u/nnsysadmin

194 post karma · 129 comment karma · joined Sep 2022

nnsysadmin
nnsysadmin

+40 gang

nnsysadmin

Jag gav uppdutt till hipp hipp, rederiet och tusenbröder

nnsysadmin

I solved this scenario using Microsoft NPS for Domain Computers, and forward all other requests to Remote Radius 2x freeradius which are used for mac addresses.

nnsysadmin

Did you install last month's update that patched the bug? no

Does your network driver coalesce packets? yes (Properties on WLAN Adapter, Advanced Tab, Packet Coalescing: Enabled (by default, did not change anything)

nnsysadmin

I wanted to do this with packetfence too but must have missed something in my config, but ended up with freeradius in pfsense with a gui, might be easier :)

nnsysadmin

Det har den inte: flashback.org whois lookup - who.is

Expires On 2025-06-15

nnsysadmin

ja, det ska jag göra.

nnsysadmin

Felet är att certifikatet gått ut, webbservern är fortfarande uppe :)

skriv "thisisunsafe" någonstans i webbläsaren när certifikatsvarningen dyker upp så kommer ni in på sidan, detta går förbi certfel + HSTS.

Källa: How to bypass certificate errors using Microsoft Edge - Stack Overflow

nnsysadmin

I prefer to just use description field/documentation system for the role and just use numbers for servers, much easier to update description rather than renaming a server :)

Some servers have more than one role, how would you name a server like that? easier to just add multiple roles to the description :)

name, description

joedonuts01 - dc
joedonuts02 - dc
joedonuts03 - mdt
joedonuts04 - dhcp primary
joedonuts05 - dhcp secondary
joedonuts06 - lob application 1
joedonuts07 - sql

nnsysadmin

Exam 70-640: Windows Server 2008 Active Directory Configuration

nnsysadmin

what os version? let me guess on 2016 ;)

nnsysadmin

Meraki Status nothing here at least

nnsysadmin

I have had this expierience at places with very bad wifi, but i dont think teams/webex is to blame :)

nnsysadmin

::1

nnsysadmin

Verify your sysvol-share and make sure dfs-r are functional, that all GPO:s on all sysvol-shares are the same.
Verify you have authenticated users 'read' on all GPO:s involved (gpo with loopback processing and gpo for drive maps)

Feels like you have done it right, if i would do the same thing i would:

  1. Create OU for Virtual Desktop and put computers there
  2. Create a User GPO with Drive Maps (Disable Computer Part) and link it to Virtual Desktop OU
  3. Create a Computer GPO with Loopback policy replace (Disable User part) and link it to Virtual Desktop OU
nnsysadmin

yes Entra ID + nps Extension on NPS

nnsysadmin

i have setup 2 different rd gateways

  1. one for ip whitelisting and no mfa, only allowed from specific ips. eg rdgnomfa.domain.com
  2. one that works from entire internet, but always forces mfa. eg rdg.domain.com
nnsysadmin

How do you sync users with adfs?

nnsysadmin

From being able to sign in? Create a security group and include all accounts except the service account

nnsysadmin

Auto restart (GPO Scheduled Task) specific time everyday (3 different groups with different time), monitoring software to verify that all services starts after reboot

nnsysadmin
nnsysadmin

Just add the registry key on wap and reconfigure PowerShell: Reset WAP Configuration – Master & CmdR (masterandcmdr.com)

nnsysadmin

ip-helper! :)

nnsysadmin

IL1III1il1Il