IT Discussion

• 

  deploy iPads - locked down - suggestions?
  • Dashrender  

  23
  0
  Votes
  23
  Posts
  25
  Views

  

  @DustinB3403 said in deploy iPads - locked down - suggestions?: @Dashrender said in deploy iPads - locked down - suggestions?: @DustinB3403 said in deploy iPads - locked down - suggestions?: Apple Configurator would be what I would use, if you wanted to avoid all of that you could use single app mode as well. Not sure if it allows you to block access to specific websites though. Only works on Mac - I have no Mac to use for this. Yeah that is really one of the crappy things about Apples tools. You could setup a crapintosh with generic hardware. Thanks anyways
• 

  Callback Provisioning with Ansible Tower
  ansible configuration management tower • • stacksofplates  

  9
  5
  Votes
  9
  Posts
  1955
  Views

  

  @stacksofplates Thanks, good info. Im learning ansible now.
• 

  Comparing Office Suites
  libreoffice ms office zoho onlyoffice openoffice g suite google docs wps office zoho docs zoho office • • scottalanmiller  

  43
  0
  Votes
  43
  Posts
  174
  Views

  

  @scottalanmiller said in Comparing Office Suites: @Dashrender said in Comparing Office Suites: @scottalanmiller said in Comparing Office Suites: @Dashrender said in Comparing Office Suites: personally, not a fan of Zoho's email interface, but really, that's kinda a last of concerns for me. I know the rest of you hate Outlook's interface, but I like it. I hate GMail's interface. I find Outlooks to be antiquated, but adequate. What I hate about Outlook is how flaky and unreliable it is, making it too costly for any worker deemed employable If they are worth employing, they are working having working email. Sadly - I have to give you this completely - O365 Outlook interface is super flaky. Not the interface portion, that's decently solid. It's the mail handling under the hood. I guess a little flaky in that it doesn't always display the true status of an email. So your issue with the Exchange back end - not Outlook Online?
• 

  Re-evaluating Local Administrative User Rights
  • Obsolesce  

  87
  0
  Votes
  87
  Posts
  67
  Views

  

  @Obsolesce said in Re-evaluating Local Administrative User Rights: @scottalanmiller said in Re-evaluating Local Administrative User Rights: @Obsolesce said in Re-evaluating Local Administrative User Rights: @scottalanmiller said in Re-evaluating Local Administrative User Rights: @Obsolesce said in Re-evaluating Local Administrative User Rights: @scottalanmiller said in Re-evaluating Local Administrative User Rights: @Dashrender said in Re-evaluating Local Administrative User Rights: @scottalanmiller said in Re-evaluating Local Administrative User Rights: @IRJ said in Re-evaluating Local Administrative User Rights: @Dashrender said in Re-evaluating Local Administrative User Rights: @scottalanmiller said in Re-evaluating Local Administrative User Rights: @Dashrender said in Re-evaluating Local Administrative User Rights: @scottalanmiller said in Re-evaluating Local Administrative User Rights: @Dashrender said in Re-evaluating Local Administrative User Rights: @scottalanmiller said in Re-evaluating Local Administrative User Rights: @Dashrender said in Re-evaluating Local Administrative User Rights: As for software/viruii that don't require local admin rights, uhuhm - CHROME, rights levels don't matter. Huh? Chrome isn't a thread because of this.... no admin access whatsoever. This was an example of software that could be run in user space with zero local admin rights - nothing more. The remainder of that post (or a followup one) pointed out that I don't want to see users able able to execute an executable that wasn't installed by an admin - but I'm not sure that's possible, or really reasonable. Yes, but it's "run in the user space". Everything works that way. Office suites, you name it. Chrome is just a "portable app". Yeah, I just don't like the idea of portable apps - as an admin, I'd like to prevent them. Because there is no reason in most businesses that a user would need to run a portable app. If you prevent execution from any user rightable space, you can kill so much of this malware. That's not a good way to think of it. You should never dislike portable apps, all that means is that they don't require admin privs or need to be installed to run. Installing just means putting it into the system database. Portable apps have loads and loads of reasons to exist. They are more stable, easier to maintain, avoid DLL hell, etc. They don't link to system resources and so are more resilient to all kinds of problems and tend to work across more OS versions. Portable apps tend to be bloated, that's pretty much their only negative. Execution allowances is totally different. Not allowing end users to make or acquire their own tools and run with their own privs is very different than disliking the avoidance of system dependencies in an executable. You CAN get rid of all of those things mentioned in locally install apps as well. There is only negatives to locally install apps IMO. Some would argue that it is required for speed, but in reality a properly built SaaS app does not have issues. He's not intending to argue the "locally" part, but the "installed" part. The context was installed vs portable apps, both local in this case. I guess what I want is a white list of allowed executable - I don't care if they are portable or not, I care that users shouldn't be able to execute them unless allowed by IT. Right, that makes sense. DLL linking or database inclusion doesn't really. Portable doesn't imply any additional access from the users. Just be aware that while listing means no OS level scripting from end users, even of their own making. But that's not necessarily bad. Scripts shouldn't run unless they are signed and the cert is allowed. That's how we control that. The problem is... you can't write your own. Maybe I'm missing your point. So they can't run Vscode and write a script? Or notepad? They can't write a script, at all. In any way. If only whitelisted things can run, you can't make any of your own automation. Write or run? Well they can write it, but that's it.
• B

  Getting started with automated provisioning?
  • biggen  

  10
  0
  Votes
  10
  Posts
  36
  Views

  

  @biggen said in Getting started with automated provisioning?: It looks like the Terraform plugin for xcp-ng is experimental is not well/at all supported so that might be a bust unfortunately. I'll do some more looking around. Might be an overall problem with XCP-NG. Small user base.
• 

  How Modern Applications Nullify Ransomware
  security malware ransomware • • scottalanmiller  

  1
  0
  Votes
  1
  Posts
  24
  Views

  No one has replied

• 

  Comparing MeshCentral 2 to ScreenConnect
  screenconnect remote access meshcentral meshcentral 2 connectwise connectwise control • • scottalanmiller  

  963
  5
  Votes
  963
  Posts
  15802
  Views

  

  0.4.5-l today
• 

  Stuck supporting out-of-date Windows Servers, what options do I have?
  • magicmarker  

  7
  0
  Votes
  7
  Posts
  151
  Views

  

  @magicmarker said in Stuck supporting out-of-date Windows Servers, what options do I have?: Another option that wasn't mentioned is migrating the 2008R2 servers to Azure. Once migrated into Azure, you get security updates for 3 more years after the January 14, 2020 end of support. That’s just putting a band-aid on something that you will to have to deal with again.
• 

  LibreOffice - Runs so slowly
  libreoffice performance current • • DustinB3403  

  42
  1
  Votes
  42
  Posts
  138
  Views

  

  @Obsolesce said in LibreOffice - Runs so slowly: @scottalanmiller said in LibreOffice - Runs so slowly: In giant shops (thousands of users and up), the problem with MS Office is that you don't pay for it just for the users who would benefit from it, but you pay for it for everyone. That is so totally false. I have not seen that anywhere, including where I currently work which is many thousands users. So your claim is what... that they 1) don't actually pay for the software or 2) they use it only for a few people who would actually benefit from it or 3) the kind of work that they do is both appropriate to an office suite and so insanely heavy that they actually get to the point where MS Office is noticeably more efficient, yet still an appropriate tool to use? If any of those, how does that work? If 1... okay piracy. If 2... how do they interoperate with others, or is it all office suites for only individual use? If 3.... what the heck kinds of tasks are they doing that are so different than any other company?
• 

  Why Do People Still Text
  email best practices sms texting send • • scottalanmiller  

  407
  2
  Votes
  407
  Posts
  161006
  Views

  

  @Dashrender said in Why Do People Still Text: @Obsolesce said in Why Do People Still Text: And there is no clutter at all. Well, I suppose that depends on how it's managed. If fools set it up and manage it, then yes I can see it won't work well... just like many things, though. I'm less familiar with Slack, only used it twice for about 1 min total.. but discord - I'm a member of three groups, and each of those groups have like 20 subgroups.. to me that is a bloody mess. Discord I can say can be a cluster F. If there's a way to rid all the game xrap forced in your face, it'd be so much better.
• 

  Hypervisors: revisit your choices!
  xenserver hyper-v kvm esxi hypervisors type 1 • • FATeknollogee  

  23
  0
  Votes
  23
  Posts
  229
  Views

  

  @JaredBusch said in Hypervisors: revisit your choices!: @Obsolesce said in Hypervisors: revisit your choices!: Exactly my point. You obviously cannot comprehend what you read because he was most certaily not agreeing with you or making your point for you. Because your fucking point was to use VPS. Which has not a damned fucking thing to do with this discussion. The VPS was definitely NOT the point of anything I said. Not the point at all. I specified the point several times, the VPS part wasn't my point. I think it's you who fucking needs to fucking comprehend.
• 

  Large network of Windows machines without AD - GO!
  • Dashrender  

  66
  0
  Votes
  66
  Posts
  337
  Views

  

  @scottalanmiller said in Large network of Windows machines without AD - GO!: @Pete-S said in Large network of Windows machines without AD - GO!: @scottalanmiller said in Large network of Windows machines without AD - GO!: @Pete-S said in Large network of Windows machines without AD - GO!: Would this be an option if you wanted central authentication in Windows without any AD or AD clone? https://www.freeipa.org/page/Windows_authentication_against_FreeIPA The way I understand it you could use this setup to authenticate your local account on Windows. Authenticate, yes. But FreeIPA isn't meant to do that, doesn't work well for it, and they themselves say that you should use Samba instead as it is meant for that. But the point wasn't the product. The point was that it looks like you can authenticate local users on Windows against anything that supports Kerberos. So you can still use central authentication for your Windows clients (that can be be shared with linux, web apps and whatever) without using AD or anything in the entire windows ecosystem. I didn't know that was even possible but maybe it is old news for you guys working with this stuff everyday. You can do full AD without anything in the Windows ecosystem. You can do Linux AD server side, and Linux clients and never have Windows code at all and be all on AD. You don't, normally, as it is too heavy to bother with if you don't have Windows somewhere. But it works. AD is just a heavy version of LDAP that is classic to UNIX. FreeIPA is expected to be used either in an all Linux world, or in a hybrid world with AD handling the Windows side of things (but they recommend Linux based AD.) OK, thanks.
• 

  Network setup - moving forward
  dashrender • • Dashrender  

  30
  0
  Votes
  30
  Posts
  141
  Views

  

  @DustinB3403 said in Network setup - moving forward: @coliver said in Network setup - moving forward: @Dashrender said in Network setup - moving forward: Granted Excel online is likely different from Excel local as well Not as much as you think. One way that the online version is substantially more different is you can't open password protected excel files in the web version. So if you had a lot of those (stupid I know) you'd be up the creek without a paddle. not a Lot that I know of.. but definitely a few.
• 

  On Prem Exchange to O365
  o365 azure ad • • WLS-ITGuy  

  3
  0
  Votes
  3
  Posts
  98
  Views

  

  @WLS-ITGuy said in On Prem Exchange to O365: I have finally been able to convince the powers that be that O365 is the best option for us being a school. **for the purposes of "corporate" do not read it that we are a subsidiary but just that our overall organization had created a subdomain 10 years ago or so for all four of the schools that are under the organization. Since then 2 of them have moved away from the subdomain and one got lucky as they moved to G Suite early on in the process. Because we are a subdomain of our "corporate" and we have a domain of school.corporate.net and corporate is already on O365 we cannot be on O365 with our school.corporate.net domain. The powers that be want to keep our email/data separate from "corporate" so we got a new domain name. My thought was to get the users created on the new O365 by using the AD sync, add the new domain name to our current exchange box, then upload emails to O365. I just started doing the AD sync from AD to O365 but got the following message: Would I be correct that because our AD domain isn't anything close to our new domain name that this plan cannot happen? I am not sure if we'll be moving to Azure AD or not. Would it make it easier to go full blown Azure AD? Add that suffix to all those users in AD, then sync.
• 

  Windows File Explorer 260 Character Limit
  • syko24  

  11
  0
  Votes
  11
  Posts
  70
  Views

  

  If this client has something like -----Client 1\Change Orders\ for a path you would simple add a -replace '-----','-' which would remove all of the extra hyphens which aren't actually being beneficial in anyway to the process.
• 

  AVG deleting data
  • Fredtx  

  9
  1
  Votes
  9
  Posts
  153
  Views

  

  @IRJ said in AVG deleting data: Setup FIM to see what is causing it 100% FIM?
• K

  Anyone figured out how to ZeroTier with AD?
  active directory vpn zerotier • • krisleslie  

  83
  0
  Votes
  83
  Posts
  485
  Views

  

  @krisleslie said in Anyone figured out how to ZeroTier with AD?: I'm met with a dilemma in that I have 3 offices (and potentially more offices to come) that I want to link up to one AD controller vs having one at each site managed separately. This should be pretty easy for a site level setup. Setup Point to Point VPN between the firewalls at your main site and the remote site - then have DHCP provide the DNS server of your DNS servers at the main sight - pretty much done. I'm doing this for my two remote sites, works perfectly well, and has for nearly 2 decades.
• 

  Policies vs Network Access Control
  • IT-ADMIN  

  30
  0
  Votes
  30
  Posts
  128
  Views

  

  @scottalanmiller said in Policies vs Network Access Control: @Dashrender said in Policies vs Network Access Control: @IRJ said in Policies vs Network Access Control: This is not a problem that can be fixed with compensating controls. It needs to be nuked from orbit and rebuilt properly with employee buy in. At this point - that seems very unlikely if you have users who are willing to nuke their own machines and reinstall. They'll likely demand or at least attempt to demand local admin rights. Really just becomes the same as BYOD. Easy enough to manage. Not ideal, but doable. Exactly - better model in most cases anyhow. Just change how you (the OP) deliver services.
• 

  Postcards SMS WebApp from Skyetel
  skyetel sms mms postcards • • JaredBusch  

  2
  1
  Votes
  2
  Posts
  90
  Views

  K

  @JaredBusch There is a current issue with the SSL let's encrypt that I just submitted to them to resolve (they are using an outdated version with Acme 1 instead of the newer Acme 2): FYI - we've resolved the issue, and I can only assume anyone else that has installed Postcards should have the same issue. The problem is indeed an issue with Let's Encrypt, and specifically: docker: jrcs/letsencrypt-nginx-proxy-companion To fix this issue, please update the docker-compose.override.yml file during builds. Row 35 should read: image: jrcs/letsencrypt-nginx-proxy-companion:latest This will insure that the current version for the let's encrypt proxy is called and eliminate the issue.
• 

  CentOS 7 mirrors operation too slow.
  centos 7 yum • • Romo  

  8
  1
  Votes
  8
  Posts
  103
  Views

  

  @black3dynamite said in CentOS 7 mirrors operation too slow.: @scottalanmiller said in CentOS 7 mirrors operation too slow.: Looks like disabling Delta RPMs (the repos don't seem to have deltas in them) and specifying a fast, local repo did the trick on the first test. We have this issue on several, going to test just removing the deltas to see if that does it on its own. In yum.conf just add the line deltarpm=0 Do you have deltarpm package installed? I don't recall being installed by default with Minimal install. On some we do, on some we don't. But the mirrors don't have DRPMs so it won't work either way. But it throws errors while trying to.
• 

  Installing a Depreciated version of Apple OSX
  apple how to osx version control old • • DustinB3403  

  3
  4
  Votes
  3
  Posts
  91
  Views

  

  @WLS-ITGuy give this a try, you may need to go back more than a year though.
• 

  Can all phones read QR codes natively?
  android ios qr code • • Pete.S  

  30
  1
  Votes
  30
  Posts
  167
  Views

  

  @JaredBusch said in Can all phones read QR codes natively?: You do not even take a picture, just put it in the camera sights. yeah - that is pretty cool...
• 

  Fresh from the tree = Vmango digital ocean style KVM front end
  • Emad R  

  4
  0
  Votes
  4
  Posts
  77
  Views

  

  @Obsolesce The thing there is market place for this since VirtKick turned there back on the supporters, and we need simple front end with simple installer (yes looking at you OpenStack)
• 

  How Can You Prevent Non-Domain Users from Getting an IP Configuration
  security networking active directory active directory domain network access control • • IT-ADMIN  

  16
  0
  Votes
  16
  Posts
  164
  Views

  

  Discussion on the policy side of this is over here: https://mangolassi.it/topic/20894/policies-vs-network-access-control
• 

  Voip.ms Fax To Email
  voip.ms fax • • NashBrydges  

  22
  0
  Votes
  22
  Posts
  135
  Views

  

  @brandon220 said in Voip.ms Fax To Email: @JaredBusch What I'm referring to is that I can take a physical piece of paper that I want to fax to a Xerox copier (in this instance). Instead of using the built-in fax machine function (no phone line attached) I can "email" the document to fax@voip.ms and in the subject line is the actual fax number. When I email from the copier, it comes out as a fax to the receiver. Not as an email. The receiver has no idea that it did not come from a conventional fax machine. Yeah, this can definitely be done - but man, changing the subject line from a Xerox machine is generally a HUGE PITA - no normal user wants to do that ever.
• 

  Delays on servers from Dell
  • syko24  

  13
  0
  Votes
  13
  Posts
  273
  Views

  

  @Pete-S said in Delays on servers from Dell: @scottalanmiller said in Delays on servers from Dell: @syko24 said in Delays on servers from Dell: I talked to my rep today and he confirmed the CPU was the item holding everything up. I asked if there was a different CPU option that would speed things up. He said regardless it would be a minimum 10 days before it would ship. I cancelled and ordered a refurb. I wonder why Dell is so committed to only using Intel when there are major supply chain issues? AMD has some great options and I've not seen delays from AMD parts. Dell have plenty of AMD servers too. R7515, R6515 are their new 1 CPU EPYC Rome (2nd gen) models and R7525, R6525 their two CPU models. Then they have some other model in the C-range. And their older 1st gen EPYC servers. With the prices and performance of AMD EPYCs you have to have a really good reason not to go AMD at this point. oh, I didn't realize that they had started adding them to their lineup again.
• 

  arcSight SIEM
  • IT-ADMIN  

  3
  0
  Votes
  3
  Posts
  76
  Views

  

  I've used Graylog previously. We used limited amounts of the dashboards in Graylog and we mostly created our own in Grafana to display things we needed. The advantage to Graylog over Elastic Stack is RBAC is included out of the box, you don't have to purchase X-Pack or custom build anything to get that functionality. But I don't believe it works natively with Wazuh like @IRJ mentioned.
• 

  Safest place to buy refurbished switches? xbyte, servermonkey, etc?
  • dave247  

  18
  0
  Votes
  18
  Posts
  947
  Views

  

  FWIW we've never had problems with HP's lifetime warranty for switches regardless of where they were purchased. New, used, refurb....
• 

  AWS Graviton 2: What it means for ARM in the data center, cloud, enterprise, AWS
  arm amazon aws zdnet risc processor graviton graviton 2 • • IRJ  

  3
  4
  Votes
  3
  Posts
  87
  Views

  

  Yeah I got an announcement in my email about it. I was reading about it here: https://aws.amazon.com/about-aws/whats-new/2019/12/announcing-new-amazon-ec2-m6g-c6g-and-r6g-instances-powered-by-next-generation-arm-based-aws-graviton2-processors
• 

  What setting for DNS when there is no DNS server?
  • Pete.S  

  5
  1
  Votes
  5
  Posts
  138
  Views

  

  Yeah I'd probably just do loopback