@DustinB3403 said in Data Breach: PDL "Enrichment" Company 1.2B Peeps Impacted ... yeah, BILLION:

<s> To be fair, setting up SSL and a login name and password does take extra effort. . give the poor sod a break </s>

Yeah and they weren't even bothered to whitelist IPs.

They should have SSL and strict whitelist preferably to a VPN IP that requires authentication.

@Emad-R said in One Time, Non-Image, Windows Backup Client:

@scottalanmiller said in One Time, Non-Image, Windows Backup Client:

@Emad-R said in One Time, Non-Image, Windows Backup Client:

better to use it on another VM close to that VM

No other VM. If we open the only other VM, ESXi can't work. So that tool, I'd expect, couldn't actually run.

Oh you can run it from any where, as long as you can ping the ESXi or reach it. but i prefer a VM cause its faster

I see. That was a problem for us because we couldn't transfer off of the server, their network wasn't fast enough 😞

@Dashrender said in QoS on Edgerouter Lite:

@Romo said in QoS on Edgerouter Lite:

Just setup a traffic-policy shaper to test:

20% bandwidth for voip guaranteed with a ceiling of 100% bandwidth
30% bandwidth for USERS PC guaranteed with a ceiling of 100% bandwidth
50% bandwidth for ALL others guaranteed with a ceiling of 100% bandwidth

Does this sound reasonable?

if you parse off 50% for those things and they aren't in use, then the bandwidth is just being wasted... I know scott has mentioned that doing this is generally bad in the past because of the waste of resources.

You don't read clearly. He's talking minimum guarantee at 20/30/50 and max possible when available at 100 for all.

@WLS-ITGuy said in O365 & Spam filter:

I thought I read it somewhere. Thanks.

What about backups? I thought I read somewhere that O365 doesn't do backups. So if an end user deletes an email or accidentally deletes/moves a folder there is no way to retrieve that.

Although the backups are for Microsoft themselves see this
https://docs.microsoft.com/en-us/office365/servicedescriptions/exchange-online-service-description/high-availability-and-business-continuity

https://docs.microsoft.com/en-us/exchange/back-up-email

Same as what @JaredBusch said on a user level or even an admin.

@scottalanmiller Yep, I just wanted to share the configuration I use as my daily driver because it makes working in the terminal that much more efficient. The OP mentioned wanting something that was a bit slicker and more powerful, and I think in addition to your choice of terminal, your choice of shell and other tools contributes to having a better experience. I prefer FISH for my shell, and tmux is my terminal multiplexor of choice. ZSH is another great alternative shell as well.

@scottalanmiller
This may also help:
https://blogs.partner.microsoft.com/mpn/myth-busting-software-asset-management-and-compliance-audits/?ln=en-us
https://www.microsoft.com/en-us/licensing/learn-more/compliance-verification-faq

Things like:

Microsoft SAM programs are voluntary services... A compliance audit is a mandatory review of a company’s use of Microsoft’s products and services...
These compliance verifications are initiated across less than 5% of Microsoft’s licensing customers worldwide

But ignoring things like:

We believe that SAM can be a strategic advantage for all our customers

Worth noting that the issue comes back when you upgrade to Fedora 31 as well. Same fix still applies.

It will makes sense of all the alerts and centralize everything

@scottalanmiller said in Looking For Alternate IT roles:

@jmoore said in Looking For Alternate IT roles:

So i saw one vote for specializing in Cloud. Are there any other must learn technologies that would be good for someone with my experience?

The biggest factor will be... what do you enjoy?

I knew someone was going to ask this. Its the reason I havent specialized yet. I have about 30 books I have bought, waiting to read and study, because they were all interesting. They are on the topics of: Powershell, Linux, Advanced C++, 3 different Python books, 2 books on Git, Ansible, Voip(Asterisk cert book), Storage(have my SCSP cert book) and will probably venture to VMWare after that, SQL has been great fun when I use it, MCSA books from microsoft because I know I should and Virtualization. I read constanty from blogs to books on all these topics. I love playing with various tools in several of these categories. I know I'm all over the place lol but thats what I like and could see myself specializing in any of those if I needed too.

@shutdown_engineer said in How do you manage internal web proxy with roaming laptop users?:

We put a registry key on users laptops to toggle turning the proxy on and off when they are at home.

What do other people use so that if a user is at home and not connected to our VPN and just wants to surf and check email? Outlook seems to take IE settings so if the proxy is enabled and the user is connected to Wifi only then Outlook will not update and IE won't connect.

Firefox with no proxy set in the browser is a rough and ready workaround that we also use but far from ideal.

Users are mostly Win 10. Our DC is Win 2012 R2 and run Sophos Web Appliance Proxy as a VM.

Thanks

Why is Firefox rough workaround? Why are your users still using IE? It's almost 2020, not 2000 anymore.
2nd issue is proxy. Why would you use one? Most web traffic is encrypted, so web proxies became obsolete, as you cannot use one without doing some man in the middle workarounds. If you need web filtering, then use proper solution like Pi-hole or AdGuard Home.

@wrx7m said in RDS 2019 Setup and RDS License Role:

When using UPD, is there anyway to access various users profiles' folders and files from the RDS server file system?
Example:
C:\Users\Bob\Desktop

Edit: I found that I can path to it via UNC (\ \server\c$\users\Bob\Desktop), but get permissions error when I go locally, from C:\Users\Bob\Desktop. Also, the Bob folder is only a shortcut (LNK file) in the users directory.

That is what I HATE about roaming folders... they simply do not act the same as local folders!

I typically download things to the desktop and execute from there. But when on a system that has a desktop redirected to the server - that fails 99% of the time, I have to move the executable to something actually local, then execute it.

@black3dynamite said in Converting VMware VMs to KVM:

I haven't been keeping up with Windows Admin Center for awhile. Was that an option to manage Hyper-V?

It will be, but I'm not sure that it is yet. We've tried and not been able to get it working even internally anywhere, let alone externally. Once they figure out stability and authentication, I assume that it will be great for that. Being that this is 2016, it's going to suck hard. And if there is a Hyper-V issue, WAC would be down which is a problem in a small environment like this.

The last time I set up Graylog I had to configured SELinux.

Allow the web server to access the network:
sudo setsebool -P httpd_can_network_connect 1

Graylog REST API and web interface:
sudo semanage port -a -t http_port_t -p tcp 9000

Elasticsearch (only if the HTTP API is being used):
sudo semanage port -a -t http_port_t -p tcp 9200

Allow using MongoDB default port (27017/tcp):
sudo semanage port -a -t mongod_port_t -p tcp 27017

@DustinB3403 yes it's Oracle virtual box.kali linux is guest is.i have installed the drivers as well

@DustinB3403 said in NXLog and Windows for Graylog:

@flaxking said in NXLog and Windows for Graylog:

When I was playing with graylog, I was using Beats

Care to elaborate?

Flexible and made to work with different solutions

https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-overview.html

https://logz.io/blog/filebeat-tutorial/

PetaSAN, at least in component form, would make an excellent backup target array, for example.

because it's not uncommon to do 2+ searches in a row. Now they have to close the window between searches... which means it's broken.

The script I started with was shamelessly stolen from a Technet post.

That gave me a pretty good start. I did some light editing to more accurately match what was going on at my employer when I first used it for a large batch of users rather a while ago.

Now I'm making some more changes and additions to turn it into something a bit more broadly useful day to day.

@JaredBusch said in FreePBX 15 released:

Sangoma Vega 100 (I think) PRI gateway. PRI from phone company on one side and sip trunk on the other, hook it up to whatever PBX you want to.

https://www.voipsupply.com/sangoma-vega-100g