The strange case of … Applocker blocking

Applocker blockOn our “standard” workstations we have enabled Microsoft Applocker, which blocks unauthorised software from being installed.

We also have “Unrestricted” workstations, where there is no Microsoft Applocker, and customers can install anything they want.

All our workstations start out as “standard” workstations, and get moved to “Unrestricted” when a customer explicitly requests it.

We do occasionally encounter the issue where Applocker Rules are Still Enforced After The Service is Stopped.

Our fixes are as follows.

Option 1

  1. Apply the Solution from Applocker Rules are Still Enforced After The Service is Stopped

Option 2

  1. Stop the Application Identify service
  2. Delete the SrpV2 registry key and entries under HKEY_LOCAL_Machine\Software\Policies\Microsoft\Windows
  3. Start the Application Identify service
  4. Have the customer reboot the workstation.

Option 3

  1. Stop the Application Identify service
  2. Delete the SrpV2 registry key and entries under HKEY_LOCAL_Machine\Software\Policies\Microsoft\Windows
  3. Start the Application Identify service
  4. On the workstation, perform a gpupdate /force
  5. Have the customer reboot the workstation.

Normally one of those options will work for us.

mophie wireless charging base

I like my mophie wireless charger.  I guess the main reason is that it’s (mostly) well designed.

EXCEPT FOR THIS.

mophie charger plug

The power-plug is angled.  This means that it needs two power board spaces for it to be plugged in.  In other words, I had to remove the plug next to the mophie power-plug.

Sad smile

Brussels Sprout Tea–it’s a thing.

I made my own Brussels Sprout Tea.

Here’s what I did:

  1. Place the Brussels Sprout leaves into a bowl, and let them dry in the sun for 24 hours.
    Brussels sprout leaves
  2. Bake the leaves in an oven at 120 degrees Celsius for 20 minutes.
    Brussels sprout leaves - oven baked
  3. Cut the Brussels Sprout into tea leaf sized leaves.
    Brussels sprout leaves - chopped
  4. Place into a tea bag, and drink.
    Brussels sprout tea - brewed

Didn’t taste as bad as I expected. Wouldn’t do it again though.

The idea came from an impro scene.  The impro scene was better than the tea.

Group Policy and WMI Filters–Round 2

Sexy Coffee at North Denver and Rosa Parks Way in Portland, Oregon - Wikipedia user Visitor7This is more of a link dump than anything else.  I was asked what I thought of a WMI-related Group Policy change.

I don’t much care for them.

So I know that WMI Filter queries are a bad idea, but didn’t know how to measure that badness until I saw this blog post (WMI filter queries and thoughts on performance) by Martin Binder.

You can enclose your WMI Filter in a PowerShell “Measure-Command” command, and measure it that way.

Measure-Command { for ( $i=1; $i -le 1000; $i++ ) { Get-WmiObject –Query "SELECT Model FROM Win32_ComputerSystem WHERE Model LIKE 'Compaq Presario A%BB%'" } } | Select-Object TotalMilliseconds | Format-List

Output:
TotalMilliseconds : 23308.6037

As the command is looping 1000 times, you’d divide by 1000 and get the answer 23 milliseconds.

References:
Group Policy and WMI filtering slowness
Optimizing Group Policy WMI Filters
Introduction to WMI Basics with PowerShell Part 1 (What it is and exploring it with a GUI)

Fire in the Hole

and other pizzas you can’t order anymore 🙁

Fire in the HoleThe Mad Moose gourmet pizza restaurant is gone!  They closed the doors Tuesday 8 August.  No more will I be able to order the “Fire in the Hole” pizza.

Waaaaaaa!

From the The Mad Moose Facebook page:

For the past 10 years it has been a privilege providing you with Yarravilles best pizza experience.

Sadly we have closed permanently.

We closed our doors for the very last time Tuesday night.

It has been a pleasure serving (most of) you.

We have met some amazing people, customers, staff and suppliers along the way.

I’d especially like to thank our loyal customers that have been with us through the years.

It is a very tough market at the moment and I have had to make an equally tough decision.

We understand that this closure may come as a surprise and may upset some customers. We deeply apologise for the inconvenience and the fact that you will now need to find another pizza place.

Sincerely Logan and the Mad Moose crew.

“Logon failure: the user has not been granted the requested logon type at this computer”

CustomCPZoomedQuick answer:
In Windows 7/8/10, we use a third-party Credential Provider, and it was blocking LOCAL (ie. not Domain) accounts from logging on.  Removing the third-party CP resolved the issue.  (we have logged a fault with the vendor).

Detailed answer follows:

Continue reading

Notes on Learner Driving

OPAPA Hazard Avoidance

  • Observe
  • Plan
  • Anticipate
  • Priorities
  • Act

Stages In Braking

  • Perception (Time/Distance)
  • Reaction (Time/Distance)
  • Braking (Time/Distance)
  • Overall (Total of Time/Distance)

Turning

  • Mirrors
  • Signal
  • Mirrors
  • Head Check

(notes taken during a Learner Driver session)