@JaredBusch said in What is the best workflow to setup VitalPBX:

So I spun up an instance and deleted it again.

There is just too much work involved in getting something actually live in a new framework.

Can you elaborate a bit? Too much work how? Too much manual labor? Not as easy as FreePBX?

The reason I ask is it is time to replace our PBX server and I was thinking of going with VitalPBX to test a side by side but if it is more labor intensive than backing up and restoring FreePBX I may just stick with FreePBX.

I use Facebook as a way to keep in touch with family and friends who don’t live close to me. I use FB Messenger to talk to my wife throughout the work day. If I wasn’t in IT I doubt I’d have a phone with internet. I’d prefer to be disconnected from the world. I’d rather be on my boat fishing all day.

@DustinB3403 said in Account getting locked out:

@WLS-ITGuy said in Account getting locked out:

@DustinB3403 said in Account getting locked out:

Any services or scheduled tasks that might be setup under this account?

Possibly, however the password hasn't changed in the last 30 days that it would cause this.

Then something was turned on recently that is using a password older than 30 days.

Nope. Turns out I had a couple servers that I was giving RDP remote access to another vendor for them to migrate to a new server and I forgot to turn off RDP.

@DustinB3403 said in Account getting locked out:

Any services or scheduled tasks that might be setup under this account?

Possibly, however the password hasn't changed in the last 30 days that it would cause this.

@DustinB3403 said in Account getting locked out:

Do you use RADIUS, if so did this user change their password recently?

No RADIUS

I have an account that is getting locked out every 10-15 minutes. Is there a way to see where the login request is coming from? I powered down the machine I thought the request was coming from but the account still gets locked out.

@pmoncho said in GPO issue:

@WLS-ITGuy said in GPO issue:

@Dashrender said in GPO issue:

I would change this up by applying your GPOs to the OU above these WLS OUs, then set filters to only apply to the users you want.

So in the case of the Library, you've already created a security group, so you'll grant permissions to that group.

Then you'll need to create a WLS-Faculty security group and do the same with it's GPO.

So the GPOs would be at 'domain level' not in the OU level...Like this?

Then I apply the security groups from there? That makes sense.

Correct. Now any user in the Domain (aka located in any OU), within the security group you created should have the GPO applied.

Side note - I ALWAYS make sure I set security filter BEFORE I enable the GPO. The last thing you want is some user logging in after you save the GPO and getting access to items they should not.

It's funny you mention that...

@Dashrender said in GPO issue:

I would change this up by applying your GPOs to the OU above these WLS OUs, then set filters to only apply to the users you want.

So in the case of the Library, you've already created a security group, so you'll grant permissions to that group.

Then you'll need to create a WLS-Faculty security group and do the same with it's GPO.

So the GPOs would be at 'domain level' not in the OU level...Like this?

Then I apply the security groups from there? That makes sense.

@Dashrender said in GPO issue:

@WLS-ITGuy said in GPO issue:

I have a user who is in the Faculty OU

OK that's pretty straight forward

but is part of the library group as well.

How is the user part of the library group?

I created a library security group under the Library OU that has all employees that are workers in the library.

@EddieJennings said in GPO issue:

@WLS-ITGuy said in GPO issue:

@EddieJennings said in GPO issue:

@WLS-ITGuy said in GPO issue:

@scottalanmiller said in GPO issue:

@WLS-ITGuy said in GPO issue:

@JasGot said in GPO issue:

@WLS-ITGuy said in GPO issue:

It isn't being applied.

How many Domain Controllers?

2 - Checked both and both show the correct GPO

Check from a client machine, though, too.

Hmmm. Not hitting the client machine.

Meaning it's not listed when you run gpresult /r (or gpresult /r /scope:computer), or it's listed but not being applied?

gpresult shows the Faculty GPO as being applied but not the Library GPO

What's the listed reason for it?

Where I am, unknown reason, is usually because of inheritance blocking, but from the screenshots how shared, that's not going to be the issue.

Correct. I do not get any Not Applied (Unknown Reason) errors or Denied errors.

@WLS-ITGuy Library GPO v2 was a start fresh GPO to test if it was something with the way I did the first GPO but nothing has changed. Security Filtering is set to Authenticated Users.

The Faculty GPO is set the same way as the Library GPO with Security Filtering. And the two mapped drives attach just fine.

@flaxking said in GPO issue:

So the library GPO is linked somewhere above this user's OU and is using security filtering to apply to the library security group only?
Have Domain Computers been given read permission?

List of GPOs:

GPOs in the OU:

@flaxking said in GPO issue:

So the library GPO is linked somewhere above this user's OU and is using security filtering to apply to the library security group only?
Have Domain Computers been given read permission?

Not sure if I understand your questions exactly, I'll post some screenshots when I get back in the office.

@EddieJennings said in GPO issue:

@WLS-ITGuy said in GPO issue:

@scottalanmiller said in GPO issue:

@WLS-ITGuy said in GPO issue:

@JasGot said in GPO issue:

@WLS-ITGuy said in GPO issue:

It isn't being applied.

How many Domain Controllers?

2 - Checked both and both show the correct GPO

Check from a client machine, though, too.

Hmmm. Not hitting the client machine.

Meaning it's not listed when you run gpresult /r (or gpresult /r /scope:computer), or it's listed but not being applied?

gpresult shows the Faculty GPO as being applied but not the Library GPO

@scottalanmiller said in GPO issue:

@WLS-ITGuy said in GPO issue:

@scottalanmiller said in GPO issue:

@WLS-ITGuy said in GPO issue:

@JasGot said in GPO issue:

@WLS-ITGuy said in GPO issue:

It isn't being applied.

How many Domain Controllers?

2 - Checked both and both show the correct GPO

Check from a client machine, though, too.

Hmmm. Not hitting the client machine.

There you go

I kind of knew that part but If I only knew why...

@scottalanmiller said in GPO issue:

@WLS-ITGuy said in GPO issue:

@JasGot said in GPO issue:

@WLS-ITGuy said in GPO issue:

It isn't being applied.

How many Domain Controllers?

2 - Checked both and both show the correct GPO

Check from a client machine, though, too.

Hmmm. Not hitting the client machine.

@JasGot said in GPO issue:

@WLS-ITGuy said in GPO issue:

It isn't being applied.

How many Domain Controllers?

2 - Checked both and both show the correct GPO

@scottalanmiller said in GPO issue:

Have you checked your "resultant" situation to see if that one is even applied?

It isn't being applied.

Here is the properties of the GPO mapped drive

@WLS-ITGuy I know it might not be enough info but didn't want to take screenshots and give too much info