@Dashrender said in Comparison of Salt vs AD:

@scottalanmiller said in Comparison of Salt vs AD:

@wirestyle22 said in Comparison of Salt vs AD:

@scottalanmiller said in Comparison of Salt vs AD:

@Dashrender said in Comparison of Salt vs AD:

@scottalanmiller said in Comparison of Salt vs AD:

@Dashrender said in Comparison of Salt vs AD:

@scottalanmiller said in Comparison of Salt vs AD:

@NerdyDad said in Comparison of Salt vs AD:

@msff-amman-Itofficer said in Comparison of Salt vs AD:

@Romo @aaronstuder @dafyre

This PDQ Deploy you guys have been mentioning, does it require an agent on the other Windows clients ?
or it just relies on Active Directory to work.

No agent required. You can deploy based on AD, computer name, or IP address. AD is not required as long as you have local admin credentials.

Same as with PowerShell.

Does PowerShell require some sort of remote access to be enabled?

Yes, but it is enabled by default. Just don't turn it off.

And is the firewall ports open by default too? I'm guessing not.. but I'm willing to open those for this purpose..

Why would they enable it and not have the firewall ready to work?

Why have a firewall if you're opening a thousand ports anyway 😄

PS doesn't need them. That's for other tools, like PDQDeploy.

PS needs at least one.

Only one, though, and it is one that is set up by default.

As everybody noticed, the delivery vector for these phishings is email. So an email filtering engine that is capable of detecting phishing attacks, either by recurrent pattern detection (like Cyren), or via URL extraction and checks (like Kaspersky or BitDefender), when in place, will keep your users safe. These phishing emails are also caught by open source engines like the veteran SpamAssassin or the new kid on the block OrangeAssassin (from SpamExperts).

@NerdyDad said in Fedora time limits for kids:

@scottalanmiller said in Fedora time limits for kids:

Fedora or Korora? Korora is probably a little nicer for a non-power user.

Either or. I've not set on a certain distro yet, as long as it's a fedora derived.

Korora has a lot of spit and shine.

@JaredBusch said in Star Trek Discovery:

@PenguinWrangler said in Star Trek Discovery:

@scottalanmiller Hang in there. It really starts picking up about half way through the 1st season. The last episode was just a little over the top imho.

That was me not Scott. And I made it to the beginning of Season 3.

DOH!

I get this feeling a lot of IT positions will be opening up, and soon...

@JaredBusch said in SELinux with KVM?:

@NerdyDad said in SELinux with KVM?:

@EddieJennings said in SELinux with KVM?:

@NerdyDad said in SELinux with KVM?:

Would you deploy ClamAV on the host of KVM?
Would you deploy SELinux on the host of KVM?

What little I've learned of SELinux, I thought it was something baked into CentOS. At least it seems to be for me.

It is but needs to be setup.

Umm, no. SELinux is installed and working by default. The only setup you do is for things that need more permissions than SELinux provides by default.

Right. SELinux is installed by default. Some tools aren't (like policycoreutils). Svirt by default handles MLS labels for KVM guests. You shouldnt have to do any work to get all of that functionality.

@NerdyDad said in What happens when colleges / Universities close their doors?:

However, the concern comes from those that went to other schools that have closed their doors for whatever reasons.

The long term credibility and stability of the school that you choose are among the top factors that you use to choose where you go to school (and failing to do so is a huge reflection on candidate's decision making capabilities.) And this risk is one of the many factors you must consider when choosing the risky college route to a career. College comes with many, many risks and unless your degree is specifically for a government union job (one where you can only work in the field if the government allows it - basically you "buy" your job from them) you should never associate getting a degree with "furthering your career." That's not the purpose of a degree and again, if a candidate goes to college for that purpose, that decision as well reflects on them.

When someone chooses to go to college, it's a huge decision and every aspect of it reflects on them and will always reflect on them. So doing it casually is very foolish.

@Mike-Davis said in Authenticate Laptops to Wifi against ActiveDirectory:

and on the Meraki side, you chose WPA2 Enterprise, correct?

Definitely WPA2 on the Meraki. I'll check my conditions though. Thanks for the tip.

Start with old Desktop with Virtualization extension, something that you can install OS and dont have to remove cause of free space or you need it for something else.

Cause learning Linux or Centos or anything else needs environment, and virtualbox can work but it wont allow you play with KVM, and thats for me the big part of the fun.

Also you need to keep learning that means its is process some day you will leave it 4-5 days dormat cause your stuck in an issue the other day bulb lights up mainly due to reading this site and you get back on it.

Added "Where to start?" here https://mangolassi.it/topic/13584/where-to-start

All of the RHEL/CentOS 7 stuff I've used has started at 1000. Identity Management sets users in a random range around 1,000,000,000.

Circle has evolved much more to even pn the 4G service. I have my own review of it that I can share. It is actually not controlled by DNS but rather by device. I had it for two months before the 4G service as a trial and worked as intended but the hardest part was to control it remotely, I needed to be at home or my wife and the Android apps wasn't that great. I would think Untangle can do the sam as well. I can share my review if you want.

To be honest I am using OpenDNs right now.

@coliver said in 3rd Party InfoSec Testing Center:

@scottalanmiller said in 3rd Party InfoSec Testing Center:

I doubt that Kickstarter would work. A non-profit is needed, almost certainly, but is a big pain to run as Republic of IT found out and very hard to get people to commit to donations.

Not to mention this is a fairly niche thing to be testing. Everyone needs it but fewer actually care about the results.

Or understand them, or trust them. And they change constantly.

That's what I get for posting before I'm totally awake. This is what I get when I run the command on my group:

BackupTarget> show member Name Status Version Disks Capacity FreeSpace Connections ---------- ------- ---------- ----- ---------- ---------- ----------- 16TB online V7.0.7 (R3 16 11.34TB 6.72TB 2 97085) syr-8TB online V7.1.2 (R4 16 5.66TB 3.69TB 3 02088) 4TB online V7.0.7 (R3 16 2.83TB 1.84TB 2 97085) BackupTarget>

I think the command is showing the free space on the volumes after creation, not before since I think I have mine fully provisioned.

Just type:
show
and it will scroll through all the things under the show command and you should be able to figure out the size of your member. This is just the first of like 4 pages:

BackupTarget> show ______________________________ Group Information ______________________________ Name: BackupTarget Group-Ipaddress: 192.168.100.21 DateAndTime: Thu Apr 20 03:32:04 2017 TimeZone: America/New_York TotalVolumes: 3 VolumesOnline: 3 VolumesInUse: 3 TotalSnapshots: 0 SnapshotsOnline: 0 SnapshotsInUse: 0 TotalMembers: 3 MembersOnline: 3 MembersInUse: 3 TotalCapacity: 19.83TB VolumeReserve: 7.58TB VolumeReportedSpace: 7.58TB SnapReservedSpace: 3GB SnapReservedSpaceInUse: 0MB ReplicationReservedSpace: 0MB FailbackReservedSpace: 0MB DelegatedSpace: 0MB DelegatedSpaceInUse: 0MB FreeSpace: 12.24TB TotalDisks: 48 OnlineDisks: 45 SpareDisks: 3 OfflineDisks: 0 FailedDisks: 0 Collections: 0 Snapcols: 0 CustomSnapcols: 0 ThinProvFreeSpace: 122.49TB TotalSpaceBorrowing: 0MB Connections: 7 _______________________________________________________________________________

Inserted a new line of code at line 82 and 87 to read as follows:

icacls \\<server>\d$\Users\$un\* /grant $un:F /inheritance:e /T

This line grants the new employee full access to their network folder and subfolders and items.