@ntoxicator said in Microsoft update KB3159398:

call me old school.. But sysprep is waste of time -- much faster to get baseline machine and create images...

Considering sysprep has existed since Windows 2000, someone is just being lazy. If you said Ghostwalker, that's old school and hasn't worked in years.

Your GPOs broke because the patch addressed Keberos authentication and GPO.

https://technet.microsoft.com/library/security/MS16-072

Since you have the same SID on all those boxes, whomever grabbed the token first won. All my clients didn't have a single problem with this. Between the hundreds of domains, I haven't heard a single person complain about GPOs. And we have 15 domains just for our corp environment, not to mention the 50 or so with customers VMs.

In other words, work shit right and shit works right.

That @Scale doing the boat again?

Should have run down to Austin for a quickie and/or crash the party.

@JaredBusch said in Ideas for how to use new, free gear from HPE?:

While total over kill for the SMB, it is still perfectly good hardware.

Overkill for SMB?

We were using those in CaaS to host hundreds of machines per rack. Our TMRK infrastructure was on Cisco UCS hosting just as much.

This stuff is overkill for 99% of the market. If you need high density, like I do, then it's great.

I did notice that it includes the FC interfaces and switch, but not a SAN. Also very little RAM for what you would need for a high density blade system. So little for $60K worth of equipment.

@jmaurelli said in Ideas for how to use new, free gear from HPE?:

I am not keen on putting that hardware in the production environment whatsoever! What happens if you lose you job? Or you find another? I say the new equipment is for training purposes. You also make it known somehow that the equipment belongs to you and are only "licensing" to your employer. It's a win-win. They host in their server room, you train, they reap the benefits of your experience.

Are you really that insecure with new equipment?

Dude, it's HP. There's nothing to it. Standard equipment used by hundreds of companies over the world. I just got a new HPE StoreOnce appliance. It was all of 10 minutes to configure, setup, and get integrated into Veeam's Backup.

Considering it's probably at least 5 generations newer than what's in OP's environment, it's wasted as a UAT environment. Other than needing to throw more RAM at it and a SAN, it's pretty kickass.

@scottalanmiller said in Protecting companies from hourly employees:

@Dashrender said in Protecting companies from hourly employees:

long answer, management believes they could be held liable for people who are checking their email hourly, let's say, at night. those employees could claim that their checking is work and they should be paid for it. So preventing them, prevents the argument. Of course and HR policy stating that they are not allowed to check their email after, say, 6 PM and before 7 AM, should prevent that in a court case, but we've all seen/heard of ridiculous court cases before.

My point is, it does NOT prevent the argument. The employees can still claim that attempting to check emails, even if it doesn't work, is billable work as well.

What is the fear, that an employee will call the DoL and claim to have been falsifying their own work records? I'm confused as to how the DoL would get involved if it is the employee doing something wrong and not the company.

Then there is an easy answer.

Pay for the "overtime" then promptly shit can them.

At-Will employment, and OT milking is not a protected act.

We use PURE storage for 90% of our VMs and Dell Compellent for cheap and deep and the rest. I believe we are on the SC9000, but I would actually have to look. Needless to say, it's got lots of storage, and we got lots of them.

Currently sitting on ~6000VMs throughout all our datacenters. Not counting the 200+ we have internal to us.

https://www.purestorage.com/products/flash-array-m/m10.html
http://www.dell.com/us/business/p/storage-sc9000/pd

@BBigford said in Matching tempdb files to physical cores:

Though, the client and a DBA both said that they had issues if it wasn't set that way. I had asked why they would need to be manually tuned but I may as well have been insulting them. Who knows I guess.

As you should have been.

Let's put it this way. When I worked for the big red V, I had a physical SQL server for a car financial company. 64 processors, 512GB of RAM, running SQL Server 2008 R2. It ran one TempDB. Dedicated to a drive, standard procedure for us deploying. We never had performance issues, and I can guarantee you that there is no way anyone outside of another bank runs SQL Server that hard. If it is good enough for them, it's plenty good enough for the 200GB DB with 200MB of transactions a day.

People who claim bullshit need to be called out on their bullshit. This falls under the "never virtualize SQL/AD" bullshit.

@NerdyDad said in Free SharePoint?:

I missed the point of the DC. I would just decom the DC, then P2V the rest of the host. If you need a secondary DC then just spun up another VM and dcpromo it.

Which is why it is verboten to use SQL Server in an Active Directory Domain Controller. You demote it, you break everything.

Here is the one thing that will shut the dumbasses up about RDP being "insecure".

Multi factor authentication.

Microsoft even supplies wonderful application for it.

https://azure.microsoft.com/en-us/services/multi-factor-authentication/

Eliminates all the shit password problems, even if its 'password', has a mobile app to just hit a button to approve login, and is pretty easy to set up to boot.

Coax cable means lots of things. What kind of cable? How high quality is the cable?

You could covert it over to ethernet, depending on the quality/length. But most coax should be sufficient for enough high res video, just depends on the camera.

Best practice isn't up to date.

Set it to PCI 1.2, that disables TLS1.0, all the AES stuff, etc. etc. You can also disable them manually in the first screen.

Network stops or the network drops?

If it stops, try static config.

If it drops, you got a flapping port on the switch. Set it to 10Mbps half, go up from there. Replace jack, swap port, etc.

I always blame the customer, doesn't matter whom I work for. Default is ALWAYS the customer messed up something.

When shit blows up on our end, we know it. When one guy complains about a strange thing, then it's on them to prove otherwise.

This conspiracy shit is exactly that, shit.

You do know you are ripping off Microsoft's logo right?

Was just talking to someone about the Scale booze cruise. Maybe I should crash the party on Wednesday, not like it takes a long time to drive to Austin.

The actual SW event, meh, not worth my time or money, even if I crashed it. Pretty much repeat repeat repeat from the last 5 years. Has anyone told them that yet another set of Powershell breakouts are not that interesting?

Our MS rep is trying to get one of my colleagues into the MVP program. He does know his Powershell.

Already posted.

@Nic said:

Well people have been making the obligatory food jokes, but I'm not sure that you'd actually stand a chance of winning with one of those

What, you don't want a cow named Hamburger? Or Veal?

Well, decided that I should network and shit. I'm crashing your party. Fuck your couch Charlie Murphy.

Paging @addie to the thread, paging @Addie to the thread.