Posts made by sn

Thank you all, we are evaluating Bitwarden and Keeper Security at the moment.

Could someone give me some ideas for setting up a cloud based, enterprise password management system ?

At the moment, we all are using the locally installed Keepass software though it nowadays getting difficult to keep it up to date (This requirement is purely for non-IT staff from around 8-10 offices; I am still happy with my Keepass database for storing all IT related passwords and I really don't need to share it in real-time either!).

Ideally, the password management system should be accessible over a browser session (and/or using an iPhone/Andorid App) and we should be able to implement policies related to password length, rotation etc. I would also consider having a role based administration feature so some users are allowed to make changes relevant to their department.

I have around 30 users using Outlook with G Suite Sync for Microsoft Outlook. Outlook automatic archiving feature is turned off by default when you create the sync user profile. On top of that, I tell all of my users to not to run manual archive from Outlook as G Suite Sync for Microsoft Outlook doesn't support dragging and dropping the archived emails back to Outlook if they change their mind.

If they need the archived mail back again then they will have to import it from Gmail web interface and it is not a straight forward process as Gmail doesn't support PST format. Have a look at the https://tools.google.com/dlpage/outlookmigration page for more details.

Having said that, this is not going to solve the current mess in that user's mailbox. Depending on the type of the issue, you may want to look for a duplicator finder or something similar to clean it first.

It took me a while to revisit this issue though i have managed to address this issue using multiuser SMB mount.

In essence, you would add the mount point to the fstab using the multiuser and ntlmssp options and then you would run
the cifscreds command to authenticate a specific user against the SMB server at the time of login so that that user would be able to see only those sub-folders/files which he/she has access to under the smb mount.

Thanks everyone, let me try your suggestions and come back to this thread again soon

I have an Ubuntu 16.04 server and a Synology NAS, both joined to my Windows 2008 R2 domain.

Ubuntu machine is used by multiple, say, 10 domain users via SSH.

Synology NAS has got a file share with separate level of SMB access permissions for each of these domain users.

I have a requirement to automatically mount this file share on the Ubuntu machine whenever my domain users login to it using SSH.

(I would say, this requirement is something like the logon script in Windows which would allow a user to map a network drive to their computer using their login credentials during the logon process so that the user would able to see on those files and folders in the network drive which he/she has access to)

How do I get this working?

@scottalanmiller sure, but I will be needing the 3rd party patching option as well

@scottalanmiller
It is mainly for Windows. Linux machines are mainly R&D workstations supplied in addition to the regular workstations which needs to be updated only when required. So, more or less, I am looking for a controlled patch management solution.

@scottalanmiller

Goal - To monitor the patch (both OS and 3rd party software) status of my user workstations from a central console and update them or install the latest versions if necessary.
In an ideal world "systems will all update themselves" but it may not be the case in the real world or at-least in my situation.

Let me tell you where I am now –

• I am evaluation Automox at the moment.

• Sales guys at cloudmanagementsuite seems to be not interested to give me an evaluation, probably because my requirement is for less than 50 endpoints.

• I would love to use the ManageEngine Desktop Central if they had a cloud based solution!

Now, if someone asks me why cloud?

I have a lot of home based remote users they don’t really talk to our corporate network so frequently. Also, I have a few remote offices with 1-2 users where setting up a dedicated server infrastructure in not feasible.

Yesterday, I tested JumpCloud for half hour by creating a couple of users and systems and today I just finished a 1 hour session with one of their support agents. From an AD replacement perspective, their service is still in preliminary stage, or at least, not in a position to replace AD. You can not create or implement policies without going through command line or scripting. They will also need to prepare a list of policies available to implement using their service (at the moment, you will need to search their KB to see if a specific policy can be implemented or not).

However, it seems to be a good move if you do not have an AD already or you have a number of small/remote offices where implementing AD at each location is an overkill.

To summarize, I am thinking of using JumpCloud to manage my Sub-Saharan offices where I have only a few users at each location. Some control is better than no control, right :)?

I was just reading the https://mangolassi.it/topic/7891/alternative-to-azure-ad-jumpcloud thread and just wondering if anyone here using JumpCloud in a production environment. If yes, can you please share your experience?

I am in the process of bringing all of our Linux/Mac boxes under the LDAP to tighten the security but JumpCloud looks more appropriate to manage a heterogeneous network spread across all over the places.

@JaredBusch

After spending a couple of days with FreePBX VM, I came across with a VoIP provider here in Sydney and ended with a $15/month plan with them (https://au.evoice.com/).

Basically, I got a number to dial in which is now forwarded to 3 mobile numbers and configured to ring only 10 seconds on each mobile (voicemail normally kicks in after 20 seconds or so and I am testing the service at the moment).

@Breffni-Potter Believe it or not, my wife and I don't use facebook, don't have profiles either!
To this date, we never considered facebook as a necessity.
(I had used facebook in early 2010 for 2 or 3 months but that's all, then I stopped using it and eventually deactivated the profile)

@JaredBusch Thank you for the guidance. I am downloading the FreePBX at the moment and will install it tomorrow on one of my ESXi servers. Since I am totally new to FreePBX, I may take a couple of days to update you on how I went with it
But I will definitely keep you posted.

I have a requirement where I will need to give a local number (in Australia) to an agency for emergency contact. When they dial that number it should ring on the first person's mobile number and if that person does not answer it should go to the second person's mobile number and so on. Anyone got any solution provider to recommend which would work in Australia?

@larsen161 From a security perspective, I wanted to use separate u/p for my email system and archives.

Later, Backupify did tell me that they were planning to implement 2fa in 2017 but I would wait for it to happen to believe it as I have been chasing this feature since 2012!

I just bought a couple of them last week for my colleagues.

http://www.officeworks.com.au/shop/officeworks/p/wynston-sit-stand-desk-large-white-jbwynlwe
(This is from an Aus store)

https://mangolassi.it/topic/11807/things-to-know-before-you-start-installing-freepbx
Thanks JB! I think that is what I should begin with!!

@JaredBusch

3. Most likely, yes

How do I confirm that?