• Serverracks

    Solved
    6
    0 Votes
    6 Posts
    1k Views
    dbeatoD

    @thwr said in Serverracks:

    Oh, yep. Funny story. Our hardware distributor (Hardware in the sense of screws, tools, metal etc.) told us about Schaefer IT, a German manufacturer.

    Ordered three of them without doors. Should arrive in a few days.

    Awesome!

  • Updating ADMX Templates

    9
    0 Votes
    9 Posts
    1k Views
    dbeatoD

    As long as it is on the SysVol\Policies\PolicyDefinitions folder then you should be fine.

  • Flushing GPOs

    Unsolved
    13
    0 Votes
    13 Posts
    2k Views
    thwrT

    @thwr said in Flushing GPOs:

    @dbeato said in Flushing GPOs:

    You need to setup the settings to Delete or changed to not configured, wait until it applies and then delete the GPOs after confirming they are not applied any longer.

    Get-Content c:\temp\gpos.txt | foreach { Get-GPO -Name "$_" | Remove-GPO }

    http://jeffwouters.nl/index.php/2013/08/remove-group-policy-objects-through-powershell/

    I bet you could do something like this to set all GPOs to "on delete remove from client" too

    This assumes a txt file with all GPO names. You could also just use Get-GPO

  • ais_spo.exe Error from SAP?

    5
    1 Votes
    5 Posts
    700 Views
    dafyreD

    Got any details about the crash in the windows logs?

  • 2 Votes
    2 Posts
    8k Views
    bbigfordB

    @scottalanmiller said in List All Public Folders in Exchange or Office 365 with PowerShell:

    Want to get a list of all of the public folders on your Exchange system, whether on premises or hosted, try this:

    Get-PublicFolder -Identity "\" -Recurse | Get-PublicFolderClientPermission | where{$_.Accessrights -eq "owner"}

    More on Get-PublicFolder from TechNet

    That's pretty cool. I was wondering why you were piping into every owner since you could create public folders in Exchange without delegating owners, but then I had remembered you can create them on the client side as well after a root or folders are created in Exchange and added to the client, which is explained in your first pipe. Thanks for the note.

  • Fedora Update Breaks httpd

    18
    1 Votes
    18 Posts
    3k Views
    NashBrydgesN

    @jaredbusch said in Fedora Update Breaks httpd:

    So, if you followed the original instructions, you can use this to fix it.

    sed -i "s/access\.log/httpd\/access_log/" /etc/httpd/conf.d/bookstack.conf

    Then start apache.

    systemctl start httpd

    As always, thanks @JaredBusch that fixed it for me as well.

  • RAID5 Still The Go-To Setup For SSD?

    28
    1 Votes
    28 Posts
    7k Views
    dafyreD

    @mattspeller said in RAID5 Still The Go-To Setup For SSD?:

    @jaredbusch said in RAID5 Still The Go-To Setup For SSD?:

    @hobbit666 said in RAID5 Still The Go-To Setup For SSD?:

    @nashbrydges Nice looking rack 🙂

    old school actually with round holes. do not see that much.

    I'd gladly trade the round holes for my square hole racks with the nutcerts that have me impaling my hand with a screwdriver a few times a year.

    Hear hear!

  • Ultra Cheap VPS Providers

    25
    1 Votes
    25 Posts
    3k Views
    scottalanmillerS

    @dafyre said in Ultra Cheap VPS Providers:

    @aaronstuder said in Ultra Cheap VPS Providers:

    Was going to give Contabo a try, but then this happened...

    0_1520258963359_cb2e3435-1063-4308-b8dc-43beb1b8a541-image.png

    No thanks....

    Not sure I see the issue here. The only Payment provider I'm not familiar with is Moneybookers. The others are legit AFAIK.

    Paypall is fine. WU is.... expensive.

  • Storage and Data Locality

    30
    0 Votes
    30 Posts
    4k Views
    scottalanmillerS

    @aaronstuder said in Storage and Data Locality:

    @stacksofplates Wow, rsnapshot looks good.

    It's a very good.

  • SPF issues

    13
    1 Votes
    13 Posts
    1k Views
    dbeatoD

    @bbigford said in SPF issues:

    @dbeato said in SPF issues:

    @bbigford said in SPF issues:

    @dbeato said in SPF issues:

    @bbigford said in SPF issues:

    @dbeato said in SPF issues:

    @bbigford said in SPF issues:

    @dbeato said in SPF issues:

    @bbigford said in SPF issues:

    @dbeato said in SPF issues:

    @bbigford said in SPF issues:

    This one is stumping me. I resolved another engineer's issue, but I don't see why there was an issue to begin with. Here are some high points:

    On-premises Exchange server. Another provider needed to be added to SPF, as they are a service that sends on behalf of the client's domain. v=spf1 mx a include:exchange.ourdomain.com include:mail.sendingproviderdomain.com ~all Above SPF record was present when issue was happening. I looked up their spf record, which was v=spf1 ip4..... many IPs. PTR for exchange.ourdomain.com resolves, using MXToolbox. Forward lookup is fine as well. Removed mx a include:exchange.ourdomain.com and added ip4:<OurPublicIP> v=spf1 ip4:<OurPublicIP> include:mail.sendingproviderdomain.com ~all

    What I don't get is why the first SPF doesn't check out. There is a PTR record in GoDaddy, and a host record pointing at the correct IP. SPF should read "any MX records, and IPs, for exchange.ourdomain.com are allowed to send; including a provider, and for spoofing there will be a soft fail".

    Where am I wrong?

    SPF does not neck the mx records of the includes, it checks only the A and MX records of the domain with the SPF record. You should add the SPF record of the exchange.ourdomain.com Email Servers (Namely Office 365, G-Suite or any other email vendor).

    On-prem Exchnage. I also saw a vendor that has theirs written as mx:<email.domain.com>... I've saw some written with a:<hostname> but not mx: ... Didn't know that was a thing.

    So how would you write an spf record for our instance to have validation? It works now with the public IP, but I can't figure out why the FQDN doesn't work.

    Is your exchange.ourdomain.com hsoted elsewhere than Internally?

    Hosted? I'm not sure I understand the question. It's internal Exchange, record is in GoDaddy.

    Yeah, l was wondering if it was Office 365 or same type outside the office. But in short having include:exchange.domain.com it is looking for all the SPF records on that subdomain which causes the failure on lookup.

    Why does that cause a failure? Can you explain a little further?

    Okay, so this is the SPF you had and was failing

    v=spf1 mx a include:exchange.ourdomain.com include:mail.sendingproviderdomain.com ~all

    Now this record was stating that the following records were allowed to send on behalf of your domain:
    1-The MX records of your domain
    2- The A records of your domain
    3- The SPF record of exchange.ourdomain.com
    4- The SPF record of mail.sendingproviderdomain.com.

    Since you did not have an SPF record for exchange.ourdomain.com it was failing to register that as an allowed Sender.
    If you wanted to include the exchange.ourdomain.com on your SPF it should be as below:

    v=spf1 mx a ptr:exchange.ourdomain.com include:mail.sendingproviderdomain.com ~all

    A PTR is what search for domain names on the SPF.

    See more here:
    http://www.openspf.org/SPF_Record_Syntax#include
    http://www.openspf.org/SPF_Record_Syntax#ptr

    Thanks for the clarification. At a very basic level, would it be correct to say include:exchange.ourdomain.com is creating essentially a circular lookup, since the SPF record there includes a sub domain that it is already trying to look up? Because of that reason, ptr:exchange.mydomain.com is looking at the IP... I could put ip4:<ourPublicIP>, but if I put ptr:exchange.mydomain.com I can change the public IP lookup in less places... this being one less place.

    Is my thinking correct?

    Yes, your thinking is correct.

    Cool, thanks.

    You got it anytime.

  • 1 Votes
    40 Posts
    4k Views
    stacksofplatesS

    Here's using duperemove. It's annoyingly verbose so I can't get the output and the command in the same screenshot.

    0_1520205045861_cp noref.png

    I ran

    /tmp/duperemove/duperemove -hdr --hashfile=tmp/stuff.hash /mnt

    And got

    0_1520205120120_afterdedup.png

  • TPM vs PTT

    2
    2 Votes
    2 Posts
    6k Views
    scottalanmillerS

    PTT is a way of provider TPM, they are not two separate things. PTT is a non-dedicated hardware approach to TPM 2.0. PTT is designed for low power devices, often used in industrial computing.

    Traditionally TPM requires a TPM module, a dedicated hardware processor and firmware for security. With TPM 2.0 dedicated hardware is no longer required. PTT is Intel's implementation of TPM 2.0 for low power systems.

  • 5 Votes
    2 Posts
    1k Views
    scottalanmillerS

    Transcript:

    Today what I want to talk to you about is a standard pattern for developing bespoke or in-house custom software for
    the small business market. in SMBs it's relatively common that someone wants to make a small application, and
    traditionally we used things like MS Access and some stuff like that to do this. And that's been less than ideal, and I think
    most people understand that they don't want to do that, but a lot of people don't know where to go other than "not
    Access" and that leaves some problems as you can kind of skew off in all kinds of directions as you try to figure out what
    you should do rather than focusing on what you shouldn't. One of the problems here is that there are so many
    ways you can make this work, but there's only so many that really make sense in the majority of circumstances and that's
    why we kind of have a standard standard pattern.

    It's not a best practice, it's nothing like that, but there is a pattern of how to approach this as kind of a baseline of "unless you have a reason not to do things this way consider that this is probably the way to do it", and what that is is want so a couple things: one - your application is going to be web-based unless you have a really strong technical reason why it can't be and you'd better be sure about that. It's going to be web-based - that's what a modern application looks like and it's
    what a modern application has looked like for a long time. Do not assume that you're going to start with something
    else and only go web-based if you have to; it's you assume you go web-based you're going to have a web interface and
    there are situations where that doesn't apply, but don't start somewhere else start with the baseline move away from
    it where it's applicable to do this.

    The language of choice if you are not already a competent programmer in some specific language is PHP; not because PHP is the most amazing language ever, not because PHP provides us all kinds of technology we don't have other places,
    but because it is simple, it is universal, it is very functional, it is custom designed for this exact use case, and it is super easy to find people with experience in PHP to help you whether it's online or you've got to hire someone or your company needs to maintain this in the future. For all of those purposes PHP is the ideal language, not only that but if you need to hire PHP they tend to be lower in cost than a lot of other languages.

    You are neither constrained because it is a language that is very hard to learn or very obscure like f-sharp or Ocaml or
    something like that, nor are you charged a premium because you're dealing with a language that is archaic and the only
    people who would be using it or people who are trapped with it say COBOL or Fortran or Visual Basic. So PHP really
    fits into a perfect spot here where it meets all the checkboxes that you would reasonably have for a normal business
    application.

    If you need something other than PHP chances are you will know and it won't actually be that you need something else it's that something else will have a specific benefit that makes sense. For example Ruby on Rails - you may already know Ruby or you may be interfacing with other Ruby components - so Ruby on Rails might make great sense or you may be a Python developer already and Python with Django just fits your needs. All that's fine, but if you don't have something driving you to some other language assume PHP.

    One of the really big reasons for this as opposed to say C# or VB.NET that a lot of people feel might be easier to use one PHP is easier to it's more universal in three it doesn't provide any lock in whether real or perceived to an expensive
    proprietary platform. PHP allows you to deploy whether to a platform as a service provider or to your own systems
    whether there are free ones or paid ones or whatever. It provides you the flexibility in the future to do what's needed - even if you have things today that lock you in that doesn't mean you should invest into that technical debt.

    If you're making a new investment in new code it should be towards something that gives you the freedom to do what you
    need in the future this is just basic protections basic best practices around developing don't create lock-in without very clear reason to justify it and sometimes even with very clear reason really really work hard to justify that locking is a terrible thing. So we also assume with the rarest of exceptions that your application is going to need a database to hold the data on the back end. Not always true, but certainly most times if you don't need one just don't use one. If you do need one look to MongoDB or MySQL as a lot of people have used that in the past, MariaDB is kind of where
    the development is going in the future. A lot of the the best platforms or the most common platforms have moved to
    MariaDB from MySQL for those who are not aware MariaDB is a drop-in replacement for MySQL. Don't don't consider those two different products. Just if you're if you're getting one go check out MariaDB to get that it that's really ideal if
    you need a relational database that's on the the slightly leaner side. It is fast and easy and lots of people know it, but
    it's it's not the most robust it's pretty robust it's a good platform but if you need a really powerful robust database or you're really versed in this one PostgreSQL is the other really awesome choice.

    Both of these are all three of these really are completely free you have unlimited open source options. You can deploy to Windows, you can deploy to Linux, you can float deploy to BSD, you can deploy them Solaris, you can put it on Mac, you have no lock-in. You can put it wherever makes sense including unlimited free platforms and hosting without limitations. So you are free and clear to do what you need to do. That said it's also important to consider that relational databases may not make sense to you for you for your project. A lot of things don't people jump it to that a lot of times when they're making internal software and PHP specifically is super easy to work with MySQL or MariaDB. Most documentation kind of
    assumes that that's what you're going to do there are loads of NoSQL options out there such as Redis or MongoDB or
    Cassandra, all kinds of things, and they may make great choices for you, depending on the type of data that you're going to
    be storing.

    If you're making a really simple application you're probably going to lean towards traditional relational databases not because they make sense, but because they're easy and assumed but if you're doing a lot of things, especially if you're doing distributed software where you may need to handle like failover or unbelievable performance or geographically disparate locations, a lot of NoSQL options may be very very appropriate for you. And remember it is actually high complexity that tends to push you towards relational databases and simplicity that pushes you away - that's not a given thing, but like for example Redis is a key value pair database so it tends to be very good for extremely basic use case
    whereas something like MongoDB is a document database and it's very very good for document style data great for
    light posts on a website or tracking assets things like that it tends to be very very strong.

    Whereas relational data but relational databases tend to be very good for financial data where you need really really strong relations between lots of different actors and objects. So there's a lot to choose from there, but make sure when you're looking at your database and your platforms that you're looking at things that are not going to lock you in unnecessarily for the future, because that will cost you potentially an extreme amount of money because what is minor technical debt today can be crippling technical debt just a year or two down the road. And when your successors come they may be very unhappy to find that you are in a situation where you've created an amount of debt that will cost them more than recreating the project to get away from.

    So that's just a baseline to start with and I think really gives a strong almost every time we have a conversation which is
    pretty often about how people are going to approach a problem like this the answer really comes out to being PHP and
    bring a DB it's free, it's easy, there's so many resources for it, there's always someone to help you, it's a good place to
    start only vary from that if you find your reasons you have to.

  • GDPR - does anyone know where to start!?

    4
    1 Votes
    4 Posts
    951 Views
    matteo nunziatiM

    In my last job a horde of consultancy companies proposed gap analysis to us. That's a good starting point. Then you just need to be prdpared to spend a lot in useless stuff.

  • Download OneNote Files from Sharepoint

    33
    0 Votes
    33 Posts
    8k Views
    scottalanmillerS

    @jaredbusch said in Download OneNote Files from Sharepoint:

    Pop a Windows 10 VM
    Then you have two choices. The built in one note app and also install office current version and use the one note app there.
    I suspect that will be the only workable method.

    Danielle was trying it with the full client. I'm the only one attempting it with only the web one.

  • Anyone Ever Outsource Help Desk Level 1?

    21
    2 Votes
    21 Posts
    2k Views
    scottalanmillerS

    @tim_g said in Anyone Ever Outsource Help Desk Level 1?:

    We tried it with a supposedly big and good MSP.

    It didn't go well. Response times were horrible, issues didn't get get taken care of properly, their software was a big PITA on all endpoints and servers.... just to name a few.

    Did they pay for dedicated helpdesk or try to go cheap with a "pool" where you are just mixed in with all other calls?

  • How do I price PaloAlto a subscription

    3
    1 Votes
    3 Posts
    821 Views
    NashBrydgesN

    Sorry can't help but...damn! A price list that's 130 pages?

  • 0 Votes
    17 Posts
    1k Views
    scottalanmillerS

    __61a4ac30b486d0d0a7eb26f971546655_width-600.jpeg

  • NextCloud Update Issues

    4
    1 Votes
    4 Posts
    2k Views
    scottalanmillerS

    @black3dynamite said in NextCloud Update Issues:

    Another SELinux issue?

    Would not be likely as SELinux issues would not be intermittent.

  • How to Generate a UUID on Solaris

    3
    2 Votes
    3 Posts
    1k Views
    scottalanmillerS

    I was pretty surprised to find that uuidgen was not available, not even available for install!