Vue lecture
EventSentry v5.2: Enhanced security, inventory management & threat detection
EventSentry v5.2 brings powerful new security and monitoring enhancements, including compromised password checking in ADMonitor, local inventory visibility for file shares and user groups, and centralized Sysmon management. Additional upgrades like process tracking improvements, spoof detection, and threat scoring help security teams detect threats more effectively.
GitHub Copilot Agent mode vs. Ask and Edit mode in VS Code
In Visual Studio Code release 1.99, Microsoft introduced GitHub Copilot’s Agent mode, a feature that closely resembles functionalities previously offered by Cursor, Cline, and Roo Code. Agent mode lets Copilot examine the codebase, find relevant files, make edits, and autonomously run and debug code. In this post, I’ll compare Agent mode with Ask and Edit mode and outline how Agent mode facilitates vibe coding—the automation of writing code.
ScriptRunner 7.2 enhances PowerShell automation with approval workflows and change tracking
ScriptRunner is a PowerShell-based IT automation platform that streamlines, delegates, and monitors various management tasks through a no-code web interface and a comprehensive script library. It ensures secure operations with strict user and system access controls, comprehensive policies, and full-activity auditing. Version 7.2 introduces approval workflows for script execution, enabling administrators to configure authorization groups and track pending requests, adding a governance layer beneficial for organizations with strict compliance requirements. Additionally, this version introduces a change history feature, allowing administrators to track and audit modifications made to actions within ScriptRunner, enhancing transparency and accountability in script management.
Windows CLI MCP Server: Run PowerShell in your chatbot
The AI tools for the Command Line Interface (CLI) we discussed on 4sysops connect the terminal to AI models. For example, the Warp terminal includes AI tools designed to help admins working on a CLI. The Windows CLI MCP Server does the opposite. If you missed it, the Model Context Protocol (MCP) is a new open standard for AI agent communication with software services created by Anthropic and backed by OpenAI, Amazon, and Microsoft. With MCP, your primary interface is the chatbot, and for the Windows CLI MCP Server, shell access is an additional tool the AI can utilize. The Windows CLI MCP Server supports PowerShell, CMD, Git Bash shells, and remote SSH.
Enabling ESM Apps service – The Ubuntu Pro deceit
Have you ever received the notice stating, "Additional security updates can be applied with ESM Apps" after logging into an Ubuntu Linux machine? Despite working with Ubuntu for 15 years, this was the first time I encountered it. Since this was a relatively new installation of Ubuntu 24.04, I was perplexed as to why I couldn't install all security updates using apt upgrade. After some investigation, I discovered I was using Ubuntu Standard, while only Ubuntu Pro qualifies for all security updates. I felt annoyed and deceived because my system had no uncommon packages, and everything I installed came from the Ubuntu repository. This means that, in most cases, a fresh installation of the latest Ubuntu Linux LTS release does not receive all critical security updates.
Upgrade Microsoft Hyper-V Server 2019 (free) to Windows Server 2025 Hyper-V role
Microsoft Hyper-V Server 2019 is a standalone product that allows you to virtualize your environment at no cost. In this post, you will learn about the options available to upgrade to the paid Windows Server 2025 Hyper-V role.
Zapier MCP Server: Automate every web service with an AI
Zapier is a cloud-based automation platform that lets users connect and automate workflows between thousands of web services without coding. Recently, Zapier announced support for Anthropic's MCP standard. MCP is an open protocol that allows AI models to interact with external tools, data sources, and services, and it's now also supported by OpenAI, Microsoft, and Amazon. In this post, I share my experiences with Zapier's MCP server.
AI-powered anomaly detection with ManageEngine Ransomware Protection Plus
Cyberattackers are evolving their tactics and developing more sophisticated ransomware. Advanced AI-driven security solutions are needed to provide the defense mechanisms to detect and remediate ransomware threats. Ransomware Protection Plus is a new solution from ManageEngine that provides a multi-layered defense against ransomware.
Disable NTLM authentication on Windows Server 2025
With Microsoft’s decision to deprecate NTLM (NT LAN Manager), it’s time to disable NTLM authentication on Windows Server 2025 and move toward more secure alternatives. NTLMv1 has already been removed in Windows Server 2025 and Windows 11, version 24H2, signaling the beginning of NTLM’s end. Given the protocol’s vulnerabilities—like pass-the-hash attacks—organizations should begin transitioning to stronger authentication methods such as Kerberos, the preferred protocol in Active Directory environments.
Automate merging your code changes with the updates of an open-source project using Git in a Bash script
AI enables administrators to adapt complex open-source projects easily to their environment. If the project is not hosted on GitHub or other version control platforms, it becomes tedious to merge your changes into the open-source software whenever the maintainer updates their project. The Bash script I discuss in this post uses Git to automate merging your code changes into a new version provided by the maintainer of an open-source project lacking version control.
Using Windows Terminal Chat with GitHub Copilot
Terminal Chat enables the integration of GitHub Copilot, Azure OpenAI, and OpenAI's AI services into Windows Terminal Canary. Through this experimental feature, you can request assistance from an AI for your PowerShell commands and directly execute the AI's recommendations in the terminal.
Encourage Warp AI to collaborate with GPT-4o Search
In my previous post, I explained how to use the OpenAI library to augment your AI-powered terminal. Today, we will build on this enhancement and encourage two AIs to collaborate on IT tasks in the Warp terminal. Warp includes strong AI capabilities, though it currently only supports models lacking search features. As a result, you're using models with outdated IT knowledge. With a few tweaks, you can make Warp AI prompt GPT-4 Search to bypass the cutoff date of the Warp models.
DFS-R: Troubleshooting replication problems for SYSVOL and Netlogon
Domain controllers rely on DFS Replication (DFS-R) to synchronize the contents of SYSVOL and Netlogon across the network. This process ensures that group policy objects (GPOs) and logon scripts remain consistent across all DCs. While troubleshooting DFS-R issues can be complex, several built-in tools can help diagnose and resolve problems efficiently.
AI-powered administration in the terminal without cutoff date using OpenAI GPT-4o Search in PowerShell and Warp
The GPT-4o Search model offers search engine functionality similar to ChatGPT Search or Perplexity when accessed via the OpenAI API. With the free OpenAI Python Library, you can enhance your terminal AI by adding online search features, overcoming the limitations of LLM cutoff dates, and eliminating the frustration of outdated instructions. This post will guide you on installing the OpenAI Python library and using it conveniently in Windows PowerShell, Warp, or any other terminal.
Install IIS and PHP 8.x on Windows 11 and Server 2025 (Core)
PHP is still available on Windows despite Microsoft no longer providing support for version 8.x. It can be integrated as a script engine into Internet Information Services (IIS), either through the graphical IIS Manager or via PowerShell, which is especially useful for Server Core installations.
Microsoft 365 Copilot users disappointed about AI features
The Australian Treasury conducted an employee survey as part of a large-scale Microsoft 365 Copilot pilot program. The initially high expectations were significantly disappointed. Only a few users noticed AI providing any support in their daily work.
How to update multiple Hyper-V VMs offline
In environments with multiple VMs running the same Windows version, powering down the Hyper-V VMs during a maintenance window is usually the most efficient way to update them offline. This involves mounting the virtual disk and installing updates through PowerShell. This approach also benefits VMs that have been powered off for an extended period. Instead of starting them in an outdated and potentially vulnerable state, you can apply critical security updates in advance.
ShellGPT for PowerShell: AI assistant with local Ollama support
In this guide, I’ll walk through installing ShellGPT (shell_gpt) – a command-line AI assistant – on PowerShell using a local Ollama LLM. This approach lets you use AI in your terminal without relying on cloud APIs, which is great for privacy. This review highlights the use of ShellGPT on Windows through PowerShell. If you are using Mac or Linux, check out our earlier review of ShellGPT.