RE: [NTSysADM] Problems installing RSAT on WIn 7 SP1

2016-12-29 Thread Sean Chapman
The June update fixed the slow update searching in Windows 7 https://support.microsoft.com/en-us/kb/3161608 Its just bad coding from Microsoft of not clearing out superceded packages. If you left it for 2 or 3 days it would likely finish, but that update should help you out. Here is the copy

RE: [NTSysADM] Fwd: Protecting from Ransomware

2017-02-15 Thread Sean Chapman
We use knowbe4. The “training” isn’t the greatest but I guess its an ok video. The phishing testing seems to be doing ok as we went from 28% phish prone to 4% after the training video and testing. If I was an IT director im not sure I could justify the cost but who knows. Oh also we get bomb

RE: [NTSysADM] Anyone using Device Installation Restrictions Group Policies?

2017-02-23 Thread Sean Chapman
We do use this however like you said its quite tricky to get that set up the way you want. In the end we went with a group with security filtering to remove certain users from the policy. It doesn’t sound like that’s what you want but its what we went with and has worked well for us From: lis

Re: [NTSysADM] Wrong username shown as who has Word 2010 file open

2017-03-01 Thread Sean Chapman
I will say I have noticed this for years and never really figured it out. It may have been the last person who saved the file but I'm not ready to say for sure that's what it was. Whats really funny is we have one admin who uses libreoffice and it still shows as him occasionally so I don't thi

[NTSysADM] Re: Office 365 licensing question

2017-03-02 Thread Sean Chapman
Out of curiosity what is the problems between E1 and E3 you speak of as we are just now in the process of migrating and trying to decide how many people need E3 vs E1 From: listsad...@lists.myitforum.com on behalf of Jonathan Raper Sent: Wednesday, March 1, 2

[NTSysADM] RE: Office 365 licensing question

2017-03-09 Thread Sean Chapman
upted or something." Thanks, Jonathan From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Sean Chapman Sent: Thursday, March 2, 2017 4:35 PM To: ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitf

RE: [NTSysADM] Ransonware protection

2017-06-12 Thread Sean Chapman
Not exactly software but I set up a whitelisting SRP policy awhile ago and its been fantastic and I get to feel really confident that our users cant easily screw things up. Its been 2 years now since our last infection. Pain in the butt with webex and gotomeeting and whatnot though. Since we

[NTSysADM] RE: Enabling DLL Rules In AppLocker - Any Real-World Advice?

2017-07-11 Thread Sean Chapman
I have an SRP whitelist set up for the last few years which includes DLLs. Besides having to whitelist a few application locations and writing a script which disables SRP that can be run on demand so our techs can install software its been pretty solid. In fact now that we are moving to Window

RE: [NTSysADM] Advice on patching Domain Controllers via WSUS

2017-07-12 Thread Sean Chapman
I have a test group that contains one OS version at least of every one we have deployed that gets the patches right away and then on Saturday evening the DCs and other servers get them automatically. It has been, what, 12 years now that way with zero problems. From: listsad...@lists.myitforum.

RE: [NTSysADM] Looking for driver for...

2017-07-18 Thread Sean Chapman
In the mean time if you have to scan something, MS paint will work for that as long as the scanner is installed, just go to From scanner or camera. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Micheal Espinola Jr Sent: Tuesday, July 18, 2017 11:07 AM

RE: [NTSysADM] How to handle patching a patch, using scheduled installations

2017-07-24 Thread Sean Chapman
It’s a little bit of an extra crappy situation since that June update is an exclusive update. If there is a second round of updates, I just do them Monday morning or if its not a critical update I have also just let it roll until the next AU update window (which for me is Saturday) From: lists

[NTSysADM] RE: Imaging windows 10 1703 enterprise

2017-08-16 Thread Sean Chapman
>From my experience this is the only way to control the start menu and taskbar. https://docs.microsoft.com/en-us/windows/configuration/customize-windows-10-start-screens-by-using-group-policy Default apps is crap and even after you set them they randomly go back to Microsoft defaults ( im looking

RE: [EXTERNAL]RE: [NTSysADM] RE: Imaging windows 10 1703 enterprise

2017-08-16 Thread Sean Chapman
Grab a pc Insert USB with 1703 ISO image Boot Make sure to not be connected to the internet Go through OOBE until naming the PC (don't name it), then enter Audit mode Don't restart Build without joining domain Install all updates (that are possible without activation) Don't install drivers Customiz

RE: [NTSysADM] A new task for me - setting up a SQL Server cluster on vSphere 6.0

2017-08-17 Thread Sean Chapman
Server Enterprise has not existed since 2012 came out. Standard and Datacenter both are licensed for Failover Clustering with the only difference being virtualization rights. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of D R Sent: Thursday, August 17

RE: [NTSysADM] Odd problem with GPO-mapped drives and SSL VPN

2017-08-24 Thread Sean Chapman
Map it with persistence? From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Micheal Espinola Jr Sent: Thursday, August 24, 2017 2:22 AM To: ntsysadm@lists.myitforum.com Subject: Re: [NTSysADM] Odd problem with GPO-mapped drives and SSL VPN You should be abl

Re: [NTSysADM] Dropping Kaspersky Av, who to replace it with?

2017-09-14 Thread Sean Chapman
I have no issues with Kaspersky and would have no problem keeping it in my environment. That said, I currently use Webroot in ours, which is about 1k users with some laptops around the country and world like yours and its ok. I dont like the management of it and its a little buggy at times but

[NTSysADM] RE: Running RSAT tools elevated

2017-09-21 Thread Sean Chapman
I have the rsat tools in the taskbar and then shift right click and run as different user From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Heaton, Joseph@Wildlife Sent: Thursday, September 21, 2017 8:48 AM To: 'NT System Admin Issues Discussion list' Sub

[NTSysADM] RE: Application Whitelisting and PowerShell Constrained Language Mode - Problems With Trusted Login Scripts

2017-10-30 Thread Sean Chapman
It was my understanding that even if you have powershell set to disabled that running a script via gpo like a login script would execute no matter what. I tried to find some documentation really quick to verify that but cannot so I could be wrong. From: listsad...@lists.myitforum.com [mailto:l

[NTSysADM] RE: Anyone using CrowdStrike?

2017-11-06 Thread Sean Chapman
Crowdstrike has been in the news a lot the last year with the DNC and Hillary Clinton hiring them. Not going either way on this, but theres plenty of articles about the company out there https://www.forbes.com/sites/samarmarwan/2017/07/11/crowdstrike-helped-trace-the-dnc-hack-to-russia-now-busi

[NTSysADM] IE Enterprise Mode and 1709

2017-11-27 Thread Sean Chapman
Has anyone else experienced issues with IE Enterprise Mode and W10 Enterprise 1709? It worked fine on PCs with 1607 and then 1703 but now in our testing with 1709 Edge just refuses to switch over to IE. I have verified the Site List is still set via GPO and the registry key exists at Computer

[NTSysADM] Applocker AppIDsvc autostart

2017-12-05 Thread Sean Chapman
Hey guys, Im trying to set up Applocker policies and move away from SRP whitelisting but im having trouble getting some stuff that runs via login script to work properly. If I go to the event viewer and see the blocked scripts I can click them and they then run fine. Im leaning toward the App

[NTSysADM] RE: Applocker AppIDsvc autostart

2017-12-06 Thread Sean Chapman
in why the first attempt didn't run. -Aakash Shah From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Sean Chapman Sent: Tuesday, December 5, 2017 6:41 AM To: ntsysadm@lists.myitforum.com<mailto:ntsysadm@l

[NTSysADM] Remove original message in reply

2017-12-13 Thread Sean Chapman
Hey all, I got tasked with finding out how to not include the original message in reply for email (using Office 365) I know this is possible in Outlook but its not available for outlook online or mobile. Does anyone know of a way to get this done? I was thinking maybe some crazy exchange tran

RE: [NTSysADM] Remove original message in reply

2017-12-14 Thread Sean Chapman
lever. You'd be modifying multiple Content-Type containers (text/plain, text/html, etc). More importantly (to me), is what is the business need for this? -- Espi On Wed, Dec 13, 2017 at 8:58 AM, Sean Chapman mailto:schap...@coilcraft.com>> wrote: Hey all, I got tasked with findin

RE: [NTSysADM] Remove original message in reply

2017-12-14 Thread Sean Chapman
, Michael B. Smith mailto:mich...@smithcons.com>> wrote: Do this with Compliance Rules/Policies that prohibit the IP. From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>] On Behalf Of

[NTSysADM] RE: Palo Alto Endpoint Security Trapps?

2018-01-26 Thread Sean Chapman
Sure. Its like any other next gen AV product. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of David McSpadden Sent: Friday, January 26, 2018 7:57 AM To: ntsysadm@lists.myitforum.com Subject: [NTSysADM] Palo Alto Endpoint Security Trapps? Anyone using or

[NTSysADM] Random reboots Win7 and 10

2018-01-31 Thread Sean Chapman
Hey all, Been going crazy today trying to find out why a lot of our PCs are rebooting on people with a 2 minute warning. It seems like it should be easy to track down but I cant find anything solid on whats causing it. This has happened for some users 2 days in a row now. Event viewer shows

RE: [NTSysADM] Random reboots Win7 and 10

2018-01-31 Thread Sean Chapman
d patch from the last couple days: https://support.microsoft.com/en-us/help/4078130/update-to-disable-mitigation-against-spectre-variant-2 Matt From:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> <mailto:listsad...@lists.myitforum.com> on

RE: [NTSysADM] Random reboots Win7 and 10

2018-01-31 Thread Sean Chapman
/support.office.com/en-us/article/attachments-are-removed-when-forwarding-plain-text-emails-2c1d366d-52b3-45f1-97ec-1955f59107ef>. On 1/31/2018 12:30 PM, Sean Chapman wrote: Ok so I use solarwinds patch manager and we recently found that KB4011626 causing problems with Outlook 2016 not i