@jasgot All good ideas, thanks.
I wrote an install script for every printer on the network, users can go to a share and run the installer they want. The installer installs the printer as a TCPIP printer, no AD or Print servers involved.
I will go back to GPPs when M$ gets their act together.
We are so tired of fixing printing problems.....
@dave247 said in Looking for simplest/secure setup for connecting a domain joined computer to corporate network when remote:
The main problem I have run into is sort of a catch-22 in that, while remote, the user can't login until the VPN client has started and the user can't start the VPN client until they are logged in (duh). That means, an employee would take the laptop home and try to sign in with their domain user account but not be able to since the domain would be unreachable until the VPN gets connected.
I use this exact same setup for all of our clients. It works perfectly.
Tell me. When you start up the Laptop, and once you press <CTRL>-<ALT>-<DEL> to login, BUT BEFORE you authenticate, do you see the extra icon in the lower right corner?
And do you see this NetExtender logon when you click it?
It will bring you here next. Building the VPN BEFORE authenticating to the domain.
This should all work for you without any issues.
@jasgot said in UniFi Network With "Isolated" Access Points and Extenders:
@garak0410 The wired unit shouldn't be isolated. I have had this many times. The only solution for us was to SSH to the unit and factory reset it, then re-adopt it.
Since you have the IP of both, you should be able to SSh to both. If not, you'll need a paper clip 
@garak0410 The wired unit shouldn't be isolated. I have had this many times. The only solution for us was to SSH to the unit and factory reset it, then re-adopt it.
We had a similar problem quite some time ago, can't remember the why, but the solution was to restart the audiosrv service in the session. Desktop would hang. Sometimes you would have mouse, sometimes not.
We ended up setting it to delayed start, that worked most of the time, but not always.
@scottalanmiller said in MS RDS Server Shows 500 User Licenses Instead of What We Purchased:
Did some digging on the MS forums and they said that because they are Volume Licenses through the CSP program you seem to always get 500 regardless of what is purchased. Some people are convinced that this is a bug, some think it is just a lazy approach. But there seems to be consensus that this always happens. So the program that you buy through is the determining factor, at this time.
True. If you recall the days of the MS Licensing portal for MS Office; if you bought any small quantity of Open license, like 5, 10, 15, 20, etc.... The portal always showed and allowed 50 activations for the same product key.
We have a customer that is sunsetting and he needs a new server.
He has been on an AD domain for decades with a full staff, but now there are only two people.....
I am considering moving him to a workgroup, but I have one question to resolve before I move forward.....
How do you handle user accounts and password?
The way I understand it, is that I will create a username and password for each of them on the server and then use mapped drives and URIs for their data.
What happens if they change their password at their PC, do I have to change it to match at the server?
How are you doing it?
And before you ask why a file server, and why mapped drives? The answer is: because.
@JasGot Thanks everyone. This was very helpful. And that other discussion was too.
After further discussion with them, they are only trying to protect the routing and account number for accounts. The same routing and account number that is printed on their check and sent through us mail.
They agreed, this level of secure transmission is not required.
Thanks.....
I need to setup a folder structure with permissions to move data from an on site file server to Sharepoint. Users will be divided into five groups. Permissions will be handled at the group level.
Need to decide what approach to use regarding, home site, communications sites, and team sites.
@scottalanmiller said in Why IT certifications are worth more than you think...:
Doing a startup of your own is incredibly rewarding and insanely hard.
...and wouldn't trade the experience for anything!
@wrcombs I do! If you don't want to build it yourself, check out Dan's stuff at https://www.techandme.se/
Specifically: https://shop.hanssonit.se/product/nextcloud-vm-microsoft-hyper-v/
I started with one of his builds, then as I became more familiar and comfortable, I started building them myself on Hyper-V. Now I have a couple on AWS LightSail. I don't use Nextcloud for too much, it's mostly for my pics, notes, and bookmarks.
Jason
@pmoncho said in Powershell - Find GPO's for specific Group:
I thought it was going to be a one and done but believe I can use it more in the future so it will become an ongoing tool.
Ok. Cool. I did a quick search and found many examples that search the entire GPO for search strings. This would be fine for a quick and dirty one off script. But maybe not for something that goes in your tool bag.
Maybe these will help you get closer to your goal.
https://www.itdroplets.com/searching-gpo-specific-setting-powershell/
https://gallery.technet.microsoft.com/scriptcenter/Search-all-GPOs-in-a-b155491c
and one of my favorite Go-To sites for GPO ideas:
https://deployhappiness.com/searching-gpos-for-that-specific-setting/
I hope you find something helpful here.
I'm on to other things now. This one seemingly simple and casual question has resulted in a rise in blood pressure and anxiety that I find completely unnecessary and unproductive.
I have found no helpful or beneficial responses so far here. Only argumentative replies suggesting I have already pigeon-holed my demo tactic and that I chose wrong.
@magicmarker said in How do you guys handle counter offers?:
I was asked to write a job description for them to use for recruitment.
And of course you declined. ESPECIALLY since you have stated they have an HR department. This is their job,
@scottalanmiller said in Remote viewing software:
@JasGot said in Remote viewing software:
@wrx7m said in Remote viewing software:
@JasGot said in Remote viewing software:
We use ConnectWise Control (formerly ScreenConnect [SC]).
Honestly, I would be hard pressed to give any other option a second look. BUT, it didn't start out that way. In the product's infancy, and early in our learning curve, we only used its basic functions (which every other products offers too). But as we mastered it; and it became a more complex and flexible product, we have turned it into a be-all/end-all for RMM. The things we can do through SC would amaze you. Granted most of it is OS related, so it's not something SC magically provides, but the fact you can to it without ever seeing or connecting to the gui at the other end make it extremely valuable.
Are you using hosted or on-premises?
On premises. About 50 feet from me
Running on an Intel NUC
Windows or Linux? Windows runs better with lots of resources, Linux runs way better for us in cloud on a "per dollar" basis.
Windows. Runs great. About 3500 Clients in Access Mode.
@IRJ said in How do you guys handle counter offers?:
The fact that he is out of the one man shop and onto something bigger is an additional factor as well.
A HUGELY positive factor.
Just curious what you are doing to recover from a complete failure and breakdown of Nextcloud.
My NC is using S3 storage and is Cross Region Replicated with Revisions. As well as duplicated via a Desktop client with full sync.
The one thing that still worries me is the fact that the files are not stored with human readable (or even original) filenames. A non recoverable NC install leaves me without any idea of which file is which. Unless I am missing something......
What do you do to safeguard your data in NC?
+~$6.00 an hour.
12k/year isn't worth the risk included with this offer.
