@Obsolesce said in Network setup - moving forward:

@coliver said in Network setup - moving forward:

@Dashrender said in Network setup - moving forward:

Many people around here use NC - I could attempt to replace windows file shares with NC - but as I already mentioned, it's mostly used through a single huge shared volume - I have no idea how NC handles something like that. I can't imagine syncing 20+ GB to every computer... plus there would likely be no file locks, so people would be stepping on each other for edits, etc.

They are working on a NC "drive" that only caches currently worked on documents. I'm hoping they release it in the near future.

Maybe like Google Drive File Sync. That could be an option depending on what all is in S:

Yeah, pretty much. Honestly 20GB isn't that much. Sharepoint and Onedrive could easily cover that.

@Dashrender said in Network setup - moving forward:

Many people around here use NC - I could attempt to replace windows file shares with NC - but as I already mentioned, it's mostly used through a single huge shared volume - I have no idea how NC handles something like that. I can't imagine syncing 20+ GB to every computer... plus there would likely be no file locks, so people would be stepping on each other for edits, etc.

They are working on a NC "drive" that only caches currently worked on documents. I'm hoping they release it in the near future.

@scottalanmiller said in What Are You Doing Right Now:

Had my car towed illegal tonight. Was properly parked and a towing company just came and took it. Argh.

Time to go carless.

You could also look at Amazon Directory Services. https://aws.amazon.com/directoryservice/pricing/. Although that ends up being more expensive in the long run as well, at least from a SKU standpoint.

@Dashrender said in Large network of Windows machines without AD - GO!:

How do you manage and get knowledge that systems are updated?

Active Directory can't do this. Even WSUS has a hard time doing these reports.

What user accounts are on the machine - and how do they get there?

If you're using Office 365 then you most likely have AAD included (obviously you need to have an Office 365 license per each user) Exchange Online not so much.

Other then that Local accounts are completely manageable. You could do it with any number of configuration management toolkits for very little actual cost, outside of man hours.

You can very easily do this Powershell too.

Do you have a single admin level account pre-setup on every machine?

You should be doing this anyway.

What about situations where users roam from computer to computer?

This can be accomplished in a number of ways. Configuration Management, or create the user account with Powershell.

What about mapping network resources like printers and fileshares?

You can do this with just local accounts.

@Dashrender said in What Are You Doing Right Now:

@IRJ said in What Are You Doing Right Now:

@WrCombs said in What Are You Doing Right Now:

We're extremely slow at work right now.
So I'm planning my leg day work out at the gym tonight .

Way to not skip leg day! lol

What is it about everyone wanting to skip leg day? I like leg day much better than arms day.

100% I'd rather do squats then bench.

@Obsolesce said in Can all phones read QR codes natively?:

I see them all the time, and I never use QR codes... like ever. Do you want to visit the website listed on the back of your mayonnaise bottle, or a random QR code posted on some poster somewhere? I never do. The last time I used one was strictly out of curiosity of the thing worked or not.

It feels like one of those neat idea services Google would start but nobody wants to use.

IIRC QR Codes were originally supposed to replace barcodes. So having them on products like that make sense.

@Dashrender said in PDQ Drops Inventory (Deploy) Agent:

@coliver said in PDQ Drops Inventory (Deploy) Agent:

@warren-stanley said in PDQ Drops Inventory (Deploy) Agent:

@coliver from memory it allowed endpoint status display, along with connection when outside the corporate network for running commands and application management.

It was part of the subscription and didn't require any other additional setup - so was nice in theory.

Ah. Salt and Ansible can do similar things but would require some backend work.

Salt has an agent, right?

Yes, and Ansible can be setup in a Pull configuration so it can act like it has an Agent as well.

@warren-stanley said in PDQ Drops Inventory (Deploy) Agent:

@coliver from memory it allowed endpoint status display, along with connection when outside the corporate network for running commands and application management.

It was part of the subscription and didn't require any other additional setup - so was nice in theory.

Ah. Salt and Ansible can do similar things but would require some backend work.

@IRJ said in how to prevent non domain users from getting ip configuration:

A NAC can totally do this. Usually you'd buy a device like fortigate, forescout, or Cisco make them for example.

You can configure non domain devices in a holding area and/or force them to domain join before allowing fukk network access. You can also do things like ban systems that aren't up to date with patches, av, and many other things.

I've been meaning to try packetfence. It's a FOSS tool that works with a variety of network devices including affordable ones like ubiquity.
https://packetfence.org/

We have Packetfence setup. Works a charm for the wireless devices we have on it.

If they are on a Windows network the Windows NAP application and a RADIUS server can do this as well.

@IT-ADMIN said in how to prevent non domain users from getting ip configuration:

Hi ML community

i have a question regarding a policy i want to apply in my network, we have a very big envirenment and some users format their PCs in order to gain full access over their machine (they don't want to be part of the domain), i want to solve this problem by preventing any non domain machine from getting ip configuration so that they are forced to join their machin into our domain in order to get ip configuration,

how i can acheive that, i heard that their is some setting in the switch that can prevent non domain users from getting into the network but i have no clue how to proceed, any enlightenment please ??

Everyone has hit the obvious point here. But to your question.

You're looking for 802.1x and RADIUS. Most switches can be configured for this and will prevent anyone who isn't on a domain machine (with a domain cert) or a domain user to not authenticate on the switch.

What did the Agent do? Did it actually do the deployments? You could look at Chocolaty and Ansible (setup to Pull) to do a lot of that.

@scottalanmiller said in What Are You Doing Right Now:

@travisdh1 said in What Are You Doing Right Now:

Also, the Windows 7 to Windows 10 upgrade has always gone smoothly for me. Guess there is a first time for everything! knock on wood

We are doing hundreds like this and very few hiccups. Upgrades happen every day with Windows 10, it's not like it used to be. It's more like Linux now, just transparent. You don't realistically re-image your fleet twice a year, so either you skip updates or you upgrade in place.

I did the whole fleet of Windows 7 like this here. 20-ish devices without an issue.

@scottalanmiller said in Gaming - What's everyone playing / hosting / looking to play:

First round of Steam purchases done

Anything good?

@Kelly said in When Can We Fork a Topic:

@scottalanmiller said in When Can We Fork a Topic:

@Kelly said in When Can We Fork a Topic:

And there are many of us who follow the thread that don't care about what the three of you are wrangling over.

To do a fork while a discussion is live, we have to lock it, for a bit. Maybe five or ten minutes. Otherwise, in flight posts go all over the place. During that time, it doesn't just halt the "unwanted" discussion, but it stops news posting entirely (in the case of a news thread, like this example.)

Not that anyone is posting or reading news very likely in those few minutes. But that's the underlying problem, it locks up the discussion during the forking, and locks up the original discussion (but not the fork) for a little bit after that until people have converged on the new thread.

Not saying that that is a good reason to chose to do it that way. Just so you understand how it works and what the concern is.

Thanks for explaining. I still don't agree, but I appreciate you clarifying the why's behind your decision.

Side note: You cannot zero out a vote. Sorry about the upvote spam (if it happened). I was trying to change my -1 to a zero and it will only go to 1 or -1.

Click the downvote button again and it will zero it out.

Going to just outside of Pittsburgh, the in-laws.

Bringing

• The dog
• The kids
• Toys
• Food stuffs

A lot of the courses will also update from time to time. So you don't have to pay for the updates going forward.

@scottalanmiller said in Rant: I feel like Rodney Dangerfield.:

I believe VPNs are illegal, just be aware.

IIRC so are certain types of encryption.

IIRC you can do service/station accounts within Teams.

@scottalanmiller said in What Are You Doing Right Now:

How the hell are old GTX 1080Ti cards still like $850? This makes no sense, those are really old.

Ah the times when Cryptomining destroyed the video card industry. Pricing is just starting to recover.