HPlum78

Yeah I appreciate all those things, and was merely playing devil's advocate. Also was answering in the vain of the posted question so was not including google in scope of my response.

If staff are unable to MFA because they don't want to install an authenticator app then limit their access to trusted locations, or by all means offer another form of token but at a cost. This whole not on my personal device is a nonsense, I won't use online banking as I don't want to use my personal device to auth... the list goes on! Or indeed not as the case may be, as most would not even give it a second thought when being asked to setup MFA (or use a second factor) for the other accounts in their life. Why when we are protecting our networks is this treated any differently?

https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/replication-error-8614 This is the MS take on this..

Out of interest what happens when you try to modify a GPO/ create a new GPO? More importantly what happens when you select the default domain controller policy.

Just want to verify where you are now, so now you have two Domain Controllers and I guess you have pointed the original DC at the new DC as its primary DNS server then at its loopback address for its secondary address and the opposite way round for the new DC?

Just in case you have not seen this (we have a ticket open) these updates stop GMSA from working...

I will just add this MS has said that support for SMTP is deprecated so although you can shoe horn this into later versions of Windows Server you probably should not. I will bet that it's not getting the servicing that it should probably get these days and maybe a little risky running this in your production environments? Anyhow that's my thinking on it and there are better ways to skin this cat than this in my opinion (don't be that person who gets your network owned by playing it fast and lose with unsupported services) if you are going to do this I would make sure that you articulate what you are doing to the person who carries the risk and get yourself a chunk of paperwork to stuff down your pants to cushion any boot or stick that may come furtherdown the line.

I don't know if you have seen this but it's a more elegant way of tagging mail that is external: http://Https://office365itpros.com/2021/03/11/external-email-tagging-exo/ Another good walk through can be found here: http://Https://lazyadmin.nl/it/add-external-email-warning-to-office-365-and-outlook/ Now it's worth mentioning that if you use a transport rule as they used to be called and inject content anyone doing anything with the email signature will have issues as its like the post office opening your mail, reading the contents resealing your mail and sticking a note on the outside saying caution this mail is from overseas you have broken the seal and the recipient can no longer be sure that the message has not been tampered with. A further thought on this is around the use of red at the top of an email red warnings panic users and should be used with caution, you would be better to use the Outlook client defaults in my opinion. Also just for completeness: https://www.google.com/amp/s/www.bleepingcomputer.com/news/security/attackers-can-hide-external-sender-email-warnings-with-html-and-css/amp/ H.

I could not agree more with @Roberto, hell just the other week MS themselves found out that a poorly configured storage account in Azure can expose your data/ your customers data! The cloud is as challenging and comes with a whole different set of challenges for security and I reiterate what others have said its not a silver bullet (or fire and forget) when it comes to security in someone else's data centre (The Cloud) you still have the same due diligence to ensuring you are secure.

I would try to choose my words carefully here but I take issue with the "The school has also appointed a specialist data protection officer." How about you employ a cyber security expert and not muddy the water on what that role needs to be focused on I think we have a long running post about devaluing IT... I too hope that this is not sat with what I bet is an over stretched and probably under funded and valued IT department and the head holds his hands up for his part to play in the whole situation over there.

Yeah SMTP was dropped in 2012 and was initially for those thar remember removed from 2016 but MS gave it back as to many organisations needed it. I use it for a host of applications and have never hit an issue (running on Server 2019) but that said looking at the following https://www.hmailserver.com/

I would PowerShell this an all...

https://cqure.pl/services-penetration-test/ I would also recommend the windows security course an all, even if you think you known windows...

Personally I would rewrite that in PowerShell and then use: Add-Type -assembly System.Windows.Forms I think that you would be able to do a write-progress to that form and have a progress bar displaying in a window. Would need to have ps in front of me to be sure and that's not now....

https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/configure-ipv6-in-windows Instead of me writing what MS has already committed to paper the above spells out what is and what is not supported, and I will add this if you open up an MS premier call the first thing your going to get told is get your house in order (or ipv6 in this case..) and call us back.

Because I was bored, made a PS function for the above now you can get the time for any time zone by using Get-NTPTime -Zone %Select Time Zone% <# .Synopsis Get NTP time from internet. .DESCRIPTION Gets the NTP time from open source API @ https://timeapi.io/ - the returned time data is convertfrom-json to give a more human readable format. .EXAMPLE Get-NTPTime -Zone Europe/London .EXAMPLE Get-NTPTime -Zone Europe/Rome #> function Get-NTPTime { [CmdletBinding()] [Alias()] [OutputType([array])] Param ( # Zone has a list of the availble zones that the API supports. [Parameter(Mandatory=$true, ValueFromPipelineByPropertyName=$true, Position=0)] [ValidateSet("Africa/Abidjan","Africa/Accra","Africa/Addis_Ababa","Africa/Algiers","Africa/Asmara","Africa/Asmera","Africa/Bamako","Africa/Bangui","Africa/Banjul","Africa/Bissau","Africa/Blantyre","Africa/Brazzaville","Africa/Bujumbura","Africa/Cairo","Africa/Casablanca","Africa/Ceuta","Africa/Conakry","Africa/Dakar","Africa/Dar_es_Salaam","Africa/Djibouti","Africa/Douala","Africa/El_Aaiun","Africa/Freetown","Africa/Gaborone","Africa/Harare","Africa/Johannesburg","Africa/Juba","Africa/Kampala","Africa/Khartoum","Africa/Kigali","Africa/Kinshasa","Africa/Lagos","Africa/Libreville","Africa/Lome","Africa/Luanda","Africa/Lubumbashi","Africa/Lusaka","Africa/Malabo","Africa/Maputo","Africa/Maseru","Africa/Mbabane","Africa/Mogadishu","Africa/Monrovia","Africa/Nairobi","Africa/Ndjamena","Africa/Niamey","Africa/Nouakchott","Africa/Ouagadougou","Africa/Porto-Novo","Africa/Sao_Tome","Africa/Timbuktu","Africa/Tripoli","Africa/Tunis","Africa/Windhoek","America/Adak","America/Anchorage","America/Anguilla","America/Antigua","America/Araguaina","America/Argentina/Buenos_Aires","America/Argentina/Catamarca","America/Argentina/ComodRivadavia","America/Argentina/Cordoba","America/Argentina/Jujuy","America/Argentina/La_Rioja","America/Argentina/Mendoza","America/Argentina/Rio_Gallegos","America/Argentina/Salta","America/Argentina/San_Juan","America/Argentina/San_Luis","America/Argentina/Tucuman","America/Argentina/Ushuaia","America/Aruba","America/Asuncion","America/Atikokan","America/Atka","America/Bahia","America/Bahia_Banderas","America/Barbados","America/Belem","America/Belize","America/Blanc-Sablon","America/Boa_Vista","America/Bogota","America/Boise","America/Buenos_Aires","America/Cambridge_Bay","America/Campo_Grande","America/Cancun","America/Caracas","America/Catamarca","America/Cayenne","America/Cayman","America/Chicago","America/Chihuahua","America/Coral_Harbour","America/Cordoba","America/Costa_Rica","America/Creston","America/Cuiaba","America/Curacao","America/Danmarkshavn","America/Dawson","America/Dawson_Creek","America/Denver","America/Detroit","America/Dominica","America/Edmonton","America/Eirunepe","America/El_Salvador","America/Ensenada","America/Fort_Nelson","America/Fort_Wayne","America/Fortaleza","America/Glace_Bay","America/Godthab","America/Goose_Bay","America/Grand_Turk","America/Grenada","America/Guadeloupe","America/Guatemala","America/Guayaquil","America/Guyana","America/Halifax","America/Havana","America/Hermosillo","America/Indiana/Indianapolis","America/Indiana/Knox","America/Indiana/Marengo","America/Indiana/Petersburg","America/Indiana/Tell_City","America/Indiana/Vevay","America/Indiana/Vincennes","America/Indiana/Winamac","America/Indianapolis","America/Inuvik","America/Iqaluit","America/Jamaica","America/Jujuy","America/Juneau","America/Kentucky/Louisville","America/Kentucky/Monticello","America/Knox_IN","America/Kralendijk","America/La_Paz","America/Lima","America/Los_Angeles","America/Louisville","America/Lower_Princes","America/Maceio","America/Managua","America/Manaus","America/Marigot","America/Martinique","America/Matamoros","America/Mazatlan","America/Mendoza","America/Menominee","America/Merida","America/Metlakatla","America/Mexico_City","America/Miquelon","America/Moncton","America/Monterrey","America/Montevideo","America/Montreal","America/Montserrat","America/Nassau","America/New_York","America/Nipigon","America/Nome","America/Noronha","America/North_Dakota/Beulah","America/North_Dakota/Center","America/North_Dakota/New_Salem","America/Nuuk","America/Ojinaga","America/Panama","America/Pangnirtung","America/Paramaribo","America/Phoenix","America/Port_of_Spain","America/Port-au-Prince","America/Porto_Acre","America/Porto_Velho","America/Puerto_Rico","America/Punta_Arenas","America/Rainy_River","America/Rankin_Inlet","America/Recife","America/Regina","America/Resolute","America/Rio_Branco","America/Rosario","America/Santa_Isabel","America/Santarem","America/Santiago","America/Santo_Domingo","America/Sao_Paulo","America/Scoresbysund","America/Shiprock","America/Sitka","America/St_Barthelemy","America/St_Johns","America/St_Kitts","America/St_Lucia","America/St_Thomas","America/St_Vincent","America/Swift_Current","America/Tegucigalpa","America/Thule","America/Thunder_Bay","America/Tijuana","America/Toronto","America/Tortola","America/Vancouver","America/Virgin","America/Whitehorse","America/Winnipeg","America/Yakutat","America/Yellowknife","Antarctica/Casey","Antarctica/Davis","Antarctica/DumontDUrville","Antarctica/Macquarie","Antarctica/Mawson","Antarctica/McMurdo","Antarctica/Palmer","Antarctica/Rothera","Antarctica/South_Pole","Antarctica/Syowa","Antarctica/Troll","Antarctica/Vostok","Arctic/Longyearbyen","Asia/Aden","Asia/Almaty","Asia/Amman","Asia/Anadyr","Asia/Aqtau","Asia/Aqtobe","Asia/Ashgabat","Asia/Ashkhabad","Asia/Atyrau","Asia/Baghdad","Asia/Bahrain","Asia/Baku","Asia/Bangkok","Asia/Barnaul","Asia/Beirut","Asia/Bishkek","Asia/Brunei","Asia/Calcutta","Asia/Chita","Asia/Choibalsan","Asia/Chongqing","Asia/Chungking","Asia/Colombo","Asia/Dacca","Asia/Damascus","Asia/Dhaka","Asia/Dili","Asia/Dubai","Asia/Dushanbe","Asia/Famagusta","Asia/Gaza","Asia/Harbin","Asia/Hebron","Asia/Ho_Chi_Minh","Asia/Hong_Kong","Asia/Hovd","Asia/Irkutsk","Asia/Istanbul","Asia/Jakarta","Asia/Jayapura","Asia/Jerusalem","Asia/Kabul","Asia/Kamchatka","Asia/Karachi","Asia/Kashgar","Asia/Kathmandu","Asia/Katmandu","Asia/Khandyga","Asia/Kolkata","Asia/Krasnoyarsk","Asia/Kuala_Lumpur","Asia/Kuching","Asia/Kuwait","Asia/Macao","Asia/Macau","Asia/Magadan","Asia/Makassar","Asia/Manila","Asia/Muscat","Asia/Nicosia","Asia/Novokuznetsk","Asia/Novosibirsk","Asia/Omsk","Asia/Oral","Asia/Phnom_Penh","Asia/Pontianak","Asia/Pyongyang","Asia/Qatar","Asia/Qostanay","Asia/Qyzylorda","Asia/Rangoon","Asia/Riyadh","Asia/Saigon","Asia/Sakhalin","Asia/Samarkand","Asia/Seoul","Asia/Shanghai","Asia/Singapore","Asia/Srednekolymsk","Asia/Taipei","Asia/Tashkent","Asia/Tbilisi","Asia/Tehran","Asia/Tel_Aviv","Asia/Thimbu","Asia/Thimphu","Asia/Tokyo","Asia/Tomsk","Asia/Ujung_Pandang","Asia/Ulaanbaatar","Asia/Ulan_Bator","Asia/Urumqi","Asia/Ust-Nera","Asia/Vientiane","Asia/Vladivostok","Asia/Yakutsk","Asia/Yangon","Asia/Yekaterinburg","Asia/Yerevan","Atlantic/Azores","Atlantic/Bermuda","Atlantic/Canary","Atlantic/Cape_Verde","Atlantic/Faeroe","Atlantic/Faroe","Atlantic/Jan_Mayen","Atlantic/Madeira","Atlantic/Reykjavik","Atlantic/South_Georgia","Atlantic/St_Helena","Atlantic/Stanley","Australia/ACT","Australia/Adelaide","Australia/Brisbane","Australia/Broken_Hill","Australia/Canberra","Australia/Currie","Australia/Darwin","Australia/Eucla","Australia/Hobart","Australia/LHI","Australia/Lindeman","Australia/Lord_Howe","Australia/Melbourne","Australia/North","Australia/NSW","Australia/Perth","Australia/Queensland","Australia/South","Australia/Sydney","Australia/Tasmania","Australia/Victoria","Australia/West","Australia/Yancowinna","Brazil/Acre","Brazil/DeNoronha","Brazil/East","Brazil/West","Canada/Atlantic","Canada/Central","Canada/Eastern","Canada/Mountain","Canada/Newfoundland","Canada/Pacific","Canada/Saskatchewan","Canada/Yukon","CET","Chile/Continental","Chile/EasterIsland","CST6CDT","Cuba","EET","Egypt","Eire","EST","EST5EDT","Etc/GMT","Etc/GMT-0","Etc/GMT-1","Etc/GMT-10","Etc/GMT-11","Etc/GMT-12","Etc/GMT-13","Etc/GMT-14","Etc/GMT-2","Etc/GMT-3","Etc/GMT-4","Etc/GMT-5","Etc/GMT-6","Etc/GMT-7","Etc/GMT-8","Etc/GMT-9","Etc/GMT+0","Etc/GMT+1","Etc/GMT+10","Etc/GMT+11","Etc/GMT+12","Etc/GMT+2","Etc/GMT+3","Etc/GMT+4","Etc/GMT+5","Etc/GMT+6","Etc/GMT+7","Etc/GMT+8","Etc/GMT+9","Etc/GMT0","Etc/Greenwich","Etc/UCT","Etc/Universal","Etc/UTC","Etc/Zulu","Europe/Amsterdam","Europe/Andorra","Europe/Astrakhan","Europe/Athens","Europe/Belfast","Europe/Belgrade","Europe/Berlin","Europe/Bratislava","Europe/Brussels","Europe/Bucharest","Europe/Budapest","Europe/Busingen","Europe/Chisinau","Europe/Copenhagen","Europe/Dublin","Europe/Gibraltar","Europe/Guernsey","Europe/Helsinki","Europe/Isle_of_Man","Europe/Istanbul","Europe/Jersey","Europe/Kaliningrad","Europe/Kiev","Europe/Kirov","Europe/Lisbon","Europe/Ljubljana","Europe/London","Europe/Luxembourg","Europe/Madrid","Europe/Malta","Europe/Mariehamn","Europe/Minsk","Europe/Monaco","Europe/Moscow","Europe/Nicosia","Europe/Oslo","Europe/Paris","Europe/Podgorica","Europe/Prague","Europe/Riga","Europe/Rome","Europe/Samara","Europe/San_Marino","Europe/Sarajevo","Europe/Saratov","Europe/Simferopol","Europe/Skopje","Europe/Sofia","Europe/Stockholm","Europe/Tallinn","Europe/Tirane","Europe/Tiraspol","Europe/Ulyanovsk","Europe/Uzhgorod","Europe/Vaduz","Europe/Vatican","Europe/Vienna","Europe/Vilnius","Europe/Volgograd","Europe/Warsaw","Europe/Zagreb","Europe/Zaporozhye","Europe/Zurich","GB","GB-Eire","GMT","GMT-0","GMT+0","GMT0","Greenwich","Hongkong","HST","Iceland","Indian/Antananarivo","Indian/Chagos","Indian/Christmas","Indian/Cocos","Indian/Comoro","Indian/Kerguelen","Indian/Mahe","Indian/Maldives","Indian/Mauritius","Indian/Mayotte","Indian/Reunion","Iran","Israel","Jamaica","Japan","Kwajalein","Libya","MET","Mexico/BajaNorte","Mexico/BajaSur","Mexico/General","MST","MST7MDT","Navajo","NZ","NZ-CHAT","Pacific/Apia","Pacific/Auckland","Pacific/Bougainville","Pacific/Chatham","Pacific/Chuuk","Pacific/Easter","Pacific/Efate","Pacific/Enderbury","Pacific/Fakaofo","Pacific/Fiji","Pacific/Funafuti","Pacific/Galapagos","Pacific/Gambier","Pacific/Guadalcanal","Pacific/Guam","Pacific/Honolulu","Pacific/Johnston","Pacific/Kanton","Pacific/Kiritimati","Pacific/Kosrae","Pacific/Kwajalein","Pacific/Majuro","Pacific/Marquesas","Pacific/Midway","Pacific/Nauru","Pacific/Niue","Pacific/Norfolk","Pacific/Noumea","Pacific/Pago_Pago","Pacific/Palau","Pacific/Pitcairn","Pacific/Pohnpei","Pacific/Ponape","Pacific/Port_Moresby","Pacific/Rarotonga","Pacific/Saipan","Pacific/Samoa","Pacific/Tahiti","Pacific/Tarawa","Pacific/Tongatapu","Pacific/Truk","Pacific/Wake","Pacific/Wallis","Pacific/Yap","Poland","Portugal","PRC","PST8PDT","ROC","ROK","Singapore","Turkey","UCT","Universal","US/Alaska","US/Aleutian","US/Arizona","US/Central","US/East-Indiana","US/Eastern","US/Hawaii","US/Indiana-Starke","US/Michigan","US/Mountain","US/Pacific","US/Samoa","UTC","W-SU","WET","Zulu")] $Zone ) Process { Invoke-WebRequest "https://timeapi.io/api/Time/current/zone?timeZone=$($Zone)" | ConvertFrom-json } }

I am not going to go in to the whys and all that (see above)... When thinking automation using an application then you need to load a COM object and as it happens MS know a thing or two about that $excel = New-Object -ComObject excel.application The next line I would run is $excel | GM and see what methods and such likes are exposed...

Don't know if you have been keeping up with this story but the ruling came out earlier this year. https://www.google.com/amp/s/amp.theguardian.com/law/2022/jul/20/uk-part-year-workers-entitled-to-full-paid-annual-leave-court-rules

Just spotted an error in my line of code! This is what happens when you use a phone and not VS Code or the ISE to write your code! (Also tells you that I ain't tested the code..) gci -directory e:\staff\ | %{set-location "$($_.FullName)\Performance Management Staff Folders"; New-Item .\2022_23 -ItemType Directory}

So this is how I would go about it along with a few thoughts. gci -directory e:\staff\ | %{set-location "$($_.FullName)\Performance Management Staff Folders"; New-Item .\2022_23 -Item-Type Directory} That about covers the code.. but leads me on to spending time on learning. Now I wrote the above line of code in a few mins and that's because I have done the hard work and learned how to use PS equally I could have written the command line statement as well (although these days that would have took me longer as its now not what I do these days!) learning how to use PS is an investment and yes it can be a frustrating one sometimes and as it turns out just like everything else there are multiple ways in PS (hell all of IT) to skin the same cat, and there is nothing wrong with leverage some old school command line stuff to boot. Choosing not to learn PS is in my mind not the right call as I will tell you now that you can not call the graph API to get you all the sign in details for a user from Azure AD, I know that this is a polar opposite but my point is about the journey and you will never start on that journey without taking the first step. Much like I did not learn how to use the command prompt in MS DOS all those years ago without spending a whole lot of time getting to know the basics. This is also true throughout my life in other areas, I did not build my first brick wall without spending a chunk of time not building a brick wall! Nor did I plaster my fist wall without the hills and valleys of my fist 20 attempts and I did not learn how to fix cars without a lot of time spent in books or learning from others around, the list goes on... But the story is the same anything worth doing takes effort but the rewards and the feeling of satisfaction once you get there is well worth it.

So here is the MS guide that gives the absolute detail on this rather than me writing it out: https://docs.microsoft.com/en-us/azure-stack/hci/concepts/quorum Note the statement: Cluster quorum recommendations If you have two nodes, a witness is required. If you have three or four nodes, witness is strongly recommended. Strongly recommended in a 3 node cluster further down the doc outlines what scenarios the various cluster configurations can operate under and the liklihood of the cluster being able to continue in those failure scenarios.

Salmonella

Photographs

https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/support-for-admt-and-pes This was released last month hence the questions regarding os versions and the likes.

What's your Domain controllers running/ workstation running?