@Dashrender Yea, it worked.

@Dashrender said in License Hyper-V Virtual Machines...:

@Obsolesce said in License Hyper-V Virtual Machines...:

@Jimmy9008 said in License Hyper-V Virtual Machines...:

@Obsolesce said in License Hyper-V Virtual Machines...:

@Jimmy9008 said in License Hyper-V Virtual Machines...:

Hi folks,

I have Windows Server Datacenter 2019 licenses. If I install Hyper-V server, rather than Windows Server with the role, can I setup AVMA and have the host auto license the VMs?

Or, do I need to login to each VM and add the Datacenter key?

Best,
Jim

Avma does not work on Hyper-V Server.

You'll need to install Hyper-V role on Windows Server DC if that is a must have among any other DC only features.

So, if I have the Hyper-V Server installed only - how do I use my Datacenter license on the VMs? I guess I login to each and enter the key manually?

Correct, or you can do this instead:

https://docs.microsoft.com/en-us/windows-server/get-started/kmsclientkeys

This is the recommended solution.

You have a DC license, so you can spin up a VM that does nothing but act as a KMS for your other server VMs.

Right with DC, you have no issues with quantity of licenses.

@krisleslie said in Having sluggish performance on my Xen Server VM's, looking for suggestions to boost performance:

Otherwise I need some major help on trying to get what Scott is saying I need done. I think Scott hit it on the head, I just don't know where to start.

You mean with adding the logical volume on the RAID controller?

@dafyre said in Bad one: SonicWALL Remote Management Vulnerability:

PFSense has a newer fork now as well, known as OPNSense (https://opnsense.org/)

More modern UI and such, decent packages available if you need extra stuff, but as far as routing and a firewall, it's pretty excellent!

Both have a third party UTM add on option, too.

After comparing the Coronet vs the MS E5 cloud app security license, I'm not seeing any alerts in Coronet that are already available in the cloud app security portal. The Coronet interface is just a improved and easier to work with interface. I'll be sticking with my E5 license for now since I'm getting the alerts I need with only paying for one E5 license vs paying per user with Coronet.

@Dashrender said in FreePBX with Centurylink IQ SIP ...:

CenturyLink/AT&T/Verizon, etc are all carriers AND ISPs

But all, by law, and by physical necessity, MUST operate them as two different things. That one company owns two businesses is just common sense. That's not relevant, it's still bundling versus not bundling. And none of them pretend that they are combined, all of those sell them separately, proving the point.

@stacksofplates said in AzureAD and shares:

@scottalanmiller said in AzureAD and shares:

@stacksofplates said in AzureAD and shares:

From what I've seen it's murky if you don't have to provide those also. I've seen some people say that things written along side of the application need to be made available also.

People claim lots of things, but if that is the case, then the risks of open source instantly apply to proprietary, and all concerns of OS are gone (relatively speaking.) Unless the risk comes solely from modifying the code itself, the open vs close debate is off as the risks become equal.

I think you're missing my point. I'm not saying one has more or less risks than the other. I'm saying that both have them. They both take understanding. You (the editorial you) can't say proprietary licensing is hard and takes a lot of time, and say open source doesn't. Same the other way around. They both take time and understanding in how the language is actually written.

Okay, that I buy. Licensing is hard, period. But it's never a reason to avoid open source. Closed source carries all risks of open source, and more. That doens't mean open source doesn't have risks, just fewer.

@Dashrender said in What is the best workflow to setup VitalPBX:

@JaredBusch said in What is the best workflow to setup VitalPBX:

@bnrstnr said in What is the best workflow to setup VitalPBX:

@rcuadra popped back in yesterday... Maybe he could help?

Well, that was honestly why I replied here again. Also @scottalanmiller is back in the states and may have valid input as I know that he has deployed this.

Or at least set it up on the PBX side, no telling on the phone and SIP/telco access side.

Why would the phone side be any more or less difficult?

Here is a much simplier way to do this.

head -1 /tmp/tmp1.txt >> /tmp/tmp1.txt

I have a cradlepoint AER2200 setup with an AT&T connection at a location across town at a warehouse that gets occasional use. We were going to be using handheld wireless bar code scanners that needed connection to our ERP server. I created an IPSec tunnel to our main office and used an ACL to only limit the correct ports to the server here. Anyway, the connection has been reliable even though it doesn't get much use.

They were going to move out of that location and I was happy because I was going to use the cradlepoint in the main office as a backup, but more for out-of-band management, than for the whole company. Now we have at least another 6 months at that location, so I might end up getting a new one for here anyway. We'll see.

@travisdh1 said in What the world? No user backup script:

@gjacobse said in What the world? No user backup script:

@travisdh1 said in What the world? No user backup script:

@DustinB3403 said in What the world? No user backup script:

Why not use something like UrBackup rather than recreating the wheel with custom scripts?

Especially when it's in the Chocolaty repo. Just script the install and configuration!

Many aspects of Chocolatey are blocked. I tried to install Greenshot and it failed.

It’s the state- which has a high number of limiting GPOs and such.

Scripts are also restricted... to a degree.

Ugh, hope you find a job somewhere reasonable quick!

I took this as a stop gap. But it's what I have now, and what I have to work with. Just trying to improve and make the best of it while here.

@stacksofplates said in Ansible Agent Option?:

Yeah it's obviously bad to treat it like a LAN but if you stop using tools just because it can be treated that way you are sometimes stopping yourself from doing some really interesting and helpful things.

Yes, LAN-like tools are only LAN-like if you treat them in that fashion. The behaviour is rarely intrinsic.

@Jimmy9008 said in IBM Storewize V3700 - Supported Drives:

@scottalanmiller said in IBM Storewize V3700 - Supported Drives:

D) drives:

So, any SAS SSD under 1.6 TB should work with this? Perfect.

That ALWAYS refers to Lenovo's own drives. It never implies third party drives. This is true for all server vendors.

I've been using Duplicati where I need a standalone backup of a thing. Web based management interface makes it super simple to manage.

@scottalanmiller said in P2V Windows 2000 on KVM:

So this is ridiculous, but we just found out that it is actually 2003 R2, not 2000. So I assume that this will be way better.

I had a ton of issues getting mine to work - I had to run chkdsk like 15 times before it finally booted... I don't recall what migration tool I used.

@DustinB3403 said in Account getting locked out:

@WLS-ITGuy said in Account getting locked out:

@DustinB3403 said in Account getting locked out:

Any services or scheduled tasks that might be setup under this account?

Possibly, however the password hasn't changed in the last 30 days that it would cause this.

Then something was turned on recently that is using a password older than 30 days.

Nope. Turns out I had a couple servers that I was giving RDP remote access to another vendor for them to migrate to a new server and I forgot to turn off RDP.

@JaredBusch said in Can someone explain yaml spacing to me because Im going insane:

@DustinB3403 said in Can someone explain yaml spacing to me because Im going insane:

I'm aware there are tabs, this is due to Notepad++

There is a setting for that in Notepad++

I'll be searching for that tomorrow.

Maybe they have a couple keys...

@WLS-ITGuy said in GPO issue:

@Dashrender said in GPO issue:

I would change this up by applying your GPOs to the OU above these WLS OUs, then set filters to only apply to the users you want.

So in the case of the Library, you've already created a security group, so you'll grant permissions to that group.

Then you'll need to create a WLS-Faculty security group and do the same with it's GPO.

So the GPOs would be at 'domain level' not in the OU level...Like this?

alt text

Then I apply the security groups from there? That makes sense.

yeah - you could do it at the domain level - I personally wouldn't. I'd make a new OU, and put your WLS-faculity and WLS-Library in that new OU.. then apply your GPOs to that new one you created. But that's just me.

Like for example adding rd.break at boot.