Wednesday, May 16, 2018

Quick script to count number of groups a user has in Active Directory.

I had the issue of users with too many groups to login so I needed a fast way to get a group count.

groups.bat 
dsquery user -samid %1| dsget user -memberof | wc

C:\>groups testuserC:\>dsquery user -samid testuser  | dsget user -memberof   | wc      215       635     16530C:\>

The number of groups is 215.

You need the WC unix utility. I always keep WC and GREP on hand.

Monday, April 23, 2018

How secure is AT&T Express Ticketing?




Enter a phone number, circuit number or IP address.



You can see previous trouble tickets on the service.

Open a new ticket, have the service tested and dispatch a technician.

What if someone input the number for local government, hospital, etc.

***

Circuit numbers work, even old ones disconnected for five plus years. What would happen if I opened a ticket to repair an old disconnected circuit.

Comcast business agreements contain URLs.


I have had good results with Comcast business service (Internet, fiber, PRI, analog voice and TV). It just seems strange to put URLs in the agreement.
The Agreement shall terminate as set forth in the Terms and Conditions
(http://business.comcast.com/terms-conditions/index.aspx). All capitalized terms not defined in this SOA shall reflect the definitions given to
them in the Terms and Conditions. Use of the Services is also subject to the then current High-Speed Internet for Business Acceptable Use
Policy located at http://business.comcast.com/terms-conditions/index.aspx (or any successor URL), and the then current High-Speed Internet
for Business Privacy Policy located at http://business.comcast.com/terms-conditions/index.aspx (or any successor URL), both of which
Comcast may update from time to time.

The current Terms and Conditions posted on the site is "V. 28".



Checking the Way Back Machine in 2014, I found "V. 22'

Friday, April 13, 2018

I fried a NanoStation M2 with 48V poe and fixed it.

If you mistakenly did this and get the quick flash power light, here is your fix.

https://community.ubnt.com/t5/airMAX-Installation/Nanostation-M2-fried-with-48V/td-p/1178844

According to the community, just pry out this diode. No more over voltage protection!



Here is the diode next to the Main port.

After removal with a small screwdriver.

The unit is now working again!!!

Ubiquiti Nanostations losing configuration after 15 seconds?

I have two new NanoStatiom M2 units. If I plug either unit into my LAN, the configuration is defaulted in about 15 seconds. I tried several patch cables and multiple switches. With a laptop plugged into the secondary port and pinging 192.168.1.20, the ping drops at around 15 seconds every time. Updated the firmware with no luck.

Finally I disabled the Reset Button on the System page and it works!

Update: I tried a Nanostation Loco M2 and did not have this problem.

Monday, February 19, 2018

Meraki MX site-to-site UDP traffic.


The unit is on a cellular connection with limited data allowance. Site-to-site VPN is disabled. I consistently get about 1Gb of data usage a day and this is all UDP traffic.




Packet captures show all the UDP traffic is between this MX and other MX devices in the organization. Why so much data traffic between Meraki hardware on different networks?

Thursday, January 25, 2018

WPA2 enterprise setup on Windows with no domain.

Non-domain windows computers will not connect to enterprise WiFi without manual configuration. This has been a pain for years. Apple products all work. Cell phones work. But Windows requires all these clicks.

Click on Wireless Networks
Network and Sharing Center
Manage wireless networks
Add
Manually create a network profile
Network name: xxxx
Security type: WPA2-Enterprise
Next
Change connection settings
Security tab
Settings
Uncheck Validate server
Configure
Uncheck box
OK
OK
Advanced settings
Specify authentication: change to User authentication
OK
OK

Tuesday, January 16, 2018

Mitel NuPoint auto attendant override message.

I think of this feature as an alternate greeting.

Example:
"We are closed for the snowstorm today."

The message can be recorded and enabled remotely via phone.

Dial in to the message center.
xxxx * (Attendant mailbox number and *)
Passcode
* (AA options)

Here is what my call flow looks like.

Monday, January 8, 2018

How to disable a network interface from the Windows command line.


I found out I have computers connected to the same network with ethernet and wireless. Windows appears to have strange performance issues with this setup. These are desktops so they do not need wifi enabled.

psexec \\remotepc cmd
netsh interface show interface
netsh interface set interface "Wireless Network Connection" admin=disable

Quick and fast fix.