Lack of Potatoes

SSH Keys stop user prompting for SUDO

You can add the user to the sudoers list to prevent the user from prompting for elevation (standard access or when using SSH keys). Run the command: sudo visudo At the VERY end of the file, enter the following (replacing user1 with your username): user1 ALL=NOPASSWD: ALL

Windows

Remove default APPX apps (Windows 10)

List of default apps that can/should be removed. 3D Environment: Get-appxpackage -allusers *Microsoft.3dbuilder* | Remove-AppxPackage Get-appxpackage -allusers *Microsoft3DViewer* | Remove-AppxPackage Microsoft Defaults: Get-appxpackage -allusers *king.com.CandyCrushSodaSaga* | Remove-AppxPackage Get-appxpackage -allusers *Microsoft.WindowsFeedbackHub* | Remove-AppxPackage Get-appxpackage -allusers *Microsoft.ZuneMusic* | Remove-AppxPackage Get-appxpackage -allusers *Microsoft.BingNews* | Re

Windows

Hardening OS (Windows 10 non-domain)

Options to set: * Disabling WDigest credentials caching. More info here: https://www.stigviewer.com/stig/windows_10/2017-02-21/finding/V-71763" * Disable AutoLogin * Enable always install elevated * Check is WSUS is using HTTP over HTTPS * Stop Service: SSDP * Disable SMB version 1 * Enabled SMB version 3 * Enabled SMB signing * Blocking list

PowerShell

Extract the Immutable ID for an Office 365 user

There are many reasons why you may need this value and in my case its for Okta. Connect to O365 and substitute the username for the user required: Get-MsolUser -UserPrincipalName "username@domain.com" | Select-Object ImmutableID

Linux

Failed to fetch when using apt-update (404 not found)

If you have let slip your patching routine with Ubuntu you can find yourself in a position where you can't get any updates or upgrade to the next release. Backup your existing sources.list file: sudo cp /etc/apt/sources.list /etc/apt/sources.list.backup Update the sources to

Windows

Set MTU value for Windows 10

Open your terminal of choice and list the interfaces available: netsh interface ipv4 show subinterfaces Looking at the list find the name of the interface you want. In my example its Ethernet0: netsh interface ipv4 set subinterface "Ethernet0" mtu=9000 store=persistent The default MTU value should usually be 1518.

Palo Alto

Force a failover from Active to Passive on Palo Alto firewalls

From the CLI: request high-availability state suspend From the GUI: Device > High Availability > Operational Commands – click Suspend local device Don't forget to enable the device again otherwise it won't be in the HA pool.

Linux

Network configuration from CLI

Find the interface you want using either command: netstat -i ifconfig Update the interface with your config (in this example eth0): sudo ifconfig eth0 10.1.1.6 netmask 255.255.255.0 Now set the default gateway using the following command (same interface as before): sudo route add default

raspberry pi

Chromium kiosk mode on raspberry pi

From the terminal (or SSH): mkdir /home/pi/.config/autostart Create the config file and enter the following: nano /home/pi/.config/autostart/kiosk.desktop [Desktop Entry] Type=Application Name=Kiosk Exec=/home/pi/kiosk.sh X-GNOME-Autostart-enabled=true Create the script the Pi will run at start-up: nano /home/pi/

Dell Featured

Access Dell iDRAC using SSH

Connect to the iDRAC IP using an SSH client and login using the username and password of the iDRAC console. To soft reboot the server the iDRAC is connected to just run the following commands: /admin1->cd system1 /admin1->reset If you have issues with the web console being "flaky"

Office365

Litigation Hold - Recoverable Items quota

Placing a mailbox on an indefinite hold means that mail items meeting the hold requirements will never be removed from the mailbox. This can result in the mailbox exceeding the Recoverable Items Quota, which could make the mailbox unusable or have strange errors (getting meeting invites for example). Location of

ESX

Enabling maintenance mode via esxcli

In the odd occasion when you need to enable this function from the CLI: Enter maintenance mode: esxcli system maintenanceMode set --enable true Exit maintenance mode: esxcli system maintenanceMode set --enable false

Palo Alto

Accessing a new Palo Alto

Out of the factory the Management port is set to a static address of 192.168.1.1 Connecting your laptop and setting a manual IP on the same range allows you to access this interface. The default credentials are admin for both username and password. Login PromptOnce you log

APC

Reset an APC AP9630 / AP9631

Having had the web interface error out the management card of the APC device could not be rest using the GUI. Since breaking out a serial cable is too much hassle there is a handy reset function on the back of the card itself. Two types of resets are available:

Office365

Connect to Office365

If you haven't done this already you need to install the necessary modules: Install-Module MSOnline This is the snippet of code I usually run to quickly connect to O365. function Connect-O365 { $UserCredential = Get-Credential -UserName "username@domain.eu" -Message "Username has to be in the format of username@domain.eu" $Session

Apple

MacBook can access the internet but no webpages resolve

Fix issues with Mac not being able to resolve webpages.

Office365

Discrepancy in Outlook Desktop and OWA for Shared Mailboxes

If an incoming email is flagged with "Sensitivity: Private" then due to how Microsoft define permissions these emails won't be visible to all users in a shared mailbox. If you are not the owner of the mailbox then you need to do this via OWA. Select Open another mailbox and

Windows

Generate detailed battery report

Elevate your permissions (CMD/PowerShell whatever)... In your chosen shell type: powercfg /batteryreport /output "C:\battery-report.html" You can then open the report in any browser you wish. There is a lot of information contained within this report so it can appear a little confusing. Alternatively access the normal data

Cisco

Useful Cisco Switch Commands

Login to the a Cisco Switch using your credentials via Putty or any SSH Client. Command: show interface status Shows description, connected/not-connected, assigned VLAN Command: show interface [port number] Shows detailed statistics for an individual port i.e. Gi0/0/1 Command: show mac address | include [last 4 of

SCCM

Diskpart commands device deployment

Use the following commands if imaging fails. Open up command prompt by pressing F8 on the keyboard: diskpart select disk 0 clean convert gpt create partition efi size=200 assign letter=s format quick fs=FAT32 create partition msr size=128 create partition primary assign letter=c format quick fs=

Office365

Create "Room Lists" of meeting rooms in Exchange

Connect to Office 365 [https://www.lackofpotatoes.co.uk/connect-to-office365/]: Build a variable with all the rooms you want to include in the list: $RoomAlias = Get-Mailbox -RecipientTypeDetails RoomMailbox -Filter {Name -like '**'} | select -ExpandProperty Alias Create new DistributionGroup as a RoomList and add your rooms as members: New-DistributionGroup -RoomList

Office365

Find user based on SIP address

Connect to Office 365 [https://www.lackofpotatoes.co.uk/connect-to-office365/]: Get-ADUser -filter * -Properties msRTCSIP-PrimaryUserAddress | where msRTCSIP-PrimaryUserAddress -eq "sip:simon@domain.eu"

Office365

Re-link a mailbox to a user

Connect to Office 365 [https://www.lackofpotatoes.co.uk/connect-to-office365/]: Undo-SoftDeletedMailbox -WindowsLiveID -Password (ConvertTo-SecureString -String '' -AsPlainText -Force) It's best to NOT do this and just remove the user object IF you sync your AD from on-prem as it will replace the missing info (this can result in sync

Office365

Find a user by its email Alias

Connect to Office 365 [https://www.lackofpotatoes.co.uk/connect-to-office365/]: In this example any user that has a domain.eu email addresses: Get-Mailbox -Identity * | Where-Object {$_.EmailAddresses -like 'smtp:*@domain.eu'} | Format-List Identity, EmailAddresses

Office365

Clear User photo

Connect to Office 365 [https://www.lackofpotatoes.co.uk/connect-to-office365/]: Remove-UserPhoto "" -ClearMailboxPhotoRecord