@scottalanmiller said in Dell MD1220 RAID 5 Rebuild Question:

@Jimmy9008 said in Dell MD1220 RAID 5 Rebuild Question:

@scottalanmiller said in Dell MD1220 RAID 5 Rebuild Question:

@travisdh1 said in Dell MD1220 RAID 5 Rebuild Question:

That makes a little more sense. They've negotiated a deal with Microsoft from the sounds of it.

No, way, way more likely they just figured out how hard it is to get caught.

I totally doubt anything like that is going on here. I have been told our annual budget for licensing which we pay is in the region of £600,000. Either way, not my problem 🙂

Wow. But, sounds like only that high because they don't know what they are using, lol. The only way to get licensing truly down is to know what you use. Someone is both ignoring what is used, but also encouraging unlimited use. Both things set MS up to just keep making it more and more expensive. It's a trick, sounds easy, but makes one lazy licensing person encourage not keeping licensing lean - basically giving Microsoft the power to charge anything that they want down the road.

Yeah, not your problem, but definitely a symptom of management issues and a lack of clear thinking. If they are truly paying their bills, my guess is a licensing "specialist" who has created their own job and knows if MS isn't used heavily, their job would go away, so is doing stuff to encourage you to lock in MS so that that specialist can't be eliminated. Basically creating their own job.

Yeah, I don't disagree with anything you said. It's just not my issue. I still get to buy shiny new toys 🙂

@JaredBusch said in Repo issues with Freepbx:

@scottalanmiller said in Repo issues with Freepbx:

Been going on for several days.

No it hasn't.

It has, we started getting the error several days ago.

@JaredBusch said in Yealink T46S Double Tap while on Conference call:

@CCWTech said in Yealink T46S Double Tap while on Conference call:

@JaredBusch said in Yealink T46S Double Tap while on Conference call:

DTMF

Is that on the ext in advanced? It's set to RFC4733

Both the Phone and Asterisk have settings for this. They need to match.

They do, we checked that last night.

@DustinB3403 said in How to configure SSH Keys for Nessus:

Isn't this step redundant?

sudo mkdir /home/scan_user/.ssh sudo chown -R scan_user:scan_user /home/scan_user

As ssh-keygen will create these directories and set the ownership?

It certainly does on Fedora.

@Romo said in Deploy Active Directory via PowerShell:

Great Job @EddieJennings !!, Really liked the flow and tempo of the video 😃

Thanks 😄

Is this an onboard controller or an external? A typical external RAID controller (and some internal) have a BIOS that loads on POST which may show you whether it's active or not.
Otherwise, most BIOS post messages display the IRQ info of onboard components during boot so you should technically see a SATA/SAS/RAID controller there.

I'd suspect the drive or corrupt boot loader first.

What OS is this?

@scottalanmiller said in FreePBX Asterisk crash:

@WLS-ITGuy said in FreePBX Asterisk crash:

Since Tuesday evening our phones intermittently have been showing 'No Service'. I did some searching and couldn't find anything. Decided I might roll out Asterisk 15 and found this:

You want 16, not 15, if you are updating. 15 is one version old and not LTS. 16 is both current and LTS, so definitely the way to go.

Asterisk 16 removes some long depreciated commands that break third party tools like FOP2.
https://mangolassi.it/topic/19244/issues-with-fop2-and-dnd-on-asterisk-16

@IRJ said in Cannot SSH using public key:

RSA key working on Nessus, too. Thanks @DustinB3403 for calming me down

You're welcome.

A good workflow would be using Packer to build your immutable images with Ansible. That way you don't need to log into the image, just make a new image with your changes using the same process, and then deploy those images with Terraform.

Like this.

be78d39b-4bf6-4b74-a15e-ec044e88ed03-image.png
04f1585b-838d-46eb-826c-be15fd766645-image.png

@Pete-S said in Getting ready to spec new desktops:

The A chips are probably AMD's A-series desktop chips.
https://www.amd.com/en/processors/athlon-and-a-series

Those are what we use when we say that we use AMD chips. AMD A9 and A10. They are perfect for business desktops that aren't like CAD stations or whatever. I use the A10 myself. I'd really like to move up to the new A12. Ryzen is more for video game or high performance workstation usage, not standard office work. The A series are, IMHO, ideal for the average office worker (which includes IT people.)

Just a reminder that on new threads of this nature, no links allowed to any services or products. This is a non-promotional thread. None have been posted, it's just a reminder. Thanks!

@Vlinderbeest said in Infrastructure Needed for Hypervisor Cluster:

@scottalanmiller said in Infrastructure Needed for Hypervisor Cluster:

Clustering is done when the cost of clustering is low versus the risk of not clustering.

I would change that slightly to Clustering is done when the cost of clustering is low versus the cost of not clustering. A risk is always a cost, but some costs are not risks. For example taking down a hypervisor for maintenance vs moving guests to another node and taking down a free node for maintenance.

Sure, using risk cost vs investment cost as cost v cost is a perfect valid way to look at it. I use that all the time in the opposite way.

You can say that risk is a cost. Or conversely, you can look at the clustering cost up front as essentially a "financial event" similar to an outage.

@IRJ said in Can someone help explain this alias part to me?:

@travisdh1 said in Can someone help explain this alias part to me?:

@IRJ said in Can someone help explain this alias part to me?:

This is actually a decent explanation of what I am trying to do:

https://community.spiceworks.com/topic/108735-scanning-linux-devices-with-non-root-user

That original one, while technically correct, seems purposely made more difficult to me.

Ugh, that 🌶 thread, don't name your custom script the same thing as the program being run, FFS.

This is where I have to ask, what exactly are you trying to accomplish? Just grab system information with dmidecode, or something different?

https://www.tenable.com/blog/configuring-least-privilege-ssh-scans-with-nessus

All right, not the greatest tutorial/how-to ever. You should only need a single user to accomplish this, so the whole group and alias conversation is pointless.

Just follow the rest of that tutorial, adding only the needed programs to the sudoers file.

nessus_user ALL=NOPASSWD: /usr/bin/program1, /usr/bin/program2

Worth noting that using rsync worked very well, but there were issues with the Outlook profile on the existing user workstation and the end result.

Not a huge issue for us as everything is stored in O365, but worth being mindful of if your email was hosted locally.

Also because of username convention changes, I had to set the ownership of the user profile to match the new shortened name.

@black3dynamite said in Windows Server 2019 Need to Download and Run without AV Deleting Files:

https://www.thomasmaurer.ch/2016/07/how-to-disable-and-configure-windows-defender-on-windows-server-2016-using-powershell/

For now, just temporary disable Real-Time Protection via PowerShell
Set-MpPreference -DisableRealtimeMonitoring $true

Download the executable and scan it manually before you install
Start-MpScan -ScanPath C:\datastore\file.exe -ScanType QuickScan

Enable Real-Time Protection after the install
Set-MpPreference -DisableRealtimeMonitoring $false

Excellent, now THAT did it.

@pmoncho said in The Hidden Cost of Licensing Windows Server - Activation:

@scottalanmiller said in The Hidden Cost of Licensing Windows Server - Activation:

Just looking at this with a customer that just put in a new Windows 2019 server. The machine was purchased with a volume license agreement for Server 2019 Standard. Everything should be super easy, in theory. Problem is, license key from the volume license center doesn't work. We spend a bit of time trying to get this to apply, but no luck.

I have run into a similar situation this morning and not being able activate the VLSC liscense.

Before I decided to call MS and getting frustrated, I was able to activate from an elevated command line.
cscript c:\windows\system32\slmgr.vbs /ipk <product key>

Throwing this out here in case someone comes along this post at a later time.

I've heard that that often works. We had tried that in our case and it had failed.

Turns out it is just the disk number in Disk Manager.

@Jimmy9008 said in VLAN on Dell N4064 Stacked:

Im guessing 'U' is fine. As I want vLAN2 to pass traffic where the device has already set vlan2 in its NIC. If the LAG is set to 'T', all traffic will be set to vlan2, right? Even when from vLan1/default...

I think it's better to tag every vlan in both ends. Then you can be certain traffic ends up on the same vlan on the other switch stack.