If this is a terminal server you'll need to create a user based GPO then enable loopback processing so that a user GPO can apply to a computer.

using ssh to tunnel rdp is quite handy as well.

@DustinB3403 said in Question - how to use tar to compress multiple top level folders recursively into discrete zip files:

Supposedly tar -C /Volumes/Parent/Child/Target-folder -cvf Compressed.zip SelectedDirectory works. . . let me test that.

Okay so that does work, just is a pain in the rear to have to do manually.

So how we did it the last place I worked. We used a mix of X2Go, X-11 forwarding/MobaXTerm, and RDP. It depended on the user as to how they wanted to do it.

RDP gave them a full desktop since X2Go couldn't any longer on GNOME 3. X2Go gave them just applications from a menu to pick. People who were used to the cli used X-11 forwarding because it's what they were used to.

@mmicha said in Cyber Liability Insurance:

Just curious what others thoughts and take it on this new form of insurance. Are most starting to carry?

No, several reasons...

Insurance for something like this means that smart, secure, backed up companies pay for companies that don't protect themselves. So if you are competent, you get screwed. On average, the insurer makes money. That means that on average you don't just pay for the damages that happen, but for their profits on top of them. Those that carry insurance are much higher profile targets than those that do not as there is so much more to potentially gain. The likelihood of getting paid even when something happens is insanely low.

For the average company, cyber insurance does more harm than good.

Super helpful, Thanks!

For those who are curious, our international rates and their corresponding tiers are here:
https://files.skyetel.com/SkyetelHighCostPrices.xlsx

@dafyre said in Fix OpenVAS when not starting Scans:

You can also download & install using their ISO. They label it a "Virtual Appliance" for some reason. It's worked on everything I've thrown at it so far.

https://www.greenbone.net/en/install_use_gce/

I don't prefer it due to being harder to troubleshoot... since it is an older OS version and such.

@hobbit666 said in HCI vendors: software or hardware:

Or would you still look at another layer of backup/DR

A DR site is not the same as a backup. Generally those things are different.

@JaredBusch
Hi, Jared, if you need support from Fanvil, just let me know, here is my email ID: [email protected]

Nice! I was thinking about doing this soon.

@pattonb said in DNS PTR Record with 2 FQDN Entries with SPAM Check:

@JaredBusch incorrect, Scott has summarized succinctly

That is what you asked. But going with that is not what you actually wanted, then the answer to your original post is that you don't fix anything.

You whitelist the domain in question and move on.

The sender's ISP is in charge of setting the PTR record and there is not a damned thing you can do about it.

@JaredBusch said in Chocolatey not available after being installed through ScreenConnect:

I guess you could cycle the screenconnect client service. That should do the same.

This did it; thanks. It's the only working solution short of a reboot. I did not want to connect to the client with SC so I pushed a re-install, it was current, so it just went through the motions and restarted the services. Perfect for my needs.

@Emad-R said in Install OpenVas9 in Ubuntu Server:

@dbeato

the thing is openvas versions is all over the place, dont they have a new version 10 right now, a month ago it was on 8 .

It was 8 then 9 and the 10 version is GVM. I am testing it still but hasn’t been stable for me yet.

@FATeknollogee said in HCI (Scale, Starwind etc): vm layout:

@PhlipElder said in HCI (Scale, Starwind etc): vm layout:

I'm not sure what "Hyper-V partition" means.

I meant to say the host o/s partition.

I kinda gathered that is what it meant. Thanks for clarifying.

This reminded me of a tweet I seennot so long ago:
https://twitter.com/MarkWilkinsonNZ/status/1155931194925522944?s=19

It leads to here: https://adamtheautomator.com/pending-reboot-registry-windows/

@JaredBusch said in Windows Offline files won't sync:

I don't even bother to try anymore.

Make a copy outside of sync location. delete form sync location and hidden sync location make sure folder in solid sync put file back

Yup. Don't mess with it.

Drop a copy of the files in question into a \Temp folder then delete from the local and redirected folder, sync, and finally put it back into the local folder. Then sync again.

@scottalanmiller said in Bookstack Backup to S3:

@wrx7m said in Bookstack Backup to S3:

@dbeato said in Bookstack Backup to S3:

@wrx7m said in Bookstack Backup to S3:

@dbeato Are you running bookstack in AWS?

Not at the moment. I am just backing up to S3.

Look at Wasabi for S3 compatible object storage. Significantly cheaper.

Yup, can't think of any reason to use S3 unless you are hosted on AWS and aren't using it for backup but for production storage. And even then, not the majority of the time. S3 is too expensive and doesn't really offer anything except locality that is of any specific value. B2 and Wasabi beat it a lot.

Sorry, I posted this as S3 but I should change it to Wasabi. It is the same Idea for both.

As an "extender", you'd definitely need a parent of some sort.

@black3dynamite said in Where can I learn more about SSL certs?:

This is 5-part article about setting up your CA is pretty good.
https://devcentral.f5.com/s/articles/building-an-openssl-certificate-authority-introduction-and-design-considerations-for-elliptical-curves-27720

Blog posts on Altaro.
https://www.altaro.com/hyper-v/public-key-infrastructure/
https://www.altaro.com/hyper-v/wsl-offline-root-certificate-authority-windows-pki/
https://www.altaro.com/hyper-v/windows-ssl-certificate-templates/
https://www.altaro.com/hyper-v/request-ssl-windows-certificate-server/
https://www.altaro.com/hyper-v/view-revoke-manually-approve-certificates/

Thanks! I've started to read the info.