u/Snysadmin

388 post karma · 725 comment karma · joined May 2021

  1. 0points

    React2Shell - What should we be doing / looking for from a sysadmin pov? (self.sysadmin) [General Discussion]

    1 comments

  2. 0points

    MS defender flagging signicat as phish (self.sysadmin) [Microsoft]

    3 comments

Snysadmin

Time to go home amirite?

Snysadmin

Only green here with safari and edge on 27.0

Snysadmin
Snysadmin

Heh, nice.

Snysadmin

Yeah this is the way. It might still haunt you years later with issues. Ask me how i know :( Stop changing your last name people.

Snysadmin

Try this one

"C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe" /update user

Snysadmin

One of the best parts of AI scripts absolutely! Its a shame start-transcipt is lacking at best.

Snysadmin

You can add any user to the protected users group

Snysadmin

Legend

Snysadmin

What is the vulnurable version? And what is the patched version? Does the update generate those keys?

Snysadmin

Try starting with set-location HKCU: (i think)

Snysadmin

Yeah man, from intune on the device page next to the wipe/retire/etc bar you can find "rotate bitlocker keys". It might hide under the ...

Snysadmin

Cloud time maybe

Snysadmin

Seems like it was a bug

Some users may be blocked from opening URLs in Exchange Online messages and Microsoft Teams ID: MO1148487

Issue type: Incident

Status

Service Degradation

Impacted services

Microsoft 365 suite, Exchange Online, Microsoft Teams, Microsoft Defender XDR

Details

Title: Some users may be blocked from opening URLs in Exchange Online messages and Microsoft Teams

User impact: Users may be blocked from opening URLs in Exchange Online messages and Microsoft Teams.

More info: Additionally, admins may receive alerts titled "A potentially malicious URL click was detected involving one user", however the URLs have been confirmed as safe.

Some email messages may have also been incorrectly quarantined.

Current status: Our investigation has identified that an anti-spam service incorrectly flagged URLs contained within other URLs as potentially malicious, resulting in impact. We've identified over 6,000 URLs that are affected and are working to unblock them before replaying messages to recover any messages or URLs that were incorrectly flagged.

Scope of impact: Any user receiving email messages containing specific URLs may be affected.

Root cause: An anti-spam service incorrectly flagged URLs contained within other URLs as potentially malicious, resulting in impact.

Next update by: Friday, September 5, 2025, at 10:00 PM UTC

Snysadmin

Agreed.

Snysadmin

Could i ask why youre moving away from dot1x and going back to PSK? Seems less safe?

Snysadmin

I do, after testing each one and finding that its always the last one you test :D

Snysadmin
Snysadmin

Caffeine

You can use native powershell for the same.

$wsh = New-Object -ComObject WScript.Shell

while (1) {

$wsh.SendKeys('+{F15}')

Start-Sleep -seconds 59

}

Snysadmin

We have a forced expiry of some time for all "everyone" shares.

Snysadmin

Both of these guys are correct.

Snysadmin

Agreed. We have a couple of differently aggressive move to archive rules depending on usecase.

Snysadmin

Cant you just loop it?

$Users = Get-item -path C:\users\

$users |foreach-object {remove item $_}

something like that?

But just use grouppolicy lol.