Best posts made by alexntg

@IT-ADMIN said:

i know that the best practice is to have one additional DC in the branch office, but unfortunately i still not have the skills to get that done, this project was not successful and i risked to damage the main DC because it seem that there was some kind of conflict between the 2 DC, now i'm thinking about having child DC in the branch office, this is my next plan, hoping that will be successful

best regard

Do you mean a child domain? There's very little reason to use a child domain unless there's a legal separation requirement between two business entities or you have so many computers that a single domain wouldn't be practical.

@RAM. said:

@alexntg said:

@Bill-Kindle said:

I'm a blue guy myself. Being able to lift off to me is the ultimate freedom.

Wouldn't blue be a subset of grey in some cases? You could pick yourself up (or a chair if there's some rule where you can't lift yourself)

Well lets think about purple real quick here for a second. It says phase through "anything". What does "anything" mean to you? If we are talking a linear directional world you're only giving yourself a small taste of what the power can do. But if you say "omnidirectonal", now we're cooking with something a bit more profound. If I can phase through space and time, flight may not be what I get, but unlimited free falling, extraterrestrial exploration, winning in illegal gambling rings based on pre-determined knowledge, and phasing from country to country ftw. I could take out kim jong and and become the worlds most epic dictator.

If you could be selective in your phasing, yes, purple would be quite spiffy!

@IT-ADMIN said:

@alexntg said:

@IT-ADMIN said:

i know that the best practice is to have one additional DC in the branch office, but unfortunately i still not have the skills to get that done, this project was not successful and i risked to damage the main DC because it seem that there was some kind of conflict between the 2 DC, now i'm thinking about having child DC in the branch office, this is my next plan, hoping that will be successful

best regard

Do you mean a child domain? There's very little reason to use a child domain unless there's a legal separation requirement between two business entities or you have so many computers that a single domain wouldn't be practical.

so, i meant child domain, i plan to do that in order to have a backup login server in the branch, i know that additional DC is the best solution for that but this project was not successful. so sad .....

If you go with a child domain, you'd just have 2 domains with single domain controllers. You'd still have the single-DC point of failure (times two), as well as having to deal with domain trusts, group permissions from multiple domains, etc. You really don't want to do that. If it were me, I'd focus on getting the second DC working properly.

@FiyaFly said:

First that I would call a concert- System of a Down

Nice first concert!

@NetworkNerd said:

@scottalanmiller said:

You do use VDI? Running a Windows desktop in a VM is what VDI is. All that other stuff is later infrastructure that people now associate with VDI. But this is as much VDI as anything else is.

I feel pretty dumb for this, but I just had a misconception about what was classified as VDI. I thought you had to be using something like View or Cirtrix to be considered using VDI, but a virtual desktop is indeed a virtual desktop. Thanks for slapping me around a bit.

VDI's a virtual desktop with an access platform. It's a pretty broad category. A virtual desktop by itself is just a VM. Add access to it (RDS, PCoIP, even LogMeIn), and you have VDI. Something like VMware Horizon View allows you to use non-persistent linked clones effectively and be able to automatically provision/deprovision desktops as needed, which is a must-have if you're looking to scale beyond 10 or so desktops.

A common misconception folks have is considering Citrix XenApp as VDI. It actually isn't. It's just an RDS session on steroids (different connection protocol, better resource management). It can run on a bare-metal Windows server and has nothing to do with virtualization at all.

@technobabble said:

Thanks @alexntg. And here I thought I knew enough about UPS's since I am a total freak when clients don't have them. I am constantly teaching the dual roles of UPS, brownouts/blackouts (we get a LOT of brownouts here especially in older businesses and homes) and surge protection. Most people think surge protectors are all you need.

It comes from growing up and starting my career in a hilly, wooded area. The grid was pretty solid, but it didn't help against localized trees falling and drunken rednecks crashing into poles. UPSes were a must-have.

For a comparison, of the two branches of Eaton endpoint UPSes, only the 5S family protects properly against brownouts, while both models include surge protection and battery for power outages.
http://powerquality.eaton.com/Products-services/Backup-Power-UPS/PC-Workstation-Home-AV/default.aspx

With APC, it's one of the main differences between their Back-UPS and Smart-UPS lines.

@Gabi said:

@scottalanmiller could not agree more.

Seems that everyone is using the term VDI for any desktop (regardless of user or server desktop) which is accessed through the cloud.

VDI is rather expensive, XenApp/RDS will work for most things as you have well said a million times.

There's a big difference between XenApp and VDI. XenApp's a bunch of folks logged into the same computer. If something gets screwy that requires a reboot, it impacts all the logged in users. Changes can't be made to the environment without impacting all the users. With VDI, if something gets screwy, it just impacts that one user. This is a major advantage for things like LOB apps that are often less well-written than we'd like. It also supports applications that don't run well in multi-user environments.

With a mainstream linked-clone VDI implementation such as VMware Horizon View, if you want to make an environment change, you can do so without impacting the existing environment. You can set up a test pool for users to try out, then phase it in without disrupting existing users. The next time they log in, they'll get the new environment. If you later find that there's an issue with the image, you can roll back just as easily.

@Carnival-Boy said:

How did you cope with support before the internet? I remember phoning Microsoft a few times, but generally I can't really remember what I did. I'm sure that problems that take ten minutes to solve now could take a whole day back then.

Trial and error. I was fixing computer issues before I had Internet access.

@RAM. said:

So you shouldn't use your penis on the fingerprint scanner anymore?

Remind me to never borrow your phone.

Well, crap! I'd have loved to have been there to have a drink. The irony of me drinking while PSX was dry would have been delicious!

@Carnival-Boy said:

I really hate plans. Especially Microsoft ones. Why can't everything just be à la carte? It's the one area where I really prefer Google.

Everything is available a la carte with Microsoft. If you wanted to pick up Exchange, SharePoint, and Office, but not Lync, you can. Much like a combo meal at a fast food place, it'll cost you more individually, but it's completely doable.

Sorry, I was actually busy doing work on Friday. A very long-delayed project took off on Thursday.

@scottalanmiller said:

'Muricans

Merkins? (For those not familiar with the term, be careful searching for it, as it may contain NSFW results.)

I haven't had a recruiter call me at work in years. Home, however's a different story (eat voicemail, punks!). It sounds like it's time for a headset, though. It's the ease of speakerphone with the privacy of a handset.

I'd like to interject a technical bit:

In this topic, people are referring to changing plans. If I want to change from an E1 plan to E3 or vice versa, I can do that at any time, with just a few clicks. That's changing plans. Changing from Small Business to Midsize Business, for example, is a change of tenant. If you want a comparison for an onsite equivalent, it's like changing over to a new AD forest. It's not something you can just do that easily.

How do the clients connect?

You should see a related tunnel/rule in your firewall configuration. In an AD environment, the DC should be set as the DNS server, so that doesn't necessarily point to anything specific as the VPN.

If someone's having a wireless issue, I'll test it against some known good APs at the office. To be impartial, I'd take it to Dunkin Donuts and see if it works there (over a latte, of course). If it works there, it's the user's problem to deal with.

I originally posted over here: http://community.spiceworks.com/topic/518864-ubiquiti-edgerouter-external-management however it's been nothing but crickets.

Pasted: Due to its low cost and glowing praises in the community, I put in a Ubiquiti Edgerouter at a small client site. It seems that the management interface (web and SSH) were available externally. The only external inbound rules are to allow stateful and drop all.

While I was able to force the management interface to listen on the internal interface only via the "set service gui listen address" command, a port scan reveals that the ports are still open. How do I close all external ports?

Update: Rebooting the device after the config closed up some of the ports. Remaining open on the external interface are:

21
554
22
7070
843

How do I get these ports closed?

@Dashrender said:

Because my users move from computer to computer, that simplicity just isn't possible for me.

I assign printers to the computer, not the user. That way, whoever's sitting at any given computer has the printers appropriate to the computer's location. Computers that hop between sites can be granted their main printers and at least one key printer from other sites. Let's say an engineer from the west coast's assisting with a project on the east coast and brings their laptop with them. Adding the east coast main copier as a printer would give them the ability to print while traveling, even if it's not quite the closest printer to where they're working.