dhruvb14 / iLAPs

Intune LAPs Implementation with Admin UI
10 stars 3 forks source link

Admin UI #15

Open mycoward opened 3 years ago

mycoward commented 3 years ago

GM,

I have followed your instructions and got the Admin UI to load correctly. But I am not getting any computers or accounts to be returned. I know that the data is there because when I run the Get-LocaladministratorPassword.ps1 script it returns the accounts and the passwords correctly.

I also see a MachineName (Prefex1234567) not sure what that is. We don't have any defined prefex and only admins will have access to this tool.

was wondering if you could give me some direction to get this working.

dhruvb14 commented 3 years ago

So you have to search for the name exactly for the machine. We do not allow wildcard by design. So if machine name is ILAPSTestMachine1 and you search for ILAPSTestMachine nothing will return. Prefix is just because many enterprises have the same prefix on every machine name so people do not have to type in the prefix and its prefilled in.

dhruvb14 commented 3 years ago

@mycoward are you getting errors? Also I realized I am missing some Azure AD config steps which I will have worked out and documented in next few weeks. If you need this faster just shoot me a message on here

mycoward commented 3 years ago

I do need those steps. I have everything working on the script side but the website is still not working.

Thank you for responding to me.

Myron Coward Sr. Systems Engineer - Vice President @.D7403C.11FE68A0] O: +1 609-606-1633 <tel:+1%20609-606-1633> C: 917-992-2297 E: @. @.***> www.rockco.comhttps://www.rockco.com | LinkedInhttps://www.linkedin.com/company/rockefeller-capital-management 1395 Yardville Hamilton Square Rd | Hamilton Township, NJ 08691 | United States

From: Dhruv Bhavsar @.> Sent: Monday, May 3, 2021 4:44 PM To: dhruvb14/iLAPs @.> Cc: Myron O. Coward @.>; Mention @.> Subject: Re: [dhruvb14/iLAPs] Admin UI (#15)

@mycowardhttps://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.proofpoint.com%2Fv2%2Furl%3Fu%3Dhttps-3A__github.com_mycoward%26d%3DDwMCaQ%26c%3DB3KeWpHOXlQCjrYKOFdPYJEFaKFEdwz0csRqGYLoYtI%26r%3DMEtJThuRH05qPqKuKjGaSlAYg008HfFiTTQIM1FIh0g%26m%3Dk7QErAbRFZsnT1kZu9-59BoXzvjwsYxkUj4nbXx1Fl4%26s%3DMEib3wgrA9xTZJ5H-H6CI-JHMdz4I9rL6KxF0PryniI%26e%3D&data=04%7C01%7Cmcoward%40rockco.com%7Cefc1880a307c49886d1e08d90e743dd4%7C74352aa5d8834e4a84237862b342708e%7C0%7C0%7C637556714681969534%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=dbw1oJEMrMHM5kCn7OzXD6LqYLxDLG8qN%2BYzewuGQt8%3D&reserved=0 are you getting errors? Also I realized I am missing some Azure AD config steps which I will have worked out and documented in next few weeks. If you need this faster just shoot me a message on here

- You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.proofpoint.com%2Fv2%2Furl%3Fu%3Dhttps-3A__github.com_dhruvb14_iLAPs_issues_15-23issuecomment-2D831521904%26d%3DDwMCaQ%26c%3DB3KeWpHOXlQCjrYKOFdPYJEFaKFEdwz0csRqGYLoYtI%26r%3DMEtJThuRH05qPqKuKjGaSlAYg008HfFiTTQIM1FIh0g%26m%3Dk7QErAbRFZsnT1kZu9-59BoXzvjwsYxkUj4nbXx1Fl4%26s%3DbLQhcY-lOHpi4ylsqlA1wZ5efTXraEX4UIpvJlUQSUk%26e%3D&data=04%7C01%7Cmcoward%40rockco.com%7Cefc1880a307c49886d1e08d90e743dd4%7C74352aa5d8834e4a84237862b342708e%7C0%7C0%7C637556714681969534%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=r4JNUWwkS01Sr6uSFBoRYAmkpHUkAialyPBkLNZpHaM%3D&reserved=0, or unsubscribehttps://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.proofpoint.com%2Fv2%2Furl%3Fu%3Dhttps-3A__github.com_notifications_unsubscribe-2Dauth_AL2GDU5VNMKSLD4HRU3LIELTL4DKNANCNFSM4ZVCMUCQ%26d%3DDwMCaQ%26c%3DB3KeWpHOXlQCjrYKOFdPYJEFaKFEdwz0csRqGYLoYtI%26r%3DMEtJThuRH05qPqKuKjGaSlAYg008HfFiTTQIM1FIh0g%26m%3Dk7QErAbRFZsnT1kZu9-59BoXzvjwsYxkUj4nbXx1Fl4%26s%3DRxKoMDLLOK-SdQhA8UCnkd0O5dNiRkv0grqCxJh_vaI%26e%3D&data=04%7C01%7Cmcoward%40rockco.com%7Cefc1880a307c49886d1e08d90e743dd4%7C74352aa5d8834e4a84237862b342708e%7C0%7C0%7C637556714681979528%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=z8nJWqtQwp3QVkg3bGxtWds3drL%2BUmPG7T6i5FHkHfw%3D&reserved=0.

For important information about our Firm and its products and services, please refer to our Regulation Best Interest Disclosures: Rockefeller Capital Management Form CRS Relationship Summaryhttps://content.rockco.com/Rockefeller_Combined_Form_CRS.pdf and Rockefeller Capital Management Client Relationship Brochurehttps://rcm.rockco.com/wp-content/uploads/CRM/Rockefeller%20Financial%20LLC%20Client%20Relationship%20Brochure%20-%20FINAL%20June.30.2020.pdf. This message and all attachments are intended only for the use of the person to which it is addressed and may contain information that is confidential, privileged, proprietary or otherwise protected from disclosure. Please note that any unauthorized use, dissemination or copying of this communication or its attachments is strictly prohibited. If you have received this communication in error, please notify us immediately by return e-mail and delete all copies of the message and any attachments. If you are the intended recipient, we remind you that electronic mail on the Internet is not secure and that e-mail communications may not be encrypted or otherwise protected. We also monitor and retain email communications for legal and regulatory compliance purposes.

dhruvb14 commented 3 years ago

Check App Settings in the Azure Deployed Web App settings to make sure that It does have AppSettings:ClientId AppSettings:ClientSecret and AppSettings:LogTable along with AppSettings:SASToken. The SAS token for this one should have full rights to all tables, including read and write. I am refactoring a bunch of this as we speak in the next 2 days so if you pull master again I have added some cleaning up of the UI.

Do you mind sending the specific error you are seeing trying to spin up the UI? Have you attempted open the UI's solution in Visual Studio and run it? If you used the build.ps1 then it will automatically build your local app settings for debugging the application locally

dhruvb14 commented 3 years ago

You also need API Permissions as Below: image

And User Impersonation as follows image

dhruvb14 commented 3 years ago

I'll be you are missing the log app setting and when trying to search, it doesn't work cause It can't log your query to the logs.

add this appsetting if you used default settings from my guide using the portal and the advanced editor:

{
  "name": "AppSettings:LogTable",
  "value": "Logs",
  "slotSetting": false
}

Then force the application to restart using the portal and try again

mycoward commented 3 years ago

I did have that setting. The app loads find but I can't search for any computer. Also if I click on the logs tab is crashes the app and has to be reloaded.

Myron Coward Sr. Systems Engineer - Vice President @.D740C5.0F9F44B0] O: +1 609-606-1633 <tel:+1%20609-606-1633> C: 917-992-2297 E: @. @.***> www.rockco.comhttps://www.rockco.com | LinkedInhttps://www.linkedin.com/company/rockefeller-capital-management 1395 Yardville Hamilton Square Rd | Hamilton Township, NJ 08691 | United States

From: Dhruv Bhavsar @.> Sent: Monday, May 3, 2021 5:20 PM To: dhruvb14/iLAPs @.> Cc: Myron O. Coward @.>; Mention @.> Subject: Re: [dhruvb14/iLAPs] Admin UI (#15)

I'll be you are missing the log app setting and when trying to search, it doesn't work cause It can't log your query to the logs.

add this appsetting if you used default settings from my guide using the portal and the advanced editor: { "name": "AppSettings:LogTable", "value": "Logs", "slotSetting": false }

Then force the application to restart using the portal and try again

- You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.proofpoint.com%2Fv2%2Furl%3Fu%3Dhttps-3A__github.com_dhruvb14_iLAPs_issues_15-23issuecomment-2D831542884%26d%3DDwMCaQ%26c%3DB3KeWpHOXlQCjrYKOFdPYJEFaKFEdwz0csRqGYLoYtI%26r%3DMEtJThuRH05qPqKuKjGaSlAYg008HfFiTTQIM1FIh0g%26m%3D4bgXYiMct3-5VLfyOyOWZd76aE0Yn3UCVGmzkBc_OiQ%26s%3DUgTzwzNb1egyVU6H-W2Tlp64cqWPejo-ovCcDrFaIh0%26e%3D&data=04%7C01%7Cmcoward%40rockco.com%7Cb8c56958d2634c27af7608d90e792bd4%7C74352aa5d8834e4a84237862b342708e%7C0%7C0%7C637556735857411124%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=w1R6MJFo%2B9isjzuY0EqohM6kJWfJUwE88qaMaTOz07w%3D&reserved=0, or unsubscribehttps://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.proofpoint.com%2Fv2%2Furl%3Fu%3Dhttps-3A__github.com_notifications_unsubscribe-2Dauth_AL2GDU5PR7VXL5PT66C4UU3TL4HOXANCNFSM4ZVCMUCQ%26d%3DDwMCaQ%26c%3DB3KeWpHOXlQCjrYKOFdPYJEFaKFEdwz0csRqGYLoYtI%26r%3DMEtJThuRH05qPqKuKjGaSlAYg008HfFiTTQIM1FIh0g%26m%3D4bgXYiMct3-5VLfyOyOWZd76aE0Yn3UCVGmzkBc_OiQ%26s%3D5_6dwnRC68SuKp3nfKRVtBMw0SP80IIV5dO5K4n8Vis%26e%3D&data=04%7C01%7Cmcoward%40rockco.com%7Cb8c56958d2634c27af7608d90e792bd4%7C74352aa5d8834e4a84237862b342708e%7C0%7C0%7C637556735857421120%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=EPY%2BHe9nEj%2F%2Fv0l7GpSdIlScU%2FDkpKB7DiuONRlsqjk%3D&reserved=0.

For important information about our Firm and its products and services, please refer to our Regulation Best Interest Disclosures: Rockefeller Capital Management Form CRS Relationship Summaryhttps://content.rockco.com/Rockefeller_Combined_Form_CRS.pdf and Rockefeller Capital Management Client Relationship Brochurehttps://rcm.rockco.com/wp-content/uploads/CRM/Rockefeller%20Financial%20LLC%20Client%20Relationship%20Brochure%20-%20FINAL%20June.30.2020.pdf. This message and all attachments are intended only for the use of the person to which it is addressed and may contain information that is confidential, privileged, proprietary or otherwise protected from disclosure. Please note that any unauthorized use, dissemination or copying of this communication or its attachments is strictly prohibited. If you have received this communication in error, please notify us immediately by return e-mail and delete all copies of the message and any attachments. If you are the intended recipient, we remind you that electronic mail on the Internet is not secure and that e-mail communications may not be encrypted or otherwise protected. We also monitor and retain email communications for legal and regulatory compliance purposes.

dhruvb14 commented 3 years ago

In your storage account do you have a table called Logs? Also did you make the changes to AAD App Registration as mentioned? Did you try running it locally with Visual Studio to see what exception is being thrown?

dhruvb14 commented 3 years ago

Check the latest readme, Step 10.9 has the new AAD settings you need. Also lots of modifications have been made to v2 which is fully merged into this codebase. @mycoward let me know if you are still having issues.