@Texkonc said in Hardware Design for SAM-DR Small Rackmount Backup Device:

Is it backups or a DR appliance that you can run your vms on in a seconds notice. Post states backups but titling the device DR.
Which is it? Backups as in Unitrends appliance type backup or DR where there is missing replication component and can have your vms up in seconds?

That's more a function of the software than the hardware. Veeam takes dumb storage and turns your forever incremental "backups" in to a point in time recovery point that you can mount for an instant recovery. (I never thought I would put that many marketing terms in one sentence. That kind of hurt.)

CloudFlare is still seeing the same amount of traffic, but ASmallOrange is seeing way less bandwidth. (It's actually reading 0 for the day.) The WordFence live feed is a constant stream of blocked requests.

@scottalanmiller said in Hardware Design for SAM-DR Small Rackmount Backup Device:

Broadcom 5720 Quad Port GigE On Board NIC

I'm wondering why 4 NIC ports. Is that the standard NIC? With two spindles spinning, could you go beyond 1Gb/s? How many Mb/s can each drive write?

There is a bit of a delay since the admin had other services running on his domain controller. He has a SQL that he has to address before he can reboot the other domain controller. I got AD replicating between the domain controllers and DHCP/DNS working properly, but as far as the AD certs, I'm bowing out of this one at this point. I don't know enough about the underpinnings to know how to test it properly since an attempt to set it up was botched halfway through.

I'll be interested to hear myself how it is resolved.

I think I may have figured it out. The site used to be hosted on an IIS box running .net nuke. .net nuke was vulnerable to users registering themselves and creating a link back to their page. (link juice for SEO optimization) It seems that after I moved the site, they are still trying to hack the registration from when the site was on DNN.

I just updated wordFence to block on the url "/?ctl=register" and /*/Default.aspx so now it's blocking most attempts.

What are they trying to do when they call the: http://www.domainname.com/?ctl=register page?

I have to wonder if I should just move to a new host or something. I can't explain why they are pounding on my site so hard.

@scottalanmiller said in old MSP wants to know what they did wrong:

So what ever came of this MSP conversation?

I never had to talk to him. Emails relayed through the business owner went back and fourth about getting the domain name transferred and that was it.

I did end up keeping a list of everything I found that was wrong because that was the worst environment I have ever seen - maintained by a "professional" or not.

Those changes didn't make a dent in the traffic. I set WordFence to block bots after 1 404 error. We'll see what that does.

After 2 minutes I've had to turn off "Alert when an IP address is blocked".

@NashBrydges said in A Small Orange - bandwidth limit exceded:

If they are bots, Wordfence has an option to automatically block "fake Google crawlers" found under Wordfence -> Firewall -> Rate Limiting. Wordfence is free for many of it's features but also offers some premium features for paid option.

They are bots. When I adjust the filter to "humans" it shows no hits. I turned on the "fake google crawler" rule. We'll see what it looks like tomorrow.

@Danp said in A Small Orange - bandwidth limit exceded:

Have you looked into WordFence?

Thanks for the tip. WordFence was the first thing to let me see what's going on. The live view feature let me see the requests and where they are coming from. Mostly it's IPs from all over the world that are trying to pull up admin and register pages that don't exist.

I let it run for a few hours and it didn't put a dent in the traffic, so I just tweaked some of the settings so that it will start blocking after 20 failed attempts for different things. We'll see how it looks tomorrow.

@dafyre said in AD certs:

*twitch*

Autoenrollment is good for domains. Could you imagine having to update the certificates on every system in the domain by hand?

So how do you test to make sure it's working?

I added Google Analytics. I can see when I hit the page, it says 1 active session. Otherwise it's sitting at 0 active sessions. -Which is what I expect for this seldom used site. However, Cloudflare and A Small Orange insist I'm getting 200+ unique visitors an hour. Where do I go next?

@RojoLoco said in AD certs:

@scottalanmiller said in AD certs:

@wirestyle22 said in AD certs:

@Kelly said in AD certs:

Active Directory has roles. Bakeries have rolls.

http://writingexplained.org/role-vs-roll-difference

You're really not helping my diet.

Don't stop your diet now, you're on a roll!

He's off the rolls!!!

Now I'm all about the enROLLment.

Thank you grammar police. I usually catch stuff like that, but that one got by me.

At any rate, I tried to follow the article at the beginning of the post, and I'm getting the error:

The wizard cannot be started because of one or more of the following conditions:

• There are no trusted certification authorities (CAs) available.
• You do not have the permissions to request certificates from the available CAs.
• The available CAs issue certificates for which you do not have permissions.

My question though, is if the certificate auto enrollment is even needed for normal domain operations?

The server has the COA on it. I'm wiping the server and installing Hyper-v on it and creating a VM that the server is licensed for.

I have a physical server with a COA for Server 2008 R2. It's the one that has two product keys on it. One for the host and one for the VMs.

I want to virtualize it, but would rather go with a newer version of Hyper-v.

@DustinB3403 said in where to find free hyper-v product key:

@JaredBusch I think this installation was Server 2012 R2 (standard) with the Hyper-V role enabled. Not a straight Hyper-V installation.

This. What is the straight hyper-v download called?

That's what I thought, but I have Hyper-v installed on a host and it says I'm in trial with xx days remaining.