@Dashrender said in Stuck supporting out-of-date Windows Servers, what options do I have?:

@travisdh1 said in Stuck supporting out-of-date Windows Servers, what options do I have?:

@FATeknollogee said in Stuck supporting out-of-date Windows Servers, what options do I have?:

Not to threadjack...
Now that I've experienced Fedora WS & Server updates, why do/does Windows updates suck so bad?

Microsoft has never been good at upgrades. You'd think they would have it figured out by now, but nope.

Upgrades or updates?

Of course windows isn't perfect, but Windows 10 upgrades in my experience has been pretty damned awesome. updates for Windows 10 have been only slightly less so.

Now server updates - that's another matter.

Well we know you enjoy praising Windows 10 so this lip service shouldn't surprise anyone.

@Romo said in Unifi USG VPN from Behind NAT Firewall:

Also add the changes to a config.gateway.json file in the controller to changes directly made on the USG don't get deleted on next provision.

One reason I hate these units.

@Dashrender said in Lastpass missing from Chrome this morning:

@Obsolesce said in Lastpass missing from Chrome this morning:

@Dashrender said in Lastpass missing from Chrome this morning:

@Obsolesce said in Lastpass missing from Chrome this morning:

@Dashrender said in Lastpass missing from Chrome this morning:

I've had nearly a dozen users contact me this morning telling me that Lastpass was missing from Chrome this morning.

The latest version of Chrome is 78.0.3904.97 and was released Nov 6, 2019, so I'm pretty sure it wasn't an update that took it out.

Anyone else see this? Never any issues.

Is why I use "Edgeium"

I like Chredge better 😛

I wouldn't expect things to ultimately be different between Edge (chromium based) and G-Chrome because the base is the same. MS can't afford to deviate that much from the base, otherwise they end up with issues.

Haha, Chredge wins!

Well, it's different enough that all mine keep working consistently. We don't know what they are changing, or at least I don't. We could assume as such, but look at how different all the Linux distros are even though they share the same base (kernel).

yeah - who knows. Plus MS is always going to be lagging behind Chrome in releases, so what issue might hit Chrome, might not hit Chredge for a week or two.

Chrome != Chromium either

Chrome is based on Chromium.
Credge is based on Chromium.

Kubernetes is 3 things:

a container orchestrator (vsphere for containers) a container config manamement (ansible for container infrastructure) a version control system with rollback capabilities (by default stores the last 10 configs for a deployment)

@dbeato said in How to install the Ubiquiti UniFi Controller on Debian 9.1:

@VoIP_n00b said in How to install the Ubiquiti UniFi Controller on Debian 9.1:

So I got the Unifi Controller working with the same nginx config as the UNMS. Thanks again @JaredBusch

Now how do I get my AP connected to the controller?

Take a look at this
https://help.ubnt.com/hc/en-us/articles/204909754-UniFi-Layer-3-methods-for-UAP-adoption-and-management#Section_5

DHCP option 43 - JB and I were just talking about what option was needed for a non UBNT firewall network to provide that to the APs..
thanks.

Yeah, I guess I could see if for scheduling less critical stuff. It does seem like their plan is to flesh out Automation with more polished tools, but Runbooks seems pretty lacking in features.

I did look I to Automation DSC, but I kind of doubt that's ever going to be a good idea for Linux. Ubuntu 16.04 is supported but not 18.04. And it sounded like on Linux, you can't have the Azure Monitor agent and the PS DSC agent installed on the same system.

@JasGot said in Rough morning with Windows Updates on Servers.:

No common denominator yet, other than they are all windows servers 2008R2 and 2012.

We came in today to more than 10 servers stuck in update loops at 10 different customers. The loops went on for hours until they finally reached Update 5 of 5 and then reverted themselves.

Two of them required interrupting the startup and choosing safe mode, to nudge it along.

I need a nap!

Yeah, this has been lately the issue noted here:
https://www.askwoody.com/2019/windows-server-2012-not-r2-goes-into-reboot-loop-after-installing-net-patch-kb-4533096/

I needed to do this for a couple of customers.

@krisleslie said in Anyone figured out how to ZeroTier with AD?:

@Dashrender all ubnt

They have two models, the unifi USGs and the EdgeRouter series - which are you sporting?

@krisleslie said in Large network of Windows machines without AD - GO!:

😞

eh?

@Pete-S said in Change the install behavior by setting variables when running the script:

You set them before running the script and can use them in scripts but if you restart the shell they are gone.

Besides probably losing whatever was running in your current shell session, is there any benefits of adding exec $SHELL at the end of a script file?

@krisleslie said in Delays on servers from Dell:

@scottalanmiller my two orders got through and will be shipped 3 weeks ahead of time.

@krisleslie - Was that a Dell order or HP?

We ended up ordering refurbs and have already installed them.

The correct way to offsite Veeam requires Veeam installed on a system at the remote site. That remote Veeam instance is what talks to the remote data store.

If you are only doing copy jobs, the remote Veeam instance does not require Veeam licensing.

@popester said in Quick question: because I think I messed up.:

The I and C were transposed........ Wow........

Typos drive me insane! Glad you found it before you suffered a catastrophe.

@Dashrender said in Troubleshooting email flow issue:

Pretty sure I figured it out.

The domain in question had 2 MX records,

O365 gmail

O365 has the higher priority, and there have never been any complaints of missing messages.

I'm assuming this spam made it to google, because I know some spammers specifically use the secondary, etc MX records in hopes of bypassing spam filters. So I'm assuming that's what was happening here.

Now that said - I did see a single Twitter email in the G Suite - so I'm guessing there was glitch at O365 once, and Twitter hit it and tried the secondary...

Often, spammers will send mail to a higher MX record on purpose. There are many reason they do this, Less protected routes to a gullible user is one of them.

@Romo said in EdgeRouter L2TP VPN network issue.:

We have a client with an Edge Router Lite FW version 2.0.8 which is having issues with the L2TP VPN. Clients can properly connect to the VPN and get an IP but after the first few seconds of being connected access to the file servers start getting timeouts, web browsing basically either doesn't work or slows so much it's really not usable. A router reboot fixes whatever is causing the issue for some days, but I would really like to figure out how to resolve this without doing a reboot.

I have restarted the vpn services but that doesn't seem to fix the issue.

I can't seem to find anything outside of the ordinary in the logs that would help. Only thing weird is this when the vpn is having the issues ksoftirqd/0 and 1 start using most of the CPU:

Screenshot from 2019-12-12 09-22-16.png

Any ideas?
@scottalanmiller

How long are these users keeping sessions open?

If a reboot fixes, it is likely an issue with the router packages.

I so rarely use my L2TP connection to routers anymore, I have no experience with this issue.

This is how you change the password.

Mine auto updated
8379baa0-4b1b-463c-ab3f-d799daddfa87-image.png

@Pete-S said in deploy iPads - locked down - suggestions?:

Signage displays use vesa mounts so it's easy to find different mounting options. Could have something that could be angled.

I would also consider disinfection when something is used in healthcare by the public.

FTFY

While I would generally agree with that, it feels as if I'm just missing 1 step to this process.