RE: A ticket came in: Did they take the printer into the shitters with them?

The Something Awful Forums > Archives > Comedy Goldmine > RE: A ticket came in: Did they take the printer into the shitters with them?

The Iron Rose: May 12, 2012; Cat Army

AlexDeGruven posted:

I work in financial sector IT. The fact that the iPhone X can be unlocked while you are handcuffed, and even en potentially unconscious scares the poo poo out of me.

Actually it doesn't, because I know our IT security team will reject that device with the biggest "oh gently caress no" available.

I mean it's not like you can't do the same thing with a fingerprint sensor, so I'm not seeing a huge security vulnerability vs the old thing.

# ¿ Sep 17, 2017 23:53

Adbot: ADBOT LOVES YOU

# ¿ May 20, 2024 23:26

The Iron Rose: May 12, 2012; Cat Army

Thanks Ants posted:

I'm not ashamed to say that most of my job involves seeing problems and then figuring out what to type into Google to get onto the correct path to resolving it.

So on this subject.

Testing windows 10 for deployment in our enterprise environment, want to remove a bunch of the bloat that comes by default in Windows 10. Candy crush, minecraft, loving zune, et cetera.

What I've come up with are a bunch of different solutions, whether it's creating a task schedule in SCCM to run once when any user accounts (admin or domain) are signed into for the first time to simply putting a .ps1 on the desktop that will automate everything.

My question now though, is I have a powershell script that looks something like this:

code:

Mount-WindowsImage -Path C:\Mount -ImagePath c:\install\install.wim -Index 1
Remove-AppxProvisionedPackage -Path C:\Mount -PackageName *Microsoft.XboxApp*
Dismount-WindowsImage -Path C:\Mount -Save

Where C:\Mount is an empty folder, imagepath is the path to the .wim, and the package that's being removed is whatever package I want, really.

Anyways, my question isn't really about the script. My question is - if you remove the built in apps from the .wim, if you create a new account (local/domain - not a mobile account), will all that bloatware install anyways?

I would assume not, but who the heck knows with Windows 10 and I only have one seed unit that I'd rather not flatten and reimage unless and until it becomes necessary.

# ¿ Sep 26, 2017 22:06

The Iron Rose: May 12, 2012; Cat Army

SamDabbers posted:

Isn't there a Windows 10: No Bullshit edition? Does the Enterprise SKU get all that crap installed too, or is that only LTSB?

Microsoft has really jumped the shark.

yes but for a variety of reasons we can't get it right now.

In 6 months to a year, sure, but unfortunately we need to do this now now now blah

# ¿ Sep 26, 2017 22:37

The Iron Rose: May 12, 2012; Cat Army

Ghostlight posted:

I tell people that I wasn't hired because I know how to fix things - I was hired because I understand problems and how to find solutions.

Having recently done this - you are dealing with two kinds of bloatware in Windows 10.

There are ProvisionedPackages which is poo poo like Skype Preview and Get Office - those live in the Windows image and removing those will prevent them from appearing for new accounts.

There is also Start Menu Bloat - this is the really poo poo stuff like Minecraft and CandyCrush that installs on a per-user basis based on being pinned to the Start Menu. To prevent this stuff deploying for new accounts you have to alter the DefaultLayouts.xml in C:\Users\Default\AppData\Local\Microsoft\Windows\Shell. I'm still waiting for our designers to nail down what programs they want on there so in the meantime I just blank everything between the <StartLayoutCollection> tags - that forces it down to a default of just Edge, Setting and the Store.

bless your heart, thank you.

# ¿ Sep 26, 2017 23:04

The Iron Rose: May 12, 2012; Cat Army

I'm not sure how or why Cylance is blocking execution of all .vbs files but by God it is and it is ever annoying.

It really doesn't like visual basic is what I'm learning. Which will be a problem once we roll it out to everyone, ugh.

# ¿ Sep 27, 2017 21:29

The Iron Rose: May 12, 2012; Cat Army

MJP posted:

A Mac migration ticket came in...

I have 10 Macs that are going to get new SSDs as their boot drive, and some of them have only one volume or partition. All of them have local data, good chunks of it. All the Macs are bound to our AD domain. Users log on with their network accounts.

Is there a utility that allows me to take the SSD in question with the latest version of OSX installed, then connect it to another machine via USB interface or just directly connected, and copy the existing profiles, applications, and data onto the new drive? I'd love to be able to just install OSX on one drive, clone it nine times, get the user's data onto each drive, and swap it directly in rather than do individual sit-by-the-machine sessions to get everything set up. Basically a bulk imaging and copying tool for Macs on the network.

DeployStudio if you anticipate having to image multiple systems. Setting that up will be a pain though, but a time machine backup should be sufficient.

Are your mac users using mobile accounts? Mobile in this context meaning tjat their home folder lives on the drive itself.

# ¿ Oct 10, 2017 17:06

The Iron Rose: May 12, 2012; Cat Army

Thanks Ants posted:

I sound like a shill for these guys by now, but this will do what you want:

https://www.jamf.com/products/jamf-pro/deployment/

You can either deploy apps / settings / etc. directly to each machine, or let users pick from an internal App Store-like experience to install what they want.

There's still the clone/deploy option if you want to go down that path, but that doesn't do anything for ongoing management.

Jamf is great but it's hardly an immediate solution. We've been talking to them for the past two months - more if you include the time searching for and hiring a mac SME who we brought on with this project in mind. It's not suitable for the short term.

I entirely agree though, a MDM solution is far preferable.

In other news, I'm loving the description for this ticket:

quote:

[The Partners are] moving, here are some tech watch-outs:

L: His boardroom table is travelling with him. Work with S to get the correct HDMI/power/ethernet drops installed for his desk and TV.
A: Accounting server
P: Both his printers are local only, but need power/space to operate.

Feels like a list of video game hints.

also, weird issue. There's a user who has his personal Chrome profile and his work Chrome profile. The home button doesn't return him to the top of the page on his work profile, but it does on his personal profile. I'm completely baffled.

The Iron Rose fucked around with this message at 21:21 on Oct 11, 2017

# ¿ Oct 11, 2017 21:16

The Iron Rose: May 12, 2012; Cat Army

Thanks Ants posted:

What does "accounting server" mean, and why does a desk move need to worry about that?

I don't want to guess what the answer might be.

They're demolishing the whole floor, which the accounting server was on. Surprisingly sane reason, actually.

I haven't touched that server, I only really tend to hit SCCM, AD - I actually don't do any server setup stuff. I'm actually just tagged in the ticket, it's not even directly on me. But as to your question, I have no idea. I presume that the accountants need it.

# ¿ Oct 11, 2017 21:31

The Iron Rose: May 12, 2012; Cat Army

Dick Trauma posted:

The CEO's son was having an issue with his iPhone so he hands it over to me to look at. Onscreen is an "escort" website with a woman's profile that he was trying to arrange an assignation with. Safari was having trouble processing the payment page so I suggested he use a browser on his desktop and then went to the kitchen and washed my hands.

do these people just like, not have a sense of shame

# ¿ Oct 25, 2017 21:20

The Iron Rose: May 12, 2012; Cat Army

The Fool posted:

You should not have any sort of admin rights on your primary user account, period.
.

We just started doing this at my current job. For the past few months... and evidently the past few years we've all been merrily using our domain accounts for everyday everything. It's not a ton more secure in practice now since we're just RDPing into servers with our new DA accounts, and all user machines are local admins. But at least we'll be dealing with that within the next quarter or two.

Nooooooooot looking forwards to everyone bitching about that. We're a pretty software/tech focused shop too, so these are ostensibly computer savvy people too.

# ¿ Nov 11, 2017 06:01

The Iron Rose: May 12, 2012; Cat Army

Grassy Knowles posted:

Yes

No. You can fire them both, as long as new employee is documented as having seen the policy. That could be a sign-off, attendance at a training session where the materials were covered, et cetera.

That seems a little excessive for a junior employee who got the goahead from his boss. Assume the guy wasn't a total dick that is. He should be fired for being a dick, not for acting on instruction from his boss.

and even then! Boss is dumb, but probably doesn't need to be fired!

e: Actually reading back the junior guy wasn't even being a dick at all. Hell, he was actively trying to make things work despite your intransigence.

Maybe this comes from the fact that I administer and troubleshoot both macs and PCs on a daily basis, and it works perfectly loving fine with AD and our DCs.

The Iron Rose fucked around with this message at 02:02 on Nov 17, 2017

# ¿ Nov 17, 2017 02:00

The Iron Rose: May 12, 2012; Cat Army

Inspector_666 posted:

Even if there is a policy, it's a dumb "gotcha" if you don't have port security enabled.

I don't think describing it as intransigence is fair either.

Yeah that was too harsh, my bad. Still, actively looking into how to bind to AD is waaaaaaaaaaaay further than I expect most end users to go.

# ¿ Nov 17, 2017 02:15

The Iron Rose: May 12, 2012; Cat Army

Super Soaker Party! posted:

something you didn't think about or worry about? Doesn't seem like you. (Also, what part of bringing up extra butt overflow involves shutting down machines? Not a dig, I'm actually curious).

cloud to butt pays off once again

# ¿ Nov 17, 2017 23:46

The Iron Rose: May 12, 2012; Cat Army

Sibling of TB posted:

Does it? He literally wrote the word butt.

yes, but simply by saying the words "butt overflow" to my manager i got the go ahead to deploy the cloud to butt extension to our AWS team so i am thankful regardless

# ¿ Nov 17, 2017 23:57

The Iron Rose: May 12, 2012; Cat Army

carry on then posted:

The only appropriate response to someone requesting an Apple product in a work environment is to remove that person from the environment, as they are incapable of distinguishing a tool for professional work from a shiny toy for adult children.

oh come on now. There are tons of legitimate usecases for macs depending on your products. We have a ton of graphic designers, QA, and the like and they all use Macs.

Though in all honesty that's cuz here in Canada a tricked out Macbook Air actually costs a good $500 less than our Windows ultrabooks, so unless someone needs or specifically requests a PC they get a mac.

# ¿ Nov 21, 2017 16:42

The Iron Rose: May 12, 2012; Cat Army

Inspector_666 posted:

i want to loving murder you via the internet right now

not emptyquoting

We just brought JAMF online and, predictably, end users are throwing a shitfit because they don't want us to "spy on them." We don't even have the remote management enabled! But because they have to enroll and use the self-serve, it's all very noticeable.

By contrast I can take over anyone's windows computer any time I want because people don't see SCCM working :smug:

# ¿ Nov 21, 2017 19:11

The Iron Rose: May 12, 2012; Cat Army

totalnewbie posted:

We use a program in our office to wirelessly connect to projectors called LiteShow.

They installed a new projector and to connect to it, a config file has to be updated. Surely there's a way to push this config file out to all users and not this:

Well that's ridiculous. Just push a "copy /Y "\\server\new.ini" "location on users computer\old.ini" " through GPO.

# ¿ Nov 22, 2017 17:48

The Iron Rose: May 12, 2012; Cat Army

incoherent posted:

Moment of silence for the chromebook administrators who got completely screwed today by google.

The free Netflix offer? Or something else?

# ¿ Dec 5, 2017 22:08

The Iron Rose: May 12, 2012; Cat Army

Fuuuuuck printers.

Troubleshooting a production printer that for whatever reason isn't printing one specific file... sometimes. I've been here for almost an hour and I'm ready to put a bullet in the loving machine. Or in my head. Either or at this point :argh:

# ¿ Dec 13, 2017 23:17

The Iron Rose: May 12, 2012; Cat Army

The Fool posted:

PDF?

Driver fuckery and delivery expectations dealt with it.

Now I'm trying to find out a solution to another issue. Long story short, we're doing a cutover from one internal server share to another.

Problem is, people are loving idiots and put quotation marks inside directory and/or file names. I'm trying to run a find command that will find all directories and files with quotation marks in the name and for the life of me can't figure out how to actually work the command, despite a good few hours of googling.

Anyone have any ideas, or resources I can explore?

# ¿ Dec 13, 2017 23:48

The Iron Rose: May 12, 2012; Cat Army

Ended up

The Fool posted:

Powershell: Get-ChildItem -Path $root -Recurse | Where-Object {$_.Name -like '*"*'} | Select-Object { $_.FullName }

Where $root is a string with the path of the root folder you want to search

Ended up using regex, but thanks anyways!

iospace posted:

"PC Load Letter"?

Driver fuckery, and apparently somehow the print manager hosed up the file itself. Super weird all told.

# ¿ Dec 14, 2017 01:11

The Iron Rose: May 12, 2012; Cat Army

Avenging_Mikon posted:

So, I can�t trust my probes more, even though I have the currency. And I can�t figure out the stats to make progress. Halp

Save up a bunch of creativity - there are multiple different projects that use creativity to increase honor, which you can use to increase your max trust. Your value drift will increase of course, but once you get your combat to 7 or 8 you should start winning the majority of your fights. It will be a battle to try and keep up with your probes and enemy drifters to get to that point mind, and it's easily the most difficult part of the game since unlike the rest you can actually lose a lot of progress.

Also don't have a large mismatch between your harvester and wire drones, otherwise your load balancer gets hosed and you have to reboot your swarm. On the other hand, at least this settles the cattle vs pet debate :v:

The Iron Rose fucked around with this message at 04:22 on Dec 25, 2017

# ¿ Dec 25, 2017 04:19

The Iron Rose: May 12, 2012; Cat Army

nexxai posted:

I've been on holidays all week and you motherfuckers have completely and totally ruined it.

# ¿ Dec 28, 2017 21:00

The Iron Rose: May 12, 2012; Cat Army

I think this has probably run its course.

# ¿ Dec 29, 2017 05:19

Adbot: ADBOT LOVES YOU

# ¿ May 20, 2024 23:26

The Iron Rose: May 12, 2012; Cat Army

I hope you and all your backups get cryptolockered

# ¿ Jan 1, 2018 03:07

The Something Awful Forums > Archives > Comedy Goldmine > RE: A ticket came in: Did they take the printer into the shitters with them?