Comparison of Salt vs AD
-
@scottalanmiller said in Comparison of Salt vs AD:
@Romo said in Comparison of Salt vs AD:
@dafyre said in Comparison of Salt vs AD:
@scottalanmiller said in Comparison of Salt vs AD:
@msff-amman-Itofficer said in Comparison of Salt vs AD:
The windows installer of salt minion asks you for :
Salt Master Hostname or IP address
Minion NameAnd you can install it silently with:
Salt-Minion-2016.11.5-AMD64-Setup.exe /S /master=yoursaltmaster /minion-name=yourminionname
Sadly I cant trust my users to run the installer and do the steps, I ASKED THEM TO PLACE THE 3 letter number sticker on their machine, and I emailed them an example photo, and the idiots entered alot of crap for minion name
Now I have to do them all manually
90 MACHINESUser PowerShell or GPO.
Or PDQ Deploy, lol. I probably should have mentioned I was thinking only of pushing out the Salt agent to the mentions.
@dafyre That is exactly how I deployed my salt-minions. Added the salt entry on my dns and deployed the minion with PDQ Deploy.
I use Chocolatey.
I actually deployed the salt-minions to upgrade powershell and deploy chocolatey =).
-
This PDQ Deploy you guys have been mentioning, does it require an agent on the other Windows clients ?
or it just relies on Active Directory to work. -
@msff-amman-Itofficer said in Comparison of Salt vs AD:
This PDQ Deploy you guys have been mentioning, does it require an agent on the other Windows clients ?
or it just relies on Active Directory to work.No agent required. You can deploy based on AD, computer name, or IP address. AD is not required as long as you have local admin credentials.
-
@NerdyDad said in Comparison of Salt vs AD:
@msff-amman-Itofficer said in Comparison of Salt vs AD:
This PDQ Deploy you guys have been mentioning, does it require an agent on the other Windows clients ?
or it just relies on Active Directory to work.No agent required. You can deploy based on AD, computer name, or IP address. AD is not required as long as you have local admin credentials.
Same as with PowerShell.
-
Interesting, thanks.
-
@scottalanmiller said in Comparison of Salt vs AD:
@NerdyDad said in Comparison of Salt vs AD:
@msff-amman-Itofficer said in Comparison of Salt vs AD:
This PDQ Deploy you guys have been mentioning, does it require an agent on the other Windows clients ?
or it just relies on Active Directory to work.No agent required. You can deploy based on AD, computer name, or IP address. AD is not required as long as you have local admin credentials.
Same as with PowerShell.
Does PowerShell require some sort of remote access to be enabled?
Are the needed ports open by default to allow the use of PDQ Deploy in a non AD environment?
-
@Dashrender said in Comparison of Salt vs AD:
Are the needed ports open by default to allow the use of PDQ Deploy in a non AD environment?
- UDP 137
- UDP 138
- UDP 445
- TCP 139
- TCP 445
- TCP 6336
-
@wirestyle22 said in Comparison of Salt vs AD:
@Dashrender said in Comparison of Salt vs AD:
Are the needed ports open by default to allow the use of PDQ Deploy in a non AD environment?
- UDP 137
- UDP 138
- UDP 445
- TCP 139
- TCP 445
- TCP 6336
Man that's a lot.
-
@Dashrender said in Comparison of Salt vs AD:
@scottalanmiller said in Comparison of Salt vs AD:
@NerdyDad said in Comparison of Salt vs AD:
@msff-amman-Itofficer said in Comparison of Salt vs AD:
This PDQ Deploy you guys have been mentioning, does it require an agent on the other Windows clients ?
or it just relies on Active Directory to work.No agent required. You can deploy based on AD, computer name, or IP address. AD is not required as long as you have local admin credentials.
Same as with PowerShell.
Does PowerShell require some sort of remote access to be enabled?
Yes, but it is enabled by default. Just don't turn it off.
-
@scottalanmiller said in Comparison of Salt vs AD:
@wirestyle22 said in Comparison of Salt vs AD:
@Dashrender said in Comparison of Salt vs AD:
Are the needed ports open by default to allow the use of PDQ Deploy in a non AD environment?
- UDP 137
- UDP 138
- UDP 445
- TCP 139
- TCP 445
- TCP 6336
Man that's a lot.
Could be easily done as part of an image, logon batch.
-
@dafyre said in Comparison of Salt vs AD:
@scottalanmiller said in Comparison of Salt vs AD:
@wirestyle22 said in Comparison of Salt vs AD:
@Dashrender said in Comparison of Salt vs AD:
Are the needed ports open by default to allow the use of PDQ Deploy in a non AD environment?
- UDP 137
- UDP 138
- UDP 445
- TCP 139
- TCP 445
- TCP 6336
Man that's a lot.
Could be easily done as part of an image, logon batch.
That is an insane amount of open ports! And oh yeah.. it's wannacry enabled!
-
@scottalanmiller said in Comparison of Salt vs AD:
@Dashrender said in Comparison of Salt vs AD:
@scottalanmiller said in Comparison of Salt vs AD:
@NerdyDad said in Comparison of Salt vs AD:
@msff-amman-Itofficer said in Comparison of Salt vs AD:
This PDQ Deploy you guys have been mentioning, does it require an agent on the other Windows clients ?
or it just relies on Active Directory to work.No agent required. You can deploy based on AD, computer name, or IP address. AD is not required as long as you have local admin credentials.
Same as with PowerShell.
Does PowerShell require some sort of remote access to be enabled?
Yes, but it is enabled by default. Just don't turn it off.
And is the firewall ports open by default too? I'm guessing not.. but I'm willing to open those for this purpose..
-
@dafyre said in Comparison of Salt vs AD:
@scottalanmiller said in Comparison of Salt vs AD:
@wirestyle22 said in Comparison of Salt vs AD:
@Dashrender said in Comparison of Salt vs AD:
Are the needed ports open by default to allow the use of PDQ Deploy in a non AD environment?
- UDP 137
- UDP 138
- UDP 445
- TCP 139
- TCP 445
- TCP 6336
Man that's a lot.
Could be easily done as part of an image, logon batch.
But why would you want so many?
-
@Dashrender said in Comparison of Salt vs AD:
@scottalanmiller said in Comparison of Salt vs AD:
@Dashrender said in Comparison of Salt vs AD:
@scottalanmiller said in Comparison of Salt vs AD:
@NerdyDad said in Comparison of Salt vs AD:
@msff-amman-Itofficer said in Comparison of Salt vs AD:
This PDQ Deploy you guys have been mentioning, does it require an agent on the other Windows clients ?
or it just relies on Active Directory to work.No agent required. You can deploy based on AD, computer name, or IP address. AD is not required as long as you have local admin credentials.
Same as with PowerShell.
Does PowerShell require some sort of remote access to be enabled?
Yes, but it is enabled by default. Just don't turn it off.
And is the firewall ports open by default too? I'm guessing not.. but I'm willing to open those for this purpose..
Why would they enable it and not have the firewall ready to work?
-
@scottalanmiller said in Comparison of Salt vs AD:
@Dashrender said in Comparison of Salt vs AD:
@scottalanmiller said in Comparison of Salt vs AD:
@Dashrender said in Comparison of Salt vs AD:
@scottalanmiller said in Comparison of Salt vs AD:
@NerdyDad said in Comparison of Salt vs AD:
@msff-amman-Itofficer said in Comparison of Salt vs AD:
This PDQ Deploy you guys have been mentioning, does it require an agent on the other Windows clients ?
or it just relies on Active Directory to work.No agent required. You can deploy based on AD, computer name, or IP address. AD is not required as long as you have local admin credentials.
Same as with PowerShell.
Does PowerShell require some sort of remote access to be enabled?
Yes, but it is enabled by default. Just don't turn it off.
And is the firewall ports open by default too? I'm guessing not.. but I'm willing to open those for this purpose..
Why would they enable it and not have the firewall ready to work?
Why have a firewall if you're opening a thousand ports anyway
-
@wirestyle22 said in Comparison of Salt vs AD:
@scottalanmiller said in Comparison of Salt vs AD:
@Dashrender said in Comparison of Salt vs AD:
@scottalanmiller said in Comparison of Salt vs AD:
@Dashrender said in Comparison of Salt vs AD:
@scottalanmiller said in Comparison of Salt vs AD:
@NerdyDad said in Comparison of Salt vs AD:
@msff-amman-Itofficer said in Comparison of Salt vs AD:
This PDQ Deploy you guys have been mentioning, does it require an agent on the other Windows clients ?
or it just relies on Active Directory to work.No agent required. You can deploy based on AD, computer name, or IP address. AD is not required as long as you have local admin credentials.
Same as with PowerShell.
Does PowerShell require some sort of remote access to be enabled?
Yes, but it is enabled by default. Just don't turn it off.
And is the firewall ports open by default too? I'm guessing not.. but I'm willing to open those for this purpose..
Why would they enable it and not have the firewall ready to work?
Why have a firewall if you're opening a thousand ports anyway
PS doesn't need them. That's for other tools, like PDQDeploy.
-
@scottalanmiller said in Comparison of Salt vs AD:
@wirestyle22 said in Comparison of Salt vs AD:
@scottalanmiller said in Comparison of Salt vs AD:
@Dashrender said in Comparison of Salt vs AD:
@scottalanmiller said in Comparison of Salt vs AD:
@Dashrender said in Comparison of Salt vs AD:
@scottalanmiller said in Comparison of Salt vs AD:
@NerdyDad said in Comparison of Salt vs AD:
@msff-amman-Itofficer said in Comparison of Salt vs AD:
This PDQ Deploy you guys have been mentioning, does it require an agent on the other Windows clients ?
or it just relies on Active Directory to work.No agent required. You can deploy based on AD, computer name, or IP address. AD is not required as long as you have local admin credentials.
Same as with PowerShell.
Does PowerShell require some sort of remote access to be enabled?
Yes, but it is enabled by default. Just don't turn it off.
And is the firewall ports open by default too? I'm guessing not.. but I'm willing to open those for this purpose..
Why would they enable it and not have the firewall ready to work?
Why have a firewall if you're opening a thousand ports anyway
PS doesn't need them. That's for other tools, like PDQDeploy.
PS needs at least one.
-
@Dashrender said in Comparison of Salt vs AD:
@scottalanmiller said in Comparison of Salt vs AD:
@wirestyle22 said in Comparison of Salt vs AD:
@scottalanmiller said in Comparison of Salt vs AD:
@Dashrender said in Comparison of Salt vs AD:
@scottalanmiller said in Comparison of Salt vs AD:
@Dashrender said in Comparison of Salt vs AD:
@scottalanmiller said in Comparison of Salt vs AD:
@NerdyDad said in Comparison of Salt vs AD:
@msff-amman-Itofficer said in Comparison of Salt vs AD:
This PDQ Deploy you guys have been mentioning, does it require an agent on the other Windows clients ?
or it just relies on Active Directory to work.No agent required. You can deploy based on AD, computer name, or IP address. AD is not required as long as you have local admin credentials.
Same as with PowerShell.
Does PowerShell require some sort of remote access to be enabled?
Yes, but it is enabled by default. Just don't turn it off.
And is the firewall ports open by default too? I'm guessing not.. but I'm willing to open those for this purpose..
Why would they enable it and not have the firewall ready to work?
Why have a firewall if you're opening a thousand ports anyway
PS doesn't need them. That's for other tools, like PDQDeploy.
PS needs at least one.
Only one, though, and it is one that is set up by default.
