User Profile
tylermontney_acc
Brass Contributor
Joined 4 years ago
User Widgets
Recent Discussions
Re: Server 2025 Core ADDS DC, Network Profile Showing as "Public" and not as "DomainAuthenticated"
I appreciate a functional workaround, but this issue has been present (particularly for single DCs) for many years now. Previously, the solution was restarting the "Network Location Awareness" service. One of Microsoft's biggest and oldest server features should not be broken out of the box for this long!Applying the fix for KB5025885 (CVE-2023-24932)
In reference to this article: https://support.microsoft.com/en-us/topic/kb5025885-how-to-manage-the-windows-boot-manager-revocations-for-secure-boot-changes-associated-with-cve-2023-24932-41a975df-beb2-40c1-99a3-b3ff139f832d In late August, I created a series of scripts that perform the steps described in the article. This worked fine for 30 to 40 PCs over the next few weeks. I stopped as I had other tasks to attend to. Today, I decided to resume. A Surface Go 2 and a Lenovo E590 both fail to apply it. Both machines have the latest 2024-10 Cumulative Update (newer than is required). Both machines are Secure Boot enabled. Both machines are rebooted twice before proceeding to the next step (e.g. making a registry change). Both machines return "false" to both Get-SecureBootUEFI commands (which verify whether applying the fix was successful), for a total of 8 reboots. Machines in which my scripts were successful still return "true" for both Get-SecureBootUEFI commands. Has something changed?What objects are required to sync for Azure AD Connect?
Trying to clean up our environment of unnecessarily synced objects. Of course, I want to sync users with e-mail, security groups, contacts, and so forth. However, the following top-level domain OUs I'm not sure about... Infrastructure: Even with "Advanced Features" ticked, I can't see this OU in ADUC Microsoft Exchange Security Groups Microsoft Exchange System Objects Program Data RegisteredDevices: This seems tied to Azure/Intune so I figure it's safer to keep it. System Users We used to have an Exchange server merely for schema, not hosting any mailboxes on-premise. However, I decommissioned it a couple months ago per this article: https://learn.microsoft.com/en-us/exchange/manage-hybrid-exchange-recipients-with-management-tools There's also the "Exchange hybrid deployment" checkbox under "Optional features" that I'm unsure if I need anymore.Feedback for Microsoft Docs team
Normally, at the bottom of any docs page, there's a way to open an issue. Example: https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.management/get-content?view=powershell-7.3 This article doesn't have that. How would I open an issue with the team who manages this? https://learn.microsoft.com/en-us/exchange/manage-hybrid-exchange-recipients-with-management-tools#prepare-the-exchange-environmentHow do remediation scripts handle missed schedules?
For instance, let's say I have one configured for Sunday at 8 AM and the machine receives the remediation script (mid-week) successfully. Friday afternoon, the machine is powered off and is powered back on Monday morning. When does the remediation script run? Immediately, or next Sunday?Storage location of quarantine message
https://m365admin.handsontek.net/microsoft-defender-for-office-365-quarantined-message-storage-in-hidden-system-folder-on-user-mailbox/ states that instead of quarantine messages being in a hosted repository, they will now be in a hidden system folder in the user mailbox. Neither the link to the roadmap, nor the roadmap's "More info" article make mention of this. However, the title seems to imply the above article is correct. Are quarantined messages in Exchange Online hosted in a repository, or the user's mailbox? I want to remove attachments from specific emails before delivery, and this is the only way to do it.How to get "premier" support for Azure AD (Entra)
I have a particular issue regarding Azure AD and I opened a ticket through the Azure portal. After some discussion, they determined if I wanted to analyze it further I need Unified/Premier support. I contacted them and they refused to sell me anything as we're not a big enough company. What are my options to get a root-cause analysis for a one-time incident?ADMX Syntax Questions
Is this the latest ADMX Syntax: https://www.microsoft.com/en-us/download/details.aspx?id=7101 (It's from 2007.) Additionally, I'd like to configure a policy in this way: Enabled: Takes a string from a textbox Disabled: Sets a specific value Not Configured: Default GPO behavior (leave value as-is) The only way I've gotten it to work, without MMC complaining, is this but it doesn't work. Additionally, the changes don't take effect. Once the window is re-opened, it's back to "Not Configured". <policies> <policy name="Policy_OverwriteSettings" class="Machine" displayName="$(string.Policy_OverwriteSettings)" explainText="$(string.Explain_OverwriteSettings)" presentation="$(presentation.presentation_OverwriteSettings)" key="SOFTWARE\Policies\Example" valueName="mydword"> <parentCategory ref="abc:Category" /> <supportedOn ref="SUPPORTED_Platform_Since" /> <disabledValue> <string>3</string> </disabledValue> <elements> <text id="policy_OverwriteSettingsValue" key="SOFTWARE\Policies\Example" valueName="mydword" required="true" /> </elements> </policy> </policies>Controlling of Start Menu "treatments"
https://blogs.windows.com/windows-insider/2023/04/14/announcing-windows-11-insider-preview-build-23435/#:~:text=in%20Build%2023435-,Gallery%20in%20File%20Explorer,-We%20are%20introducing I understand this is insider; however, it's been in testing since November. I want to get ahead of this and determine a couple things: Will these treatments be included for Enterprise? How can we control/disable, such as via Intune? These treatments are inappropriate for a corporate environment, and I don't need my users getting confused.Some users cannot use Authenticator OTP
After restricting insecure MFA methods a month ago, we sporadically get users complaining about the authenticator app. In the most recent case, the user only has the option to receive a push notification. This is a problem for users where the Internet is temporarily unavailable. These users used to have the option, and we allow OTP in Azure. We're targeting all users, so there's no reason specific users be affected. The usual fix is re-registering their authenticator app.
