That is weird but when things happen out of blue to win10 machines I always start with uninstalling windows updates. In my environment that is by far the number one thing that breaks things. Occasionally a user will do something but if its multiples machines, its always been windows updates here.

@scottalanmiller said in Gigapixel Images and File Sizes:

@dafyre said in Gigapixel Images and File Sizes:

Found a site that gives a formula and steps on how they calculate file sizes...

https://4nsi.com/faq/how-do-i-calculate-the-file-size-for-a-digital-image

It's hard to know if it's accurate, but he math makes sense.

Except it is completely wrong so the math making sense doesn't matter, since it's absolutely wrong. That's for calculating a bitmap file type, which no one uses.

You are right about nobody using bitmap files any more. I'm not looking for exact measurements -- or even conservative ones. Just an educated guess as to how big a gigapixel file could be.

By using raw data, rather than worrying about how good of compression the chosen file type gets, I can simply estimate high on the amount of storage we'd need.

@Obsolesce ReFS is unstable, unfortunately. I saw the case when after power outage ReFS volume become RAW...

@mukky said in ZeroTier Site-To-Site:

Bro @dafyre,
You make my life much easier...
Thank you !!

After soo much hassle to achieved opnsense site2site, i found this posting solve the problems with 2 essential modification as follows:

Two essential step:

Enable IP_Forward:
in free BSD we have to edit /etc/defaults/rc.conf
change from gateway_enable="NO" to gateway_enable="YES"

Set up the Site Routes at the Routers for Site A and Site B
it has configured and implemented in opnsense router section

@dafyre, since no body cover this on opnsense, I think it will wonderful, if you could made this video on youtube as well

Good Luck !!

I was struggeling for a month to figure it out, not much info on internet nor tutorial regarding zerotier for site2site. Eventually i succeed to make it work.

The key point to setting on opnsense are:

you have to install zerotier plugin

you have to make your own network on your zerotier account

you have to enable zerotier on your opnsense and adding zerotier connection in it to join your own network.

you have to assign network for zerotier - dont forget to "check" Enable Interface and Prevent interface removal. Also you have to put static ip with is the same ip address as shown on your zerotier joined network.

you have to put firewall rule for zerotier to accept any incoming traffic

you have to put firewall rule for WAN/ISP to accept any incoming traffic from specific source "Ztier.net"

in some cases it requires booting/restart your opnsense to take effect.

setting above will allow any incoming connection from any remote device via zerotier towards your opnsense ip address. (Ref: opnsense ip address = ip address of WAN/ISP). In result, you can remote access your opnsense via laptop from another city / ISP (laptop must have zerotier connection and joint the same network too). On your laptop you will be able to access your opnsense by its ip address assigned by zerotier.

in the case, for example, there is a NAS behind the opnsense that you want to access remotely,....... then you only have to open your zerotier account and put a route rule there

assumed:

your NAS local ip address: 192.168.5.10

NAS local Network on opnsense: LAN-1

your opnsense ip address assigned by Zerotier: 10.188.22.10

then you have to put firewall rule for LAN-1 to accept any incoming traffic from specific source "Ztier.net"

then you have to add "route" on your zerotier account dashboard:

192.168.5.10/32 via 10.188.22.10

in result from remote laptop you can remote access:

a. opnsense by pointing to 10.188.22.10

b. NAS by pointing to 192.168.5.10

(laptop must have zerotier connection and joint the same network too)

Thats it, good luck !

@dafyre said in How would you build a File server with 170TB of Usable Storage?:

Systems like Ceph and Gluster don't necessarily need RAID since they can work with different disks in the same node.

They definitely don't need RAID. That's their point.

@dbeato said in Office 365 Moving Emails to Deleted Items:

@dafyre said in Office 365 Moving Emails to Deleted Items:

@dbeato said in Office 365 Moving Emails to Deleted Items:

@dafyre said in Office 365 Moving Emails to Deleted Items:

e got a strange one... I have a user here whose Emails go from whatever folder they are in to the Deleted Items folder after being read... Sometimes. Sometimes it doesn't happen for several minutes, and other times it happens right away.
The user hasn't been phished that we can tell. No bogus rules in Outlook forwarding things to the deleted items. Check both Web and Outlook 2016.
What am I not looking at that could be causing this?

They got hacked though
https://blogs.technet.microsoft.com/office365security/how-to-fix-a-compromised-hacked-microsoft-office-365-account/
https://docs.microsoft.com/en-us/office365/securitycompliance/responding-to-a-compromised-email-account

Sometimes the rule is a dot on the name....

I am assuming it's a hacked account, but we changed the password to a new one. I disconnected all of her sessions from Office 365.

Still happening. I see no rules with a dot in the name... or spaces or foreign characters. I see exactly the number of rules on my CLI as I do in Outlook and OWA.

Can you clear them all ? Take a screenshot of the settings and then remove them and see what changes. The rules run autonomously and is not someone running them.

That's what we've done now. All of the rules are disabled. End-user is turning them back on one at a time now.

@dbeato said in Windows 10 IOT Enterprise:

@dafyre said in Windows 10 IOT Enterprise:

@Dashrender said in Windows 10 IOT Enterprise:

Though - now that I think about it - does IOT require activation? I thought it was free?

If there is an enterprise version of IOT - I have no clue

In my reading, Windows 10 IOT will attempt to activate (nor will it complain) if you never connect the device to the internet. Of course, once you connect it, it will try to activate.

Interesting, I didn't understand this part

By default, KMS clients on your Windows IoT Enterprise with no additional configuration needed.

It will act like a regular desktop and activate against your KMS server if you hook it up to the network.

@jaredbusch said in KVM Virtual Machine Boot Order:

@obsolesce said in KVM Virtual Machine Boot Order:

@matteo-nunziati said in KVM Virtual Machine Boot Order:

@dustinb3403 said in KVM Virtual Machine Boot Order:

@obsolesce that's annoying. . .

Edit: still annoying but doesn't Hyper-V have startup priority?

No it hasnt until I checked 6 months ago. Only way is build a delay schema by hand and assign delays to VM batch start them in layers

Hyper-V had startup priority since 2012... fully configurable... startup action and startup delay.

This is inaccurate. There is not a priority.

Hyper has only ever had this.
0_1533154098692_7bc8e1f1-b436-47db-8e4e-726f1555ebb1-image.png

Okay, technically incorrect.... I'll give you that.

The point I was trying to make, was you can artificially set priority VM booting by adjusting the "startup delay" for each VM.

I have a Monster OTG that I want to upgrade by moving to a SBC (rPiZ).. could be fun to try out.

@nashbrydges said in Microsoft HTML5 Web RDS Client:

Wonder if this will be better than my Apache Guacamole install for RDP.

Likely, only because it needs one fewer components in the chain. But less flexible.

@aaronstuder said in Storage and Data Locality:

@stacksofplates Wow, rsnapshot looks good.

It's a very good.

@scottalanmiller Thanks. Thought I had done that, lol.

@Mike-Davis said in IIS / RDS 2012 R2 User's Can't Log On:

What does the IIS log say?

IIS Shows no errors. I see the POST where the login attempt is made, and then it 302 Redirects to Default.aspx and then it 302 redirects back to the login page.

2017-05-12 12:34:53 x.y.z.a GET / - 443 - a.b.c.z Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.3;+WOW64;+Trident/7.0;+.NET4.0E;+.NET4.0C;+.NET+CLR+3.5.30729;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.30729;+InfoPath.3) - 304 0 0 218 2017-05-12 12:34:56 x.y.z.a GET /RDWeb/Pages/ - 443 - a.b.c.z Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.3;+WOW64;+Trident/7.0;+.NET4.0E;+.NET4.0C;+.NET+CLR+3.5.30729;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.30729;+InfoPath.3) - 302 0 0 15 2017-05-12 12:34:56 x.y.z.a GET /RDWeb/Pages/en-US/Default.aspx - 443 - a.b.c.z Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.3;+WOW64;+Trident/7.0;+.NET4.0E;+.NET4.0C;+.NET+CLR+3.5.30729;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.30729;+InfoPath.3) - 302 0 0 0 2017-05-12 12:34:56 x.y.z.a GET /RDWeb/Pages/en-US/login.aspx ReturnUrl=/RDWeb/Pages/en-US/Default.aspx 443 - a.b.c.z Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.3;+WOW64;+Trident/7.0;+.NET4.0E;+.NET4.0C;+.NET+CLR+3.5.30729;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.30729;+InfoPath.3) - 200 0 0 203 2017-05-12 12:35:10 x.y.z.a POST /RDWeb/Pages/en-US/login.aspx ReturnUrl=%2fRDWeb%2fPages%2fen-US%2fDefault.aspx 443 [email protected] a.b.c.z Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.3;+WOW64;+Trident/7.0;+.NET4.0E;+.NET4.0C;+.NET+CLR+3.5.30729;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.30729;+InfoPath.3) https://sk_dev.gcsu.edu/RDWeb/Pages/en-US/login.aspx?ReturnUrl=/RDWeb/Pages/en-US/Default.aspx 302 0 0 156 2017-05-12 12:35:10 x.y.z.a GET /RDWeb/Pages/en-US/Default.aspx - 443 - a.b.c.z Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.3;+WOW64;+Trident/7.0;+.NET4.0E;+.NET4.0C;+.NET+CLR+3.5.30729;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.30729;+InfoPath.3) https://sk_dev.gcsu.edu/RDWeb/Pages/en-US/login.aspx?ReturnUrl=/RDWeb/Pages/en-US/Default.aspx 302 0 0 15 2017-05-12 12:35:10 x.y.z.a GET /RDWeb/Pages/en-US/login.aspx ReturnUrl=/RDWeb/Pages/en-US/Default.aspx 443 - a.b.c.z Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.3;+WOW64;+Trident/7.0;+.NET4.0E;+.NET4.0C;+.NET+CLR+3.5.30729;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.30729;+InfoPath.3) https://sk_dev.gcsu.edu/RDWeb/Pages/en-US/login.aspx?ReturnUrl=/RDWeb/Pages/en-US/Default.aspx 200 0 0 0

Easy way to identify LAN dependencies... consider opening a branch office. Do you feel that you need a VPN for a service? Guess what, that's a LAN dependency 🙂

@coliver said in O365 Group SendAs Strangeness:

@dafyre said in O365 Group SendAs Strangeness:

Guess I should have just been at least a little bit patient with it. The permissions finally updated over night... Go figure.

Yep... Permissions can take a stupid long time to propagate.

There was some kind of O365 issue that was causing them to be slow this time. Normally when i do this, things happen in minutes, not hours.

@aaronstuder said in ZeroTier Client & Automatic Authorization Salt State:

Nice work! Thanks 🙂

It has been a while since I've tested this so let me know if it gives you any problems.

@scottalanmiller said in Meraki MX400 NAT Question:

@dafyre said in Meraki MX400 NAT Question:

The team that is there now are the ones that have to convince the bean counters of the need to change.

It's a tiny cost though, right? We are only talking about a minuscule investment, I think. If it saves a few hours of effort, doesn't that cover the cost?

No you are not. You are neglecting to add in the labor costs and only calculating on the hardware costs.

Physically changing everything will add labor cost. Ordering, configuration, staging, installation.

Yes, something else is cheaper. But not as cheap as you try to make it sound.

The existing solution is in place and already paid for. A simple support call resolved the configuration issue. There is no reason to spend additional capital to change a working solution until you have to plan for new spend on the solution.

If the existing solution was actually not functional, or some other factors were in play to offset things, then it would certainly be worth switching solutions.

Well, it's something to use until they vanish again, at least, lol. I'd like to see a self hosted version of something like this.