Have not seen any patching issues in the real world yet.

Yet....

Glacier. I have tried Crashplan with Synology and as @BBigford mentioned, it's messy, to say the least.

I haven't looked at B2 yet.

We can look at DevOps as an extension of Lean manufacturing, with extras added like the Toyota Kata, and modifications made in order to make with work better and make sense to software development.

It is a great case study of how to successfully apply Lean to a different industry, and a great many things can be taken from it in order to apply to other industries.

For example, I know of a botched implementation of applying Lean to healthcare, and I believe if a DevOps style route was taken, it would be more successful. DevOps isn't applying straight Lean itself but making modifications where it makes sense, and I think a lot of the modifications made by DevOps would make sense to other industries.

There is "Lean IT", but I would be wary of applying it without doing some studying on DevOps first, since I view DevOps as the gold standard of how to apply Lean to your industry (aside from the whole buzzword confusion)

@smitherick said in EdgeOS 1.10.0 final is released:

Cheers to UNMS.

Yeah, we are using it now, great stuff.

@bnrstnr said in XO behind proxy or exposed directly?:

nly web server I wanted to use, would there be any benefit at all of using a reverse proxy instead of just forwarding 443 directly to XO?

Still it would help for security purposes.

@thwr said in Solution for wireless audio / video to beamer:

Just ordered an Actiontec ScreenBeam 960a. Basically a Intel WiDi and Miracast-receiver. Got some pretty good reviews. Will post what I found while testing the device.

Order canceled for the moment, currently playing with AirServer

@bbigford said in .local vs .com:

@tim_g said in .local vs .com:

I've been working at a .local for almost 5 years now... no issues whatsoever, and no additional work required. No reason to change, probably never will unless a need comes up. We also use internal CA, for all users and public email... no issues there.

We've got a ton of clients using them from over the years. I just built a couple new environments this week and used ad.domain.com for them. It would help not having to deal with an internal CA.

Sometimes an internal CA is extremely beneficial in an AD environment.

In my case, there's hundreds of users in an AD/O365 environment. The internal MS CA does everything 100% automatically as far as certificate creation and distribution goes, including adding certs to the machine when they logon to another PC automatically.... (the certs follow them).

That would be a nightmare using something external.

Oh, I should mention that all certificates are using company.com... so being that the internal domain is .local has no effect on whether or not you must use an internal or external CA.

Just setup Veeam Backup for Office 365 and going to give it a test to try and avoid this scenario.

@black3dynamite said in Least Privilege Accounts Setup:

@zachary715 said in Least Privilege Accounts Setup:

@jaredbusch said in Least Privilege Accounts Setup:

@jaredbusch said in Least Privilege Accounts Setup:

@zachary715 said in Least Privilege Accounts Setup:

@jaredbusch said in Least Privilege Accounts Setup:

I create an AD account specifically for local admin rights.

This account information is ususally given to department managers.
So if software or something needs installed, and they choose not to contact me, they can.

They are also warned that fixing something will be billed...

So you have one AD account setup that multiple department managers use when they need something that requires admin privileges? And then what you give that account local admin rights on each machine, or give it some sort of admin authority within the domain itself?

That account gets local admin rights only. No other access.

If I was an on site IT department, I woudl probably do it a bit different. I would have time to experiment and setup better methods.

Yeah this is what I'm going through now and why I'm coming to the community to get input. Trying to think through this carefully and make sure I do it right and the way I want it done the first time.

With the help of GPO Preferences, you could take advantage of using Item-level targeting for Local Users and Groups to fine tune who should have local admin privileges depending on the user, groups and/or computers.

This is what I do. Works like a champ.

@dbeato @JaredBusch thanks for the info. If I get time might give it a go over the weekend. Otherwise job for Monday morning

In Firefox, would adjusting one of these help with the timeout issue on SodiumSuite?

about:config
0_1518194823908_firefox-http-connection-timeout.png

Fun fact, I have been using UNMS on EdgeSwitch since 1970..

0_1518138848179_a1c4c795-a447-4a9a-affc-ae9c49068f03-image.png

I've not seen this, either.

That's a bunch of lol...what?

SFTP is definitely just fine. Keep it simple 🙂

@wls-itguy said in Windows laptops stuck at 1709.192 update.:

What in the #&#

Great! BTW, I read a while ago that WSUS was going away? Yet today in my searches for this issue I see that it is indeed still alive and well on 2012 servers? Did I dream that WSUS was going away?

It often should go away, but I don't know that MS is taking it away.

Yes, that requires moving to Standard licensing, and yes, it will be quite costly.

Can you show us the ping output?