windows · Talk About IT!

Connect to Windows over Rsync

Trying to connect your Linux-based servers to Windows workstations to pull data via rsync? Here’s how. Install OpenSSH service On the Windows side, install the optional OpenSSH Service: # Powershell Add-WindowsCapability -Online -Name OpenSSH.Server* Start-Service sshd Set-Service -Name sshd -StartupType 'Automatic' New-NetFirewallRule -Name sshd -DisplayName 'OpenSSH Server (sshd)' ` -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22 There are plenty of tutorials to do it through the GUI with Optional Features; given how much Microsoft is changing their menu options, you will need to look it up for your particular version of Windows.

wifi

Forcing Wi-Fi on

Summary: In the K12 Education world, laptops are becoming more and more prevelant, and so is Wi-Fi. Unfortunately, limited users are allowed to forget Wi-Fi networks and turn on Airplane Mode and disable Wi-Fi altogether, ruining the experience for the next user. Technical Details and Assumptions We are assuming there is no MDM solution in place (i.e. Jamf, Intune, etc) We assume you’re running on-prem Active Directory (for the Group Policy portions) We assume you are not using certificate-based authentication (and therefore, not simply deploying Wi-Fi Profiles with GPO) We assume the profile has been loaded somehow already Requirements You have a method of deploying the Wi-Fi key (i.

windows

Wi-Fi only works when logged in

If you have a Wi-Fi network, and it doesn’t seem to connect unless you login, you need to change the profile. Symptom: Domain joined computer would not come online unless I logged in as a local user account (domain wasn’t available). Would work fine afterwards, but would disconnect as soon as I logged off. Resolution: The Wi-Fi network was set to only be a user profile. To change it: Open the Command Prompt or Powershell as an Administrator

bitlocker

BitLocker and Active Directory

Summary: We will use Bitlocker to secure device data, requiring a PIN or Password to boot into Windows or read the hard drive. This is aimed to be the definitive guide to getting started and managing BitLocker. Technical Details Bitlocker locks the key for decryption with multiple keys (“Protectors”). This can include TPM, TPM and PIN, Password, a USB key, and even certificates. You can have multiple ways to unlock the decryption key The keys appear transparent to the user, even during recovery The hard drive can be removed and put into another computer.

remote desktop

Creating RemoteApp RDP Sessions

If you are running a full Remote Desktop session to only run one application, you are wasting resources and time! In this article, we will make a connection to single-programs that look as though they’re running locally on our workstation!

registry

Set default printer (without creating a printer) with Group Policy

I got disappointed after searching high and low on Google for how to use Group Policy in order to set a default printer. Almost every article I read assumed the reader had a print server available, or would deploy a local printer connection right from the Group Policy Management Console. Finally, I found the solution! In the environment that I support, we have “Printer Packages” by the manufacturer. These packages are essentially printer queues with default settings already entered for the Printer Preferences - you know, the items you CAN NOT change easily from a remote location, to many systems?

best practices

Files Preferences FAQ

Group Policy Files CSE allows SysAdmins to ensure file(s) exist on clients when logging into the domain. If you’ve never used it before, you can beat your head against the wall, so learn from my mistakes / tributions with setting this up.

SSID

Forcing Wireless Networks on clients

Do your employees complain they can’t connect to your network resources, only to find they are on a different Wireless network?

installation

Deploying Windows Monthly Updates (without WSUS)

In connection with another article about Deploying Windows Updates via the Command Line, I have come to notice that it is not the end-all we thought it once was. With the Roll-Up Updates for Windows 7, 8.1, and 10, I have found a better way to deploy updates.

admin share

Add Network Clients, Protocols and Services via Command Line

In a previous post, I talked about why I couldn’t access any file shares, or connect remotely to some systems. The issue was caused by services, protocols and clients missing from the network adapters. Now that the issue had been identified, I had two choices: manually touch every machine, using the mouse for most of the work, or automate the process. This post describes the latter.

admin share

Can’t connect to the ADMIN$ or IPC$ shares on a computer?

Troubleshooting the ADMIN$ or IPC$ shares can be a painful ordeal for some.

dell

Installing Windows 7 on Dell’s new Skylake-based Systems

Recently, I’ve been seeing posts about the new Skylake-based Intel processors that Dell is using in their Precision, Optiplex and Latitude lines of products. It makes the system fast, even without using much power, but it causes an issue if a SysAdmin needs to install Windows 7 from their installation media - most notably, the USB drive is not available, and neither is the hard drive from the Windows 7 WinPE environment.

vbs

Do your Windows Automatic Updates via the Command Line

For administrators without a WSUS server, you need this script.