Back in December, I showed you how to install RSAT on a Windows client. As you will have seen, the method depends on what version of Windows the client is running, which means that correctly identifying the version running is somewhat important (although trial and error does work – eventually).
Category: How To
A little while ago, I was asked about when a specific user last logged in with their active directory (AD) user account. While looking up that information was easily done, finding out how to look up the information was a mite more challenging. There are a number of ways of achieving it; including command line and Powershell commands. My preferred way of doing it is using the Attribute Editor in Active Directory Users and Computers (ADUC). Here’s how:
Among my many areas of responsibility at work, is contacting all the users found in various data breach lists that our InfoSec team get their hands on (typically, these are the same lists that eventually make their way to HIBP). Not unsurprisingly, there is a significant amount of overlap between some of these lists, and one of the things I do is to ensure that I do not contact users about passwords I’ve already talked to them about.
You may, for one reason or another, need to install Remote Server Administration Tools (RSAT) on your Windows client computer. You may want to perform administrative tasks in Active Directory Users and Computers, administer Certificates in Active Directory Certificate Services, or administer DNS or DHCP in DNS or DHCP Server Tools.
From time to time, I have found it useful to schedule the sending of emails, such as reminders to others about something, requests for updates and so on. Luckily, this is a feature which is easily available in GMail.
For most users, the message headers of any given email are irrelevant; the email has arrived, and that is all there is to say about that. It does, however, have applications both in IT support and in information security. While those applications are outside the scope of this article, accessing the message header is not.
With surprising regularity, I need to check when a user last logged in. I recently found a command that returns this information;
quser. Using it is simple enough; open a command prompt, enter the command, and hit return:
Some time ago, I was asked to provide a list of everyone with access to a specific system. After communicating with the client, it transpired that they were particularly interested in knowing who were the members of a set of Active Directory groups. While this can be done manually, I wanted to try my hand at building a PowerShell-script that returned the information the client was asking for, and which I could reuse at some later point, as such requests pop up with some regularity.
One issue I meet from time to time, is the fact that many of my users do not understand how to approach tech support in a way that is conducive to receive good support in a timely manner. While this list is in no way exhaustive, following the tips and tricks will get you slack when you need it.
Over the past couple of weeks, a story has been breaking that video conferencing vendor Zoom leaves a back door on your Mac when uninstalling it, which will let them run their service and reinstall that much quicker in the future. For details, I recommend this Medium article.