_on_VMware_Best_Practices_Guide.pdf
  19. Has he given you a budget to work with as that'll be the main restriction on what you can do? The first thing I'd be looking at is documentation - get a network diagram together and keep it up to date as you work. Check that the switch is actually a switch and not a hub, as that may be the biggest bottleneck you've got. A server's a good idea - but the licensing will cost money (hence why you need a budget before you can identify the key points to change). With wireless-N speed shouldn't be too much of an issue - but try to identify the wifi cards in each device. It may be that they're running on legacy modes and so losing most of the speed N could otherwise provide. Either wiring them or upgrading the cards would help on that one. Upgrading the internet package should be the last step, as without a solid network they may not see any benefit of it.
  20. If it's a VBS file then it might be very simple. Put it on a network share somewhere, with read access, and use a GPO to deploy a scheduled task. Filter it to the teacher's security group, and configure it to only run if the user is logged in: Configure a Scheduled Task Item Drop it into User Configuration so that it'll run in the context of the logged on user, timed for 3pm each day, and Bob's your uncle.
  21. When you say you've done this in VB are you referring to VBscript or VB.net? There may be a much simpler way for you to do this. Or at least one that doesn't require you to play with GPOs*. Is PowerShell available to you? *Simpler is a very relative term in this case.
  22. You should probably have a group for teachers, in which case you can filter your policy to the AD group: Filter the scope of Group Policy according to security group membership: Group Policy There are other ways, but frankly they're clunky and involve breaking inheritance. With your AD person away I would recommend sticking with the security group filtering rather than doing things that might be considered justification for all sorts of violence.
  23. You can, of course, replace TouchWiz. I used to use Nova instead.
  24. Depends where you bought it from in China, and if it turns up with 'Cannon' branding.
  25. Reallllly? If you're looking to get rid of a OnePlus One I could do with a spare.
×
×
  • Create New...