@dbeato said in Protek Support MSP Ransomware Hits Customers in Salt Lake City, Utah:
I think that if it was VPN, still bad practice to have VPN from MSP or any other systems that unprotected. MSPs should not need to have VPN to customers at all.
And vendors wonder why I wonât let them VPN into my network.... ha
Last week was fantastic!
Drove to Greeley, CO - ok that was boring.
Drove to Moab - visited Arches National Park - drove a 4x4 trail - my friend nearly freaked out.. It was awesome!
Drove to Zion National park - walked The Narrows! - man, can't wait to go back.
Drove to Las Vegas - at at Gordan Ramsey's Steak - had the tasting menu - the Beef Wellington was meh at best, the rest was fantastic!!!
Drove to Hoover Dam took some dam pictures
Drove to Grand Canyon Skywalk - paid for the skywalk - was a let down!!! visit other viewing point in that area - SO MUCH BETTER than the over priced, no pictures allowed skywalk...
Drove to AZ south rim Grand Canyon - hiked the 3 mile trail, very scenic!
Visited Bedrock - Fred Flinstone's home town and watched a raptor show - and got to hold the raptor (on a a glove of course).
Drove to Four Corners - it was exactly what I expected - a plaque marking where the four states meet, took a picture and continued on...
Drove back to Greeley, CO -
and lastly,
Drove home.
58 hours in the car, 3200 miles, 5 states, 3 National Parks, a million pictures - great time!
As some might recall, I ran into Wiztree a month ago. I asked the author to look into adding it to Chocolatey.
And he did.
https://chocolatey.org/packages/wiztree/3.17
It's been a good year for Dashrender - down 40 Lbs since January!
Brought my mile time from 8:29 to 6:47.
Only bad thing - good cholesterol is a bit low (but bad cholesterol is in the good range). Doc suggested I drink Red Wine to improve the good Cholesterol.
Just read about this free book on that other site, thought i would share a link to it here.
I was restoring some files from our backups when I ran across this.
These files have been sitting there for a month plus. Unbelievably it appears that non of my other network shares were affected by this.
OMG - I think we some how dodged this bullet.
@RojoLoco said in What Are You Doing Right Now:
When reassembling a laptop, how many screws should I have left over?
Anything less than 4 and you're trying to hard.
Let's try this again. You might have seen my other post where I was trying to gather all of the steps for installing Hyper-V 2016 in a domain a bit ago.. Here's my second try.
Install Hyper-V 2016 on a server - very typical Windows install, so I am not including any screen shots.
Typical install will have a 40-80 GB 
and the rest as the 
drive.
Upon first boot you will be prompted to create a local admin password. After setting the password you should see something like this.
I'll start by setting a static IP address, option 8 for networking.
In my case only one NIC is plugged in, so that's the only one you can manage via sconfig (the default menuing system you see here).
We want to set the Network Adapter Address, so option 1
We want static, so s
Type in the IP address information as requested
Now we set the DNS server, option 2, click OK to continue.
you're prompted for a secondary DNS, enter it if you have one
Press 4 to return to the main menu.
Now I'll join the domain, option 1, then D for domain
Type in the name of the domain, then you're prompted for the user that can add computers to the domain
A new window opens and prompts you for that user's password
You're returned to sconfig and prompted about changing the computer name before reboot, click yes
You're now prompted for a domain account that has rights to change computer names
you can't reuse a computer name that already exists - unlike adding a desktop machine, Hyper-V will simply error indicating that an account of that name already exists
And again with a new black window asking for that user's password.
Prompted to restart to apply change, click yes.
Upon restart, chose option 6 to install updates.
Now we'll enable remote desktop access via the sconfig menu. Option 7, e for enable, and 1 for the best secure option.
FYI - Remote access via Server Manager is available by default once you join a domain. You'll still likely want remote desktop access though.
This is a Dell server, so I install OMSA - I won't go into details, you can see JB's writeup here
https://mangolassi.it/topic/8350/install-dell-openmanage-server-administrator-on-hyper-v-server-2012-r2
Change firewall to allow remote administration
Enable-PSRemoting
Enable-NetFirewallRule -DisplayGroup âWindows Remote Managementâ
Enable-NetFirewallRule -DisplayGroup âRemote Event Log Managementâ
Enable-NetFirewallRule -DisplayGroup âRemote Volume Managementâ
Set-NetFirewallRule -DisplayGroup 'Windows Management Instrumentation (WMI)' -Enabled true
Set-NetFirewallRule -DisplayGroup 'Windows Firewall Remote Management' -Enabled true
Set-NetFirewallRule -DisplayGroup 'Remote Service Management' -Enabled true
Enable-NetFirewallRule -name RVM-RPCSS-In-TCP,RVM-VDSLDR-In-TCP,RVM-VDS-In-TCP
note - MS removed access to Device Manager remotely as of Server 2012
*Here is a possible solution for those that want a GUI *
Here is an MS blog post about using Powershell for device management
Remote access needs to be enabled on the machine you're remoting from as well as the one you're remoting too,
netsh advfirewall firewall set rule group="Remote Volume Management" new enable=yes enables the needed piece from the local side to allow remote access to Disk Manager*
Change the location to store VMs
Launch Hyper-V manager as a domain admin user (or a domain user who has admin rights on the Hyper-V host)
If you haven't already added the Hyper-V host, do so now.
You should see something like this.
Right click on your Hyper-V host and choose Hyper-V Settings
Change the Virtual Hard Disk and Virtual Machine to your desired location
Create a NIC team, even if only one NIC will be it, because it will be easier to add a second NIC later if needed.
You have two options
powershellGet-NetAdapter to see a list of your adapters like this.
To create a team using my output
New-NetLGfoTeam -Name Team1 -TeamMembers "Ethernet 4","Ethernet 3"
Next to Teams, click the drop down and choose New Team
Give the team a name, then choose the desired adapters, you can change any needed settings under additional properties (exposed here)
FYI, the new team may or may not use the settings set above. If doing this remotely, make sure you have either local access to the host, or something like iLo incase the settings are not what you set above.
Configure a vSwitch, right click on the Hyper-V host and choose Virtual Switch Manager
Click Create Virtual Switch
Name your vSwitch, choose External, then choose your newly created NIC Team.
MS calls the first team Microsoft Network Adapter Multiplexor Driver
*If these are the only adapters connected to the network, make sure you leave Allow management operating system to share this network adapter checked.
You're now ready to create your first VM.
I found this site that tells you what carrier a phone number belongs to.
@JaredBusch posted several years ago about how he does it, and I've adopted it.
He avoids static whenever possible. There are times where you should absolutely use static (hypervisors/iLo/iDrac, etc).
But for things like servers and printers - instead of static, used DHCP reservations. This allows you to change IP settings for these devices from the DHCP stack instead of visiting each device and changing them manually.
You can still use a reservation for a device you set statically as well, just the DHCP server will never hand out that reservation, but you'll have a single list of what is assigned at least to the MAC level.
Aww JB, the little ray of sunshine in everyone's life.
@jaredbusch said in Configuring Windows Server 2016 Core. Part1: Installation:
@wirestyle22 said in Configuring Windows Server 2016 Core. Part1: Installation:
@aidan_walsh afaik there is no reason to install it as a role. All it does is create unnecessary licensing dependencies.
The main reason some people do it is for auto activation of guest windows machines. That is no reason to ever do it IMO.
If every physical server is a Datacenter license then it is pretty transparent also.
But I still do not feel that Installing in this way makes sense.
Yep, KMS server to the rescue.
And people wonder why I think that ALL - hold on.. not good enough.. that ALL data traversing the internet should be encrypted.
Huge bonus to turning off the main lights in my office.. now people think I'm not in there. The light from the under cabinets don't hit the window in the door enough to make them think someone is inside.
@mdecamp said:
@IRJ Very comparable when it comes to price and functionality. We do offer a 3-year warranty that covers the entire UPS and the battery: http://powerquality.eaton.com/Products-services/Backup-Power-UPS/3S.aspx?cx=3
Typical desktop models:
Eaton 3S: http://powerquality.eaton.com/Products-services/Backup-Power-UPS/3S.aspx?cx=3
Eaton 5S: http://powerquality.eaton.com/Products-services/Backup-Power-UPS/5S.aspx?cx=3The 5S has a nice LCD screen.
We just had a 2.5 hour outage yesterday and I hadn't replaced my desktop UPS yet. I'm ordering this right now (Amazon has it for $200 for the 1500 model.. awesome price!)