File server permissions change auditing.

We’ve had some issues with admins improperly applying permissions in the past, and in recent times as well. Because of this, we’ve decided that maintaining permissions change logging to determine who it is that’s having issues learning how to apply permissions can get some extra training on how to appropriately set file ACEs. The issue with doing this is that it generates ~40GB of compressed Windows logs daily, or closer to 100GB uncompressed.  So, how can we use PowerShell to parse through the binary logs, store the info we need, and then get rid of the relatively gigantic evtx files?
Continue reading File server permissions change auditing.

ZFS on Linux NFS shares lost at reboot

On several occasions NFS has inexplicably stopped working with my ZFS shares under ZFS on Linux on Ubuntu Server 14.04×64. It seemed to happen every reboot, after checking the sharenfs property on each of the ZFS FS’ I found they were set properly, but still clients were getting access denied when trying to mount the share. Other times, even when they were able to re-mount the share they wouldn’t do so unless I manually triggered it.
Continue reading ZFS on Linux NFS shares lost at reboot

Powershell Script to Audit Service Accounts Across All Servers

Today I got a half-joke request from a colleague to write  script to help him audit service accounts across a multitude of servers. Initially, I didn’t see the use of writing a full script to do this for myself and my AD environment so I fired off this from my phone as a quick/dirty version.
Continue reading Powershell Script to Audit Service Accounts Across All Servers