Best posts made by dbeato

You can use Heidoc for this. Use the Windows ISO Downloader and choose the old version of Windows. Simple and Easy.

https://www.heidoc.net/joomla/technology-science/microsoft/67-microsoft-windows-and-office-iso-download-tool

@PhlipElder said in AWS Catastrophic Data Loss:

@dbeato said in AWS Catastrophic Data Loss:

@PhlipElder said in AWS Catastrophic Data Loss:

@Dashrender said in AWS Catastrophic Data Loss:

@BRRABill said in AWS Catastrophic Data Loss:

because the chances that MS's DC is going to blow up is extremely small

And yet, it is what this thread is about ... exactly that happening.

Except that it's Amazon, not MS.

MS was US Central this year or late last.

MS was the world when their authentication mechanism went down I think it was a year or so ago.

MS was Europe offline with VMs hosed and a recovery needed. Weeks.

MS has had plenty of trials by fire.

Not one of the hyper-scale folks are trouble free.

Most of our clients have had 100% up-time across solution sets for years and in some cases we're coming up on decades. Cloud can't touch that. Period.

And no updates correct right? to have 100 % Up-time you must never do updates.

In a cluster setting, not too difficult. In this case, 100% up-time is defined as nary a user impacted by any service or app being offline when needed.

So, point of clarification conceded.

Yes, I know you could do a cluster and that's how Cloud Providers give you that 99.9% up-time or SLA. Right now it is hard to believe no one has any issues, if cloud providers in a large scale have issues then smaller companies do have them as well. That said, no cloud provider provides any backups for anyone unless you set them up either through their offering or your company.

I am starting to work on Office 365 DLP for EMail and OneDrive and working with Sophos DLP in computers and mobiles so not fully there yet.

@Nic said in Cross platform automated patch management:

Here's the link to the Automox community, for anyone who wants to check it out:
https://community.automox.com/

Don't worry, I'm still here in MangoLassi to answer questions you have as well!

Are they still with their limited amount of packages or software?

The rules are setup separate from the Site to Site VPN. That's what the firewall rules are for, you can limit traffic between the networks same as you would limit anything on a PC or a WAN TO LAN connection. It is all about the zones.

It is common, however just make sure when they configure only the Static IP of the printers to be picking them up. Also make sure the SNMP community is not public (also none of your devices should have that).

Yeah, not in my experience. You will need to do it one by one. EFS sucks plain and simple... you only can accomplish the files to be opened over a share if the user has the EFS Certificate in the server that host it and you have logged into it as well in it. It is a mess.

@JaredBusch said in Skyetel sign up working better:

@dbeato said in Skyetel sign up working better:

Maybe in this one

Seriously?

Forget it.

@scottalanmiller Yeah, RDW is the problem I understand now. Basically you can remote desktop without need of App Resources Proxy without any problems. But if you try to load the App Resources from a Windows 10 device then yes I understand now.

@JaredBusch I will once I am settled, I was on the road and now I am home and able to answer this.

@WrCombs said in Datto AP60:

@dbeato - What would it take to get creds for the management interface?

You need to be a Datto partner or find one like me.

@Obsolesce not even multi-billion companies. That's where it takes more time to get things implemented...

It can be both. But most likely the Drives, check with Dell if changing the configuration will work to make it a faster delivery.

@coliver Yup, and it is all based on registry settings so it shouldn't be dependent of Microsoft only.

@Fredtx said in Adding LDAP role to domain controller:

@dbeato So what affect will this new Windows update have in March 2020 if it's in installed on an AD server that is still using the default non secure LDAP? Basically, what will it break? I do know clients who authenticate through their mobile ssl vpn via LDAP (ad user account & pw) so I can see how that will affect them and I'm guessing they will be unable to authenticate and therefore not be able to connect to their vpn?

The LDAP connection between the SSL VPN and your AD Server is the one affected.

@VoIP_n00b said in Reconsidering ProxMox:

How is everyone liking it so far?

It is almost like XCP-ng but with a nice Web GUI and with KVM. That said I have know of this for a while, I am just not sure what your tie is to it but it is a legit system.

Look at this
https://docs.microsoft.com/en-us/deployoffice/overview-of-shared-computer-activation-for-office-365-proplus

After all that, why doesn’t the company work on something like an RDS or Terminal to Server system that way the data and application is not on the user’s machine? Or even better think about a web app or anything that doesn’t depend on your hardware.

Also you might be able to disable tamper protection on the client for Sophos however the best thing for someone using Sophos Central is to have the MDM to allow the wipe of the computer, it will wipe the minute that computer hits the internet. Also the Sophos lockdown with the agent is very annoying but I have gotten it to work for the reasons this topic started but HR took care of getting the laptop back and not IT.

@Pete-S said in sftp without ssh shell access?:

Thanks guys.

To summarize the link above, it's these lines in sshd_config that does the magic.

Match User sftpuser
     ForceCommand internal-sftp
     <snip>

The first line will tell sshd what user(s) the rest of the settings apply to.
The second line tells it to go straight into sftp mode. So this will only apply to the users that match the rule above.

Just make sure to test SSH after you do the changes ok a new session otherwise you might just have broken SSH access.

I use AWS WAF with Cloudfront, Terraform, Cognito and any functions for the applications so it is very powerful.