TechGy

I've configured Wiki.js 2.5.289 on Ubuntu 22.04, configured Let's Encrypt, and used Azure Database for PostgreSQL for the DB. Right now the site is configured for port 3000 for HTTP, 3443 for HTTPS and the HTTP to HTTPS redirect is enabled in the admin portal, but I don't have a reverse proxy in front of it. The local auth works fine, but I've been trying to configure Azure AD auth using the docs here and failing Azure Active Directory | Wiki.js (requarks.io). I've set up Azure AD auth for other systems, but I'm not sure what I'm doing wrong here.

​

I'm able to click on 'Azure AD' on the login screen, enter the Azure AD credentials, and I p

We have existing infrastructure in Azure, so I'd like to create our new Wiki.js instance there, but is there any recommendation between VM, Docker container, or Azure Web App + Azure Database for PostgreSQL deployment options? I know that it's been established that new deployments should use PostgreSQL given what is known about version 3.0, just curious if any of these had an advantage or better support than the others

I've been having some issues with app deployments and could use another set of eyes. We don't disable auto-update features, so there's the possibility that over time they'll have a newer version on their machine than what is in Intune. I was trying to just ensure that they're running either the same version or newer version of the application installed on their machine compared to what's in Intune, and if the application isn't already installed that it gets installed. Do I have the detection rule written backwards?

​

App Detection Script:

$ProgramPath = "C:\Program Files\TechSmith\Snagit 2022\SnagitCapture.exe"
$ProgramVersion_target = '22.1.1.21427'
`$ProgramVersion_

We have a number of extensions set to silently install in Edge Chromium via a configuration profile in Intune, and suddenly this week we started seeing the message below, and the extensions listed are all of the ones we're pushing. All machines are Azure AD joined. Possibly related - we just rolled out MFA to all users this week.

​

Has anyone else seen this? Any ideas? Edge is up to date, signed in and syncing, forcing Intune syncs does nothing, and the extension IDs don't appear to have changed

​

https://preview.redd.it/05q0tavx6z891.png?width=360&format=png&auto=webp&s=d06da451124a18a9672f57ba660ecdba6eb0b14b

I built a gaming PC 1-2 years ago that I really haven't been using, as I just don't have the interest these days. I stumbled upon unRAID a while back and it seems like a good use for the hardware - my initial plans are for ripping our media library from disk, hosting a home media server, storing documents and hosting a document management solution. I've been a sysadmin for about 10 years now, just new to unRAID.

​

I'm still wrapping my head around a lot of the options available - below are my current ideas for potential uses plus the current hardware. Given my current disks, what's the best layout/use for the drives? I can fit 2 more SATA drives - should I add 2 SATA SSDs for th

We're attempting to roll out MFA to our tenant and want to do it in a controlled manner where users can postpone enrollment for a period of time before it's required. I've configured the Microsoft Authenticator method here for all users with settings of Authentication mode of 'Push', and enabled both number matching and additional context in notifications here: https://portal.azure.com/#view/Microsoft_AAD_IAM/AuthenticationMethodsMenuBlade/~/AdminAuthMethods

I also configured the service settings for MFA to only allow codes and push notifications

I then configured the registration camp

Like I would assume many others, we're sometimes inundated with tickets pertaining to network issues from our WFH staff, in which we currently go through a number of troubleshooting steps to check for issues on both the local network and internet connection. I actually started on a PS Script that I was going to package as an EXE and allow users to run on-demand when they were having network issues and it would help guide them through determine if there was an issue, where it was, and next steps.

​

It later occurred to me that maybe this would be more useful as a Proactive Remediation or Scheduled Task that produced a toast notification if an issue was detected along with that in

I'm building a new Veeam server (Server 2022, ReFS repository, all-in-one setup) running Veeam Backup Essentials v11A. The Veeam server is not domain-joined, but the standalone Hyper-V servers that will be backed up are. The servers we'll be backing up are standalone Hyper-V servers with local storage - when I add the standalone Hyper-V servers to Veeam's inventory, is there a best practice regarding which account I use to connect them to the Veeam server? Right now, the current setup has them added via the default Domain Admin account - should I be using a domain admin account or local admin account? I looked over the docs and I suspect I'm just using the wrong terms in my search because I

Has anyone else had the issue where they've configured a device configuration profile for Windows Health monitoring, checked Windows Updates and Endpoint Analytics and included a group of Windows devices and the only thing that populates in Endpoint Analytics is the Work from Anywhere score, despite all devices showing as successfully receiving the policy? Just wondered if anyone had ideas for next steps before submitting a ticket for it

Nessus Agent is detecting the vulnerability CESA-2021:2566 on one of our VM's running CentOS 8 Stream on a Hyper-V host (the VM is Gen 2 with Secure Boot enabled and the Microsoft Microsoft UEFI Certificate Authority selected). sudo dnf update and sudo dnf update fwupd both indicate that there are no updates available despite Tenable claiming that the remediation step is simply "Update the affected fwupd package".

​

Running sudo fwupdmgr get-updates also returns the below result

https://preview.redd.it/ojf20fynv6l71.png?width=1145&format=png&auto=webp&s=8235fd7eebd90c67a23e9192c4e6d946dcf5bcf6

At this point I'

Can anyone provide some feedback on this attempt at MIG welding? Apologies, they're just a few short attempts and not the best shot. Material is 1/8" mild steel, Welder is a Forney MP 140 set to MIG, voltage at 5 and wire speed at 6 with .030" wire and 75/25 gas mix. I didn't do any cleanup post-weld here

Welder settings

Backside with random weld

[MIG weld attempt](https://preview.redd.it/37xf077pc0f71.jpg?width=3024&format

So I recently discovered splatting and was trying to use it to update our employee info in Active Directory via CSV but I keep getting the error below - I'm assuming I'm missing something simple - the cmdlet doesn't seem to be accepting the input from the CSV

​

Set-ADUser : Cannot validate argument on parameter 'Identity'. The argument is null. Provide a valid value for the argument, and then try running the command again.

At C:\temp\Update-OnPremADFromCSV.ps1:50 char:12

+ Set-ADUser (@)RequiredParameterHashTable

+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~

+ CategoryInfo : InvalidData:

I have a Windows app (type 'Microsoft 365 Apps - Windows 10') set to 'Required' for a device group, and although the devices get the 365 apps installed, they're also getting apps they shouldn't be, like Access when it's not configured as 'Apps to be installed as part of the suite'. Has anyone else run into this or have a solution or suggestion?

https://preview.redd.it/6gugkaz7sju61.png?width=986&format=png&auto=webp&s=c2f7dbe07503b4b1fb10d458f358c04697adc797

I'm trying to use PowerShell to determine what a Windows device's timezone should be and set it using the Set-Timezone cmdlet, but I seem to be running into an issue where my first query returns timezone in IANA format and not the Windows format, so I can't simply pass the value over as returned. Any suggestions on how I can accomplish this?

​

Get Timezone based on public IP:

(Invoke-WebRequest -uri "http://ipinfo.io" -UseBasicParsing).Content | ConvertFrom-Json | ForEach-Object timezone

List of all Timezones from Windows, sorted alphabetically:

 Get-TimeZone -ListAvailable | ForEach-Object ID | Sort-Object

We're just getting started with Intune but have had Azure and 365 for a while now. We have a few high-level employees with Global Admin role assigned - is there any way to prevent them from being granted admin rights on every Intune-enrolled device, or do I just need to see if I can restrict the roles to see if we can feasibly eliminate Global Admin?