@scottalanmiller
This part had me:
As IT we need to stand up and explain that unmaintained systems are already broken, disaster just hasn’t struck yet.
After the Ransomwave, I developed a great script/program that utilizes saltstack/winscp/7zip command line to backup all of the connected windows clients/minions, and pushed the plan to upper management, gave it 3 tests today, and everything works as planned.
The best part when I asked the 3 users if crisis occured and your laptop is unrecoverable this backup that I create can it be usefull, they all said yes that is everything we need.
So yeah, its all now to upper management to allow this or not, I create encrypted and compressed 7z archive on both the NAS and end user machine with all of his important files. With retention plan (WinSCP can do this and delete files based on age) and using HTTPS WebDaV for secure file transfer, to avoid Windows net use hell, you know the stupid limitation per windows user account that he can only connect to 1 mapped drive.
Sadly the plan might fail to be active and enabled, cause with each I.T move I make, upper management sometimes freaks out and thinks I have too much power and I reckon this all cause I am local employee and not international one.
Do you know that today I found out that 7zip+WinSCP have been actively developed for 17 years. my God they are so stable and amazing.