@ElecEng easy to do with Postfix. But with Office 365 I don't know how that would be done.

@PhlipElder said in Rack LCD Console with Digital KVM:

SIP = Server endpoint?

Server Interface Pod

@StuartJordan said in Windows Volume License Vendor:

@scottalanmiller AHH ok, I thought I saw a post the other day that ended up with 500 licences.

Yes, on the tech side. We didn't buy 500. The customer bought 30 or so. And we were troubleshooting an issue and there were 500 installed.

@ElecEng I used Dell tape drives a lot in the last decade and never had issues.

Have you tried putting in the address?

@eleceng said in CAL Counting:

These will be device RDS CAL's and pretty much the same account logging in all the time. But we may have technicians from time to time login and open an additional session so we may need extras to cover that.

Will they be using the same systems thin clients as the non-tech users?

@scottalanmiller said in ESXI VM Backup:

This is the solution that my customer went in blindly with and got burned because it didn't have an agent to talk to their applications and their systems were corrupted in a totally predictable way. It's an amazing product, but no product can bypass the system admin's need to know their workloads.

So what your saying is even though they had something backing up blindly on the Hypervisor level (i.e backs up the whole VM), and no agent. Their application kind of corrupted it, so when the VM restored the application just crapped out 😁

As already mentioned this is why you need to test and restore 😁.

We're bad at this at the moment, but in the process of planning a DR exercise.

@eleceng said in GPO's for System Hardening:

@jaredbusch That is the correct way and the way it's done in most manufacturing plants in the U.S. and International. That has been best practice for the last 25-30 years. I am in 8-10 different manufacturing plants [per week as a consultant and that's how it done.

That's awesome that the plants you work for do it that way - but I agree with JB - it's likely not that common in reality.

Hell - the sure number of SCADA systems on the internet in mind boggling.

@eleceng said in The remote session was disconnected because there are no Remote Desktop License Servers:

Getting error The remote session was disconnected because there are no Remote Desktop License Servers to give a license.

This is on server 2016 and just doing RDP connection for setting up server roles not using terminal services or making a terminal server just connecting with RDP like you do desktop to desktop on the Lan, etc.

There are no CAL licenses applied yet.

Connect to the server as mstsc /admin or mstsc /console with the Admin user. Setup the roles, license the server and you will be good to go.

@eleceng Just make sure that you have an account that is not the built-in Administrator user as the only Domain admin and the GPO Policy applied only to certain OUs and not the domain root. Otherwise you will have a problem in your hands.

@obsolesce Servers primarily but user desktops and laptops will be the same.

@eleceng The setting that you want is called "AutoProtect"

Why WSUS and not Windows Update for Business? It's so much better.

@eleceng said in Easily Enable / Disable Internet Access to ESXI VM's:

@dashrender it is a manufacturing network so you would want internet access disabled 95% of the time and only enabled when you need to do application updates, windows updates, etc.

A common approach here is to disable routing.

@scottalanmiller I guess I will just have to wait until more options roll out I guess. The standard was pushed back a long time so i figured they would have a ton of hardware ready for release but guess not.

@scotth said in What are your thoughts on Using Zerotier as VPN to highly secure networks.:

@dafyre OPNSense has a plugin for Zerotier. Since OPNSense is a fork of PFSense, I'm guessing that PFSense might have a plugin as well.

I've used the ZT Plugin for OPNSense, it seemed to work well enough for what I used it for.

@pete-s right the drag and drop functionality keeps you from having to import / export just cant find info on how to use it.

@jaredbusch You are totally right, I just tested again and it only allowed me to mount the ISO. So @ElecEng ignore that one.