Need some advice on learning networking

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • BillyCarpenter
    Field Supervisor

    Site Contributor
    VIP Subscriber
    10,000+ Posts
    • Aug 2020
    • 16308

    #1231
    Re: Need some advice on learning networking

    Question: I know that every organization is different, but generally speaking, how much do you try to limit domain users?

    No USB drive?

    No Control Panel?

    Any info. would be helpful.
    Adversity temporarily visits a strong man but stays with the weak for a lifetime.

    Comment

    • rthonpm
      Field Supervisor

      2,500+ Posts
      • Aug 2007
      • 2847

      #1232
      Re: Need some advice on learning networking

      Originally posted by BillyCarpenter
      Question: I know that every organization is different, but generally speaking, how much do you try to limit domain users?

      No USB drive?

      No Control Panel?

      Any info. would be helpful.
      Just make sure they don't have admin rights for the most part. Control Panel still offers features that a standard user can make and if you block USB ports then you're also killing peripherals beyond flash drives. Flash drives are as much a human resources issue as an IT issue, that's where user training and management buy-in comes into play so that people know there's a penalty for doing what they shouldn't.

      The principle of least privilege is generally used: any role in an organisation should have the least amount of permissions necessary to do their tasks.

      Sent from my BlackBerry using Tapatalk

      Comment

      • BillyCarpenter
        Field Supervisor

        Site Contributor
        VIP Subscriber
        10,000+ Posts
        • Aug 2020
        • 16308

        #1233
        Re: Need some advice on learning networking

        I'm still exploring Group Policy. I just did something freakin' cool. I deployed Google Chrome to PC's on the domain using Group Policy.

        I know this is old hat for rthon but for me it's like discovering fire.
        Adversity temporarily visits a strong man but stays with the weak for a lifetime.

        Comment

        • rthonpm
          Field Supervisor

          2,500+ Posts
          • Aug 2007
          • 2847

          #1234
          Re: Need some advice on learning networking

          Originally posted by BillyCarpenter
          I'm still exploring Group Policy. I just did something freakin' cool. I deployed Google Chrome to PC's on the domain using Group Policy.

          I know this is old hat for rthon but for me it's like discovering fire.
          This is how I set up most systems: on binding to the domain all of the default software is installed, or at least everything with an MSI file. Everything else just gets installed through PDQ Deploy.

          Sent from my BlackBerry using Tapatalk

          Comment

          • BillyCarpenter
            Field Supervisor

            Site Contributor
            VIP Subscriber
            10,000+ Posts
            • Aug 2020
            • 16308

            #1235
            Re: Need some advice on learning networking

            Originally posted by rthonpm
            This is how I set up most systems: on binding to the domain all of the default software is installed, or at least everything with an MSI file. Everything else just gets installed through PDQ Deploy.

            Sent from my BlackBerry using Tapatalk

            Correct me if I'm wrong, but only MSI files can be deployed. Anything ending with exe needs to be converted to a MSI file?
            Adversity temporarily visits a strong man but stays with the weak for a lifetime.

            Comment

            • rthonpm
              Field Supervisor

              2,500+ Posts
              • Aug 2007
              • 2847

              #1236
              Re: Need some advice on learning networking

              It's considerably easier with MSI files than an exe, especially as they better support silent installs, which is what you want.

              There are workarounds for exe's, but they usually don't seem to work, and most applications offer an MSI either by default or as an alternative download.

              For your Chrome instances in a domain, be sure to use the Enterprise version instead of the standard download as it offers several improvements for a managed environment.

              Sent from my BlackBerry using Tapatalk

              Comment

              • BillyCarpenter
                Field Supervisor

                Site Contributor
                VIP Subscriber
                10,000+ Posts
                • Aug 2020
                • 16308

                #1237
                Re: Need some advice on learning networking

                #1.


                #2.



                #3.



                #4.


                #5.

                You can control all the settings related to your computer mouse here. This includes mouse speed, buttons, wheel, and pointer, etc.

                #6.



                #7.



                #8.

                guide to optimize the power options as you find best.
                #9.



                #10.


                #11.
                d.

                #12.


                #13.




                #14.



                #15.


                #16.



                #17.


                #18.


                #19.

                #20.



                #21.


                #22.


                #23.



                #24.



                #25.
                Adversity temporarily visits a strong man but stays with the weak for a lifetime.

                Comment

                • rthonpm
                  Field Supervisor

                  2,500+ Posts
                  • Aug 2007
                  • 2847

                  #1238
                  Re: Need some advice on learning networking

                  Learn your Windows key shortcuts as well.

                  Win+R run command

                  Win+L lock workstation

                  Win+M minimise window

                  Win+D minimise all windows and go to the desktop

                  Win+Shift+S Screen snip

                  Win+1 through 9 open the application pinned to the taskbar in the order they are pinned.

                  There are others as well, but these are the main ones I use.

                  Another bonus: Ctrl+Shift+Esc Task Manager


                  I'll also raise you dism and wmic as commands that will dig you deep into Windows.

                  Sent from my BlackBerry using Tapatalk

                  Comment

                  • Tricky
                    Field Supervisor

                    Site Contributor
                    2,500+ Posts
                    • Apr 2009
                    • 2621

                    #1239
                    Re: Need some advice on learning networking

                    Originally posted by rthonpm
                    Learn your Windows key shortcuts as well.
                    Win+Shift+S Screen snip

                    Win+1 through 9 open the application pinned to the taskbar in the order they are pinned.
                    Win + printscreen takes consecutive screenshots.

                    Comment

                    • BillyCarpenter
                      Field Supervisor

                      Site Contributor
                      VIP Subscriber
                      10,000+ Posts
                      • Aug 2020
                      • 16308

                      #1240
                      Re: Need some advice on learning networking

                      Originally posted by rthonpm
                      This is how I set up most systems: on binding to the domain all of the default software is installed, or at least everything with an MSI file. Everything else just gets installed through PDQ Deploy.

                      Sent from my BlackBerry using Tapatalk

                      When I first read this, I thought to myself that this is pretty dang cool. My next thought was...how is he doing this?

                      This morning I got to thinking about it. Turns out that it's really not that complicated at all. The link to the GPO is constant. Once I drop a PC into a container, the policy is automatically applied.

                      I created a new machine this morning in Virtual Box and dropped it into a container and, bam, Google Chrome was automatically installed.

                      As always, correct me If I'm wrong or am missing something.
                      Adversity temporarily visits a strong man but stays with the weak for a lifetime.

                      Comment

                      • rthonpm
                        Field Supervisor

                        2,500+ Posts
                        • Aug 2007
                        • 2847

                        #1241
                        Re: Need some advice on learning networking

                        Originally posted by skynet
                        Win + printscreen takes consecutive screenshots.
                        Only if you want the entire screen, which becomes even uglier with multiple monitors. The times where I want the entire screen as opposed to a specific portion of it is very small.

                        Sent from my BlackBerry using Tapatalk

                        Comment

                        • rthonpm
                          Field Supervisor

                          2,500+ Posts
                          • Aug 2007
                          • 2847

                          #1242
                          Re: Need some advice on learning networking

                          Originally posted by BillyCarpenter
                          When I first read this, I thought to myself that this is pretty dang cool. My next thought was...how is he doing this?

                          This morning I got to thinking about it. Turns out that it's really not that complicated at all. The link to the GPO is constant. Once I drop a PC into a container, the policy is automatically applied.

                          I created a new machine this morning in Virtual Box and dropped it into a container and, bam, Google Chrome was automatically installed.

                          As always, correct me If I'm wrong or am missing something.
                          The policies aren't immediately applied at the client level unless you forcefully trigger them or wait for the regular policy refresh cycle (every 90 minutes).

                          The easiest ways to apply a policy without going to command prompt is:

                          For computer based policies: reboot, though depending on how deep the new policy is it can take at least two reboots to properly apply. You'll mainly see this with policies that require a reboot to enable a feature within the policy object.

                          For user policies: log off and log back on.

                          There's also the old standby of gpupdate /force as well.

                          Sent from my BlackBerry using Tapatalk

                          Comment

                          • tsbservice
                            Field tech

                            Site Contributor
                            5,000+ Posts
                            • May 2007
                            • 7927

                            #1243
                            Re: Need some advice on learning networking

                            Win + I Settings

                            Win + S Search

                            Win + , Temporarily shows desktop

                            Win + E File Explorer

                            Win + Spacebar Change keyboard layout and input language
                            A tree is known by its fruit, a man by his deeds. A good deed is never lost, he who sows courtesy, reaps friendship, and he who plants kindness gathers love.
                            Blessed are they who can laugh at themselves, for they shall never cease to be amused.

                            Comment

                            • BillyCarpenter
                              Field Supervisor

                              Site Contributor
                              VIP Subscriber
                              10,000+ Posts
                              • Aug 2020
                              • 16308

                              #1244
                              Re: Need some advice on learning networking

                              Originally posted by rthonpm
                              The policies aren't immediately applied at the client level unless you forcefully trigger them or wait for the regular policy refresh cycle (every 90 minutes).

                              The easiest ways to apply a policy without going to command prompt is:

                              For computer based policies: reboot, though depending on how deep the new policy is it can take at least two reboots to properly apply. You'll mainly see this with policies that require a reboot to enable a feature within the policy object.

                              For user policies: log off and log back on.

                              There's also the old standby of gpupdate /force as well.

                              Sent from my BlackBerry using Tapatalk
                              I forgot to mention that I had to do "gpupdate /force". I guess it's not automatic but close enough.
                              Last edited by BillyCarpenter; 01-02-2022, 08:33 PM.
                              Adversity temporarily visits a strong man but stays with the weak for a lifetime.

                              Comment

                              • BillyCarpenter
                                Field Supervisor

                                Site Contributor
                                VIP Subscriber
                                10,000+ Posts
                                • Aug 2020
                                • 16308

                                #1245
                                Re: Need some advice on learning networking

                                Originally posted by rthonpm
                                Everything else just gets installed through PDQ Deploy.

                                Sent from my BlackBerry using Tapatalk

                                I googled PDQ Deploy. It looks pretty amazing. It's also very expensive. I'm trying out the 10-day evaluation period.


                                What can you share with be about this?
                                Adversity temporarily visits a strong man but stays with the weak for a lifetime.

                                Comment

                                Working...