Topics created by G I Jones

Figured it out. Both DC's had inconsistencies between configurations and they basically weren't replicating or failing to serve DNS requests because the Interfaces were all over the place.

I used this opportunity to take a crash course on Configuring DNS to understand all of the settings, and I was able to fix it by thoroughly sweeping the settings and correcting as I went.

I've never seen the Security log so empty before. It's a great feeling. Also, I learned a bit about DNS so win-win.

@Dashrender said in Subnetting help:

@scottalanmiller said in Subnetting help:

s this, but they didn't pay attention to their own example. Because they use the old, silly notation it is less obvious how they

They, the authors, are probably assuming old school classes for the network on 192.168.123.0 of /24... which is horrible writing, and lack of explanation.. but possible.

Right, and if they are, it means they don't know the most basic pieces of IPv4. Classful subnets were replaced in 1993. And even pre-1993, it was still less solid than would make what was presented by the author here accurate.

Given that it has been 27 years, there is really no excuse for the oldest, most out of touch networking person to think in classful terms. For 95% of the industry, classful networking hasn't existed during their careers. For 50% of the industry, it hasn't existed in their lifespans. In "IT generational" terms, it's been like five or more generations of IT pros since classful existed, so the "mentors teaching interns" problem has had five or six generations for people to catch on.

This means that the authors not only aren't doing a good job explaining, but lack the skills required for the A+ and certainly aren't prepared to sit for the Net+. This is the first stuff you have to learn about IP networking, because without it, you can't determine how to document or know what the network addresses of your network are!

@G-I-Jones said in Group Policy points to wrong DC:

@scottalanmiller said in Group Policy points to wrong DC:

It really only boiled down to I don't want to wait 15 minutes (the minimum replication between DC's) for a GPO to apply.

Then time to go to a single DC 🙂

But GPOs aren't meant to work this way, really. If you want faster results, GPO is the wrong tool.

What alternative to Group Policy do you recommend?

Salt, Ansible, Chef, Puppet, etc.

@dbeato said in Exchange - Different Domain, Same Forest Users:

@Dashrender said in Exchange - Different Domain, Same Forest Users:

@G-I-Jones said in Exchange - Different Domain, Same Forest Users:

I went to lunch and came back and boy did this thread get juicy. @scottalanmiller , as always your input is both appreciated and needed. I'm really trying to learn all I can about everything, and you all (to include @Dashrender , @DustinB3403 regularly) come through time and time again to school me. For that I'm eternally grateful.

The grand silver lining to any of this is that I've not only got more experience now with things I've previously never touched (i.e. multi-domain Exchange deployments and AD trusts), but I'm learning too that some things I'm questioning like "why do we need another domain for this?" are apparently more rooted in my own understanding of things than inexperience on my part, which means despite all the failures on his or my own part, I am learning.

I've talked to the boss and he agreed that we adjust the trust and make them the same forest. I'm not going to push the issue any further but am going to try to get as much out of the situation as possible for me.

Once you do that - you'll only have one exchange system. that system will have both .net and .org in it and life will be generally much easier for you.

Or move to Office 365, G Suite, Zoho or some other external email system.

LOL

@Dashrender said in "Access Denied" RENAME.bat:

Manually running the script won't give you the same results you would get running it via GPO - FYI.. there are subtle differences.

In this case it's the same.

@scottalanmiller said in Group Policy Object - Copy Database frontend from NAS WITH icon:

@G-I-Jones said in Group Policy Object - Copy Database frontend from NAS WITH icon:

I'm looking for an option similar to User Configuration>Preferences>Windows Settings>Files where you can copy a file from a directory directly to C:%userprofile%\Desktop, but I want to be able to include a custom made .ico.
....
Any experience or ideas?

Now if we have figured out that this is a database file, not a front end application component that is stateless, then the need and reason for copying the files makes sense. It's a stateful backend file called a front end, but that isn't a front end (facepalm)...

Then a script is one option that will be decently easy. Or a tool like Salt or Ansible will do this easily. GPO probably can, I just don't know the mechanism that would normally be used outside of just calling a script.

Yea, I'm just going to run a script for the xcopy and then configure the GPO to point to it's location as @Dashrender suggested earlier. Makes sense, and seems pretty straightforward and easy.

@Obsolesce said in New VM keeps turning off:

Is the OS licensed properly? I thought it shuts down if it's not, not sure if that still happens.

Yea, it's Activated and all that.

@G-I-Jones said in Exchange 2016 Install Issue:

@scottalanmiller said in Exchange 2016 Install Issue:

@G-I-Jones said in Exchange 2016 Install Issue:

@scottalanmiller said in Exchange 2016 Install Issue:

@G-I-Jones said in Exchange 2016 Install Issue:

@scottalanmiller said in [Exchange

Local admin account, PowerShell, SSH.... five minutes to fix 😉

I need that script

Do you already have a local admin account on each machine that is working and SSH enabled?

I’d have to look into the SSH part, but yea.

SSH is off by default. Without that, maybe PowerShell Remoting will work? You need something to let you on each machine individually to run things.

We have Dameware. I wonder if that could be of use.

Definitely should be able to.

[Solved]

After re-configuring the Server setup to run ESXi via USB internal (for now) and completely CLEARING each drive (because I installed ESXi on the RAID 5 array initially and if you do that, it ruins everything and your drives disappear), I re-allocated the drives to RAID 5, and re-installed ESXi DELL OEM 6.7 Update 2 to the USB on host. I was able to build the Guest and everything worked fine except Network Shares. I was back at square one on that front. Turns out it was a bad switch (Netgear 8 port) the host was plugged in to.

@JaredBusch said in HP Z440’s Bricked Hard:

@Dashrender said in HP Z440’s Bricked Hard:

By this I mean - we have to make our own image that includes the storage drivers so the image will boot and be able to detect the storage devices automatically and allow a typical installation.

This is overthinking things. You Boot to the Windows ISO and then simply click "Load driver" and have the driver on another USB.

No one in the SMB should be doing anything else. Building bootable images with all the right drivers? waste of time. You should not be installing often enough to worry about that.

You're not wrong - but I was trying to give the OP all the information.

To come back around to the initial question, I'll throw GLPI + FusionInventory into the mix as a decent replacement for SpiceWorks. You keep the ability to have your whole IT environment managed and documented in a single system (Equipment, users, ticketing, contracts, contacts etc etc....)

I figured it out!

ren *.zip.jpg *.

@G-I-Jones said in inetpub\wwwroot deleted somehow. OWA, ECP tanked.:

@DustinB3403 So since this appears to be in preparation for future issues, is the common practice to just audit every drive?

It depends on what you want to audit, and how much you want in your logs.

@Dashrender Yes. Yes it is.

@manxam Yea I'm probably going to give them basic Office suite and some browsers as well. No thanks on the sample xml. I'll be making one shortly anyhow. Much appreciated though! 🙂

@G-I-Jones said in Funky Exchange OWA Issue:

I figured it out. In IIS>Default Web Site>SSL Settings>Client certificates was checked to Require. I moved it to ignore, and viola.

That's weird usually no one has that checked by default.

@Dashrender Yea, it worked.

@G-I-Jones said in Spiceworks Custom CSS HelpDesk Theme:

Anyone here using Spiceworks played with the CSSpice plugin?

Has anyone figured out a way to change icons?

It might be a little tedious for all of the icons, but if you want to change a main logo or something you can just base64 encode an image and use that as your CSS.

I took a picture of the Rancher logo and did that to show you:

base64.png

Just do:

some-item { background: url(" data:image/png;base64,<base64 encoded string>"); }

Don't use image/png if it's not a png, use the correct format.

@Dashrender said in System Image Disappearing/Reappearing:

@G-I-Jones said in System Image Disappearing/Reappearing:

The only thing I can think of, which is most likely not correct, is that Windows reads the WindowsImageBackup folder alphabetically. That is to say since LABS comes before LENOVOLAP alphabetically, it hits the Windows 10 image in LENOVOLAP and then says "nope, everything else after this is null" and then doesn't even get to STAFF? I dunno man, it's weird.

Yeah, it's a super basic tool, it's probably not expecting more than a single backup in the directory.

^^ This sounds like what's happening.

If you're tied down to using an external drive and $0 tools, maybe consider using clonezilla or the Veeam's free windows agent. If you've got an afternoon and space for a linux VM (or even just a decommissioned desktop / server for a Proof of Concept test) take a look at FOG (https://fogproject.org/).

@RojoLoco said in New equipment and how people lose their minds.:

This doesn't have anything to do with new equipment, but when the time changes in the fall, everyone in Atlanta forgets that they know how to drive in the dark.

Take the average intelligence level, let 6 months pass. Now what's the % that remember how to do any given thing?

If NE Ohio and winter is any indication, it's about 5%, grrr.