@scottalanmiller said in Windows 10 Enterprise licensing...:

@Dashrender said in Windows 10 Enterprise licensing...:

Then they added Enterprise as part of E3 and better O365 licenses,

I think you mean M365, not O365. Do they really offer it now in the regular Office levels?

You're right - M365, O365 never includes the Windows OS, that I know of.

@nadnerB :face_with_tears_of_joy: 🤣 :face_with_tears_of_joy: 🤣 :face_with_tears_of_joy:

@stacksofplates said in Microsoft plans on retiring the MCSA,MCSD,MCSE certifications in June 30,2020:

This is just like that time when @JaredBusch and I argued with you because you said "we were laughing at people not using APIs in the 90s" meanwhile there are still a ton of companies making client/server architecture including a piece of software you have to support.

Actually, no, it's completely different.

You are conflating the idea of people doing things poorly with that lots of people do do things poorly.

If you stop putting words in my mouth and actually read what I write, you'll see absolute consistency. Your understanding or assumptions jump around wildly because I'm being realistic and evaluating each situation on its own merits, not in spite of it.

In the example you just gave, yes, I'm mocking people for doing things poorly. But that in no way claims that I believe that people don't do things poorly. In fact, I've stated ad nauseum that the majority of the world does things poorly. And I've said many times that we should make people doing things be more accountable.

@zubairkhanzhk you're welcome!

@Romo said in Cisco SPA504G Call Reparking issue:

Totally agree, the phones suck, but they are what the client has as they didn't want to upgrade to new phones =(

Same here, we have an office full of that Cisco garbage, but hopefully we will be switching out our provider soon.

@JaredBusch said in Optimizing Fedora 31 VM w/GUI for remote access:

@wirestyle22 said in Optimizing Fedora 31 VM w/GUI for remote access:

Currently Windows 10 RDP works incredibly well but trying to loan Gnome or Fedora has been much slower.

What is the point here. What are you "trying to learn" in a GUI?

You do not "learn" desktop environments. You simply use them. If your desktop environment requires a lot of education to use, it is shit and you need to choose another one.

load, not learn. I typo'd

@IRJ said in Choosing a WAF:

@dbeato said in Choosing a WAF:

I use AWS WAF with Cloudfront, Terraform, Cognito and any functions for the applications so it is very powerful.

@dbeato said in Choosing a WAF:

I use AWS WAF with Cloudfront, Terraform, Cognito and any functions for the applications so it is very powerful.

Are you using owasp top 10 rules?

Yes

Starting on Server 2012 you can have as many SSLs on your IIS Because of SNI support as you want however anything OS than that you can have multiple SSLs but won’t be able to apply them to different sites. I use certifytheweb for Let’s encrypt client with Windows Servers and it works beautifully with Exchange, RDS servers, Application Servers and even internal servers as they use DNS Verification.

@Pete-S said in sftp without ssh shell access?:

Thanks guys.

To summarize the link above, it's these lines in sshd_config that does the magic.

Match User sftpuser ForceCommand internal-sftp <snip>

The first line will tell sshd what user(s) the rest of the settings apply to.
The second line tells it to go straight into sftp mode. So this will only apply to the users that match the rule above.

Just make sure to test SSH after you do the changes ok a new session otherwise you might just have broken SSH access.

@scottalanmiller I haven't used them, but from what I hear it's only network storage. I could easily build something that would be faster for less money.

@Obsolesce said in MFA - who pays for authentication solution?:

@JaredBusch said in MFA - who pays for authentication solution?:

@Dashrender said in MFA - who pays for authentication solution?:

@stacksofplates said in MFA - who pays for authentication solution?:

@Dashrender said in MFA - who pays for authentication solution?:

@stacksofplates said in MFA - who pays for authentication solution?:

@Dashrender said in MFA - who pays for authentication solution?:

@IRJ said in MFA - who pays for authentication solution?:

Why not just supply hardware tokens? They are not that expensive.

for multiple sites? Just what everyone wants, a pocket full of tokens.

EHR
email
2nd EHR
3rd EHR
4th EHR
5th EHR

it's PHI so I could easily see insurance companies at some point also requiring it, so that could be another 20.

This is a joke right? You can use a token across multiple sites. Especially Yubikeys.

yeah I know you can with something like a Yubikey - but that assumes that the site supports Yubikeys -and our EHR only supports Symantec VIP tokens - super lame!

I'd argue it might work anyway. Yubikeys support up to 31 or so OATH-TOTP codes (like an RSA token or Google auth app type token). It also supports any number of u2f applications and two slots for TOTP/HOTP, hmac-SHA1, and GPG keys.

As long as the VIP tokens use some standard for the way it generates the TOTP token you can scan it/enter it with the Yubikey Authenticator app and have it manage that.

Interesting.. thanks.

It is the same for using Authy instead of Google Authenticator. A lot of sites only say Google Authenticator, but they all use standards, thus Authy works just fine.

Exactly. Anything that says it uses Google Authenticator, can also use MS Authenticator. Same standards as JB said.

That part I know, but Symantec VIP uses their own what they call credential IDs, it's not a generic number like GA or MS auth uses... but I'll have to dig into it to see if it's cross compatible.

@Dashrender said in Weird thing on O365 account:

@Kelly said in Weird thing on O365 account:

@Dashrender said in Weird thing on O365 account:

Alright, the user has confirmed that she made changes yesterday, and those change could associate with GMT based time.

Anyone know if the logs are only/mainly in GMT?

Almost all O365 logs are UTC 0 regardless of the timezone of the server or requestor.

yeah, OK that makes the time line up for when the user added the rules, I'm just curious why it took MS 6 hours to send the noticed of alert?

They batch some of their processes, so it may have had to wait for the group to run rather than being on demand/occurrence.

@JaredBusch said in Installing Windows 10 without a Microcoft account:

@computerchip said in Installing Windows 10 without a Microcoft account:

@Dashrender I did an install last weekend of a freshly created usb installer from MS website, and there was no option to create local for the home version.

Do not connect to the network during setup is the only way around that on a home install now.

Yep,

@magicmarker said in Renaming a Hyper-V Host:

@PhlipElder said in Renaming a Hyper-V Host:

@magicmarker said in Renaming a Hyper-V Host:

I want to rename a Hyper-V host to comply with a new server naming scheme. The Hyper-V host runs 2 production servers that are replicating to another host along with being a host that other Hyper-V hosts replicate to. I’ve been unable to find anything that says this not a good idea or explaining what this can break. If this can break things, or is a hassle, I’ll leave the name alone. I don’t know how the Hyper-V replication handles a host name change. Has anyone renamed a Hyper-V host?

How is Replica set up? HTTPS or are both members of the guest's domain?

Off the top the rename would break things either way. With the need to re-establish replication the existing replicated data should be okay to use as a seed.

Replica is setup on HTTP. I'm leaning towards not renaming the host. Seems like it will not be worth the effort.

Not HTTPS so not using certificates? It's not much of a chore if straight HTTP.

That being said, if it is HTTPS then the certificates need to be generated, seated, and applied again to get them happy with each other.

It's the capability of the device to be hot-swappable. Purchasing one then adding another for some other time for a proper set-up is possible.

@black3dynamite said in Disable update checks in the Nextcloud client (windows):

@JaredBusch said in Disable update checks in the Nextcloud client (windows):

jsut upgraded a system from 2.5 something. I made sure the key was set first.

after the upgrade it is gone.

37ce8b3e-b622-417f-9771-e93c6f5d7f78-image.png

What a pain in the ass.

Where did you add the registry key?
HKLM\SOFTWARE\Policies\Nextcloud GmbH\Nextcloud?

I did not add the second key because that was to prevent user override? My users don't have admin rights so even if they attempted ot override, it would never work.

If your nginx reverse proxy is on Fedora, confirm that SELinux isn't denying anything.

sudo tail -f /var/log/audit/audit.log | grep 'denied'

Theoretically there could be a link aggregator somewhere down the line that is putting loads of smaller connections together to create this effect by accident.

@Pete-S said in Opinions on POS/label printers?:

@Dashrender said in Opinions on POS/label printers?:

@Pete-S said in Opinions on POS/label printers?:

@scottalanmiller said in Opinions on POS/label printers?:

Any reason not to look Dymo? We like them a lot.

Does Dymo make standard thermal transfer printers? I thought they only made printers that would print on their own media.

What does this mean? I have Dymos all over, we buy non Dymo branded labels from Amazon and they work fine. Is there something special about that type of label though?

What I meant was that Dymo makes printers that takes Dymo labels. Sure other might make compatible labels but that is not what Dymo had in mind. Dymo sells their printers because they want you to buy their labels (which is where they make money).

Zebra and others on the other hand makes generic printers that take standard size media - just like an office printer takes "letter" size paper.

OK I getcha... like Keurig tried to pull with scanning a barcode on coffee pods - total fail! People will do damned near anything to override your lock-in when possible.