I'm running a UniFi Switch 48 POE-500W for a client. I know I won't go beyond the features of it for that client and being able to manage it through the controller is cool. It gives me great visibility in to their environment.

Just did the math for moving beyond 10 users. JumpCloud makes sense if you're under 14 users. Beyond that the $111 for Azure works out better.

@scottalanmiller said in domain controller in the cloud for small office?:

GPO, Salt, JumpCloud, AzureAD, etc.

Hadn't heard of JumpCloud, but this may be the answer. 10 users free.

@scottalanmiller said in domain controller in the cloud for small office?:

Why would you want this? He has Windows machines to manage, so why avoid the Windows desktop tools in a scenario that only works when you have Windows desktops?

my Linux skills are weak, so I have no interest in using Linux.

@gjacobse said in domain controller in the cloud for small office?:

I can see the 'issue' with GPO.. you have to update the GPO per machine (Right?) whereas using a DC, you set the GPO once...

yes.

@gjacobse said in domain controller in the cloud for small office?:

I can see the 'issue' with GPO.. you have to update the GPO per machine (Right?) whereas using a DC, you set the GPO once...
I do think that with eight PCs,.. maybe look at the other options..

Wouldn't that mean logging on to each machine and creating a local policy to force them to change passwords and then the user would have to do the same thing on the share from the computer acting as the server.

@travisdh1 said in domain controller in the cloud for small office?:

If they feel they must have the functionality available, why not use Azure Domain Services https://azure.microsoft.com/en-us/services/active-directory-ds/ (Or whatever it happens to be called at the moment, I can't keep track.)

That looks like what I'm looking for, but it looks like $111.60/month. Seems like I could spin up a vultr windows server for $27/month.

@gjacobse said in domain controller in the cloud for small office?:

HIPAA security without it.

How do you create a password change policy that gets enforced without a domain controller?

Does anyone have any small offices where you're running a domain controller in the cloud? I have a small office of 8 computers that is separating from the main network as the company splits. They have HIPAA concerns, so I would like to be able to centrally manage passwords (and their expiration) and stuff like that. I don't think it makes sense to put a physical server onsite for that.

Any recommendations?

@hobbit666 said in WPA2 Hacked:

Did you download the Firmware to the controller or did it just appear by it self?

In the controller I did the check for firmware update and I'm still on 5.5.20 (Build: atag_5.5.20_9565), but when I went to APs, it was showing the upgrade available. At this point all the eligible APs are showing update available, except for the UniFi AP-AC v2 model.

@dustinb3403 said in WPA2 Hacked:

Are these the same exact model AP?

Yes, just finished updating the first one and now the second one is showed the upgrade available.

My controller now will let me upgrade some APs, but not others. For the client below, the APs are on the same firmware, but one is showing the upgrade available and the other not. I'll keep watching it as the day goes on.

Cool idea for a meetup.

I went in to my unifi controller under Settings -> Maintenance -> "Check Firmware Update" and it doesn't seem to be pulling down the new firmware. Should it?

I just read about it too, but it seems some vendors have patched their systems. I checked for Ubiquiti and that article says "One researcher told Ars that Aruba and Ubiquiti, which sell wireless access points to large corporations and government organizations, already have updates available to patch or mitigate the vulnerabilities."

I can't seem to find a list of which Ubiquiti products have patches available. Can anyone find a link to that?

@scottalanmiller said in Student Loan Forgiveness Rant:

$10.40 is the future hike for NYS. NYC is higher, but NYS is not even going to $11 for years yet.

my bad, I was thinking of the NYC chart and forgot they broke from the original proposal and separated out NYC from the rest of the state.

@dashrender said in Student Loan Forgiveness Rant:

I go back and forth on this. Ultimately I I think they should be paid because it's likely they are bringing some type of value to the company they are interning for.

Now consider that NY is pushing the minimum wage up to $15 /hr. It gets expensive to train someone when you only get a little work out of them at that rate. So as an employer, what do you do? Forget about the people with no experience and hire people that are actually worth $15 /hr.

The problem with that is that in this industry experience is worth more than a degree.

@gjacobse said in Plantronics Voyager Legend Will Not Charge:

neat little dohicky... now - just how much for that wonderful bit of tech....

$150 - $300 depending on the model. Similar to Plantronics.

@storageninja said in Student Loan Forgiveness Rant:

If you think people shouldn't take out loans they can't pay then the schools should be on the hook for the students not paying.
Blaming the person taking out a loan (Who's not a sovereign state) is dumb.

Personally I think schools should have to provide accurate information as to what you are buying. Saying stuff like "our graduates earn XX% more than students without a degree" if misleading if you give Bill Gates an honorary degree and include his income figures in your calcs.

Education is an investment and you should be able to find out what you are investing in.

I think one of the solutions to this is private businesses being able to set up schools and get compensation for it. or just go back to apprenticeship type programs. In NY right now, it's illegal to have an unpaid intern. That's crazy. There are lot of jobs where you could let someone job shadow and then intern from there, they could learn everything they need to be valuable to an employer in a couple years.