Best posts made by notverypunny

Chilling at the library with the 3yo

We used to do with with an iPrism / edgewave / St Bernard appliance.

https://www.edgewave.com/products/iprism-web-security/

@LilAng

I haven't seen it, not really my style but one of the guys here went and said that it's too long for the story....

https://en.wikipedia.org/wiki/Syncthing looks like an interesting option. Not sure how it compares for performance.

Just finished Good Omens yesterday. Worth watching, just not sure if / how they could do a second season. I'm tempted to read the book just to see what was changed.

The SPECTRE / MELTDOWN patches absolutely killed XS performance for some of our workloads. Ensure that your BIOS and other FW is up to date and consider trying XCP-ng.

@bnrstnr Jeebus! Most recipes call for 12 to 24 hours.... A week? I'm tempted to try it though.....

@Obsolesce
Food for thought, and maybe some ammunition for a battle to add Chocolatey to our standard tools, but for the time being I've got the mandate to use existing tools to roll things out, and existing tools means AD infrastructure / GPOs, scripts and all the fun that entails.

Appreciate the options, but does anyone have any recommendations for the exe to msi converter?

All depends on what you want to learn and how much breakage you're willing to deal with.

Everyone on here (myself included) is likely to have a certain bias for their own preferred flavor. Check out distrowatch if you haven't already done so for reviews and information on any of the suggestions offered.

Linux has come a long way from when I started using Slackware back around 2002. From there I went to Kubuntu, Sabayon, Mint and now Manjaro (Cinnamon) on desktop / laptops. Work has been mostly Ubuntu and Debian with some centos and centos-based products (xenserver) in the mix.

To come back to your question, it depends on whether you're looking to learn from a work-skills perspective or personal curiosity. If you want to do a real deep-dive you could do Linux from Scratch, Gentoo or Arch....

My personal recommendation (bias included) is to run Manjaro Cinnamon and use KVM or VirtualBox to experiment with other distros.
Reasons:

• Rolling release is awesome
• It's close to bleeding edge, but still very stable
• AUR is like PPAs but so much better.

Does anyone here have experience with providing an image to Dell for fleet deployment? We had a call the other week about it with one of their PMs and I got some documentation today.

If I understand their docs correctly the process is entirely off-line in the factory, which to me means that no windows updates are going to be applied and I'll have to figure out a plan B for O365 installation as (I think) it queries M$ at install time to validate that the cached install files are still good before running the install from the MDT repository.

I'm waiting on word back from the PM, but basically my questions are:
1- Does anyone know of a way that I can just supply Dell with a wim from MDT (or other image format) that they can apply to the machines being ordered and deployed?

2- If so, what is it called in dell-speak? Every vendor seems to have their own lingo / language / marketing term for simple things and I never got that particular decoder ring in my cereal..

https://www.goodreads.com/book/show/13184491-avogadro-corp

My gut says that GPO is going to be the preferred option for a domain. In non-domain you'd probably have to go the 3rd party / registry route. There might be some RMM / endpoint control / security products that have this baked in but I'm not aware of anything right off the top of my head.

not a meme, but we've been entertained by this today

Youtube Video

@gjacobse said in Disable USB Ports:

I’m sure the likely need is for USB storage or cell phones-

But does disabling USB differentiate between input devices over storage?

IIRC you can disable USB mass storage and leave it available for input at the OS level. If you want to disable it completely that would be a BIOS setting... or simply break the physical ports :smiling_face_with_horns:

@BrownLuther007 said in Streaming music for office (or anywhere):

Is it legal to stream music, anywhere in the office. Or large scale companies?

Jurisdiction is probably going to come into play here... you've got some kind of link referencing India as a comma in the question so ???? .....

I'll toss GLPI into the ring. It's FOSS and you can tweak it as much or as little as you want.

Chilling with the fam. Kids are watching the "Nut Job" cartoon on Netflix with hot chocolate and popcorn, SO is trying another cooking experiment... something to do with sweet potatoes..... wish me luck :crazy_face:

Does NC allow exposure of their "file shares" as smb? If you have users that can't / don't want to use a browser-based access they can always mount it in windows explorer via webdav. Alfresco allows (allowed?) access via both, but the last time I played with it the performance was meh, which I attributed to it being built on java...

@hobbit666 You could do that, or it can also be setup as a network bridge. Unsure of site to site, but I did a quick PoC with a Linux VM at HO that was allowing a remote laptop to connect in as if it was onsite. The remote machine was even pulling a dhcp address from the HO dhcp server since the bridging was all at L2. You could probably do a VM at each site more or less as a "VPN endpoint" and the IP ranges properly configured and routed.

@scottalanmiller said in Started as Win 7 Issue.. Now Job Searching?:

@notverypunny said in Started as Win 7 Issue.. Now Job Searching?:

So... did the original issue actually ever get resolved?

No, we never found the slightest place to start on it. We have extremely little information and the company in question has been working on this for a long time and never was able to find an answer and blocks the only real troubleshooting step that we have to work with. If we had access to the machine, we might be able to make headway, but even that is a stretch. Digging into logs, using wireshark, who knows. But with th ehigh level information provided, and a history that suggests that isn't an easily fixed (or maybe possible to fix) issue, we've got really nothing to work with.

Alright, so let's set aside the disagreements about how the company runs their show and the clusterfuck around Win10 upgrades and at least give the man some things to check... And FFS if we can find him a job where his talents are put to better use....

IIRC there are multiple terminals connecting to this "server" and there's only 1 terminal that can't connect to the smb share.

Given this scenario:

• is the share pw protected or otherwise protected with authentication?
• is the underlying ntfs ACL'd?
• hoping that the answer to both of the above is yes, is the client properly configured with UN / PW?
• is the FW on the server configured to only allow access from specific IPs / ranges?
• I can't find the docs right now, but wasn't there an issue somewhat recently where users in the admin group are blocked access to file shares?
• try accessing the shares by IP
• can the admin shares be reached by name or IP
• hell, can the server be pinged from the client

Like @scottalanmiller said, there's not a whole hell of a lot to go on, but the above should start to point towards Windows file sharing vs networking vs general M$ dickery