@eleceng said in WSUS Location:

Should WSUS be a separate server / VM or added as a role on one of the 2 domain controllers?

What's best practice, experience?

Best practice is a separate server and never a domain controller.

@eleceng DNS and DCs go hand in hand so while you could get away with it there is no reason to separate those roles.

I use VSCode it works well too. It has that function as well.

@jasgot said in My complex Windows Copy command stopped working.....:

It said Syntax Error. 0 Files Copied.

But..... now it is working.......

Well, maybe a reboot happened or it couldn't read the data and then now it can.

@dustinb3403 It is the worst thing to have a Sonicwall AP

@dashrender However centrally managed doesn't mean site to site VPN. I don't get MSP that have site to site VPNs to their customers. It is not feasible to maintain, it is a high risk and very old school.

@pete-s If for internal helpdesk, Zoho is okay but for a business that does manage other customers not so much.

@Fredtx said in Multiple Tombstoned DC's:

ot 11 AD sites. 1 of the 11 has 6 inbound neighbors that have not replicated since 08/2021, possibly because someone deleted the VPN tunnels to those sites, and did not look at the dependencies of that tunnel.
I'm familiar with the demoting/promoting process, including the DNS cleanup that comes with it. My question is, do I need to demote all 6 of those inbound neighbors? Or is there a better way to handle this. I read that some people have had success with using the Lingering Object Liquidator (LoL) Microsoft tool, and forced AD replication by modifying the Allow replication with divergent and corrupt partner reg key.

I would demote them fully and then add them slowly each one to make sure they are being added properly to the domain.

@JaredBusch Yup, and they want to do a audit of devices using a deployment tool that is not even a Microsoft one.

@notverypunny I run away from DarkTrace don't trust their business practices.

@WrCombs You cannot hide your SSIDs on Eero. You also have a limit of your Main SSID and Guest Network. It is geared for Home and really small environments.

https://support.eero.com/hc/en-us/articles/214588166-Why-can-t-I-hide-my-network-SSID-with-eero-

@stacksofplates That's what I do.

@Pete-S I have used it for DUo and Office 365 and works well. It makes it so much easier for users that refuse to have a mobile or digital device.

@flaxking That would be for Azure Active Directory not Active Directory.

@scottalanmiller There are auto updates also if you enabled that on the plugin will do it.

@CCWTech They haven't been garbage for a while. Their switches have been one of the most reliable I have had .

@travisdh1 ScaleCluster has this issue as well, you have to use a script on a separate computer so it shutdown the servers. So in essence is not native.

@DustinB3403 I am checking one of my syncs to Backblaze and see what I find.

@scottalanmiller Powershell one liner below:

New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\NlaSvc\Parameters\Internet' -Name 'EnableActiveProbing' -Value 1 -PropertyType DWord -Force -ea SilentlyContinue

This article was very helpful when OpenLDAP Severs from Ubuntu 20.04 were upgraded to 22.04 and LDAP Broke.

https://discourse.ubuntu.com/t/service-migrating-from-openldap-2-4-x-to-2-5-x/23807