Research Triangle PowerShell Users Group User Group, 20 Sep 2018

Previous Meeting

⏯

youtube image

►

From YouTube: WebJEA with Mark Domansky - Sept 2018 Meeting

Description

This month Mark Domansky @MarkDomansky will be presenting a tool he created called WebJEA, which allows you to dynamically build web forms for any PowerShell script. Using his tool, it is possible to build self-service tools like an employee self-service web page quickly and easily using standard tools every IT shop already has without a ton of effort.

SUBSCRIBE to learn about PowerShell!
https://www.youtube.com/channel/UCiTuB6HZiupE8CJ71vkMFnA/example?sub_confirmation=1

LET'S CONNECT!
-- https://twitter.com/rtpsug
-- https://www.meetup.com/Research-Triangle-PowerShell-Users-Group/

A

Of it we came pretty good buddies. He uh he did a topic. He did this topic at the Powell summit and I ended the topic as well as spending some time with them having an inquest Rubeus, but it was really fascinating topic and I thought it would be something that I could implement that my own company and I thought it would be useful for anybody, who's thinking about some sort of self-service portal solution or something along those lines. So we we stopped the market today.

A

Man would you want to do it to the summit for us and he said absolutely not, but you know we paid him. He said okay, so, but so markets. All yours, buddy. All.

B

Right, thank you. Thank you. uh As he said, my name is Mark de Manske I'm, going to talk to you about web deal, I'm just going to jump right into it.

B

Webgl was designed to solve the problem of granting people access, so you've got help desk staff that need to be able to do privileged actions or you've got security, staff or, or you know, maybe junior administrators who need to be able to do domain administrator tasks, but you don't want to grant them a domain admin, maybe they're not quite there. Yet that is what what Web G is designed to solve.

B

You know you can without WebGL you can grant somebody a bunch of extra permissions. You know, maybe you make your helpdesk staff account, operators, the the end result of that is yeah. They can reset the passwords that they needed to, but they can also do a whole lot of other stuff that you maybe don't want them to do. The alternative. Is you don't give them any access and now they're coming to you so that they can do their job web gif fixes?

B

All of that, by letting you write PowerShell and having only one credential to manage you use all of your existing with a PowerShell experience and as quickly as you can write, PowerShell scripts, you can be granting access to people to to do their job without having to come to you for it we're going to jump right in to the demo.

B

Can you all read that all right or should make it a little bit bigger, bigger.

C

They're a little.

B

Bit bigger all right, how's that.

C

B

Go maybe it may be about as good as we can get all right, so web Gaea can be downloaded, I think Mike / included the link somewhere. But if not you just go to web Gaea, calm I would appreciate it. If you signed up for the mailing list, I haven't even sent one one email yet so I don't think so. So it's not going to be something that you get spam to. But if you sign up you'll hear about the latest, so you go there, it takes you to get hub.

B

You download the installer and the installer is built is just a DSC package. So you've got to configuration and then your system settings, you know you provide certificates and user accounts, all the all the basic values and with just a short run.

B

This is already installed, but typically it takes about four to five minutes to install from a bare-bones fresh, install of Windows, so Windows 16. If you've got a template on virtual machine, you can be up and running in under five minutes.

B

While that's running I'm going to walk you through the commands walk you through the configuration just a little bit. There were a couple things in here that are a little bit unique.

B

You know if you're familiar with is then these things are pretty standard? You know we create an app pool, but one of the things we do is we load the user profile, that's needed because PowerShell needs the environmental variables and and those things don't get initial initialized without a profile things like temp folder, so you wouldn't be able to load remote powershell sessions.

B

All of this configuration is designed around using a managed service account if you're not familiar with managed service accounts, I think they were introduced in 2008 or two they've been greatly enhanced in 12 I highly encourage you to use those for services application pools. You don't have to manage a password. However, an app tool, yeah.

C

So so this is, this is using a service account to do the work on behalf of the user or.

B

That's correct so.

C

That's that's what we're trying to do here so then you'd have multiple service accounts, doing multiple different tasks or or maybe.

B

C

B

Have one service account for the whole thing, but.

C

Then y'all want level two service service staff to do these app level three to do those tasks and then but I need to give the service account. The service account forgot all about your just.

B

Roll around with.

C

Them: okay, you're gonna, get I.

B

Will get to that I promise you you'll you'll answer your question shortly.

A

B

Problem, so so, if your failure with using DSC anybody use DSC yet now not a lot of interest a little bit good, um if you try and configure an app pool it won't, let you use an administrable, let you use a managed service account, so we've got a script resource to handle that takes care of the managed service account beyond that. You've got your standard paths, you know. Where do you want to put these files? You can pretty well take all the defaults and and be up and running.

B

These are the only parts you really have to customize. You know machine specific. You know it's designed to use a certificate. That's that's purely for for your web interface.

B

You want to make sure that's secure, because you're going to be presenting all sorts of potentially privileged information, and you run through that and and in this example here it only took a minute and 20 uh less than a minute, just 26 seconds to refresh the configuration so so very quick to to handle to install so I'm just going to run through I'm going to set some defaults. um You manage the configuration for web jia through a module, that's available on powershell gallery.

B

You've installed that and it's it's pretty similar to to any other module. You've worked with you open your file, you make your changes and you save it alright. So let's take you through I'm, going to call it a pretty basic scenario of resetting user, passwords, I. Think I think everybody can can follow along with these.

B

You know, you've got your helpdesk right now and they they they all, have a count operator and- and they may or may not be checking you know doing enough validation on the user they may or may not be remembering to you know, check the box for reset the you know. The user must change their password on the next logon. All of these things. That should be happening every time, but don't reliably so with with a script that you can you can whip up something like this very quickly.

B

You know you you've got you say: okay, I want to write a script that takes in a user name and employee ID.

B

That's all we're looking for that's what we're going to use to validate we're going to generate a password we'll do our own validation in the script, to make sure your employee ID is set or is correct and and then we come in here and we make sure that change password at next logon is true, so so we've gone from having a dozens or hundreds, potentially people having access to do way more than reset a password and failing to do basic steps like change password we're going to take care of all of that in one step.

B

Now, when we run this, what we're going to do is what I'm hitting I'm on I'm on a workstation and I'm. Invoking some commands on the web server plenty of ways you could do this, but basically we're just going to say: hey open our configuration file, we're going to create a new command in our case demo, one here's the script we want to run and we want to give anybody who, logs in for our demo anybody can log in and run this script.

B

Now, if I pull this page up.

B

I'm, given a username and password field automatically generated just from the parameters in the powershell script. So if you know, if I have you know in this case, I'm going to put in user 9999 I know his employee ID I had submit, and here we go, it has reset his password. It's made sure that he has checked, must change password at next logon and we've.

B

Given the helpdesk employee, the password to give back to the employee, now I've taken away account operators I've taken away custom ad permissions that I had to keep track of and I can do any kind of validation I want in here you could, you could write us, you could write validation to say you know what tier one helpdesk, employees can't change executives passwords. Who knows you know whatever you want to do in PowerShell, so.

B

That that is all it takes to to get started in web jia. You know that powers this powershell script, to take your somebody brand-new to powershell. Perhaps you know on the outside end an hour. You know certainly less than that for people with a lot of experience and you you think about how much you've improved the security of your environment just with that step, but we can take that further and we can improve on that code.

B

We can do things like supporting advanced functions, so we take the synopsis. We take. You know the parameter fields in the help in the help block you know, maybe in this case we want to take a birth date. You know we're gonna we're going to check in, and maybe we want to start off during multiple password resets in one form you know you, you know tons of services out there they're, not all single sign-on. So so we go through this and we just build out your typical. Your typical help advanced function.

B

You know, help messages, validation, we take all of these fields. In you know, you define your your variable types and in our case that that's about the extent of what we really care about it and for the demo purposes and when we come in and run this doing the same thing, but we're going to restrict it to just a single group, so the first command we could have allowed. It might be more of a self-service function, something that any employee can do. You know that could be oh gosh, I mean there's so many options there.

B

For for what you could be delegating to let your employees do maybe submit forms for requesting mailboxes things like that, but in this case we're going to restrict it to a specific group and when we run that I think we run that. Yes,.

B

We end up with taking all of those parameter fields and all of the help block and we built that into a single single form. So you know we said that a form was mandatory or a field was mandatory. So now it's required. We take the help message in here and we put we put synopsis or the the parameter values we put the synopsis up here at the top. We extend that to say we're going to start validating patterns, so hey, look that requires four digits.

C

B

We come in here we specify specify two birthdays so now we're going to take we're going to we're going to require the employee provide the birth date.

B

In our case, we can select multiple services to reset and if we submit it'll, say hey look, you haven't even provided this field, so we do all of that validation and if you tie this into your HR database or some other system where the employee has provided their phone number in our case we're just going to text them that phone number text them their password to their phone number.

B

Now the helpdesk employee doesn't even have the credential so so now, you've you've completely eliminated your helpdesk as a as a risk factor for compromised accounts or being socially engineered, because if your CEO calls in well the passwords going to his phone and we're done.

B

Now we're going to we're going to step past the idea of a password reset and we're just going to go into showing some of the other features.

B

Here we're we're going to take both the synopsis in the description and we'll see what happens in a little bit in in the case of synopsis and description. We do support the full HTML.

B

There I've gotten some feedback that they maybe do or don't appreciate that, but this is not a vulnerability to sequel or to to injection or cross-site scripting, because you need to be trusting this script anyway. I mean this. Is your script running privileged privileged commands?

B

Now we come in here we can do additional validation. We can take pre pre specified values.

B

Let's see we also support. You know we support virtually every validate field. Those that we don't support are the validate not null not empty those combinations.

B

It's it's just a matter that you're converting from HTML, which doesn't provide that that kind of context into PowerShell. We support validate length, boolean fields, but basically everything you. You can really take advantage of in a form and you'll see here now we pre-populated fields that that could be. You know, example down here. You've got account length. Maybe you wanted to make a temporary vendor account form or something like that. You know they have to submit a reason- and you say, oh, which services and you go through and you're done or extending that further.

B

Can closed we also support being able to run scripts on load. So when you go to that page you'll see some some data. It runs a PowerShell script, so they can be whatever information you want and we support markup for that and we'll see what happens here in a moment. I don't think, there's anything fun or exciting. In this. Oh, there is uh we've added I've added, um I, guess directives so that you can specify certain fields to do more than I can define straight in in straight powershell.

B

Will we'll see what daytime does in the just a moment? Multi-Line I think you can guess guess where that's going. If we ain't.

C

Mark that yeah absolutely.

C

Sorry, you can hear me now sorry yeah yeah anyway. So what question is that with I see you define the script and then you have to you know invoke anew: where is it yeah new web Gaea commands there? Yeah can every single time you update the script or when is that that's loaded into memory or is editing.

B

C

B

Is all on the server and that is read at runtime? Wait.

C

Runtime as to when the user logs in or.

B

C

The page during.

B

C

So when someone goes to the page, they will it invokes fast. So you can dynamically change the script on the fly. Yes right and it changes as they load the page. Well,.

B

You know just like a PowerShell script is is loaded the moment. You execute it if you've got a long-running script and you modify the script while it's still running, you haven't modified the in-memory script. Okay, but but the next person who hit submit is going to get the new version of that script.

C

Okay, so when you open the page, it reads the entire PS 1 and generates the page based upon the data in it. So all the variable valuation, the work isn't done until you hit submit carousing going, doesn't go to begin, doesn't go to process and all that stuff. But it just reads the header so that you can dynamically change it. So I could refresh the affective script simply by just changing the path, and so I could put the the scripts themselves on network share.

C

Have it you know, load that in and then, as people change it. We can update the script dynamically or, like you know, on the fly. I don't have to reset the entire app cool and no.

B

Know that it is, you don't have to reset the app pool um you know, I've, certainly not tested putting them on a network share, there's no reason it shouldn't as long as the account has access to that chair in the case of what you're seeing here, we have that onload script, and that runs the moment, the page loads.

B

So so you know once that's done and loaded, you can't make any changes to it because it's already executed, but but on next load we can populate you know or or update the be the other script or you know, as you need to update the onload script. So.

C

By clicking on the left side, the demo 3 demo 2 you're, effectively loading them again and as you, when you updated four and then you came back, we read.

B

Absolutely yeah.

C

B

So from you know, we we use some markup here to make links out of these, and I can use that to pass parameters in to your script. So, hey, you know that that could be I mean exactly as you've shown or it could be a full set of parameters. That's especially helpful.

B

If you want to integrate this with your help, desk application or or send you know, you could have an automated script running as a scheduled task and if it finds something that sends an email with a link attack and that link could take you here and pre populate the fields we also you know, as you saw, we now have a multi-line reason.

B

With birthday. We've now gone to not just a date field, but also date and time and.

B

When we, you know, if we were to submit, we would get validation. You know, I, haven't selected these fields or see nine nine, nine 602, many and I. Think if memories, so there you go, you know, I can only select one or two of these, so you can even expose verbose and error messages as as color-coded they're automatically color coded.

B

You can customize that with the CSS that comes with the with web jia, you can also, when you define links you can also I will I'm, not quite there I think, let's see-oh, to answer one of the questions from earlier. If I log, in with another user, I, think user too,.

B

I'm only given demo 1, because that was the only one that I'm a member of that security group, so you can specify either security groups or individual users to have access to a a specific command command in web Jia. Does that answer the question from earlier yeah.

C

B

Great great, alright, so I'm going to show you a couple other variations here.

B

Pretty quick, how we're doing all right all right now, one of the first things people ask is: can I get the username of the person and the answer is yes, we can take username and the host name that the person submits the page from that typically comes across as like an IP address, that's up to dotnet and asp.net and how it presents it.

B

But if I come in here and submit those two fields, it WebGL recognizes that those are hidden fields, implicit fields and it doesn't need to ask the user for them, but it populates them when they're submitted.

B

So so you can always track who is submitting these, and if you need to use that for updating a ticket or or sending an email you've got the information you need to submit that.

B

You can also do no parameters, nothing, you don't need to have anything submitted and in the end you could have an onload that presents information and requires no no parameters from the user, but performs an action on you know on submission and in this case I think this one will take just a couple seconds because we're actually running jobs in the background and so I think it takes about ten seconds there. We go twelve seconds in this case, so you can. Actually you can initiate jobs.

B

One of the things we do it at my job is we call a lot of office 365 we're calling Graf now to perform actions. When security comes in and says hey, we need to compromise this account I'm not doing it. I've set up web Gaea, they go and take care of it all and it's they don't have to have the permissions to do it.

B

Well, one other thing we can do is generate a landing page without having to generate a script that has a command to run or something like that. We can just load that straight into the command in WebGL, when we, when we load it and what you get is JavaScript CSS. Whatever you want to do in your synopsis and then here's a demo of what power show of what web gee is capable of. You can mark up and include images. You can include images that take you to a place and load load. Other links.

B

This is all pre formatted, so it maintains tables you can you can take advantage of the existing formatting, but you can also create links and CSS. You know like we've done up here. We created a CSS tag to you know, use a variable width. So if you really wanted to change the formatting to make it easier and a little bit more user friendly, you can absolutely do that.

B

One of the I think the final thing on my list here is logging, built-in is a logging, is just a straight log file that can log parameters.

B

So let's say this: may not: let's, let's just do the very last one usage.

B

B

Well, we'll bring this up a little bit, so this is brought in as.

B

This is the telemetry. What we're seeing is you know if you, if you turn on anonymous telemetry, this is what's being sent to me and it's. It just allows me to track how many people are using it and and system specs to get an idea of what what's in use, see who's trying to get no negative.

B

There we go and it's not there. We go so when the user, when, when I accessed the the log the overview page, it tells me hey. This person ran that command. If I go back, I think.

B

Executing is the one that really there we go, you can even see usernames and passwords as they are executed. That's an that is an optional value, so it does not have to log that data. So if you're going to be putting in a sensitive information, you probably want to turn that off and that's just done through the web- Gaea, okay module, but if you want to track what they're doing that is, that is the way to go.

B

I think I've already shown you how to send parameters through the URI, but you can also send them as post and get the same results. So so you can pass you don't even have to present it or expose it through URLs. You can pass that data through a web form.

B

If anybody's not familiar with powershell advanced functions, you can go to my github. I've got one out there. That has a lot of all, I would say the majority of common things, you're going to try and use, and I think that's about it so with web jia you can do. Jia jia is all about reducing administrative permissions and limiting and tracking what your users are doing.

B

All of the security is built into dotnet.

B

You know parameter parameterize output is encoded, so you're not subject to XSS, or you know, sequel, injection or any kind of cross-site injection attacks. But ultimately your security is your PowerShell script and who you grant access to it system requirements all you're looking for is a basic Windows. 2016 I have seen people are using this with 2012 r2 I gather it's working for them, I've not done any testing on 16 I, don't see any value all going less than that, but it's it's out there.

B

The the memory and CPU requirements are really just going to depend on your usage. All of these demos have been done on a one core one gig and then you know I think most of you will find the most value with making sure you use a certificate in a anodyne, join machine, and that's it. If you have questions, let me hear them now, but if you go in and you want to start using this by all means reach out to me email Twitter on on github, you can submit an issue.

B

However, you want to get ahold of me. I love, to hear it.

B

Thank you. Thank you.

A

Yeah so so you jumped in and you were going to the demo in the beginning, you started off your scripts and I think maybe you glossed over one thing that is for a review. So if I.

C

A

Sick of your website I'm going to pull down a package of some pre-built stuff. What do they need to add to the pre-built to get themselves spotted so.

B

So what you need to add are a service account and a certificate. I strongly recommend using the managed service accounts. I can't I can't encourage that enough, but any kind of service account and a certificate for your own safety and then.

A

This and there's some basic starter scripts to get them off the ground.

B

Are its in fact, it's the same script that I was walking through here. Let's see right about here, your DSC config you shouldn't have to make any changes to the DSC. Deploy is what you would modify and execute, and that is all included, and we also include I've, also included I, don't know if it's here, I've included this script and a validation script that goes with it. That shows you all of the features of web Gaea, so it includes date/time. All the directives shows you all everything you can do.

A

So I mentioned that, because a lot of our meetings we've had people that presented talking about like this is how you build something from scratch, and this is really. This is almost a pre can solution. This is brilliant. Already.

B

C

B

Is designed to can't to be a canned solution, you you you, you provide a certain a service account and you start writing scripts. You, you know, roll out your own I mean I. Hope if you know most of you I'm sure, using virtual machines by now building up a VM shouldn't cost you anything and and you're off and rockin.

C

Alright, anybody have questions a hard one. You a lot of your error. Messages are very PowerShell, like is that by design I mean you can make the me anything. You want correct. Well,.

B

Yes, what what I've shown here is what what the intent here was to emulate the built-in error messages. Now, if you want to write your own error messages, then all you would do is try. You know, try catch or do your your validation and say right host with whatever you wanted to say, and you might include, you can use the CSS formatting right here so that you can do your own coloring. You can do red, you don't like red. That's too offensive. You know too too glaring to your users and they get hurt by it.

B

C

What about the validation, though, you've made your validation? Look like an advanced function. Are you actually piping out those error messages? Are you making your own.

B

You you mean, like my.

C

Fredo your example, when you have it did not match that regular expression, except.

B

Yeah, unfortunately, I don't have at least at this point, I've not put anything in to support.

B

Like a friendly error message, because.

C

B

Built-In validate script doesn't offer that now I think oh gosh, there's a guy out there, who's written a new validate script that does support friendly error messages and I. Think in those cases you know if, if there were a way to integrate that I would be interested in doing that. I just haven't looked at it. Okay,.

C

Yeah I had a question about just like all of these scripts are very single single event things. So if I had I needed something that was more dynamic so where I wanted to have some sort of conditional logic that changes what occurs or what presents of extra input, is there a way to create like the can you do that, or would that just be making multiple single event, things that are very similar to each other and that's adlon at.

B

This point that would be either either making multiple single events or trying to describe users to users what fields they need to be entering okay. Web jia technically supports parameterised input. I'm sorry parameter sets technically, it does not have any awareness of that, and so you might not get a desired experience.

B

I think there's certainly room for for those kind of each there they're just not there yet I.

C

Was going to ask a question I think it's similar to what you're asking is I can see this as hey I want to. You know: I worked in a Citrix environment, so you give people.

B

C

You know EDI and stuff like that, so, but potentially have it dynamically choose give me a list of all the delivery groups or the groups that it can go into, and then let the helpdesk am and just choose the one but I don't want to part out in that list reflect those groups are so I wanted to dynamically build.

C

This user needs to go back so potentially put it in the validate set. You dynamically build it at load time whoo-ahh.

C

Like the validate set with would run on the fly like in maybe oh, that's kind of what I thought at this point one. Could there be kind of interesting ah we think or building.

B

Well, I mean you could build, uh I mean scripts. Writing scripts is always possible. um I I.

C

Don't know that the drop-down is like that service, and all that is just it's just the validate set, so you could define what the dynamic parameter validation is, but you can't validate set in there and then function doesn't have to be no.

A

C

It can be anything it just needs to return the list. You can actually have it stuff, the curly braces, if anything, just the if the output also rendered HTML. So the.

B

C

B

Sorry go ahead, Naoko.

C

Sorry go ahead: okay,.

B

So the output is rendered as HTML it is. It is effectively pre encoded so that it doesn't you, don't you don't suffer from a JavaScript injection or anything like that if I were to put JavaScript into one of these first dotnet would throw a fit and prevent me from submitting that, but if I were to somehow get past that would just be presented as text.

B

That is not true with the with the synopsis and description values. Those are those are straight HTML you can. There is flexibility in there going back to the validate set. We don't execute the validate set script. We all were doing right now is parsing that as an array, so okay, there wouldn't be a way to to do that. Dynamically I.

B

I think that just just add one more comment on that: I think that that might fall under I targeting more of a developer mindset as far as trying to build a very UI based input and output, as opposed to what this is really designed. As I can I can crank out a script in half a day or a day and get my users using it. Even if it's not perfect,.

C

Yeah Bart, can you hear me yes,.

B

C

um Since you're generating HTML, could you use features of html5 to do some of your validation of as the page at the web? Page level says you since you have, since you have fields, and you can define fields, as particular data types and then what what type of constraints there are at the html5 level.

B

You can do that you could. You could theoretically use the synopsis and description fields to to load JavaScript and do advanced validation. There there's no reason that shouldn't work.

C

That you were I, don't think it requires JavaScript, but it's the depth. It's the definition of the definition of the page itself without having without having to what yeah.

B

You having the data using data fields I, it's conceivable. It's conceivable.

B

You'd really I would have to really give consideration to how how to standardize that, because I think there'd be a lot of you know this gentleman back at the back was wanting to do a you know, execute the script and perform an action. Well, you know if you're executing that script, there's going to be a delay there, so I think you really have to think through that.

C

Well, you have required, you have required fields and the fields were particular were particular data for particular data types or you know it's. It's a list pick one of these pick multiple of these there's a date field, etc. So I'm thinking that that user interface about data validation is available to you. If you want it.

B

Yeah I'll definitely have to give that consideration, see how that could see how I could implement that for a more advanced or more advanced validation. I think I saw some pop-ups asking about dynamic parameters and parameter sets. Neither of those are supported in web jia.

B

Ultimately, it's just running code. It's just running the powershell script. So if it's something you can pass through web jia and do additional validation there, then it's it's. It's all on. You hope that answers how josh King? How are you doing.

C

All right, yes, um I, think do we ask all the questions on the chat. I think they were kind of active a little bit I can't.

B

C

B

See all of them so I'll leave it to somebody else. To tell me if I miss one I think.

C

They're just had some input on how long the validator set horns and somebody.

A

Wanted to know if dynamic parameters or REM completed is supported. I think we covered that yeah.

C

A

C

And I think it's so interesting and I. Think one of the comments, even in chat, is like the first thing, I implemented after summit and people use it daily. So I did something worth the effort to look into the leaf and and with you.

A

Know I don't work at a big budget shop, so we are probably never going to have the money to go out and get a self-service reset tool or something that pipe for. This is something that's, basically a low or no-cost solution that you can get it running pretty quickly, and you know when I see it it's pretty slick it gives you everything you wanted, you really need.

A

It may not have every Bell and whistle that lets say something like psychotic hats, but that's also sometimes a fifty or sixty thousand dollar product right, so I mean this is. This is perfect example of someone using their ingenuity with PowerShell and coming up with a simple solution to a complex problem, master.

C

Maybe you didn't touch on it, but it's brandy, you don't.

B

Like the name huh I'm gonna brand, it.

A

With your company name, oh well,.

B

You do have know you, you can customize this, the the very top left that that can be customized with whatever you want within whatever will fit. I will also show you that I think.

C

If I do that in the base with you and I.

B

Do that it does support mobile access, so you can present this.

C

B

To you know reset those user passwords when you're, when you're outside the movie theater, rather than having a RDP in I, certainly.

C

Hope you I'm putting this on the public.

C

A

One because that's the same example if he gave it summit someone likes movies, but.

B

I I'm just saying that I know a couple: people who have had to work standing outside the theater and have to RDP.

C

One of the questions we came across you should you can edit the text there. Can that also be a logo or just I? It.

B

C

Knew I wasn't going to be the only one I.

B

Have not tried to throw an image tag in there. Try it out. Let me know.

C

B

C

Configure go logging to show the parameters or not is that per script that.

B

Is per script, you can set a default and then override that on a per script basis, one of the other things and I I know people don't like to reveal. You know they're they shy away from telemetry and all that. But but what I want to show? You is what what I'm, seeing from what y'all have sent? What people who are using this? There are 35 companies out there using this. I've had 23,000 runs since, since this was presented in April, that's more than two days worth of PowerShell time.

B

You know that is that what that tells me is I've hit a a sweet spot people. People have this need and being able to have that telemetry is critic for me to know whether to keep pursuing this or not.

C

B

C

B

My appeal to y'all to keep keep the telemetry on there's. No, everything is hashed, I can't see usernames or anything like that. Oh it's.

C

Your telemetry, not that.

B

Is the telemetry.

A

C

A

The data going back to him to show analytics to show what's being what's happening when you run it could.

C

B

C

To yourself the.

B

Telemetry is stored in the logs, as in in Jason I kind of showed. It I think there were I. Think there's.

C

One guy, you know who's using your web.

A

C

Front-End Rosa.

A

Joe, he shows us already come on now. Sorry.

C

A

B

This this is the actual Emma tree, that's being sent to me. There's nothing identifiable. We just hashed everything out it's so it's unique, but I can but it's it's identifiable, but but if you're looking for who is running, then you can say if you go, let's see some of that. That was in here right at the bottom.

B

C

I apologize, that's.

B

All right, so, let's see you, let's do well.

C

That's that's some of it, but but you know my.

A

Webpage to Josh just tons in the chat, Josh King just chimed in the chat that he just flew in a logo on the fly on his and it worked well.

B

There you go. Thank you. Josh josh count on the go always count on the kiwi yeah.

A

C

B

That's not offensive.

A

Those he can't respond. So that's.

B

Right so so you can wit with the username log it or with a parameter logging. You can see actually the command being run, but even without the the parameter logging you would still get username and the script and date and time of when that, when that script was wanna run and that's all in your logs on your system, mmhmm.

C

Yeah super cool yeah up you installing yeah, please play yes. I was looking for my old dad gone now, I think I might email him currently do a bunch of PowerShell scripts on some really hockey terminal services. Yeah I have so yeah John.

A

Josh just threw a screenshot of the logo. He just throw in there. Oh great right, yeah.

C

A

Swing by my machine later and I'll, so this is a anybody's on the remote there's, a link in the chat. If you want to cure you sorta, like with a logo instead of text, so in the guy that we're talking about the Josh, that's the guy! That's going to be presenting for us in a month he's going to be going over pretty slick, presentation on performance, joining right, yeah it'll be like I am Dean, which is used to mark.

A

Well, I just want to say thank you Mark. You did an awesome job tonight. We really appreciate you joining us. I hope you as much fun as we did. I did.

B

I appreciate the opportunity guys mm.

A

Yeah, so thank you very much. If there's anything you want to add mark the floor, is yours otherwise, thank you and we'll see you soon. I.

B

Think I'm good, I I hope everybody. Please please reach out to me if you've got questions uh or if you know if there are features you want to see just just. Let me know.

C

A

All right, so anybody who's on the remote I think we're gonna end the remote session. Now we might chat a little bit in the room, but thanks all for.

C

A

C

Just leave that up and we alright.

A