@coliver said in Rule 41 - allows government to hack any computer with a warrant:

Ugh... the Department of Justice is using the "Think of the children" defense for this.

Because it makes stupid people even more stupid.

@Jason said in Something Happen at BackBlaze?:

@scottalanmiller said in Something Happen at BackBlaze?:

@Jason said in Something Happen at BackBlaze?:

@scottalanmiller said in Something Happen at BackBlaze?:

@Jason said in Something Happen at BackBlaze?:

@Nic said in Something Happen at BackBlaze?:

Aaron just decided to reduce his community profiles and remove his old stuff. He was never an official media rep for them, he just works as one of their sysadmins so I ping him when I see stuff that is relevant. Nothing awry at BackBlaze itself.

Well he's done it several times before so seems like normal for him.

He has? I've never seen him do anything like this ever. Or do you mean when he stopped working at SW? That's different, he changed jobs.

He's went through several different accounts on here as well as spiceworks before.

He did? Are you sure? I'm not aware of that ever happening.

Are you perhaps confusing him with @aaronstuder ?

Oh this isn't Aaron Studer?

No 🙂 This is Aaron that a lot of us know from his time in Spiceworks as a support engineer.

@stacksofplates said in Linux run from a USB Stick - Alternative to Puppy Linux:

Kali is also designed to run from a USB.

I recommend tails if you actually want to use the OS rather than just hacking things.

@wrx7m said in Pritunl:

I asked about this about 7 months ago on another thread (https://mangolassi.it/topic/8215/pertino-is-anyone-successfully-using-any-version-above-510-with-dns-ad-connect/146) to which SAM replied, it just looked like hosted OpenVPN to him. LOL

LOL, well that does appear to be what it is 🙂

A little monitoring goes a long way 🙂

@donaldlandru said in FreePBX Asterisk Music on Hold Streaming Sources:

Cleaning up my old post and marking it solved. After taking options and cost to the business we ended up staying with the bundled music.

Thanks for circling back 🙂

@Dashrender I am still on-prem but plan on moving to O365 at the beginning of next year (If all things line up). I am using Barracuda's cloud layer, which takes the brunt of it and then have a local appliance that filters inbound and outbound.

@wrx7m said in DC history/audit log:

This is what dash is referring to:

https://www.netwrix.com/auditor.html

Exactly!

@thwr said in 1 Graylog server, 2 XS hosts, 4 Million messages/week:

Don't have a number at hand, but my pfSense is pretty chatty about rules being hit 😉 I'm using Graylog2 too.

Can't help with your spamming XS hosts but can't you reduce the log level or select which events are sent? rsyslog can be configured to just sent specific facilities and/or loglevels.

Sadly XS just does logging a little differently.

Similar to iFunbox, PhoneRescue may work...

https://www.imobie.com/support/how-to-recover-deleted-history-on-ipad.htm

DECT has way better range than BT and from the few times I looked at BT headsets, the average user reviews are quite a bit lower than some (definitely not all) of the DECT units.

@wrx7m said in WSUS 2012 (r2) support for Windows 10:

I see mention of SCCM in the article. Does this only apply to SCCM-related installs of WSUS?

No, this whole problem is related to WSUS only. I'm guessing the author mentioned SCCM because that's how he became aware of the problem.

@aaron said in You Cannot Virtualize That:

@scottalanmiller said in You Cannot Virtualize That:

@aaron said in You Cannot Virtualize That:

said in You Cannot Virtualize That:

We are long past the point where running systems non-virtualized is considered acceptable

/me looks around at servers

I think it's ok to not virtualize 🙂

Doesn't BB cluster their entire farm? I thought virtualization was an effective necessity at that scale. You manage the servers without them being clustered in any way? I thought that the pods were nodes in a single farm

Oh they're clustered. I was thinking of a specific pod not being virtualized by itself. As in they aren't running a hypervisor. And we do have virtualized stuff around too. 😛

That cluster is really the virtualization, the nodes are below that level. We had another thread discussing this previously. Clusters are not always virtualized at the node level because the node is like the CPU, not a server and the entire cluster is really the computer and the cluster manager is the real hypervisor. Workloads run on the cluster, not on the nodes. Each node remains replacable as just part of the overall "Computer" which is, virtualized.

@scottalanmiller said in SQL mirroring advise:

@Ambarishrh said in SQL mirroring advise:

@scottalanmiller said in SQL mirroring advise:

@Ambarishrh said in SQL mirroring advise:

@scottalanmiller said in SQL mirroring advise:

@Ambarishrh said in SQL mirroring advise:

@Dashrender said in SQL mirroring advise:

Are the two SQL servers sitting side by side? If not, shared storage and low latency for it's use would be super expensive.

Though I do wonder how their DR plan works if there isn't a cluster for the DB, what purpose does the second server serve? Warm spare?

Yes the servers are side by side, basically just sits there, and when a new site is created on SP side, run the script which mirrors the new DB created on server 1 to server 2. Eventually they were planning to introduce the witness server once our testing is complete and then enable auto failover. The downside here is that someone need to manually run the script for db mirroring of new databases

So the big thing here is that the databases are not mirrored, just the framework (schema) is at creation time. Very different from mirroring or clustering at that aspect level.

Yes, we've told them this won't work and asked them to look at a clustered setup. Since the licenses are already in place and is SQL standard no option for Always-On. I want to know what would be the drawbacks for the clustered setup, as for sure there are some more advantages on Always-ON compared to the clustered setup.

Won't work... for what? What's the end goal?

Won't work: Current stage its 2 separate DB servers and mirroring needs to be done by executing a script whenever there is a new db is created by SP.

End Goal: A fully automated failover setup giving high availability for the SharePoint solution

What they are doing is unrelated to their end goal. How does mirroring database creation help with failover. There isn't even a first step in preparing for a failover here. What is going on is totally something different.

Exactly what i was asking earlier.

I am trying to set up an incoming access number and use it in a pinless scenario. I don't actually have it connected to any phone system per se.

@DustinB3403 said in From thin clients to desktops… not the other way!:

@JaredBusch It's Monday, no one has had enough alcohol to function properly yet.

Took me till Tuesday to even see this!

@scottalanmiller said in Disaster Recovery in a lanless network:

@Dashrender said in Disaster Recovery in a lanless network:

@dafyre said in Disaster Recovery in a lanless network:

@Dashrender said in Disaster Recovery in a lanless network:

@dafyre said in Disaster Recovery in a lanless network:

@Dashrender said in Disaster Recovery in a lanless network:

@dafyre said in Disaster Recovery in a lanless network:

@Dashrender said in Disaster Recovery in a lanless network:

@dafyre said in Disaster Recovery in a lanless network:

@brianlittlejohn said in Disaster Recovery in a lanless network:

@dafyre said in Disaster Recovery in a lanless network:

@scottalanmiller said in Disaster Recovery in a lanless network:

There really isn't anything too special as normal backups tend to be LANless already. Not always, but generally. Some backup tools rely on SMB/NFS which is not very LANless, but lots don't.

You consider backups that are stored separately from other files generally safer, right?

What about a backup system that mounts the CIFS / NFS path when the backups start, and then unmounts them when it has completed?

You still have an issue where Crypto-whatever 's are scanning the networks for CIFS/NFS shares.

True, but generally such shares are only writable to a particular user / server.

Then why bother unmounting them? You gain nothing by unmounting them.

In the event that the backup server does get hit with a crypto... If the backup drives aren't mounted, then at least your data is safe until backups start.

I think I see where you're going with this. The backup software runs as a user that is only used for that software. If that's the case, then there are still two things to consider.

you don't actually need to mount it because the backup software will right directly to the UNC path, for which only that user is allowed right access. while mounted as another user, only the backup user account itself can actually write to the mount, so you should be able to leave it mounted all the time.

True. I'm thinking along the lines of the way Veeam for Linux works (I'm on the beta).... It mounts, backs up, then unmounts.

That explains it.. I don't think Windows works that way, and if it does, it's completely under the hood. I suppose you could see some sort of mount if you dig around, but I doubt it would be enumerated as a drive letter, if you were using a UNC instead of a pre mounted mapped drive.

Don't know about the Windows version... I back up to an always connected USB drive with Veeam hangs head in shame lol.

Don't feel bad. My onsite backup for our x-rays are on a USB attached drive. The Offsites are a bit better off though 😉

USB drive sitting on a shelf? Or actually attached to the server? USB as a mechanism is just fine.

Sitting on a shelf?

Actually it's both, the drive is sitting on a shelf AND it's connected to the server.

I don't like it because it's a single drive, no reliability in the data - HUGE hassle to recreate if there's a failure. Originally put in place as a band-aid, but we all know how those end up. The cost of rebuilding it is about 4 times the cost of a Buffalo 2 drive NAS.

I think I'll use CamStudio for this, it can apparently capture screen video and audio to an AVI format.

Should work..

I solved this by removing all but one profile on the machine, then running
sysprep /oobe /generalize /reboot

Then during the mini setup I joined to Azure AD.