I've been playing around with Azure DevOps Pipelines in my quest to become a better programmer. After spinning up an on-prem agent running on Server 2019, I kept getting the error for a subset of my Pester tests for some modules, all of which run fine in the cloud. The…
For the better part of the 2020 I've been using a defaults resource within my DSC modules as outlined in THIS post. This suddenly stopped working, failing with the error that the DSC Resource DomainControllerCommonDefaults wasn't available. Looking at the exported activities within the module listed in Azure Automation showed…
If you're running a non-SYSTEM Hybrid Runbook worker and you replace your RunAs certificate, you may encounter a login failure with ClientCertificateCredential 'keyset does not exist'. To fix, you need to run the default Export-RunAsCertificateToHybridWorker script from here, and then export the cert, and re-import it into your service account's…
I've been using Sophos' UTM since forever, but at work we're moving away from our legacy Cisco ASAs, and to FortiGate. So I'm making the switch at home with an entry-level FortiGate VM, on my home Hyper-V server. I'm not a fan of the Bell gear that comes with my…
The lack of clarity in FortiGate's error messages and documentation continues to irk me. The syntax required for it to include multiple DNS names in the certificate request from the GUI is: DNS:dnsname.com,DNS:seconddnsname.com . DNS: must be capitalized, and there cannot be spaces between the comma…
Fortinet's documentation is pretty terrible. This is especially true for their Hyper-V deployment instructions which leave out multiple steps, and left me frustrated trying to piece together instructions from multiple articles.…
I've been learning a lot about how to use Azure Automation to manage DevOps deployments of our Windows Servers. This has led me to a dozen DSC modules, some with two dozen configurations within them. This led to all of the composite build files having dozens of lines duplicated between…
We're finally at the point where our infrastructure is cleaned up enough that getting usable signal through all the logspew is finally possible. After comparing a few alternatives, including Azure Sentinel and the revered Splunk, we decided on FortiSIEM. Setup of any monitoring platform from scratch is some of the…