@scottalanmiller
I just asked the reason behind it and "Mind Blown" because we have a consultant that is working on stuff already and is willing to do it. Along with it being best practice. So now comes the fun, learning how not to break it. 
This was not a "Norm" response to my question.
@scottalanmiller said in What Are You Doing Right Now:
@popester said in What Are You Doing Right Now:
Trying to wrap my brain around adding a CA to our domain so we can encrypt traffic between servers. OMG... Where do I start....
For AD, I assume?
Yes sir. What brought it about was we run Citrix xenapp and nothing is encrypted this side of the ADC
Trying to wrap my brain around adding a CA to our domain so we can encrypt traffic between servers. OMG... Where do I start....
The full rebuild is going well, I love the new server naming schema, I named my server Gina.
Trying to convince my boss that MangoCon is a good thing.
@scottalanmiller That's no baby, that's Michael Bloomberg.
Getting ready for a total Citrix/VMware kickoff meeting. Gonna be a scrub and rebuild (unless unable) of all of the gateways, storefronts, DDC servers, WEM, and who knows what else. This will be my opportunity to get a better understanding of the architecture of our systems. Was robbed of that ability last time this happened. This time I will be an active participant. Yay me!!
@notverypunny said in Securing Web Based Time Clock.:
So long as your IPs are static I don't see anything additional that should be needed from an IT perspective.
Yes. We have two gateways, one through Spectrum business which carries the bulk of internet traffic. And one with Centurylink that carries Mission Critical traffic. If spectrum goes down it fails over to Centurylink and things are a little tight but traffic still flows.
@black3dynamite said in Securing Web Based Time Clock.:
HR should already have this covered by firing the users that is not following policies.
Amen. That was my first question. "I have not received a disable account request, why not?"
Our HR department has discovered that human beings can be dishonest.... (Snark generator disabled).... Our company uses paycom.com as a means to clock into and out of work. It has come to the attention of HR in an audit that certain personnel are using the web interface to clock in and out when not actually at their designated work area. (Feign shock and disbelief generator disabled).... My question to the group is, given that the act of clocking in and out is 99.9% done on premise for the group that is in question, Could simply disabling the ability to clock in and out except from the two external IP addresses our company has be sufficient to stop this behavior? They are telling me that Paycom has this access control ability. Thank you for any help or advice you can offer. Hopefully I have provided enough information to work with but I am sure there is more to this than i am able to realize.
Sitting wondering why the actual F! it takes so long to install windows 10 on a PC that is 6 months old. It has been a while since i had to. I had no idea it was this bad. I have been immersed in the unix type platforms for a while..... I am spoiled. Un Bee Leave Able. The updates 1903 and 1909 are freaking ridiculous. Sorry, Rant off..
We are experiencing some seriously sluggish web traffic. Scott, I know you are near me, how about you guys? Any issues? It seems every SAAS we run is just creeping. Everything looks fine on prem though.... ???
We are in the DFW area North Texas.
Working on "Linux Foundation Certified System Administrator (LFCS)" by Sander Van Vugt,
@s-hackleman said in Password check services.:
I don't want to be that guy, but you could take the time you are spending worrying about this, and just change all of your passwords and be done with it.
The question was more for an understanding of "Could this be an issue?" @Dashrender I have been using lastpass for the past 3 years. I irritate everyone that needs to type in a password I have issued, because they are 20 char upper, lower, symbol mix. I wanted to ping the group and see if people who ask me if it is smart and legit so I could say yay or nay with confidence.
That's all.
@scottalanmiller said in What Are You Doing Right Now:
Trying to reach BackBlaze but none of their phones get picked up.
Are they all out back getting blazed?
Does anyone have an opinion on these security services that take your password and check to see if it has been compromised? I just cant get past the idea that, aren't you simply increasing the probability that your pattern or method of building passwords is now added to the pool for analysis???? Am I being paranoid?
Is Gluster a worth while file system to master? Has anyone used it and what for? I am forging my mental weapon.
