@dave247 said in Looking for simplest/secure setup for connecting a domain joined computer to corporate network when remote:

@pete-s said in Looking for simplest/secure setup for connecting a domain joined computer to corporate network when remote:

@dave247

On every Windows PC I've seen setup with VPN, you login in to the PC first, using the domain credentials (which I assume are cached). Then you "manually" connect with the VPN client using MFA.

So maybe you're overcomplicating things.

Yeah I think that's my issue. I was at home when I joined my test system to the domain so it couldn't finish the task and cache my credentials. I will have to play around with stuff a bit more not on the weekend. I think I can get this working the way I want...

For starters have a look at "Interactive logon: Number of previous logons to cache (in case domain controller is not available)".

I think Windows 10 will cache by default but not if there are GPO settings overriding it or the registry has been altered. I haven't played with it much so I'm not sure if there is anything else that needs to be looked at.

Tried to update this afternoon and it all went south.
ER-x = 10.10.2.1

Rebooted ER-x first, confirmed all was well (I was updating my PC also), connected to ER-X GUI, Downloaded backup and uploaded 2.0.9 Hotifx 2.

It sat there and spun (GUI uploading file) for about 30 minutes and figure something went south.

Lost connection to GUI, could not ping, timed out trying to get to GUI. Seemed I had no choice but to unplug POE (using POE injector) and tried to reboot. No luck.

ETH0 (WAN) port, ETH2 (Netgear Switch) and ETH4 POE (UAP Lite) were lit.
I had no Internet but I could ping the Netgear switch and UAP Lite and DHCP is no longer working.

I then decided to try the Reset button but that is not working either. While ERX is on, used paperclip, held for 20+ seconds, no change, eth4 light did not blink or become solid and router did not reboot.

Unplug ERX, press Reset while plugging in POE, ETH4 would blink but the router would not reboot after that.

I could not ping either 192.168.1.1 or 10.10.2.1 and setting my IP to 10.10.2.88/192.168.1.5 if I was plugged into any ETH port or LAN port on POE injector.

Anybody else run into this?
Is the ER-X "Bricked?"

I went out and bought a cheap D-link to get me through as the wife needs to WFH. I will play with the ER-x tomorrow at work if anyone has any ideas.

Sounds like you're using this in production, correct?

@rickygm said in Asterisk 16/18 with push notification:

@jaredbusch ok got it, I will have to build my own script to be able to do this.

I have no idea how you got that out of what I said.

The only thing you need to do is figure out what sip show peer NNN is supposed to return related to pn-pid. Then once that is known, it is simple enough to find a comparable item from a pjsip endpoint.

@voip_n00b Yes

I'm going to make sure that registry setting is applied correctly on a few PCs and then restart them. I'll report my findings on Monday.

@dashrender said in Where are MSP managed on-prem workloads moving?:

@pete-s said in Where are MSP managed on-prem workloads moving?:

Thanks, it does makes sense to move to SaaS solutions for a single customer that is doing their own IT.

But a MSP is in a different position because they, besides know-how, have a larger scale. So it can make economic sense to host things for their customers that doesn't make sense for each individual customer.

For instance does it makes sense for a company to have a server to host their website on? No, it doesn't. But if you're an MSP and your customers have a thousand websites that needs to live somewhere, it might make sense for you to host them.

I guess it also depends if you're an MSP that just manages things or if you also have your own hosting/cloud infrastructure or use another provider for that.

All good points. I have no view into that world, the few ITSPs I know are using other companies solutions, not rolling their own, or even hosting their own. Though some of them, we'll take JB for example, do manage all the stuffs other than hypervisor and hardware for things like a Ubiquiti controller, and PBXs.

If you really do have need to host 1000's of websites (or really massive sites, it could make sense to manage the whole stack, but then again, it could be better to get services from someone like Vultr, or in extreme cases like Amazon/Azure.

It's possible that ITSP/MSPs in the SMB space in general don't own any infrastructure themselves.

I know large companies that fully outsource their workloads to service providers. Those service providers host the workloads primarily in their own datacenters but also on public cloud infrastructure. But these service providers are often large companies themselves so they have scale.

@dashrender said in Patch your Windows DCs - else they will break in July 2022 from a patch:

@notverypunny said in Patch your Windows DCs - else they will break in July 2022 from a patch:

How about this month's updates that sent 2 of our DCs into a wonderful boot loop first thing this morning...

it could be related.

Here's the article that saved us
https://borncity.com/win/2022/01/12/windows-server-januar-2022-sicherheitsupdates-verursachen-boot-schleife/

Had to boot the VMs without networking and remove KB5009624 and KB5009595 as they were both 2012R2.

@dbeato said in Goodbye hardware monitoring on HPE Gen10 and newer equipment running ESXi:

@dashrender However centrally managed doesn't mean site to site VPN. I don't get MSP that have site to site VPNs to their customers. It is not feasible to maintain, it is a high risk and very old school.

of course it doesn't.

using a tool like ScreenConnect - having all customer machines in a single account - means SC's hacked, then ever client is hacked...

@pete-s said in Yealink T41P and T41S difference?:

I've actually found one difference and that is that the T41S has a USB port and I don't think T41P has one.

Additionally, the general difference between the G and S line was the USB port and the ability to handle the OPUS codec. I would assume the T41P did not have OPUS support either.

@dafyre Connection closed by foreign host after a couple seconds lol

@scottalanmiller said in What Are You Watching Now:

Liesl and I watched Alien yesterday. Classic

This one:

3584bf05-8f95-4f51-a397-bc36b26c1766-image.png

or

This one:
2bdce47c-a88b-408c-95d4-2e61472dbbe4-image.png

@scottalanmiller said in ProxMox eating SSDs?:

@dashrender said in ProxMox eating SSDs?:

Anyone run into this issue on enterprise hardware?

There is no "issue". Even those that claim that they are running into it, it's consumer drives with HA logging going to those drives. Its' nothing to do with ProxMox, it's just standard, everyday CoroSync logging. The people saying "this is system administration basics" are correct.

Or just understanding what hardware you need for the job.

All VM guest OS will write to the same drive as well. So 10 guests will generate 10 times as many writes + whatever the hypervisor itself is generating.

I just checked and Crucial MX500 have 0.2 DWPD, which is not bad for a consumer drive.
But compare that to enterprise drives that usually start at:

1 DWPD (read-intensive) 3 DWPD (mixed use) 10 to 100 DWPD (write intensive)

@jasgot said in Nextcloud 23:

You'd think they would use the same name for everything and outline the steps somewhere to get is all installed properly. Sheesh!

I noticed the same mess. They have had this all screwed up for some time. It makes no sense and there is no automatic dependency handling or clear guidance.