Best posts made by Mike Davis

@wirestyle22 If you inherited a domain that was running like that, you'll want to check your DHCP options. Look for option 44 to see if a WINS server was specified. Option 46 may also be present. That one told the computer which order to try to look up addresses. With those out of the way, you can just shut the WINS servers down.

@wirestyle22 said in Domain Controller and WINS Server Powered Down and Removed without Proper Demotion:

We don't use DHCP at all

I would go the other direction then and check for WINS queries and then visit all the NICs that are still using WINS and remove the entry. This article explains it:
https://blogs.technet.microsoft.com/craigf/2010/07/09/decommissioning-wins/

@NetworkNerd said in Marketing Campaign E-mail and Office365 - Check My Logic, Please:

Would adding users with internal e-mail addresses to Safe Senders allow the messages to come through the filter to internal recipients as expected? That's kind of like an individualized whitelist in the O365 world, right?

I wouldn't do this. A lot of spammers put the from and to address the same for this reason. If you whitelist all your internal addresses, I would think you would get a lot of spam.

I have a client that was trying to push a new server cert out to his Domain through AD. It hosed the domain controller he was working on so bad, it won't boot normally. We restored it from before the issue happened, and it still won't start many services. I think booting in to AD restore mode is about it. We spun up the services that the domain controller was providing on another server and figured we would have to follow the process for removing an orphaned domain controller.

Today he rebooted the SBS 2003 server that holds the FSMO roles and it won't run most network services because it seems to have the bad cert. He can't even open an MMC console on the box to open certificate services.

Has anyone dealt with something like this?

Maybe I should put ads on the page. That seems to drive people away... Seriously, Total Unique Visitors Last 24 Hours: 2,763 If it was an attack, it would seem to be distributed.

Giving my next question it's own thread:
https://mangolassi.it/topic/13548/add-google-analytics-to-wordpress
(add Google Analytics to Wordpress?)

What's the best way to add google analytics to Wordpress? I read an article about creating your own plug in, but that seemed a little complicated for something that I imagine many people are doing.

From what I read, Google says you have to add code to every page. It's advised that you don't edit your theme code.

I know I'm not well versed in this area, and others are, so I thought I would just ask someone that has done it.

Can you host a Server 2008 R2 VM on Hyper-v 2012 R2 for free? Where do you get the product key to activate server 2012 R2 or will the 2008 R2 key work?

The server has the COA on it. I'm wiping the server and installing Hyper-v on it and creating a VM that the server is licensed for.

@RojoLoco said in AD certs:

@scottalanmiller said in AD certs:

@wirestyle22 said in AD certs:

@Kelly said in AD certs:

Active Directory has roles. Bakeries have rolls.

http://writingexplained.org/role-vs-roll-difference

You're really not helping my diet.

Don't stop your diet now, you're on a roll!

He's off the rolls!!!

Now I'm all about the enROLLment.

Those changes didn't make a dent in the traffic. I set WordFence to block bots after 1 404 error. We'll see what that does.

The o365 protection has been about as good as the Barracuda filter we had in the past, but easier to manage. I don't think none at all is reasonable anymore.

@IRJ said in A Small Orange - bandwidth limit exceded:

https://wordpress.org/support/topic/how-to-change-the-admin-url-or-wp-admin-to-secure-login/?replies=13

There are also plenty of FREE plugins that do this with one click.

https://wordpress.org/plugins/rename-wp-login/

https://wordpress.org/plugins/protect-wp-admin/

Wordfence also lets you do this and restrict IPs to the admin page.

I'm trying to make this as the solution to the problem. The other tools weren't telling me what was going on because they were showing me what pages were served, not what pages were asked for an unresolved. WordFence was able to show me that spammers were trying to register through .aspx pages that the old .netNuke site used. By banning those pages, my bandwidth consumption has gone down. I'm curious to see how long they have to get 404s before they will stop making requests.

On the other hand, old data can be very useful for architect/engineering type companies. They may not store the project records forever, but the drawings have value. In that case the space on a server to store an old drawing compared to a current one is laughable since the file sizes keep increasing.

and on the Meraki side, you chose WPA2 Enterprise, correct?

From this thread: https://mangolassi.it/topic/13737/checking-on-patch-levels-with-multiple-clients-ninite-pro/13
I'd like to build a cloud Windows Server. I know some have had issues with Azure. What about AWS? I know vultr is popular, but I can't seem to find pricing on the Windows Server license part of it.

Does anyone support an office of computers that are using full drive encryption? I'm considering a client that has this requirement (I don't know if they are currently meeting the requirement.) and was wondering how much extra time might be consumed by supporting that.

@scottalanmiller said in dual factor auth for screen connector or other remote access?:

https://docs.connectwise.com/ConnectWise_Control_Documentation/Get_started/Administration_page/Security_page/Enable_two-factor_authentication_for_host_accounts

Thanks. Don't know why I didn't look there first.

Hyper-V. It's what I have been rolling for production so it only makes sense to have it in my lab so I can test stuff.