@scottalanmiller said in Do we need Dyn or OpenDNS if we have firewall with IDS/IPS and if so, how about Dyn free ?:

Blocking traffic is the wrong way to think of it. OpenDNS can't block anything. It stops internal users from resolving things that you don't want them to resolve.

I see. I meant for blocking any malicious websites (say, source of ransomware web links etc), are you saying it's wrong way due to any false-positive cases or may affect functionality of business resources ?

Just thought of adding one more layer if okay/possible.

Hey there,

I am just wondering to know if need to use some services like OpenDNS or Dyn while we have firewall with IDS/IPS ?

Following is the snap for IDS activity on Firewall :

As I see we can block or control traffic with OpenDNS or Dyn services, which can be done with our firewall, so do we need that ?

Other thought in my mind is "after going through several threads in different places", OpenDNS will add one more layer to block unwanted or malicious traffic along with Firewall.

If good to have one of this, as I am seeing OpenDNS is commercial, how about Dyn service ? which seems to be free (is that free for commercial ?).

Thanks

Hello there,

I got to reset my android phone for some reason.

And there was no Mobile suite for Huawei on linux, so I took the backup for Android on Linux (Centos7) with command adb and the backup size was about 172MB. Though I backed up the images/vids/other things manually and this adb backup was just formality.

Not sure what adb has backed up. Now my requirement is to get back one application as it is, if possible, is that restore adb is helpful ?

I have tried to restore by command "adb restore" but not seeing any difference on mobile.

Just wondering what backup it meant for and is there any way to get back that specific app ?

Thanks !!

@travisdh1 said in Looking to have good and easy control over the shared folders [permissions] on File Server (Windows Server 2012).:

@openit said in Looking to have good and easy control over the shared folders [permissions] on File Server (Windows Server 2012).:

@travisdh1
Nope. I didn't know it before, and after going through the Vault product.

As I am seeing product is mainly meant for how to manage cad files efficiently from drafting to final design etc. but not for my requirements (proper control over permissions on files/folders).

Second thing is, we do not have only cad files, but also other type of files involved in each project and in each departments like MS applications, PDFs, CAD, 3Ds max etc.

So, basically, the current workflow doesn't work, and they don't want you to change said workflow.

Yup.
That's why I am trying to find any way to do it with third party software/tool to manage permissions instead of thinking about work flow/ changing work flow.

@scottalanmiller said in Free bare metal virtualization, HyperV free or VMware ESXi 6 free or else ?:

@openit said in Free bare metal virtualization, HyperV free or VMware ESXi 6 free or else ?:

Ok, decided to go with XenServer 7.

Th@k$ !!

Awesome, welcome to the dark side.

Huh ?
what do you mean by dark side ?

Ok, decided to go with XenServer 7.

Th@k$ !!

@JaredBusch said in Moving to Domain from Workgroup. How to be prepared ?:

@openit said in Moving to Domain from Workgroup. How to be prepared ?:

@scottalanmiller said in Moving to Domain from Workgroup. How to be prepared ?:

@openit said in Moving to Domain from Workgroup. How to be prepared ?:

@Dashrender said in Moving to Domain from Workgroup. How to be prepared ?:

Heck, considering that - I have what I consider a better situation, though I'm sure others will disagree with me.

Since you're making some pretty big changes, now might be a good time to rebuild all of these computers. If you you can move them all to the same OS.
Not sure you're aware, but all of the machines you listed (7/8/8.1/10) qualify to be on Windows 10. Any reason they weren't upgraded during the free upgrade window?

Personally, I'd take an image of each system using Clonezilla, and upgrade them to Windows 10. Assuming the machines are granted a free upgrade to Windows 10, then I would purchase one Windows 10 Open License granting you imaging rights, purchase the needed upgrades for your home licensed computers bringing them legally to Windows 10 Pro, then create and deploy a Windows 10 image.

I skipped a lot of steps here, ask if you want, need more details.

Why I didn't upgraded all to Windows 10 ?

Yes, we upgraded so many computers to Wins 10. But mostly preferred to upgrade Windows 8/8.1. Not upgraded for all, because it was still 1 year old, cannot say how stable it is and don't want to do at that much quantity (100pcs). And some users are happy with Windows 7, better to not touch them if they are going fine.

That's a very bad was to think about software. Windows 10 is not "one year old", it is the update to Windows 8.1 which is the update to Windows 8 which is the update to Windows 7 which was the update to Windows Vista. Windows 10 is the most mature of that family. Windows 7 is the "one year old" release (but patched since then.) Windows 10 is the one with the most time of people testing the code because it is a decade old. You are actually doing the opposite of what you are thinking... you are staying on young "immature" code and avoiding the most stable, most tested code. And you are not trusting a vendor on whom you have decided to depend. That's a bad combination.

http://www.smbitjournal.com/2014/04/software-versions/

I see, so I was wrong at this point

That's benefit of being active in community , learning things

Anyway, still I have chances I think, I seen somewhere to upgrade still to Windows 10 for free and second option is, we need to get Pro versions for some Home Editions, so I will get Windows 10 Pro.

You can do it. But I do not know the legality of it.

I will check. Thanks.

Ok, I understand, due to direct connection from Outlook with exchange, no port is being hit on Firewall. So only non-genuine emails going to be recognized at firewall.

Thanks.

@Dashrender said in Not seeing traffic for O365 emails at 587, 993 and 995 ports on Firewall.:

I would fully expect the emails to be in an encrypted tunnel from the Outlook client (or whatever email client you're using) to O365. Unless you're using some type of proxy that can be a MITM, I don't think anything will see those messages. Even then - Does Outlook get them as email messages?

Not sure.

@travisdh1
Nope. I didn't know it before, and after going through the Vault product.

As I am seeing product is mainly meant for how to manage cad files efficiently from drafting to final design etc. but not for my requirements (proper control over permissions on files/folders).

Second thing is, we do not have only cad files, but also other type of files involved in each project and in each departments like MS applications, PDFs, CAD, 3Ds max etc.

@travisdh1 said in Looking to have good and easy control over the shared folders [permissions] on File Server (Windows Server 2012).:

@openit said in Looking to have good and easy control over the shared folders [permissions] on File Server (Windows Server 2012).:

@Dashrender said in Looking to have good and easy control over the shared folders [permissions] on File Server (Windows Server 2012).:

This is interesting.

I'm curious how you change this without changing the current workflow of your users.

It is difficult to change the workflow (I guess, here you mean, making folders according to departments to give full access for specific department and read access for others.)

I understand, above changes can resolve most of my problems, but practically for Users and in Users view, it's damn difficult.

This is because :

1. In one project all departments needs to involve, so Project-55 (lets say) folders will be in all department folders, instead of being in One Location, now the data/files for project is scattered in different folders and users will need to navigate to different folders for one project to need to work with.

2. Our users are using XREF (a feature in CAD, you may familiar with), where users will point from CAD file to other to know what changes done by other departments, so if we change the location on existing files will effect other files, which is going to be a big mess for Users and to IT ultimately.

XREF is a standard feature across almost all software. Not really relevant to CAD.

3. Currently all department files for one project is under one Folder, when we make it department wise, there is a lot of moving activity, which should be done with keen observation to avoid any files missing due to long file path (I am sure there will hundreds cases will arise).

What CAD software is being used? I bet they have a standard tool to manage this.

If not, then what @Dashrender mentioned already.

CAD tends to have groups of files the software needs for each project, not a single file. So trying to manually manage this would be an exercise in futility, at leas the ones I'm familiar with.

Autodesk CAD software.

@scottalanmiller said in Looking to have good and easy control over the shared folders [permissions] on File Server (Windows Server 2012).:

Changing flows is often the most efficient thing.

As I mentioned above, it's going to be big headache for if I think about change the workflow. And how would be scenario, if I need to do it for some hundreds of projects (which can give me a risk of missing files etc.). Let's say, I have given keen observation to transfer files etc. later in future, if any file is missing (maybe someone deleted knowingly/unknowingly before transferring files itself ) and there are more chances that I will come to Users mind that I missed or deleted in the process. [ FYI, we don't have any file auditing software to help in this scenario ]

Due to number of reasons at my end, I do not prefer changing Workflow.

@scottalanmiller said in Looking to have good and easy control over the shared folders [permissions] on File Server (Windows Server 2012).:

@Dashrender said in Looking to have good and easy control over the shared folders [permissions] on File Server (Windows Server 2012).:

This is interesting.

I'm curious how you change this without changing the current workflow of your users.

Always the big challenge.

Yeah, it seems damn big challenge for me.

@wirestyle22 said in Looking to have good and easy control over the shared folders [permissions] on File Server (Windows Server 2012).:

I'm not familiar with a product that would allow you to do this in a way that is not extremely time consuming. Interested to see if anyone else does.

What I was believing before posting this thread, there should be huge number of IT folks should be dealing with this kind of scenarios

@Dashrender said in Looking to have good and easy control over the shared folders [permissions] on File Server (Windows Server 2012).:

This is interesting.

I'm curious how you change this without changing the current workflow of your users.

It is difficult to change the workflow (I guess, here you mean, making folders according to departments to give full access for specific department and read access for others.)

I understand, above changes can resolve most of my problems, but practically for Users and in Users view, it's damn difficult.

This is because :

1. In one project all departments needs to involve, so Project-55 (lets say) folders will be in all department folders, instead of being in One Location, now the data/files for project is scattered in different folders and users will need to navigate to different folders for one project to need to work with.

2. Our users are using XREF (a feature in CAD, you may familiar with), where users will point from CAD file to other to know what changes done by other departments, so if we change the location on existing files will effect other files, which is going to be a big mess for Users and to IT ultimately.

3. Currently all department files for one project is under one Folder, when we make it department wise, there is a lot of moving activity, which should be done with keen observation to avoid any files missing due to long file path (I am sure there will hundreds cases will arise).

Hello All,

Looking to make life easier with some solution which can give good control over the shared folder permissions for Windows shared folders.

Note: As you know, the behaviour of Windows File System with applications like Microsoft Application Suite, AutoCAD etc. that whenever you are trying to rename or edit file from Windows it will create a temporary file and once we click save, it will append the changes and delete temp file. So wherever user needs to Edit/Rename, we need to give Read,Write and Delete Permission.

This is how one of our Shared Folder looks like, but it's more deeper and complex, bcuz of being lazy I just make it simple, hope you will understand

Difficulty/Problem I have:

1. Managers asks me to give full permission to specific department for specific folder (child folder) and they should only able to view the files from other departments (which is necessary too). Same thing applies to all projects. And we cannot divide the files/data in Department to make it easier to give full and only view access, as all data for one project should be in one location.

2. In some scenarios, I have to give users access to view/edit/rename but not delete.

Solution require :

a. Do not want to change how users are dealing now, which is accessing shared folder with Windows Explorer or Drive mapping. I guess some solutions have accessibility with browser instead of Windows Explorer which changes current approach.

b. Maybe some solutions like LogicalDoc, Alfresco can do this ?

c. We have lots of data on file server (shared folder) and projects (sub folders), about 4TB of data which may needs to be considered while looking at solution ?

Looking for suggestions from you people with a hope to make my IT life easier.

Currently I am typing this on "What Are You Doing Right Now" category reply

Installing OSSIM from Open Source edition on VM ..let's see how it works.....

@scottalanmiller said in Moving to Domain from Workgroup. How to be prepared ?:

@openit said in Moving to Domain from Workgroup. How to be prepared ?:

I understand about stability etc. as mentioned by Scott, but didn't understand how having same versions is useful ? how reduces costs and complexities ?

Lots of ways; I will give some examples:

• Support is reduced by only needing to test and support a single OS. Software that is known to run on Windows 10 will run everywhere. No need to test apps across many OS versions, change systems OS versions to accommodate specific software, etc.
• No need to learn, remember or deal with multiple OSes. Only supporting one means you can focus your time and attention to knowing the current system really well, rather than remembering limitations or ways of doing things across many systems.
• Users can move between systems, help each other and be trained more easily and effectively.
• Support tools can be uniform and more modern. The latest Microsoft and/or third party tooling whether GP, RSAT, PowerShell or whatever can be the latest, greatest and singular.
• Only one set of patches and updates need to be downloaded and applied. Security vulnerabilities only need to be watched and dealt with for the existing OS rather than many.
• Some features are only ever available on the latest OS. So in some cases you will get new features at the network level (everyone) and in others they will be individual, but uniform.
• The latest OS has more code maturity and more focus from the vendor for the lowest incident rate of vulnerabilities and issues.

Well said.

@Mike-Davis said in Not seeing traffic for O365 emails at 587, 993 and 995 ports on Firewall.:

The ports you're looking at are the ones typically used by imap. Office 365 does most everything over 443.

On your firewall, you still want to block (and log if you can) any traffic on port 25 in case a machine on your LAN gets infected and tries to start spamming mail servers directly.

Yup, we are blocking port 25 explicitly on firewall.