In court law, politicians have no say. A judicial decision, made by interpreting current laws, creates a new law. It's one of the only beautiful things left in our judicial system. Then politicians try to create new laws to nullify it.

But that's off topic. So "Which came first, laws or lawyers?" Laws did. Just like English came before translators, video games came before cheat codes, and the computer came before the instruction manual.

If you add a domain controller as a namespace server, then your /DFSRoot/ will show up when you browse to your domain namespace.

Montana
We should keep this up. Post your state's night picture and others can try to guess the state.

Remember that when you browse to your domain, all you're really doing is browsing DFS namespaces/links that exist on the DC that you're logged into... like SYSVOL is DFS.

DFS Namespace servers just serve up the namespace and links, not the actual data, so there is no disadvantage to making all of your DC's namespace servers.

Clash Royale anyone? We could start a tournament.

@JaredBusch Is the DC on which you set up the example your %logonserver%?

click all the carrots!

@Dashrender said in O365 and encrypted mail to other email systems:

But then also comes the part when the first time some one is sued because you emailed their PHI to them, and they didn't secure it, and because it was sitting unencrypted in their easy to guess gmail account - the courts will sadly rule against us saying that we're the ones with the money so we should be the ones making sure they secure their shit.. SIGH

In all honesty I don't think that could ever happen. The judge would be putting unlawful burden on an organization and the appeal would last about 3 minutes.

Your healthcare provider doesn't do anything for you? EMR is making it pretty common practice for hospitals to host those services for patients. If I do something outside of their care, I can upload it or send it to them to upload to my chart.

@scottalanmiller said in [O365 and encrypted mail to other email systems](/topic/9231/o365-and-encrypted-mail-to-other-email-the user almost certainly does not have a Microsoft account and instead of sending them their data we've are forcing them to sign up with a third party vendor who is holding their data until they get them as a customer (even if only as a free one.)

Yeah, the fact that it has to be an entire MS account on the part of the recipient would be a dealbreaker for me.

You were lucky enough to move there in an interesting year. Boise saw record snowfall last week, and it is true that a city only plans for 'the norm'. When planning for the norm proves ineffective, only then will they invest in new plows. Every city has posted evacuation routes in case of emergencies. Those evacuation routes (often residential side-streets that are otherwise not often used) are always the first to be plowed. Then they move to main arteries, then busy residential arteries. In a bad storm, most other residential streets are ignored entirely.

I'm in Montana. Our past 5 winters have been some of the worst on record. The first one was a nightmare; nothing was plowed. The plows the city did have were being run 24 hours a day on shifts, they were breaking down, etc... the breaking point was that they couldn't keep up with clearing evac routes. Over the next few years, our city has gotten VERY good at plowing. We have some seriously behemoth machines. Plows travel in pairs so they can clear an entire street in one pass, they usually run from 9 PM to 6 AM to not interrupt traffic and only spot check during the day. You almost never see them and the streets are always clear. It's amazing how far they've come. This winter has been nuts so far. Shovel 12" off the drive, shovel 10" the next day, then the wind picks up and drifts, so you shovel another 12" of wind packed ice. Rinse repeat for 3 weeks. My brother has been running his 4-wheeler up and down streets charging people to clear driveways.

tl;dr: They're right. If Boise rarely sees over 4", it's hard to justify new equipment in the budget. Buy yourself a 4-wheeler with a plow and charge $50 to clear driveways. It'll pay for itself in a week.

@scottalanmiller said in O365 and encrypted mail to other email systems:

I'm getting confused Scott - Data at rest isn't currently a requirement to be encrypted, but damn, when the next rounds of legislation come, I'm sure it will be.

It literally cannot be. If they did that, every medical practice would just back up and be done. You can't control data at rest for transferred data, ever. Period, it's actually a crime to try to do that as you'd have to hack their systems.

The only resolution to legislation like that would be for the hospital to keep everything on-prem. Nothing would be transferred. Patients would log into a message box on their datacenter. This is currently how EHR applications with patient logons provide other information to patients.

(edit - provide, not deliver)

@Dashrender said in Do you track medical records?:

@TAHIN said in Do you track medical records?:

Oh yeah HL7, it's coming back. Man you can make big bucks as an EHR integration coder.

Why is this?
Does HL7 not have all the (I'm going to talk out of my ass because I'm not a programmer and I have no clue what I'm talking about) tags it needs to identify all of the possible incoming/outgoing data points?

Or is it even worse than that - it's a jargon problem - where different areas of the country some call is soda, some call it pop, and the worst, some call everything a coke, even Dr Pepper - it's just a coke. LOL

All I remember about HL7 is that we paid someone a bunch of money to deliver something they already built for someone else. I'm not sure how hard it is but it sounds like a cushy gig. EDIT: And I know that's how software works... but this was an interface. Usually highly customized.

@Dashrender said in O365 and encrypted mail to other email systems:

But I will capitulate to the fact that once the email is delivered to the remote server, it's no longer my concern, the question is.. is it my responsibility to ensure that the admin of the remote server can't read it as well? If the answer is yes, then you still can't send plain text messages through the TLS pipe.. it still needs to be encrypted itself so that only the receiver can open it.

The answer is no. It made to a receiving SMTP gateway with all the proper TLS stamps. Your job is 100% done.

@BBigford Yes, exactly what I was going to say The DC should only have links to the real data somewhere else.

You become authoritative for that domain once you add it as an forward lookup zone - so machines on your internal domain will look there first and only. If you're missing an A record in your new zone, lookups will fail.

I have a question regarding System Center licensing, specifically VMM:

When we bought SC VMM licensing (EA) a few years ago, we got workgroup edition, which covered unlimited VM's. Then, when our SA upgraded, licensing changed. Our System Center VMM Workgroup Edition turned into System Center Standard.

Keep in mind we're only using VMM - no other SC products. Under System Center Standard, do you need a Server ML for each VM in addition to each host? They both count as OSE's, right? We have 100 VM's - this is not an option.

We can upgrade our System Center ML to Datacenter for roughly twice the cost, and that includes unlimited VM's. With SCVMM, a Server ML covers two physical CPU's. So would I need to license only the physical endpoints, right? (IE - two hosts with 2 sockets each, hosting 100 VM's = 2 SC Datacenter Server CAL's)

Yes to all of that. MS licensing reps say a million different things, are wholly un-knowledgeable, and are generally the last people I'll talk to. We had to get our EA true-up contract amended 12 times before they got it right. 12 TIMES!!! As policy, every piece of correspondence with them is 1) in writing, and 2) backed up for at least 89 years. That way they're forced to legally stand behind what they say.

Those articles helped a ton, thanks! It's pretty simple with DC licensing: just license the hosts.

I'm not a fan of VMM. Literally every time I log in there's something about he console I have to fix. Or the constant WMI queries to the hosts killing my backups. The virtual switch/logical switch/logical network concept is a overly complicated knockoff of VMware distributed switches.

I am very interested in 5nine Manager however. Have you run a demo in your environment?

Thanks for the info! I'll surely look this up during our next refresh.