Orignally I have Powershell script for doing that, but it turns out not so good: if (!(Test-Path HKCC:)) {New-PSDrive -PSProvider registry -Root HKEY_CURRENT_CONFIG -Name HKCC} $RegPath= ”HKCC:\SOFTWARE\XXX” New-Item -Path ”HKCC:\SOFTWARE\” -Name Encompass -Force $acl = Get-Acl $RegPath $rule = New-Object System.Security.AccessControl.RegistryAccessRule (“BUILTIN\Users”,”FullControl”,”Allow”) $rule2 = New-Object System.Security.AccessControl.RegistryAccessRule (“Everyone”,”FullControl”,”Allow”) $acl.SetAccessRule($rule) $acl.SetAccessRule($rule2) Here is the bath file to […]
Author: me
Fix WPAD Vulnerability by Changing Host File with SCCM
It was a bit more diffcult than I thought, originally I was using compliance settings, but then it didn’t work so well. So I go back to the classic application deployment by SCCM. Here is the detection method: # WPAD Vulnerability Remediation Discover Script # Rui Qiu # v 2.0 # 4/5/2018 # Last edit: […]
Rapid7 Insight Agent Update Fix Discover Script
# Rapid7 Insight Agent Update Fix Discover Script # Rui Qiu # v1.1 # 4/3/2018 $folder = “C:\Program Files\Rapid7\Endpoint Agent” if (test-path $folder) { $content = (get-content config.json | where { $_ -match “smart_ttl_start” } ) # echo $content $key = ‘ “smart_ttl_start”: 128,’ # echo $key if ($content -eq $key) {$Compliance = “Yes”} Else […]
Issues Installing Shavlik (Ivanti Patch)
I didn’t realize a simple issue can cause a big issue with Shavlik: When launching the installer from Shavlik, you have to “Unblock” the file before running the isntaller, otherwise you will get failed to create folder when you are running the Ivanti Patch checker. And when you launch the SCCM console, you have to […]
How to Set up SCCM SSRS Email Notification
First go to your SQL Reporting server, and launch “Reporting Services Configuration Manager”: It is best to use an internal SMTP server. And once you have set it up, you can use this Powershell script to test if your email function is working: Write-Host “Sending Email” $smtpServer = “xxx.CORP.LAN” $msg = new-object Net.Mail.MailMessage $smtp = […]
SCCM WSUS Update Failed with 0x80244022
When I checked the error code, it said HTTP error 503 from WUAHandler.log, it turned out that the Wsuspool was stopped in IIS, and I have to changed the “Private Memory Limit” to 4194304. https://tuxpiekiesccm.blogspot.com/2015/09/windows-updates-failed-0x80244022.html
- Casper
- ...
How to Uninstall NoMAD
Here is a simple script to uninstall NoMAD: # /bin/bash # Rui Qiu # Remove NoMad and use direct AD Bind loggedInUser=`/bin/ls -l /dev/console | /usr/bin/awk ‘{ print $3 }’` pkill “NoMAD” sudo rm -rf /Applications/NoMAD.app sudo rm -rf “/Library/Managed Preferences/com.trusourcelabs.NoMAD.plist” sudo rm -rf “/Library/Managed Preferences/$loggedInUser/com.trusourcelabs.NoMAD.plist” sudo rm -rf “/Users/$loggedInUser/Library/LaunchAgents/com.trusourcelabs.NoMAD.plist” And you can use […]
Force Install macOS Update
Here is a simple command to force install macOS updates in the background: softwareupdate -i -a After running that, you can use casper to notify user to reboot 🙂 and here is a useful link to enable update on the Mac: Enforcing Critical OSX System Updates via Casper
Extract a JSON value from a BASH script
find the simple bash script for extracting JSON value from this GitHub: https://gist.github.com/cjus/1047794 function jsonValue() { KEY=$1 num=$2 awk -F”[,:}]” ‘{for(i=1;i<=NF;i++){if($i~/’$KEY’\042/){print $(i+1)}}}’ | tr -d ‘”‘ | sed -n ${num}p }
Shell Script to Remove Centrify, Move Wifi/LAN, and Request 802.1 Certificate
Here is a long script of doing a lot of things, it deletes the Centrify Binding, Centrify certificates and itself, binds the machine to AD via native plugin and requests a 802.1x certificate via native RPC #!/bin/sh # This script deletes the Centrify Binding, Centrify certificates and itself, binds the machine to AD via native […]