PDQ
PDQ Connect Getting Started Part 1 - The Agent
updated
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
Listen to the PowerShell podcast here: powershellpodcast.podbean.com
Guest Bio and links:
Steven Judd is a 25+ year IT Pro and most recently a former Windows Systems Engineer at Meta Platforms Inc. with an emphasis on Enterprise Messaging and Digital Loss Prevention. - He has been using PowerShell since 2010. - He was an author and editor on The PowerShell Conference Book Volume 3, a Senior Editor on Modern IT Automation with PowerShell, has co-developed a custom training program for PowerShell, and is an occasional presenter at PowerShell user groups. - He loves to help people learn and recognize the value of automation. - He spends his free time learning more about PowerShell, digital security, and cloud technologies, along with creating and telling Dad jokes. - You can find him hanging out on the PowerShell Discord Server bridge channel, taking care of his family, running marathons, playing the cello, plus a handful of other hobbies he can't seem to quit.
blog.stevenjudd.com
blog.stevenjudd.com/My-PowerShell-Journey/
github.com/stevenjudd
twitter.com/stevenjudd
Check out our new IT-themed cooking show, Tara Bites! youtube.com/watch?v=QLCszG_oL0w
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdqdeploy
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
Additional resources
blumira.com/siem-detection-rules-explained
blumira.com/enable-sysmon
blumira.com/logmira-windows-logging-policies
blumira.com/integration/poshim-automate-windows-log-collection
blumira.com/whitepaper/ransomware-prevention
Free Trial: blumira.com/PDQ
blumira.com/wp-content/uploads/2022/04/Blumira-Free-Edition-Data-Sheet.pdf
Free Software for cybersecurity enthusiasts
1. OS/Tools: Kali Linux (kali.org) Kali Tools | Kali Linux Tools kali.org/tools
Burpsuite
Metasploit
Hydra
Gobuster
Nmap
Aircrack
Mimikatz
Wireshark
Hashcat
2. Curated News: Feedly feedly.com
3. Web Hacking: Burp Suit portswigger.net/burp
4. Data Modification: Cyber Chef gchq.github.io/CyberChef
5. Training: Hack The Box hackthebox.com
6. Reverse Engineering: Ghidra ghidra-sre.org
7. Password Cracker: John The Ripper openwall.com/john
8. Web App Scanner: Fuzzdb github.com/fuzzdb-project/fuzzdb
Not free
9. Cobalt Strike cobaltstrike.com
10. Acunetix acunetix.com/vulnerability-scanner
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdqdeploy
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
In this episode we talk with ethical hacker I am Jakoby who gives us insights into the many ways someone can get access to your systems. We talked about how he started his journey into ethical hacking, and the support he got when he submitted for hak5.
Guest Bio and links:
I am Jakoby is a hacker, an artist, and a veteran. He is the #1 most published hacker on Hak5, and loves finding new ways to get into systems. When he is not scaring podcast hosts, he spends time with his girlfriend and their many cats.
twitter.com/I_Am_Jakoby
github.com/I-Am-Jakoby/PowerShell-for-Hackers
YouTube: youtube.com/@UCQUz2mC5Regc63XRWEqD9FA
Listen to the podcast here: powershellpodcast.podbean.com
0:00 - Intro
1:45 - Do you have any further news to share about the cloud-based PDQ solution? We're looking at vendors such as Action1 for an RMM product and would love to have PDQ on the table.
5:20 - Reminder that Kerberos and Netlogon security hardening starts with patches this month.
6:24 - Also regarding PDQ Connect, will you be including remote control in the agent? That's a feature I really like with Action1.
7:26 - If i have a Deploy package and Step1 is Scan, Step2 is Install if member of Collection, do i need a Sleep 10s step in between to allow membership to update? or does PDQ Deploy know to wait for membership update between steps?
8:40 - We are switching to LAPS but some machines don't have LAPS passwords yet. Is it possible to try LAPS first then a 2nd account if LAPS does not exist for scanning and deploy?
11:35 - What are your top picks for holiday gifts for sysadmins this year?
12:15 - When an app shows up in PDQ Inventory scan, but It doesn't appear in the Apps list or Control Panel programs list, where should I look for it?
14:04 - Is there a limit of # of machines a PDQ server can handle before having issues? Or as long as it has lots of CPU and RAM can it handled as many as we want?
15:50 - Any updates to when the agent beta will open up to more of us?
16:53 - Domain and isolated network connected to PDQ Deploy server. Why can't isolated clients be targeted from technician console, but works great directly from the server?
20:05 - How is the general autumn mood in PDQ?
21:44 - Any plans to add Windows Virtual Desktop into PDQ Package Library?
22:33 - Do you have any idea on the pricing for cloud based PDQ? Asking for budgets
23:45 - Anyone else having issues with the latest Zoom package?
25:45 - Any plans to include a WebView2 package in the package library? Webex is starting to require it now but having a separate package would be nice.
27:45 - Is there a way to launch an app, for example a custom message box with deploy and not wait for it to complete? This is so we can have a persistent item while other tasks continue.
30:00 - Can we add PDQ installers to the Package Library for updating other technicians each time the Server updates?
32:15 - Is there a way to initiate an "Add Computers, Network Discovery" via the command line for PDQ Deploy? Use case for this are VPN Connected workstations which can change IPs.
34:03 - What does everyone want for Christmas?
PowerShell script mentioned during the webcast:
Get-AppxPackage "*teams*" | Remove-AppxPackage -AllUsers
Get-AppxProvisionedPackage -Online | Where-Object displayname -eq "MicrosoftTeams" | Remove-AppxProvisionedPackage -Online
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdqdeploy
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
Corresponding blog article: pdq.com/blog/what-you-need-to-know-openssl-3-0-vulnerabilities
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
CVE-2022-41047: Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2022-41128: Windows Scripting Languages Remote Code Execution Vulnerability
CVE-2022-41091: Windows Mark of the Web Security Feature Bypass Vulnerability
You can find more information about these and other vulnerabilities in our Patch Tuesday blog post;
pdq.com/blog/patch-tuesday-november-2022
0:00 - Intro
1:05 - CVE-2022-41047
1:25 - CVE-2022-41128
1:43 - CVE-2022-41091
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
Guest Bio and links:
Mathias Jessen (IISResetme) is a Threat Detection Engineer who considers himself an autodidact software behavior enthusiast. Outside of his speaking engagements and participation in the DuPSUG meetup he can often be found spending his free time playing music, console gaming, and going on adventures with his fiancé.
twitter.com/IISResetMe
github.com/IISResetMe
blog.iisreset.me
youtube.com/watch?v=bmWC8GGxpZ4
Listen to the Podcast here: powershellpodcast.podbean.com
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdqdeploy
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
Listen to the Podcast here: powershellpodcast.podbean.com
twitter.com/MDowst
github.com/mdowst
https://www.dowst.dev/automation-authoring/
https://psweekly.dowst.dev/
manning.com/books/practical-automation-with-powershell
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdqdeploy
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
In this episode, Phil shares his favorite thing about PowerShell: the community. As a leader of the RTPSUG, Phil encourages Andrew and Jordan to submit for Summit while not committing himself fully. Phil loves the PowerShell community and troubleshooting. He doesn’t define Yak Shaving but says other stuff worth listening to.
Guest Bio and links:
Phil is a Systems Architect with less than 75 years of experience. He has been helping run and organize the RTPSUG for over 6 years and can be heard asking questions during RTPSUG meetings. Phil is an author, speaker, community leader, and more!
twitter.com/schlauge
github.com/pbossman
rtpsug.com/
rtpsugmembers.github.io/
http://schlauge.com/
youtube.com/c/RTPSUG/featured
youtube.com/watch?v=65Zl7mUGR3U
Listen to the Podcast here: powershellpodcast.podbean.com
Additional resources:
How to enroll in an MDM with Apple Configurator | SimpleMDM: simplemdm.com/blog/how-to-enroll-in-mdm-with-apple-configurator
Microsoft Azure SSO SAML Integration - SimpleMDM – Support (pdq.com): help.pdq.com/hc/en-us/articles/4411045147931-Microsoft-Azure-SSO-SAML-Integration-SimpleMDM
What are Managed Apple IDs and how to use them | SimpleMDM: simplemdm.com/blog/managed-apple-ids/?utm_content=224051378&utm_medium=social&utm_source=twitter&hss_channel=tw-3322756370#how-to-use-a-managed-apple-id
Use Managed Apple IDs in Apple Business Manager - Apple Support: support.apple.com/guide/apple-business-manager/use-managed-apple-ids-axm78b477c81/web
5. Managing Apple IDs (Or Not) - SimpleMDM – Support (pdq.com): help.pdq.com/hc/en-us/articles/4411053704347-5-Managing-Apple-IDs-Or-Not-SimpleMDM
Use Managed Apple IDs in Apple Business Manager - Apple Support: support.apple.com/guide/apple-business-manager/use-managed-apple-ids-axm78b477c81/web
Federated Authentication in Apple Business Manager with Azure AD (kandji.io): blog.kandji.io/federated-authentication-in-apple-business-manager-with-azure-ad-office-365#:~:text=Using%20Federated%20Authentication%20lets%20you%20link%20your%20company%E2%80%99s,iCloud%2C%20and%20even%20Shared%20iPad.%20Image%20source%3A%20support.apple.com
Delete Azure AD accounts that appear in Apple Business Manager - Apple Support: support.apple.com/guide/apple-business-manager/delete-azure-ad-accounts-axmaa5798fbe/1/web/1
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
Listen to the Podcast here: powershellpodcast.podbean.com
Cláudio works as Data Platform Architect and is a PowerShell lover who automates any process that needs to be done more than a couple of times. He is an active member of the SQL Server and PowerShell communities. He contributes to open-source projects such as dbatools and dbachecks.
https://claudioessilva.eu/
dbatools.io/author/csilva/
mvp.microsoft.com/en-us/PublicProfile/5002259
github.com/claudioessilva
simonandschuster.com/authors/Claudio-Silva/190623445
twitter.com/claudioessilva
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
0:00 Intro
1:56 - Being in healthcare our team doesn't have resources dedicated to our PDQ Inventory/Deploy Enterprise "housekeeping". Can someone from PDQ help us with recommendations on how to improve?
7:51 - Can we pair PDQ Inventory with a full SQL instance? We have several database staff that we could utilize to be able to expand our use of Inventory and internal auditing.
9:52 - How does SimpleMDM compare to Maas360? We currently use Maas360 to manage iPhones and iPads. Is there a cost to SimpleMDM?
11:41 - Is is possible to email results from a 'Report' prior to the report being saved? Not all the data I aggregate needs to be saved in such an official manner its more for me to follow up later on and being able to email results without saving the report just to delete it later seems messy. Thank you!
13:05 - Do you have a sample script to synch the custom variables from PDQ Deploy to PDQ Inventory?
14:40 - I have created a collection with the application and I have two sub collections drilled down. I've trying to make a collection for (latest) and (old). Ver Lower than doesn't work. Whyyyyy
17:40 - Are we any closer to being able to only e-mail reports that have content - i.e. if the report is empty then nothing gets sent?
18:14 - I have a software package that installs without any issues, when it first runs it does a second install that require elevated-privilege's. what is the best way to install this with PDQ?
19:58 - What’s new in the latest SmartDeploy release?
23:06 - How can I create a SCAN PROFILE to collect info for a file c:\users\%username%\x\ and another for registry ex. HKEY_USERS\$($UserProfile.SID)\Software\SomeArchaicSoftware\Configuration?
26:15 - Is there a way to have PDQ clear the DNS cache before starting a job?
28:02 - Is there a ways to get java heap memory limit configuration for each system?
29:14 - What would cause "Return Code cannot be null" in Scan Status for a computer in Inventory?
30:30 - Does the report emailing function currently support OAUTH 2.0 for authenticating to O365. Can't find documentation but maybe I'm missing something.
30:16 - Is there a script to disable or remove msteams? It gets in the way of student testing.
33:10 - Does SimpleMDM have anything comparable to Jamf smart groups?
34:15 - If I have a Deploy package and Step1 is Scan, Step2 is Install if member of Collection, do i need a Sleep 10s step in between to allow membership to update? or does PDQ Deploy know to wait for membership update between steps?
35:03 - We are looking to migrate from on prem spiceworks to fully using PDQ inventory. Can we import? If not can we manually add to PDQ inventory something like (user has laptop bag and head phones)
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
CVE-2022-37968: Azure Arc-enabled Kubernetes cluster Connect Elevation of Privilege Vulnerability
CVE-2022-41033: Windows COM+ Event System Service Elevation of Privilege Vulnerability
CVE-2022-37976: Active Directory Certificate Services Elevation of Privilege Vulnerability
You can find more information about these and other vulnerabilities in our Patch Tuesday blog post; pdq.com/blog/patch-tuesday-october-2022
0:00 - Intro
0:35 - CVE-2022-37968
1:27 - CVE-2022-41033
1:56 - CVE-2022-37976
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
Bonus content/resources
Tim's list: assets.ctfassets.net/xwxknivhjv1b/7Hj9pA9U8SfoC4bYTmoHAZ/7c8d96a3655b9332d22f06747502e869/Tim-s_list__2_.pdf
CISA recommendations: assets.ctfassets.net/xwxknivhjv1b/Gu9luMKI6ZARVKSpRRTBQ/93e102b5be94f700cb04a18dd5cb11ba/CISA_recommendations.pdf
Document access via git: github.com/pdq/Bonus-Content/tree/master/Sekurityfest
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
Listen to the PowerShell Podcast here: powershellpodcast.podbean.com
Guest Bio and links:
Mikey Lombardi is a Senior Content Developer at Microsoft, working on PowerShell Learn content. Always a gentleman, Mikey has been a positive force in the community for a long time. You like PowerShell? Awesome Documentation? Amazing tabletop campaigns? You found them, my friends. Follow him. FOLLOW HIM NOW!!!!!!
github.com/michaeltlombardi
twitter.com/BigFnMikey
github.com/orgs/MicrosoftDocs/projects/15
leanpub.com/psconfbook2
youtube.com/watch?v=0S0eAuGzjpI
hacktoberfest.com/
leanpub.com/c/pwshop
youtube.com/watch?v=wlIBE7W4rvo
https://flagrant.garden/
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
Links: leeholmes.com/detecting-and-preventing-powershell-downgrade-attacks
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
Listen to the podcast here: powershellpodcast.podbean.com
Guest Bio and links:
Christopher Bergmeister is a Microsoft MVP, open-source aficionado, ScriptAnalyzer maintainer, and more. You can find him speaking at conferences/user groups, contributing code online, and being a positive force in the community.
twitter.com/cbergmeister
youtube.com/watch?v=Vra6G-qsKNs
github.com/PowerShell/PSScriptAnalyzer
github.com/bergmeister
learn.microsoft.com/en-us/powershell/module/psscriptanalyzer/?view=ps-modules
github.com/bergmeister/lazy-posh-git
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
Listen to the PowerShell Podcast here: powershellpodcast.podbean.com
Guest Bio and links:
Brett Miller is a cloud platform engineer and Microsoft MVP, using PowerShell and related technologies on the regular. You can find him regularly speaking at user groups like the Southampton PowerShell User Group, blogging on his website, on Twitter, and more.
millerb.co.uk/
github.com/brettmillerb
twitter.com/BrettMiller_IT
github.com/brettmillerb/PSTwitch
github.com/indented-automation/Indented.Net.IP
youtube.com/watch?v=EsESEh9M1eY
github.com/SeeminglyScience/EditorServicesCommandSuite
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
Links for Trina
Rize Next: rizenext.com
Tech Moms: tech-moms.org
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
CVE-2022-34718 Windows TCP/IP Remote Code Execution Vulnerability
CVE-2022-34721 Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
CVE-2022-37969 Windows Common Log File System Driver Elevation of Privilege Vulnerability
You can find more information about these and other vulnerabilities in our Patch Tuesday blog post;
pdq.com/blog/patch-tuesday-september-2022
0:00 Intro
0:58 CVE-2022-34718
1:41 CVE-2022-34721
2:25 CVE-2022-37969
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
Listen & Download the podcast here: powershellpodcast.podbean.com
Raimund Andrée is a Cloud Solution Architect and Microsoft with over 20 years of experience. Raimund has been involved in Open Source and the PowerShell community for a long time. Raimund works on several projects that have a large reach and has helped thousands of PowerShell users. You can find him tweeting on Twitter, contributing to projects on GitHub, speaking at conferences, and more.
twitter.com/raimundandree
github.com/raandree
powershellgallery.com/packages/NTFSSecurity/4.2.6
The PowerShell module toolbox and templates for Continuous Delivery - Raimund Andrée - PSConfE... youtube.com/watch?v=86u4o6_SQb8
The DSC project blueprint or how to start a DSC project the right way by Raimund Andrée youtube.com/watch?v=vY3eHN4K3tU
devblogs.microsoft.com/scripting/tag/raimund-andree/
download.microsoft.com/download/C/4/A/C4A14099-FEA4-4CB3-8A8F-A0C2BE5A1219/The%20Release%20Pipeline%20Model.pdf
automatedlab.org/en/latest/
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
Listen to the audio podcast here: powershellpodcast.podbean.com
Guest Bio and links:
Jan-Hendrik Peters is a Cloud Solution Architect at Microsoft. Jan-Hendrik has been helping others take advantage of PowerShell and Microsoft technologies for a long time. He enjoys brewery, blacksmithing, and closing issues on AutomatedLab.
https://www.janhendrikpeters.de/
github.com/nyanhp
twitter.com/NyanHP
http://github.com/automatedlab
automatedlab.org/en/latest
youtube.com/results?search_query=don+jones+writing+workshop
0:00 - Intro
1:32 - In your Last YouTube video, Automate onboarding for Azure AD, I got lost a little to be honest. Could you please do a blog post on the exact powershell steps you did, with the cert, service accounts, permissions, etc. then how would I run this powershell without human interaction on a regular schedule? On prem server windows scheduled task? Thanks so much. That YouTube video was amazing, I’m just a little slow, sorry.
5:36 - Is there a way to send an email alert when a computer gets added to a collection?
7:30 - We have a weekly report that is sent out to our boss of machines that are missing particular software (AV, webfilter, etc) some weeks this report is blank or the same as the week before. Is there anything to stop it from sending a blank report to my boss
8:36 - Is there a way to have Deploy run a PS script on its own box, but open the PS Window and leave it open while the script runs? I want to launch Invoke-CAURun and watch it go while it runs.
14:53 - What did you do with the table everyone asks about?
17:02 - Any word on the Beta? Is that out there already?
18:40 - I've been away from PDQ for a while (job changes) what happened to Lex and Shane?
19:42 - Can you set different deployment credentials for different packages or is that only a universal setting?
21:53 - I jumped to the dark side from sysadmin to security analyst in my org starting today. Soon I'll lose PDQ access. Pour one out for me.
23:27 - How is the work on the agent stuff going?
24:53 - Is there any way to choose credentials in a Deploy Package instead of having to choose a credential at the deployment?
26:49 - Is there a way to create a dynamic list showing which computer didn't run the powershell script?
30:11 - Because SmartDeploy uses MDT framework (i think?), and that hasn't been supported by MS for forever now are there any concerns for future compatibility with later versions of win?
32:21 - Will there be native RHEL and Ubuntu based Linux OS support in PDQ Deploy and Inventory in the near future without the need for custom PS wrapper scripts?
33:08 - You were going to post how to remove PSv2 via GPO once you found it. Was this posted?
34:18 - In the light of current world events, is the pdq staying true to its price or can we expect a price increase in the future?
35:42 - How often do you add new applications to the PDQ Deployment library. Is there a forum where people vote on what they want you to add to the application library?
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
Listen to the PowerShell Podcast here: powershellpodcast.podbean.com
Guest Bio and links:
Cory is a Chocolatey Software Engineer with a background in End User Computing who enjoys working with PowerShell and C# while dabbling in whatever language a project that needs a fix might be using. Constantly looking for ways to streamline processes and improve developer experiences. You can see Cory in the PowerShell community Discord, on Twitter, speaking at conferences, active on GitHub, and occasionally streams on twitch.
twitter.com/coryknox
github.com/corbob
https://coryknox.dev/
twitch.tv/corbob/
youtube.com/watch?v=77StDvV_aOM
youtube.com/watch?v=NZY4QACsvJE
https://aka.ms/psdiscord
https://aka.ms/psslack
dangitgit.com
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
Additional resources:
devblogs.microsoft.com/powershell/powershell-constrained-language-mode
youtube.com/watch?v=uE5BlXhpUHM
youtube.com/watch?v=UtxParX4jW8
http://robwillis.info/2020/01/disabling-powershell-v2-with-group-policy
devblogs.microsoft.com/powershell/windows-powershell-2-0-deprecation
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
In this episode, we explore different ways that the upper-bound limits of PowerShell have been pushed. We get to hear from one of the most advanced PowerShellers that we’ve met yet. He shares insight into what it was like working on the PowerShell team and how PowerShell has grown massively over time. James has been advocating for PowerShell for a long time, and he shares some details about leading the first internal PowerShell group at Microsoft and some things that came from it. We also learn about some of the awesome projects James has worked on, from RegeX, UIs, formatting, Git, and markdown. James shares details about his latest project, an extensible transpiler, PipeScript.
Guest Bio and links:
James Brundage has been heavily involved in PowerShell for over 15 years. He is a former member of the PowerShell team, working there during v2 and v3. He now works as a consultant with Start-Automating, applying his PowerShell expertise to organizations to help solve large-scale problems all around the world. He also has a lot of great projects on GitHub and regularly shares his knowledge at user groups and conferences.
Listen to the podcast here: powershellpodcast.podbean.com
github.com/StartAutomating
twitter.com/jamesbru
github.com/StartAutomating/PowerArcade
Start-Automating http://www.start-automating.com
github.com/StartAutomating/Irregular
GitHub - StartAutomating/PipeScript: An Extensible Transpiler for PowerShell (and anything else) github.com/StartAutomating/PipeScript
StartAutomating/ugit: Updated Git: A powerful PowerShell wrapper for git that lets you extend git, automate multiple repos, and output git as objects. (github.com) https://github.com/StartAutomating/ugit
0:00 - Intro
2:21 - Computers with the scan status of Kerberos don't go into the retry queue. Any chance this could be changed down the road. We have primarily laptops and between going between offices and the vpn, we get computers with dns errors. But it sucks when I deploy a package and the Kerberos people don't get sent into the retry queue.
3:40 - I see scan errors "WMI invalid class" I can't find where to update it, even from your guides. Where is it and what's it for?
5:06 - Deploying Feature updates with PDQ Deploy from Windows version 21H1 to 21H2?
5:44 - Do I still need PDQ Deploy if I purchase SmartDeploy?
7:00 - Is there a reason why VPN connected laptops have don't have reliable connectivity to PDQ servers compared to cable connected computers ?
10:03 - PowerShell 7 is at least 2 better than PowerShell 5. When will I be able to select Pwsh as a package step in Deploy? Is it on the roadmap?
11:35 - With scavenging and refresh interval set to 7/7/7, does the DHCP lease time have to be longer that my current setting of 10 hours ? This is the lease time for VPN subnet only?
13:37 - Who is the next on the PDQ Retirement ladder?
14:50 - Will the upcoming PDQ product with an agent reduce the need for accurate name resolution through a DNS server? I.e. will the agent report back IP and hostname to the console server?
15:20 - Can PDQ host a local "conference" so I have an excuse to visit?
16:36 - What would be the best route to take if you're a windows admin that doesn't know powershell. Should you learn powershell or learn python. Is python worth it for a windows admin? Thank you.
20:53 - How do I inject a default route within an entire OSPF domain?
21:52 - I don't see monthly patching hotfix for Windows 11 in my environment. Are you guys making this package available?
23:32 - Last year we had a lot of development with PDQ D&I. Has anything further been put on hold until the Agent is done?
24:13 - Do you have package for Office 2016 updates?
25:06 - I think this was asked a year or two ago and is a low priority. Will we ever get some new custom icons to use to identify custom categories quickly? I'm not suggesting anything like sparkly symbols, just something solid that pops, colored circles even. It's so cruel that the Apple icon is the only good one for us Windows admins
28:02 - Will transitioning from PDQ Inventory and Deploy to the new product be pretty seamless?
29:32 - Will there be a FedRAMP approved PDQ Connect on the roadmap? These are Gov contract req's.
30:40 - Will Deploy and Inventory continue on in their current form when the new version is released? If so, will they continue to receive the usual development updates?
31:27 - Budget season is coming up, any idea what the new agent will cost?
32:44 - How many items are on the feature request list?
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
CVE-2022-34713 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
CVE-2022-30134 Microsoft Exchange Information Disclosure Vulnerability
CVE-2022-35744 Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
You can find more information about these and other vulnerabilities in our Patch Tuesday blog post; pdq.com/blog/patch-tuesday-august-2022
0:00 Intro
0:39 CVE-2022-34713
1:20 CVE-2022-30134
2:05 CVE-2022-35744
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
Listen to the episode here powershellpodcast.podbean.com
Guest Bio and links:
David Hall, also known as CyberAutomate, has spent over 20 years in cyber security for the Department of Defense, and now applies his skills as a Customer Engineer at Microsoft. David is an avid fan of learning and pays that forward by teaching where he can: whether that be by teaching others as a warrant officer or as a professor.
linkedin.com/in/david-hall10/recent-activity/
cyberautomate.io/
youtube.com/c/CyberAutomate/featured
GitHub - cyberautomate/PubPowerShell: All my PowerShell Code github.com/cyberautomate/PubPowerShell
linkedin.com/pulse/passion-its-important-cant-taught-david-hall-ms-itm-cissp-mcsa
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
Guest Bio and links:
Mike F. Robbins is the Lead writer for Azure PowerShell at Microsoft. He is a regular speaker at PowerShell conferences and has an active blog, which is successful enough to make him a 6 time MVP. He is an Author, Editor of the PowerShell Conference Book: Volume 1, and an overall swell guy.
Mike F. Robbins mikefrobbins.com
leanpub.com/powershell101
github.com/mikefrobbins
Mike F. Robbins (@mikefrobbins) / Twitter twitter.com/mikefrobbins
mikefrobbins.com/2019/08/01/whats-in-your-powershell-psdefaultparametervalues-preference-variable/
mikefrobbins.com/2022/06/09/using-the-conditional-ternary-operator-for-simplified-if-else-syntax-in-powershell-7/
Planet PowerShell: Community Blog Feed planetpowershell.com
Contribute to Docs Like A Microsoft Insider by Sean Wheeler and Mike Robbins youtube.com/watch?v=9-_VPIu6zLw
docs.microsoft.com/en-us/powershell/scripting/learn/ps101/0
Check out this blog post as a resource for sysadmin burnout pdq.com/blog/how-to-prevent-sysadmin-burnout
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
Check out our Sysadmin Day page: pdq.com/system-administrator-appreciation-day/our-endangered-sysadmin
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
We talked about Adam’s journey into PowerShell, how he started creating tools for PowerShell, and how his experience as a developer. He shared insights into the challenges of growing a business while developing new features and how he manages all the tasks on his plate. We also learn more about his personal life, including his numerous travel mishaps, Iron Man competitions, and even building your own cryptocurrency. We covered all that and much, much more.
Download the audio podcast here: admin5.podbean.com/powershellpodcast/dashboard/index
Bio and links:
Adam Driscoll is the owner of Ironman Software, LLC and a 10x Cloud and Datacenter MVP. He develops popular tools for PowerShell and is active in the PowerShell community in pretty much every way you can think of. Adam is an avid blogger, published author, has recorded several high scores on the golf course, and is a triathlete.
Adam Driscoll (@adamdriscoll) / Twitter
adamdriscoll (Adam Driscoll) · GitHub github.com/adamdriscoll
Ironman Software: Powerful tools for DevOps and IT professionals - Ironman Software: ironmansoftware.com
Adam Driscoll (microsoft.com) https://mvp.microsoft.com/en-us/PublicProfile/4040089
mcpmag.com/articles/2019/11/13/bloodhound-active-directory-domain-admin.aspx mcpmag.com/articles/2019/11/13/bloodhound-active-directory-domain-admin.aspx
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
If you'd like to take SmartDeploy for a test drive, you can start your trial here smartdeploy.com/download
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife
In this episode, we get to hear the perspective of someone who has been in the trenches of Incident Response. Fernando shared his experiences and methods for leveraging PowerShell during incidents. We talk about how the general perception of PowerShell Security has changed over the years and how PowerShell is now being publicly embraced by security organizations. Fernando told us about dealing with obfuscation and some of the most annoying techniques that he’s encountered. All this and more is covered in this episode jam-packed with security goodness.
Download the full audio only episodes here: powershellpodcast.podbean.com
Guest Bio and links:
Fernando Tomlinson is a Principal Incident Response Consultant at Mandiant. He is active in the PowerShell community, speaking at conferences and creating interactive PowerShell training platforms: Under the Wire and PoSh-Hunter. He is Retired U.S Army of 20 years and is a Purple Heart recipient. He teaches others as a Cybersecurity Adjunct Professor, Co-Authored the PowerShell Conference Book Volume 2, and blogs at cyberfibers.com.
twitter.com/Wired_Pulse
github.com/wiredpulse
https://underthewire.tech/
http://cyberfibers.com/wp-content/uploads/2017/09/PS-Cheat-Sheet.pdf
Cyber Fibers - My Location of Thoughts During a Buffer Overflow cyberfibers.com
Defensive and Offensive PowerShell security tactics (Fernando Tomlinson) youtube.com/watch?v=uE5BlXhpUHM
New Shell in Town: Adventures in using PowerShell on Linux by Fernando Tomlinson youtube.com/watch?v=CAeT8f_4bQc
Gaining 20/20 vision during an incident with PowerShell youtube.com/watch?v=UtxParX4jW8
New Shell in Town: Adventures in using PowerShell on Linux by Fernando Tomlinson youtube.com/watch?v=CAeT8f_4bQc
PoSh-Hunter posh-hunter.com
0:00 - Intro
2:22 - Can you create a variable that includes multiple computer names? admin* and maint* etc.. Need to run things not on certain computers and not others.
3:50 - How do I know if I’m using the best tool for the job? can you do a breakdown between Deploy\Inventory and SmartDeploy and when each product should be used. (scale-limits)
5:24 - We have a bunch of information from AD we want to bring into PDQ Inventory for asset reporting. Currently, the only way I've been able to get it to function is by running a PowerShell script that creates a CSV based on an AD import of the attributes we need, followed up by using the PDQ inventory CLI to import the CSV into custom fields. Is there an easier way and, if not, are there any plans to allow you to display additional AD attributes in PDQ inventory?
9:00 - Is PDQ looking at a cloud hosted option and agent in lieu of the older link server? This would be great for companies that aren't going back to in-person and remove the VPN overhead.
9:40 - How can we build a PDQ Inventory report that shows workstations with duplicate IP addresses?
11:15 - How can I send myself email notifications using PowerShell?
13:05 - Can you use PDQ to orchestrate OS version upgrades. Like from 2012 to 2016?
16:22 - How can I use PDQ to disable Microsoft Teams in Startup for users? Can this be tracked (enabled/disabled) in Inventory?
18:40 - We have started using Always On VPN, but PDQ cannot seem to communicate with the machines. I also am not able to ping the PDQ server from a machine on the VPN. Is there a firewall setting of some sort that I need to allow the IP range to communicate with PDQ?
21:40 - I've been trying everything I can think of to use PDQ to remotely set passwords in BIOS so that mischievous users cannot log into or change BIOS settings. Any suggestions would be greatly appreciated.
23:33 - What is the status of having a primary user (name and email) associated with a device in PDQ Inventory to make it easier to search and identify devices by user as well as send email notifications? :)
26:13 - Aside from Jordan, what other mammals can't jump?
27:18 - How does PDQ and Smart Deploy push to several hundred Win10 Pro machines on the same network (192.168.x.x)?
28:26 - I am moving from a Hybrid environment Commercial Cloud Tenant, to a Azure AD only GCCH ( Government Controlled Cloud ) environment. Will you be supporting this environment in the future?
29:23 - How often do you handle service breaks and what's some good tips for maintaining an old pdq environment. I sometimes find myself resetting the entire database.
30:40 - Will PDQ Inventory add installed Windows Store Apps to the applications tab or should I just stick with my powershell scanner?
31:10 - Can we create a heartbeat schedule that is active except for 8 hours per week (not active from 11pm to 7am on Fridays)?
31:48 - Can you please demonstrate configuring an email message for computers in a collection, for instance a collection based on HDD size remaining.
34:10 - I'm seeing the "Kerberos: The Target Account name is incorrect" error. I know it's usually based on stale DNS records, Any best practices for fixing this for VPN targets?
34:47 - What sort of options are there for advanced scheduling in Deploy? "Second Tuesday of each month" is easy, how about "The day after the 2nd tuesday of each month?" (which isn't always the 2nd wednesday)
36:04 - Will you provide an option for submitting community sourced template packages which might make their way in to the package library?
37:01 - What should workflow look like to have PDQ apply windows updates to remote laptops users? We are using heartbeat feature for now, but doesn't always works because of DNS issue. Will the PDQ agent when it comes help with this?
38:12 - When will i get my beta invitation for PDQ Connect?
38:52 - I have a number of old machines showing in PDQ Inventory as online, but they haven't been on for months. How do I clear then?
41:27 - We use the annoying "you need to reboot script". Is there way to get it to reboot if the user does not respond to the prompt?
43:06 - Any update on the ability to use an external DB server for PDQ D/I? SQLite on the same machine is not the quickest for larger networks.
Can't get enough PDQ? Subscribe and enable notifications!
• The PowerShell Podcast: powershellpodcast.podbean.com
• Our blog: pdq.com/blog
• Reddit: reddit.com/r/pdq
• Twitter: @admarsenal
• Facebook: facebook.com/PDQlive
• LinkedIn: linkedin.com/company/pdq.com
• Instagram: @pdqlife


