2017-07-28

To proxy or not to proxy

Today I was asked to update the EGVP (Elektronisches Gerichts- und Verwaltungspostfach) software on a client. The software is used to send an receive encrypted emails and to verify that the senders are who they claim to be. [official site] [wikipedia]

After I found out that the old client was never installed on the system I found out that until version 2.9 the whole thing was also available as Java WebStart. After 2.9 only an installable msi-version is offered. Ok then, lets hope the new version is smart enough to import all the old settings from the WebStart version I thought ...

Windows folder redirection not working ... sometimes

We are making use of the Windows folder redirection group policies to redirect folders like "Documents", "Desktop" and "Favorites" to a server share in order to save space on the local harddisks/SSDs and of course make that data available to the user no matter what workstations he logs onto.

Our home directories are a little odd in regards to the folder structure we are using. The home directories reside in "\\server\users\home\<department>\<accountname>" which means that whenever a user changes department his/her entire home directory must be moved to a new location.

2017-07-27

[BUG] Windows 10 default user profile is potentially writable by everyone

This is the story how I found out (by proxy) that the default user profile in Windows 10 is potentially writable by any user and the odyssey of trying to get this security bug fixed ... and failing to do so in the end.

For those who do not want to read the full story I posted a TL;DR version at the bottom. ;)


2017-05-19 19:55 - I got contacted by a friend who asked me for my input on an issue he (or rather his company) was having for weeks and months already and had not been able to figure out yet. Even Microsoft Germany, who they contacted themselves about this issue on 2017-03-28, did not have a solution for them.

Some background: His company is selling servers and support for them. So far, there are over 1.800 of their servers with over 100.000 connected clients and over 1.000.000 users out there and they had a problem with newly deployed Windows 10 systems they were not able to figure out.

2017-07-26

Introduction

I work in the IT department of my home town and am part of the so-called "2nd-Level-Team" in charge of around 3500 Windows computers.

The whole IT department has around 50 employees. The 1st-Level-Team with 5 people is responsible for manning the help desk hotline, inserting tickets for the entire department into the ticket system and fixing simple problems the users have. The 2nd-Level-Team consists of another 5 people who are responsible for everything related to software and operating system issues on the 3500 Windows computers. The servers and network are the responsibility of other teams.

While the members of the 2nd-Level-Team all share the same base responsibilities after two years on this job I've been tasked with quite a few additional responsibilities thanks to my previous job experiences. For example:
  • I'm in charge of the company-wide Group Policies for all Windows client systems.
  • I'm responsible for prepping, testing and documenting software for fully automated deployment through SCCM before handing the finished package over to the SCCM guy for the actual deployment.
  • I've been tasked to figure out how to actually make Microsoft Windows 10 useable in our environment.
  • I'm also in charge of getting a virtualized desktop infrastructure for up to 100 concurrent users up and running. (The client side of it at least. The server part is done by the servers department)
  • Last but not least I'm at this point in time the only person in my team with any programming/scripting experience so I get to do all the task automation using Powershell

I'd like to use this blog to document some stories from work, bugs I find, tips and tricks for problems I come across and facepalm worthy moments.

Be warned though, some of the things I might post can potentially make you lose all hope in humanity or at least have an increasing effect on your alcohol consumption. ;)