Topics created by Joel

Remember that if they can install things without any prompting, it means that malware will install without any prompting either. And that malware will have admin rights, not user rights.

@tim_g said in Hyper V replica VS DFS:

@jimmy9008 said in Hyper V replica VS DFS:

@tim_g said in Hyper V replica VS DFS:

@jimmy9008 said in Hyper V replica VS DFS:

Also remember, replica/DFS is not a backup. This is useful if you are using it for some sort of DR, but its not a backup (just saying in case this was for a backup).

It can be used as hardware redundancy and to speed up file access in remote locations.

Yes, it has many uses. But my point was its not a backup. So, wanted to make sure this wasn't in place for a backup.

Good call! He did mention a secondary offsite server... but never mentioned the reason. Could be for backup?

My thoughts exactly. Hence saying what I said 😉

If using replica from A -> B, and if they think its a backup.... just wait for the VM on A to get ransomware... and bad times as yep - B also has the locked files.

Hyper-V Replica is not a backup. Its a DR type thing. DFS is not a backup, its a file distribution system.

@storageninja said in HyperV Partitioning:

My point is that things in the IO path go through that VM. They didn't want to write a full IO driver stack for Hyper-V so they have the VM for that. Compute/Memory doesn't go through it (that I know of), but network and disk IO do. (Otherwise Perfmon wouldn't work as a monitoring solution on the host).

I think you have some misconceptions or misunderstandings regarding the Hyper-V architecture and components... or Hyper-V stack...

This is not true at all, as it actually depends on the OS running in a VM.

Operating systems that already have the integration components baked into their kernel (Enlightened VMs) use their own Hypercalls to communicate directly to the hypervisor, then to the physical hardware.

Only for non-supporeted (older) operating systems, does the "parent partition" intercept the VM communication, emulating Hypercalls. In this case, there are performance degradations as the management OS needs to work as a bridge to allow the VM to access the hardware.

To note, this is why it's important for VMs to be running with the latest IC version.

@wrx7m said in Forcing Group Policy:

In the future you can also use this command (run as admin) on the affected system to view which GPOs are being applied.

gpresult /h c:\gp.html /f

Once it creates the file, open it and show all content and do a ctrl + f for the GPO name or even the setting specific to the issue to see if it says it is being applied or blocked. You can use this to troubleshoot link order or permissions issues or even if it is showing at all (maybe you have a wmi filter or link disabled)

Group Policy Results in Group Policy Managment Console can provide the same results too.

@dashrender said in Hiding files/folder shares from users:

@black3dynamite said in Hiding files/folder shares from users:

@dashrender said in Hiding files/folder shares from users:

I know there have been tools in the past to remove local drives from remote access users visual/access space, but it's been ages, so I don't recall them at this time.

Windows SteadyState

How does SteadyState remove the local drives from the view of the user? It's my understanding that SteadState locked the drive so users can't write to them.. doesn't mean they can't see them.

I believe there were two options. One of them was only hiding the drives. And other option could affect certain applications from working correctly. There was a DeepFreeze like options where you could still allow updates.

@brianlittlejohn said in NET::ERR_CERT_REVOKED:

With SBS you use the built in wizards for everything. The SBS Wizard has a wizard to get a new cert put on the box.

Always this with SBS. Always.

@joel said in Netgear Smart Switch + VOIP & QOS + AutoVoip:

i'll test it all tomorrow and come back to you if still a prob. thanks guys.

Might also look to see if there is an update for the firewall.

@bigbear said in RDS licenses for non-profit charities:

@dafyre said in RDS licenses for non-profit charities:

@scottalanmiller said in RDS licenses for non-profit charities:

@dafyre said in RDS licenses for non-profit charities:

@bigbear said in RDS licenses for non-profit charities:

Probably RDS lol. Linux really needs feature parity with RDSH.

Linux is getting there.. https://github.com/neutrinolabs/xrdp

I use this over ZT to connect to my Linux Desktop at home. It supports multiple users, and all too. It does work better with Mate or Desktops that don't do compositing (like Cinnamon).

Oh nice, what RDP version is that supporting currently?

I'm not real sure. I know it can do some RemoteFX stuff, so at least v7, right?

Im pretty sure for connecting to windows hosts XRDP leveraged FreeRDP (which is the stalled project) and is limited to something in the RDP 5.x range.

XRDP goes the other way... Any RDP app connecting to a Linux box.

@Dashrender said in Prompt before sending external emails:

@sully93 said in Prompt before sending external emails:

I have been tasked with finding this same solution. We have been running a proof of concept trial on SafeSend (https://www.safesendsoftware.com). It is essentially an Outlook plug-in. For all external e-mail it prompts the sender to verify the intended recipients. There is also an option to turn on to verify any attachments as well. The price quoted is a little more than I would want to pay for a plug-in, but considering we had 3 instances last year of sensitive e-mail sent to incorrect recipients we think it's worth it.

uh - stuck in a legacy world of full local apps. What about users who send emails from their phones?

While a good question if you want to break off, it has nothing to do with the thread because the OP specifically wants an Outlook solution.

@Joel said in Hosted Data Solution:

The downside to Dropbox and similar solutions is that we'd need to download & sync their 200GB to each computer including 1 external user.

That size puts them at a pretty small Vultr tier, too.

There was another thread on this. There is no 5K file limitations in Sharepoint. That's a myth.

@Joel said in Workflow management/check list:

There is often problems with files not opening once saved! I.e. Someone would save a PDF or excel, then 5mins later try to open it and get an error and have to reboot!

Buggy things like that.

That sounds like an end user device issue. If rebooting fixes the ability to open a file... that's just weird.

A cool app that helps to perform your business communication in the most effective way and is compatible with lots of CRMs is Call Tracker for CRM.
It tracks contacts/leads/accounts directly to CRM and even records the calls.
You can find out more info here => http://magneticonemobile.com/CallTracker/

I miss the ol' LicenseOnLine.com days.

Yeah, WTF?

Are you connecting a permanent IPSEC tunnel with some other network you do not control?

@wirestyle22 said in Windows 7 share - accessed from windows 10:

@Dashrender said in Windows 7 share - accessed from windows 10:

Sure, but you shouldn't need to map a drive to make a connection.

His weirdness is that that
\server ip\sharename never gives him the option to give a username and password like we are accustomed to.

I'm sure it's an updated security thing in Windows 10, for example a newer version of kerberos, etc.

I wonder what net use z: \\server\share /user:server\user would kick back

I think if you add /persistent:no to it, you will always get a prompt if I remember correctly

Net use does the same thing your GUI pictures above does.

If that doesn't work, you might also need to do:
Set-MailboxFolderPermission -Identity "conf-room:\non_ipm_subtree\freebusy data" -User default -AccessRights reviewer

@Jimmy9008 said in Tracking user steps on files:

@scottalanmiller said in Tracking user steps on files:

@Joel said in Tracking user steps on files:

@gjacobse said in Tracking user steps on files:

Server details?

OS version?

Windows Server 2012 R2

Audit records will tell you everything that can be told. Copy, however, doesn't have an "action" with it so there is no means of tracking that. The server isn't told when a copy is made, so there is no way to log that.

Will that record access if say, viewed in preview pane, rather than opened fully? Would be good to setup prtg to look in event log for that on specific files, if possible.

It should has it has to open it for that.

Im a fan of pydio for this. pydio isnt on Windows i dont think, but setting it up is easy.
Using it to share files is even easier. Just upload the file to the share, right click and click Share. It generates an https link which you then just email to the people you want to share it with(outside the office obvs, as smb shares are easier in the office). When you dont want to share it anymore, just right click and unshare it. Now nobody can get it.

Our techsupport people use this to email links for firmware update, user guides, product documentation for our customers. Our inventory people use it to give BOMs to people since those end up being too big for an attachment usually.

I am just trying out nextcloud and it also does this, but is slightly different.