Best posts made by openit

That's nice. Gonna login once in a while to check out the improvements. Will be waiting for completion of software to use for patching and remote management at our work.

@crustachio said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:

@scottalanmiller said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:

@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:

The backup destination will be NAS box and we got around 100 PCs.

You must have a backup server in place between the PCs and the NAS in order to have any protection against ransomware, otherwise the ransomware can attack the NAS directly using the same permissions as the backup mechanism on the PCs.

NAS snapshots could mitigate this risk. Just like Exablox advertises Continuous Data Protection (CDP) as a remedy to ransomware - you can go back to any snapshot in 10 second intervals out until your retention policy limit (file level or share level).

Even basic QNAP and Synology boxes offer scheduled snapshots. Not necessarily a replacement for an intermediate backup server, just an option to consider.

I know about this option on QNAP, but unfortunately we need to have another NAS box to configure it (the snapshot cannot be set to in that NAS itself or any External HDD). Not sure about other brands.

So double cost in this case.

@BRRABill said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:

Hey, finally this thread got around to convincing the OP to move data off the local machines!

IMO Convincing power matters a lot when you are trying to explain technical things to your non-technical manager

@Minion-Queen said in Comodo One Free-Feedback, specially abt Patch Management vs PDQ Deploy Free.:

We looked at ComodoOne for our helpdesk and some of the RMM stuff. The product works pretty good. Yes it's only cloud.

However their Sales team is HORRIBLE! I had to email management to get them to stop calling me multiple times a day.

We will never use the product due to the harassment we got from the sales team. 5 or 6 calls a day is crazy, and that doesn't count the 100's of emails.

I see. By the way why they call ? to introduce Enterprise version or other add ons ?

Do I need to append secondary email and secondary contact number ?

Hello All,

I am at a point to choose Hyper V Free or ESXi 6 Free.

I am about to roll one of the above or any other better free Virtualization solution on Lenovo ThinkServer TS140.

Here on this Virtualzation server, I am going to spin following services/servers (few are still planning) :

1. Spiceworks HelpDesk
2. Spiceworks Network Monitor
3. rConfig
4. Graylog2
5. FileAuditing Software
6. Intranet Website
7. PDQ Deploy
8. Linux Machines to practise or test new things
9. Windows VMs for Lab
   etc.

And requirements for Virtualization is as follows :

a. Free ( I believe there are lots of options for free, as above services are not critical, it's okay)
b. Free VMs Backup software availability
c. Easily manageable comparitely ( I am currently testing VMWare ESXi 6 free, which is not complicated for me and got an app for Android to monitor/manage few things on Server. And not sure how Hyper-V free is going to work).

Looking forward for suggestions !!

Hi all,

Currently our network is in Workgroup, while we already have Windows Server with DC, that's due to some computers are with Home Edition.

Decided to move the Pro Version computers and buy Pro versions which are with Home Edition.

So my main concern is about getting ready before we move.

1. Server is ready.
2. Got virtual setup to test for any requirements.
3. Will join to domain only few PCs weekly to make sure all are not affected at the same time.

My queries:

1. I do not have hands-on experience with Domain network, and I learned AD things more than 3 years ago, so not much good at anything related to AD DC and GPOs. Any advise here ?
2. Of course, I do not want to use main administrator account at client PCs while setting up applications, or any admin tasks, so what kind of account should I create (limited) ?
3. What should I keep in my mind or checklist as a newbie for Domain network ?
4. I guess, I need to copy all desktop, downloads, docs, pics for user from local account to new Domain account (local, not roaming) ?
5. How about applications ? I guess, all applications available for local account will be available for new domain account, but just need to import any custom setting for any application ?

Looking forward for suggestions !!

@Dashrender said in Moving to Domain from Workgroup. How to be prepared ?:

I'll expand on @travisdh1 posts.

Every IT admin should have two accounts. A local one to use day to day on their computer, and a domain admin one that is only used to log into server and run admin tools from their local workstations.

Example: dashrender and dashrender-admin

On my workstation (or any computer I log into) I log in as dashrender. When I need to install something, I'll be prompted (or right click the installer and choose run as admin) and type in my dashrender-admin user and password.

Yeah, that's how we are doing while we are in Workgroup with users too. All users have standard account and a separate local admin account, so if something needs to do setup etc. it will prompt for admin password.

@scottalanmiller said in Moving to Domain from Workgroup. How to be prepared ?:

@openit said in Moving to Domain from Workgroup. How to be prepared ?:

@Dashrender said in Moving to Domain from Workgroup. How to be prepared ?:

Heck, considering that - I have what I consider a better situation, though I'm sure others will disagree with me.

Since you're making some pretty big changes, now might be a good time to rebuild all of these computers. If you you can move them all to the same OS.
Not sure you're aware, but all of the machines you listed (7/8/8.1/10) qualify to be on Windows 10. Any reason they weren't upgraded during the free upgrade window?

Personally, I'd take an image of each system using Clonezilla, and upgrade them to Windows 10. Assuming the machines are granted a free upgrade to Windows 10, then I would purchase one Windows 10 Open License granting you imaging rights, purchase the needed upgrades for your home licensed computers bringing them legally to Windows 10 Pro, then create and deploy a Windows 10 image.

I skipped a lot of steps here, ask if you want, need more details.

Why I didn't upgraded all to Windows 10 ?

Yes, we upgraded so many computers to Wins 10. But mostly preferred to upgrade Windows 8/8.1. Not upgraded for all, because it was still 1 year old, cannot say how stable it is and don't want to do at that much quantity (100pcs). And some users are happy with Windows 7, better to not touch them if they are going fine.

That's a very bad was to think about software. Windows 10 is not "one year old", it is the update to Windows 8.1 which is the update to Windows 8 which is the update to Windows 7 which was the update to Windows Vista. Windows 10 is the most mature of that family. Windows 7 is the "one year old" release (but patched since then.) Windows 10 is the one with the most time of people testing the code because it is a decade old. You are actually doing the opposite of what you are thinking... you are staying on young "immature" code and avoiding the most stable, most tested code. And you are not trusting a vendor on whom you have decided to depend. That's a bad combination.

http://www.smbitjournal.com/2014/04/software-versions/

I see, so I was wrong at this point

That's benefit of being active in community , learning things

Anyway, still I have chances I think, I seen somewhere to upgrade still to Windows 10 for free and second option is, we need to get Pro versions for some Home Editions, so I will get Windows 10 Pro.

@scottalanmiller said in Moving to Domain from Workgroup. How to be prepared ?:

@openit said in Moving to Domain from Workgroup. How to be prepared ?:

I understand about stability etc. as mentioned by Scott, but didn't understand how having same versions is useful ? how reduces costs and complexities ?

Lots of ways; I will give some examples:

• Support is reduced by only needing to test and support a single OS. Software that is known to run on Windows 10 will run everywhere. No need to test apps across many OS versions, change systems OS versions to accommodate specific software, etc.
• No need to learn, remember or deal with multiple OSes. Only supporting one means you can focus your time and attention to knowing the current system really well, rather than remembering limitations or ways of doing things across many systems.
• Users can move between systems, help each other and be trained more easily and effectively.
• Support tools can be uniform and more modern. The latest Microsoft and/or third party tooling whether GP, RSAT, PowerShell or whatever can be the latest, greatest and singular.
• Only one set of patches and updates need to be downloaded and applied. Security vulnerabilities only need to be watched and dealt with for the existing OS rather than many.
• Some features are only ever available on the latest OS. So in some cases you will get new features at the network level (everyone) and in others they will be individual, but uniform.
• The latest OS has more code maturity and more focus from the vendor for the lowest incident rate of vulnerabilities and issues.

Well said.

Hello All,

Looking to make life easier with some solution which can give good control over the shared folder permissions for Windows shared folders.

Note: As you know, the behaviour of Windows File System with applications like Microsoft Application Suite, AutoCAD etc. that whenever you are trying to rename or edit file from Windows it will create a temporary file and once we click save, it will append the changes and delete temp file. So wherever user needs to Edit/Rename, we need to give Read,Write and Delete Permission.

This is how one of our Shared Folder looks like, but it's more deeper and complex, bcuz of being lazy I just make it simple, hope you will understand

Difficulty/Problem I have:

1. Managers asks me to give full permission to specific department for specific folder (child folder) and they should only able to view the files from other departments (which is necessary too). Same thing applies to all projects. And we cannot divide the files/data in Department to make it easier to give full and only view access, as all data for one project should be in one location.

2. In some scenarios, I have to give users access to view/edit/rename but not delete.

Solution require :

a. Do not want to change how users are dealing now, which is accessing shared folder with Windows Explorer or Drive mapping. I guess some solutions have accessibility with browser instead of Windows Explorer which changes current approach.

b. Maybe some solutions like LogicalDoc, Alfresco can do this ?

c. We have lots of data on file server (shared folder) and projects (sub folders), about 4TB of data which may needs to be considered while looking at solution ?

Looking for suggestions from you people with a hope to make my IT life easier.

Is that seems to Hard disk issue or Installer ?

Now it's time to move all vms from ESXi 6 free to XenServer 7.

My understanding is, I need to export each vm to ovf and convert with XenConvert, then import ?

Now both servers are running, is there any easier method to migrate ?

Done with installation and migration of VMs.

Hi All,

I am trying to understand 3-2-1 backup rule, son/father/gf model backups etc. to make a better Backup strategy in our company.

Want to understand better about 3-2-1 rule and son/father/grandfather model or daily/weekly/monthly/yearly etc. backups

3-2-1 Backup :

3 - Three Copies of Data --> One Origina Data (lets say File Server Data) and two other copies.

2 - Different Types of Storage Media --> Any of two from DVD, Hard Drive, Cloud, NAS etc.

1 - Offsite [ keeping one copy of data out of three to offsite location].

Son/Father/Grandfather Backup model:

I am not clear about Son/Father/Grandfather backup model. My guess is:

1. Son --> On-site Backup (lets say 30 days backup)
2. Father --> Offsite Backup of On-site Backup (lets say 12 backups - 1 year)
3. Grandfather --> Backup of Offsite backup (for permanent/archive backup)

Also, I just wonder if the offsite backup will be backup of Onsite backup or directly making another backup from original source to offsite.

Please assist me in understanding above points and any others points which are important for backup things.

Thanks !!

Hi all,

We are maintaining on-site backups for our File Server on QNAP TS453 Pro.

Now we want to setup Off-site backup by using another QNAP TS453A NAS box on Remote Location.

So what's the best practise to get it done by NAS to NAS.

Also, after googling I found we can use QNAP Remote Replication, but I just wonder if it's a real backup, as it is just a copy of on-site NAS Box, what if On-site NAS data got infected with virus or currupted, so same thing gets copied to off-site NAS, so no working backup at On-site and Off-site, so failed strategy.

So, do I need to purchase some other backup software to backup the data to Off-site separtely ? for on-site, yes we are using EaseUs server backup software.

Really appreciate your responses !!

Thanks

Hi All,

I required to run a file server to have IT stuff, ISO files repository for XenServer and few other requirements.

So, I was thinking of FreeNAS vs CentOS Samba server, I believe IT pros around here will suggest CentOS option, so I have shortlisted to CentOS.

This CentOS server is going to be run on XS 7.

Now, I am for GUI package to setup on CentOS 7 to manage easily, do you know one which is easier and stable ? I am not willing to play with Terminal as of now.

I know Webmin, not used much, I know it have Samba things to manage, but I was thinking of only File Server manager.

Thanks for suggestions

Okay. Let's say our server is on VM and using Veeam B&R Replica for replicating the VM. Whether the other VM to which we are replicating is Live or Powered Off ?

What should we do at the time Main Server failure to utilize secondary server ?

@scottalanmiller said in Hyper V replica VS Veeam B&R Replica.:

@openit said in Hyper V replica VS Veeam B&R Replica.:

Okay. Let's say our server is on VM and using Veeam B&R Replica for replicating the VM. Whether the other VM to which we are replicating is Live or Powered Off ?

What should we do at the time Main Server failure to utilize secondary server ?

Replication always means "powered off." You need VMware's Fault Tolerance for a powered on system. Powered On only works when memory is kept in sync, which no one but VMware can do today.

I see. So as we are going with Hyper-V, because it's free, the replicated VM will be Powered Off and we need to Power it ON at the time failure ? or this third party tools like Veeam B&R, Starwind VSAN will trigger automatically ?

@JaredBusch said in Hyper V replica VS Veeam B&R Replica.:

I would not buy Veeam for backup as my first choice for Hyper-V if you have less than 1TB of data to backup though.

Well assuming that Unitrends still offers 1TB for free.

Yeah, I am aware of free 1TB by unitrends.

Well, we are not eligible for that as we have more than that data.

@scottalanmiller said in Hyper V replica VS Veeam B&R Replica.:

@openit how long does it take you to get a new server to replace that one should it totally die (like go up in flames) or how long to get it fixed if only part of it dies?

If it's only about parts, it will depends on our Service Provider, from whom we have server warranty contract. According to them (service provider) , next business day response and I have no idea if they can fix it completely by next business day itself......

If it's about getting new server if main server totally dies, I am afraid it can take longer than repairing things. As I need to get quote, propose to management, approval, delivery and restoring the OS and Data from Backup. I believe management will not take long to respond on such critical or emergency cases.