LOL not surprised by this at all! MS seems to be making their non top of the line (read most expensive) have a lot of caveats, such as GPOs that only work for Enterprise Windows, not Pro.

So nothing worked when you powered down the physical server?

What IP are the PCs using for DNS?
What IP is the VM Domain Controller using for DNS?

If the PCs are using the turned off server as their primary DNS, they may not ever flip to the secondary (which is hopefully your VM DC)
If the VM DC is not pointing to either 127.0.0.1 or it's own IP for the primary (and we assume there are no other DNS servers on this network for this domain) that would also make everything stop working.

Central logging offers a lot of potential. Lots of reasons for it but just some...

Really easy to produce central reports to look for issues across the entire estate, not just server by server. Easy to give log access to people who are not system admins. Much more secure, you can look at logs without access to the systems themselves. Works on systems that don't even have the ability to log into (like Windows Nano and DevOps systems.) Encourages good tooling, like nice graphical interfaces, reports, etc. Allows for correlation between systems, apps, etc. Compare a single app on many servers at once, etc. Protects logs in case of system failure Stores logs in a permanent way for ephemeral devices. Increases the reliability of alerting. Increases options for alerting. Allows files to be backed up under a central policy.

So I was able to make another array, and was also able to make an SR on that array. It's still strange that I'm not able to use thin provisioning by default on install, but for now, it's working.

@travisdh1 said in Thoughts on EdgeMax Pro 8:

@JaredBusch said in Thoughts on EdgeMax Pro 8:

@travisdh1 said in Thoughts on EdgeMax Pro 8:

@Joel said in Thoughts on EdgeMax Pro 8:

Even if the 6 offices are totally independent? We have a 200mb line coming in so is it not fair to allocate each port 32mb each? Or do you think I should just leave it defaulted but prioritise QOS for voip?

Correct.

Does someone have any examples of actual QOS rules for the EdgeRouterX series? I've got the basic "Download = 700kbps, Upload=300kbps" for our connections, but that's it so far.

Since version 1.8 or maybe 1.7 even, they added new a QoS process outside of the original traffic shaping stuff.

fq_codel is the new standard and is in the GUI.

Yeah, when I looked around everything I found was still command line based.

Well, as you can see from that screenshot, i have not bothered to update mine to fq_codel either...

@scottalanmiller said in Google Chrome and ScreenConnect:

@gjacobse said in Google Chrome and ScreenConnect:

@JaredBusch said in Google Chrome and ScreenConnect:

I use chrome all day everyday. Problem is yours.

I wonder if it's the Win10 build and subsequent Win 10AU.

Possible but I suspect that Jared is on Win 10.

Windows 10 with AU even.
0_1473169810893_upload-6c80d9da-7390-48dc-b1a1-45bf2cf1986f

Apparently I figured out my issue with the dual wan traffic shaping. Had to turn on stickiness.... just goes to show you how little I've dealt with networking.

@BBigford said in Some MS Office Apps Unable to Sync to Office 365:

I've saw this before. Open up Credential Manager and delete anything related to Office. Don't just edit and verify, actually delete it. When you sign in again, it'll store a new copy. Happens sometimes with password changes or a bad sync between password changes.

Can find it in Control Panel or just search for it.

Hence why Apple products are working OK... They don't have Credential Manager. Same thing happens with Keychain on Apple PCs sometimes. But the mobile devices obviously don't have Keychain.

Apple products are NOT working okay, they are half working.

@scottalanmiller said in Address Selection for New Networks:

Don't use /24. No reason whatsoever to limit like that. Use /23 and get 500+ devices for each customer. You won't be able to change this later without being a big pain because you are making address ranges next to each other.

I use a 23 for a main office, but almost all SMB that I see will not come close to filling up a /24 anyway.

If you properly setup everything as DHCP with reservations for the important things, you will only have a few key systems that need to be manually changed when you need to update your scope.

Granted it is easier if you think you will ever potentially need to expand in the near term to start with a /23.

@scottalanmiller said in Xen Orchestra / Metadata backup?:

Citrix says to not back up the host and it appears that megadata is stored on the SR. Has anyone attempted to restore without the metadata backup to see what would come up as missing? Having done something basically like this, I thought that I got all of the data that you would be looking for (minus logs.)

It restores the VDIs, but doesn't associate them with VMs. Nor does it create VMs.

So you just have a bunch of VDIs.

@RobLewisss said in Linux Iptables Firewall Automation:

@JulianJulian Thanks mate! I just downloaded the agent. I'll let you guys know how it works.

I also downloaded the agent to one of my Linux systems. It was very quick and simple.

The cloud interface picked up the installed agent imediately and I was able to manage it right there.

There are different groups that you can place each agent for different rules.

Definitely worth testing. Up to 5 servers for free!

@JaredBusch said in OpenOffice Contemplates Shutdown Amid Volunteer Drought:

@scottalanmiller said in OpenOffice Contemplates Shutdown Amid Volunteer Drought:

Makes sense. It has been nearly insane that it kept going in the light of LibreOffice all of this time. They should have merged back in long ago. We don't need those two existing side by side, it just hurts the ecosystem.

Is merged back in the right term since Libre is the fork and Open is the original?

But yeah, I agree that there is jut not enough active development for both it seems.

That's always a tough one when the original people do the forking. The code is identical at the time of the split, so one is not more original than the other (unlike cloning an animal) and moving forward the only aspects that make one the original and one the fork is the name and the team. In the case of OO or NC, the original team went with the fork, making it convoluted which is now the original. The original name, OO, went one way and the team went another.

Or, to make it more confusing, if the team makes the "new project", like in this case, one could make the case that OO is the fork of LO, even though it is newer, because ideologically the original project, momentum, team and code changed name to LibreOffice.

Code is a weird thing to think of as one being original and one not.

@scottalanmiller said in Installing a Basic LAMP Stack on CentOS 7:

@NashBrydges said in Installing a Basic LAMP Stack on CentOS 7:

@scottalanmiller I haven't yet. About to give it a try. Stuck to legacy since that was what I was reading everywhere.

Where is everywhere? Technet says to not use legacy.

https://technet.microsoft.com/en-us/windows-server-docs/compute/hyper-v/supported-centos-and-red-hat-enterprise-linux-virtual-machines-on-hyper-v

Legacy is a fallback driver that you never want to use, it's low performance and high overhead. If you needed that for CentOS, it would make Hyper-V a silly, non-production ready platform. But Hyper-V is a good, solid performer.

Not only that, but I install all of my CentOS 7 VM's as Generation 2 when on Hyper-V they work perfectly with default settings for everything except secure boot. Uncheck secure boot. Everything else is 100% default settings.

Bridging issue solved, kind of a Late-Friday-Problem: Promiscuous mode was turned on, but on the wrong interface - the DMZ facing one.

It worked instantly the second I switched it off on the DMZ and instead turned it on on the target network interface.

How to turn on MAC spoofing / Promiscuous mode on Hyper-V using PowerShell

Get-VM -Name XXXXX | Get-VMNetworkAdapter | Where-Object { $_.MacAddress -eq "XXXXXXXX" } | Set-VMNetworkAdapter -MacAddressSpoofing On

Received a few emails from Mozilla myself, about Mozilla Thimble - sadly, only watched the videos so far, but, does look good so far. :nerd:

MangoLassi runs on MongoDB, it's a big part of what makes the site so fast, responsive and flexible.

The way you worded your question it's almost as if you think that if you have your own company you won't have regular pay. As @JaredBusch said if you form a company and write yourself a paycheck every week, you do have regular pay.

Once you have a certain number of customers, you actually have more job security than with a single employer. If you lose one customer, you may lose 10% of your salary, but not everything.

@JaredBusch said in Site Issues Tonight:

I got this from CF just now.
0_1472877605221_upload-b5af2320-10f0-4b96-866d-e1dce8b8d0b8

and direct.mangolassi.it took 15-20 seconds to load.

Pretty sure that is what I got and may be the referenced person @scottalanmiller mentioned.

But as I was having some other issues, I killed Chrome; CCleanered my system the ran a regedit.

@RamblingBiped said in SIP Phone registers no audio...:

Here is the guide I followed to get the Yealink T23G to work with OpenVPN: http://www.sunstatetechnology.com/docs/YealinkOpenVPNGuide.pdf

When I disable NAT on the extension the phone is unable to register.

Something is wrong there, that sounds like the VPN is not working as there is no NAT when there is a VPN.