@G-I-Jones I like Windows 7 a lot, but since the things are moving forward we all will use something new instead very soon. Just remember how people wanted to stay on Windows XP, but finally updated their OS. The same will happen with Windows 7 and most of users will move on Windows 10 or will choose another option 😉

@Obsolesce said in Generating a list of Software to Reinstall on Windows 10:

@dbeato said in Generating a list of Software to Reinstall on Windows 10:

@Obsolesce said in Generating a list of Software to Reinstall on Windows 10:

@scottalanmiller said in Generating a list of Software to Reinstall on Windows 10:

@Obsolesce said in Generating a list of Software to Reinstall on Windows 10:

@scottalanmiller said in Generating a list of Software to Reinstall on Windows 10:

@Dashrender said in Generating a list of Software to Reinstall on Windows 10:

@gjacobse said in Generating a list of Software to Reinstall on Windows 10:

@Obsolesce said in Generating a list of Software to Reinstall on Windows 10:

I usually just copy/paste a Chocolatey install command that does it all at once. Everything else is on separate media that requires no install. Example, copy over games, import them in... such as into Steam.

I was going to mention... with Chocolatey tool choco list -lo just pipe it to a text file.

But that only gives you things installed through Chocolatey. Dustin's OP gives you everything installed through the normal Windows installer process (and registers the install).

I recall when chocolatey didn't use the windows installer process for everything - things are much better now.

It is package by package. Lots of things, through Chocolatey or not, don't use the Windows installer process.

I've not seen Chocolatey not register software installs in Windows, ever.

I have. Many times. Most of the time I think that it does, but it is not Chocolatey that does it when it does.

With what software specifically?

Try installing Sysinternal tools, it will not register at all, that is one example. You can do so with Chocolatey.

I never installed that stuff anyways. That Chocolatey doesn't is nothing new.

I thought you wanted to know which applications would do that, but I guess I read wrong.

@DustinB3403 said in Konica Minolta BizHub C3850 No Printing on Windows 10:

@dbeato said in Konica Minolta BizHub C3850 No Printing on Windows 10:

@DustinB3403 said in Konica Minolta BizHub C3850 No Printing on Windows 10:

@dbeato said in Konica Minolta BizHub C3850 No Printing on Windows 10:

@DustinB3403 said in Konica Minolta BizHub C3850 No Printing on Windows 10:

@dbeato said in Konica Minolta BizHub C3850 No Printing on Windows 10:

@DustinB3403 said in Konica Minolta BizHub C3850 No Printing on Windows 10:

@jmoore said in Konica Minolta BizHub C3850 No Printing on Windows 10:

@Dashrender Got it. Our departments have their own budget so if they want to print color they can but they figured out fast to be responsible for their own paper.

That seems like a bad approach, since any given department could be forced to stop work "because they overran their paper budget".

Usually, they use the code and pin to know where they are using color but otherwise default is to allow b&w to print without a code.

How does the printer know the difference? Black is a color. .

Really?

Yes really, how does a printer know the difference between CMYK and a page which is black and white.

It's an honest question as I don't know how a Pin to "print in color" would affect this the way you described it.

Also to whoever downvoted, not sure why.

Okay, there are different types of print black and white, gray scale and color which uses CMYK , usually on MFP devices they have different toners for esch of those colors plus black. When a job is sent to the printer with the color setting on the driver it then uses those toners while black and white only requests the black toner

None of the explains what I've asked. How does entering a pin, allow someone to print in color? I've always seen Pin or No Pin for all printing.

Nothing I've ever used has offered "pin for color prints only" etc.

It can be for both.

@Dashrender said in Why, in 2018, is Microsoft adding security questions to Windows 10?:

@JaredBusch said in Why, in 2018, is Microsoft adding security questions to Windows 10?:

@Dashrender said in Why, in 2018, is Microsoft adding security questions to Windows 10?:

@scottalanmiller said in Why, in 2018, is Microsoft adding security questions to Windows 10?:

@Dashrender said in Why, in 2018, is Microsoft adding security questions to Windows 10?:

@JaredBusch said in Why, in 2018, is Microsoft adding security questions to Windows 10?:

@scottalanmiller said in Why, in 2018, is Microsoft adding security questions to Windows 10?:

@JaredBusch said in Why, in 2018, is Microsoft adding security questions to Windows 10?:

@scottalanmiller said in Why, in 2018, is Microsoft adding security questions to Windows 10?:

@Obsolesce said in Why, in 2018, is Microsoft adding security questions to Windows 10?:

This only occurs, that I've seen, during OOBE when you set up the PC as a local, non-domain, non-Microsoft-Account, user.

Correct, as a standard local account. The "normal" way. Most people don't use AD, even in business this is dropping off quickly. And lots of people don't want to deal with those ridiculous MS accounts that they try to ram down everyone's throats. And who knows how secure those are, anyway.

That is not the normal way to set up windows anymore and has not been for quite a while. The normal way to set up windows is with a Microsoft account. In fact you have to click no to setting up a Microsoft account multiple times in order to set up a PC without a Microsoft account

That's what they promote, but I wonder how many people are actually doing that.

Probably most that don’t use AD. Of course some will not, but not many.

I tend to agree - most home users will use a MS account simply because it's what's presented. IT folks and some programmers might not, but I'm willing to bet it's way over half that do.

Have you seen a lot of home users doing this? I have not, of course my cross section is tiny. But of the ones I see that have zero tech skills, they all skip it because it is scary and confusing.

The option to skip it's obvious enough for most people I run into - they just do it, even if that means setting up a new account.

It is obvious? not really. And even if they see it and click on it, you have to refuse once or twice more.

Whoops - I meant - NOT super obvious... normal users will be guilted into using an MS account in most cases.

yeah the first two times it took me a moment to notice you could skip.

@JaredBusch said in Domain Time off for some members:

@Donahue said in Domain Time off for some members:

found it. It was the individual time for that ESXi member. It was running on it's own time, neither host time or any NTP. It was off by the 6 minutes. So for some reason, VMWare was syncing this setting with the host's ESXi clock, not the hardware clock, even though the settings disallow that.

How do you know the VMware tools was doing the sync?. As I said in my earlier post if windows goes and tries to get the hardware clock no matter what your tool says for heartbeat or times are pretty station it’s going to get the Clock from the host.

look at the picture I posted above. It was vmtoolsd.exe that was causing it to jump forward and svchost.exe that was correcting it. I found this under event 4616

@DustinB3403 said in Windows Server 2012 Essentials Cannot Find Login Server for AD:

That's rough.

Very

@Obsolesce - Yeah, thanks.

Thanks all

@Dashrender said in Why are Windows Management GUI Elements So Tiny?:

@scottalanmiller said in Why are Windows Management GUI Elements So Tiny?:

@WrCombs said in Why are Windows Management GUI Elements So Tiny?:

I was actually just talking about this with some coworkers of mine.

If you ever work with any other system, then work with Windows, it's shocking how silly and ridiculous it is. You can't "see" anything. It's like they wanted to mock people for choosing the GUI.

I love how you frequently go to this - they must want to mock people..

I'm sure it rarely if ever actually starts there. As already said - it was legacy, and never updated. They are finally getting around to updating most of the control panel applets - but we're still frequently stuck dealing with the old style for things like the java security admin, etc.

But wouldn't that be hilarious if it were true?

Internal MS plot to fuck with people: "Haha these idiots buying our operating system for the GUI... you know what would REALLY be funny? Release management tools that they can't see, so they have to squint their eyes and get really close to the screen. Their eyesight will get worse and they'll look even older while doing it with that stupid look on their face. HAH!!"

@wrx7m said in PowerShell - Create New AD User Using Prompts and Variables:

If I get rid of the attempt to combine the 2 existing variables into a 3rd, I get this error.

New-ADUser : A positional parameter cannot be found that accepts argument '+'. At \\FP02\it\Scripts\AD\AD-InitialUserCreationVariables.ps1:5 char:1 + New-ADUser -Name "$GivenName $Surname" ` + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : InvalidArgument: (:) [New-ADUser], ParameterBindingException + FullyQualifiedErrorId : PositionalParameterNotFound,Microsoft.ActiveDirectory.Management.Commands.NewADUser

Like this I think:

New-ADUser -Name "$($GivenName) $($Surname)"`

From: https://blogs.technet.microsoft.com/stefan_stranger/2013/09/25/powershell-sub-expressions/

Just had our first person report issues this evening.

Using noop would be useful when you are checking on the status of a machine that you don't necessarily manage.

@obsolesce said in Handling DNS in a Single Active Directory Domain Controller Environment:

@scottalanmiller said in Handling DNS in a Single Active Directory Domain Controller Environment:

@obsolesce said in Handling DNS in a Single Active Directory Domain Controller Environment:

@stuartjordan said in Handling DNS in a Single Active Directory Domain Controller Environment:

I believe the forest level with Samba can only be 2008R2 though.

If you're not using Windows AD, what's it matter?

If he's merging in DFS, it might. It's rare to do, but could matter.

Oh I see, so Windows AD and other services were involved at some point.

Depending on what you want to do, sometimes AD has to support it.

@black3dynamite said in Outlook Out of Memory to Open Large Folder:

Email/Mailbox hoarder!

Definitely

@phlipelder said in Get Wildcard SSL Certs for IIS on Windows with LetsEncrypt:

@scottalanmiller said in Get Wildcard SSL Certs for IIS on Windows with LetsEncrypt:

@phlipelder said in Get Wildcard SSL Certs for IIS on Windows with LetsEncrypt:

@scottalanmiller said in Get Wildcard SSL Certs for IIS on Windows with LetsEncrypt:

@phlipelder said in Get Wildcard SSL Certs for IIS on Windows with LetsEncrypt:

@jaredbusch said in Get Wildcard SSL Certs for IIS on Windows with LetsEncrypt:

@scottalanmiller my problem with Certs on Windows, in general, is that you almost always have to copy it around to multiple servers to make everything work well, and that jsut defeats the purpose of LE.

Based on what is on the site, Microsoft has an intrinsic trust with LE's root store. I should be able to set up a RD Session Host with a LE certificate for publishing and there should be no untrusted publisher for RemoteApps or Session Host desktops once the certificate's thumbprint is published via Group Policy?

One would hope that they would. LE is like the standard in SSL Certs. It's from the EFF, way more trustworthy than other cert authorities, IMHO.

Snag: Valid for 90 days. In larger RDS farm settings this would be a bear to manage. That means the need for an automated process.

It is expected to be automated. SSL Cert updates should not be intrusive. All of the tools for LE SSL Certs are designed around the idea that you will automate them and never need to worry about them again. It's about being less of a snag, not more of one.

Got it thanks. Looks like a bit of a learning curve then. 🙂

It's not bad. I find learning the LE pieces easier than learning to do it the old fashioned way 🙂 And with LE it is "learn once and ignore", rather than "learn once, forget, do again in a year or two all over again."

Via the ActiveDir list:

https://github.com/CarlWebster

There are some amazing scripts in there for ADDS but also for XenApp, NetScaler, Citrix, and others.

Site: https://carlwebster.com/downloads/download-info/active-directory-2/

@vhinzsanchez said in Re-Enable BitLocker on Windows 10 Home:

Thanks SAM, we are accepting the fact that the encryption will not be done at this moment.

Regards,

VhinzSanchez

https://www.howtogeek.com/234826/how-to-enable-full-disk-encryption-on-windows-10/