@thwr said in DCs out of sync:

@Dashrender said in DCs out of sync:

@thwr said in DCs out of sync:

No substantial changes have been made during the last couple of weeks. Just a few new users and password changes plus maybe 2 or 3 new machine accounts. Some clients and servers now refuse to authenticate users during login due to the well known "trust could not be established between..." error.

Where you still getting those errors after you powered down the broken DC? I'm guessing not since you moved forward with the install of another DC.

Nope. Only "missing that other DC" errors now, which is fine. I've got some crappy internet connection (free WiFi in the train, next to no 3G/4G signal) here and can't check the current state. but it was fine half an our ago.

OK, reading your OP, it seemed that you were getting those errors after turning off the broken DC, but since you're not - seems like you found a good solution.

Nice writeup @shannon

@DustinB3403 said in Domain Controllers - Always rebuild if an domain issues occurs:

@scottalanmiller said in Domain Controllers - Always rebuild if an domain issues occurs:

Most people, I think, just assume that a DC is going to be all alone on its VM - so they discuss it in terms of blowing the whole thing away just as a knee jerk reaction.

Isn't a dedicated DC VM (classically physical) the better approach so you could literally just blow away the VM?

Right, which is why people just assume that that is what has been done.

It's true that you can make stateless systems without DevOps tooling and approaches. But the nature and assumptions of those systems is that you cannot. Just letting arbitrary logins (even of administrators) can undermine that. One of the beauties of the pure DevOps model is the lack of logins. Much like functional programming.

Can't reply on SW, it's having one of its "this thread won't let you respond" hiccups.

Location matters very little. I would stick to the standards.

also kolourpaint4

@scottalanmiller said in Amazon released Chime, skype alternative:

@art_of_shred said in Amazon released Chime, skype alternative:

Logged in. Fixed in 5 seconds. Tested functionality to confirm success. Left. NO idea what was keeping that from happening when you tried to do it, but it gave me no issues.

Only thing I can think of is that Microsoft switched my account this morning, so this might be a new one. Only change that has been made in a very long time, maybe two years since MQ took over managing my account.

Yeah, it "magically" worked for me suddenly because MS made a change this morning... 😛

@wirestyle22 said in How Much Data Do You Have:

@BRRABill said in How Much Data Do You Have:

@scottalanmiller said in How Much Data Do You Have:

@wirestyle22 said in How Much Data Do You Have:

@scottalanmiller said in How Much Data Do You Have:

@wirestyle22 said in How Much Data Do You Have:

@scottalanmiller said in How Much Data Do You Have:

@wirestyle22 said in How Much Data Do You Have:

@scottalanmiller said in How Much Data Do You Have:

@wirestyle22 said in How Much Data Do You Have:

About 20 TB total

What kind of data?

Security Camera videos, Office Data, High Res Imaging (City Planning), Marketing, Documentation, the list goes on

You take backups of security camera video?

It's body worn cameras for police 😄

And those are backed up?

they have to be. they can be referred to for decades

Those two things are not related. Have to would be a compliance question. Being referred to for decades is about storage, probably archival, not backup.

You always discus the differences in these terms, but what @wirestyle22 mentioned would be a good thing to start a topic with and do some real world discussions.

It would be difficult because I'm still learning everything here. There are so many sites and they are all using different things. A lot of alternate configurations.

What I meant was ... something like you suggested. Not necessrily YOUR scenario, but sa smilar one.

Security footage that needs to be maintained for 10 years.

What kind of system is @scottalanmiller talking about...

@Breffni-Potter said in Slideshow wordpress theme:

Sliders are the spawn of evil. Why do you need sliders? They increase load time, and really glitchy.

Managing the one the devs put on our website is nothing but a pain. Looks nice tho, and keeping all the graphics slider images super super tiny doesn't hit load times to badly. At least it hasn't yet knock on wood

They are going to integrate LetsEncrypt, too.

On one hand....

14j7zau.jpg

On the other hand....

53993717.jpg

@Minion-Queen said in Interesting Issue with Waze Arrival Notifications:

@coliver said in Interesting Issue with Waze Arrival Notifications:

What is this traffic thing you speak of?

I thought about saying the same thing. But the fact I do not drive to work... well I didn't want to rub it in too much 😛

I think it refers to these.
alt text

/proc/version usually has pertinent information across most systems.

Edit: I looked closer. It's just the OS name (RHEL/Ubuntu) and kernel version. Never mind.

@JaredBusch said in Family is looking to start a new business:

@Dashrender said in Family is looking to start a new business:

@JaredBusch said in Family is looking to start a new business:

Really, the only thing I cannot recommend is a solid Windows email client, because Almost everyone uses Outlook or web based.

I know Scott hates Outlook, but me personally, It's the one I love.

I suppose I could use thunderbird, but why when I have access to Outlook.

I use it all the time. But I also have 5 Exchange accounts in it.

I would never tell someone to buy Outlook just to have a desktop email client though.

Agreed - I hope inside the next year to ditch Outlook on the desktop and move to strickly OWA. Most of my users will be able to get by with it with no issues.

@Reid-Cooper said in Open source Firewall:

pfSense was really good in the past. But I agree, the days of building your own firewall on an old PC that you have are over.

Right - the cost just isn't worth running your old PC. Power alone will cost more than the cost of an ER-X or ER-L.

Do you have an offline root CA or is do you just have a single CA that does it all: certificate issuing, CDP, etc.?

@DustinB3403 said in Print Services - Migrate from one server to another:

@IRJ people have a hard time reading labels that could save their life, I don't expect my users to read any announcements coming from IT.

Edit: mostly because I know they don't care, they just need it to work.

^ this, so much this!

My users only read my email today because they already knew the phones were having issues, and now they knew that I also knew. But a future notice, they won't remember for the most part 20 mins from now 😛

it's all good, again, mostly just flipping shit.

@wirestyle22 said in Need People to Check a Website for Me:

The site looks great

Thanks. Thank @Dominica who is running the web design stuff now.

@IRJ said in Post a "Users IT Security Awareness Poster" here !!:

We use the SANs posters for this:

https://www.sans.org/security-resources/posters/

Okay, thanks and noted.