@scottalanmiller said in Audits, and more audits:

@bbigford said in Audits, and more audits:

@scottalanmiller said in Audits, and more audits:

@bbigford said in Audits, and more audits:

@scottalanmiller said in Audits, and more audits:

We specifically proposed "audit reductions" in some system changes that we proposed for a client just last week.

Can you clarify on how you plan on reducing audits?

In our case, removing all Windows products so that MS can't call for an audit.

How many random Microsoft audits have you had so far in your career? Random as in not triggered by a disgruntled employee calling something in (heard of that happening many times), or anything else that forces a trigger.

My personally, believe it or not, zero. But I have so little Windows in my environments and/or are in environments with licenses that keep audits from happening.

Sorry, I don't mean you personally (as in your personal assets, businesses you directly own or co-own, etc). I mean you as in the consultant for businesses you have no investment in beyond what they are paying you as a consultant. Basically, Company X doesn't have internal IT or development, and they hire you or the company you're employed by and consulting/designing/implementing for. Do any of those clients require PCI/SOC2/HIPAA/CIPA compliance? If so, I'd definitely like to fork this thread and cover some of that because those compliance standards are not really up to me (PCI, HIPAA, and SOC2 auditors reach out annually), so I'd be interested in how you're handling beyond annual (legally). I prefer SOC2 because SOX is a joke. Not sure if you are currently supporting SOC2 since I'm not entirely sure how NTG is handling certain client data as either a fully managed provider, strictly hosting solution, or anything else specifically. Very interested in more aspects though.

Derp. Didn't have the action panel open. Thanks. :expressionless_face:

@irj said in When a C-level gets the boot:

@bbigford said in When a C-level gets the boot:

The CEO of that company is an enterprise admin. Why they have this or where they find the time to do anything on the network without breaking lots of things is beyond me. I asked about it, but was never given a valid response; moving on...

As a consultant, why would you not make a bigger deal out of that?

As a consultant, you only want to bring it up. Let them determine the level of deal that it is for them.

@nashbrydges said in Synology external access - weird information:

@bbigford I manage 3 separate Synology NAS units for clients, 2 with dynamic IPs and 1 with static IP and the requirements were essentially exactly the same for all 3. Ensure the correct port was directed to the device and DSM just worked. Wonder if your user has missed something.

That's what I'm thinking. I responded a moment before you did with a previous conflict regarding proper PAT. If he would allow me to just log in and do it myself that would cost them less operationally. I typically follow up with reminder emails that if I'm left to do my work with proper access, it costs them less overall. Comes down to a trust issue; it is just going to take time to bust through their ego and allow me to do my job.

If you do it on Hyper-V, this may help initially:

https://www.timothygruber.com/hyper-v-2/run-a-nested-vm-on-kvm-qemu-vm-in-hyper-v/

@matteo-nunziati said in Hypervisor preference - costs included:

Also one thing to consider is that some hypervisor level backup solutions will cost in the 500€-750€ ballpark. A single paid version of veeam agent server (which does CBT) costs 130 per guest! And I cite veeam just because it is widespread.

Even with 10 machines this is a bit of a cost IMHO. In my previous work I've spent 500€ for a backup solution which managed 12 VMs - with all the fancy stuff: CBT, dedup, incremental, blablabla and yes: a single pane of plastic.

I do not think that costs are to be kept out of the equation here.

Very true. But in most cases I look at, we don't use an agent of that nature. Veeam's agent is great, but I'd see it as more special case.

Found it. You have to share the site to any users first, before that option shows up. Just sharing documents doesn't actually generate that option. So once you share a document, it's shared. That option isn't for shared out documents, it's for the site itself.

@bbigford said in Exchange Online - Outlook signature - forwarding and original formatting:

Using Exchange Online, newly migrated users from personal Gmail accounts. They created signatures and set the forwarding/reply with their signatures.

The issue they are having is how Exchange handles original formatting. If I email the user with a signature, they then forward that and it keeps the nice formatting (HTML). If they receive a scanned document from the copier, and then forward that email (PDF with likely plain text formatting), their signature is plain text and looks terrible.

I've messed around with the keep original formatting within Options > Mail, but still can't get their signature to display nicely with forwarding scanned docs from the copier.

I can't really just say "that's how it is with this new email system" because when they scanned to their Gmail account, their signatures showed images, font color, etc.

Do they have a transport rule for the email signatures? Usually the Email issue with Text Message format.

@scottalanmiller said in SodiumSuite sign up temporarily frozen?:

@bbigford said in SodiumSuite sign up temporarily frozen?:

@coliver said in SodiumSuite sign up temporarily frozen?:

@romo said in SodiumSuite sign up temporarily frozen?:

The register now button in the hero image is redirecting properly to https://sodium.waxquixotic.com/companyCreation, so new accounts can indeed register.
alt text

It took my way too long to find that button when I looked this morning.

@coliver I like the look of the new changes in the last couple days. Register is super clear and works on Firefox as well now it looks like. After you've already registered though, where are you supposed to login? The previous had both registration and login; I can only find registration now. Searched for SodiumSuite login via search engine, dug through the site, tried on different browsers (thinking a web part wasn't loading again).

Just mentioned this to @Dominica
She said... "whoops"

Haha no worries. That makes sense why I couldn't find it then.

Glacier. I have tried Crashplan with Synology and as @BBigford mentioned, it's messy, to say the least.

I haven't looked at B2 yet.

@bbigford said in .local vs .com:

@tim_g said in .local vs .com:

I've been working at a .local for almost 5 years now... no issues whatsoever, and no additional work required. No reason to change, probably never will unless a need comes up. We also use internal CA, for all users and public email... no issues there.

We've got a ton of clients using them from over the years. I just built a couple new environments this week and used ad.domain.com for them. It would help not having to deal with an internal CA.

Sometimes an internal CA is extremely beneficial in an AD environment.

In my case, there's hundreds of users in an AD/O365 environment. The internal MS CA does everything 100% automatically as far as certificate creation and distribution goes, including adding certs to the machine when they logon to another PC automatically.... (the certs follow them).

That would be a nightmare using something external.

Oh, I should mention that all certificates are using company.com... so being that the internal domain is .local has no effect on whether or not you must use an internal or external CA.

@dbeato said in Active Directory account - automatic disable:

I remember this only:
https://blogs.technet.microsoft.com/makeiteasy/2012/11/23/auto-mail-expiring-domain-accounts/

http://mikefrobbins.com/2013/12/12/setting-an-active-directory-user-account-to-expire-at-a-specific-time-of-day-with-powershell/

Bummer, I had looked in both of those places.

@dbeato said in Outlook vs. Gmail - mail & calendar exporting:

@bbigford said in Outlook vs. Gmail - mail & calendar exporting:

@bbigford said in Outlook vs. Gmail - mail & calendar exporting:

Is the built in migration intended to get calendars and contacts? I would think it'd get everything since they are all technically just folders, but I've yet to have it work 100% for me so was not sure.

Fun fact after researching... it is indeed intended to grab contacts-calendars-mail, but will not grab local distribution groups if you've created them in the local Outlook client. I think they are technically stored in a separate file, but for whatever reason it is not included in the migration.

The file you need to do it manually per user. See below:
https://support.office.com/en-us/article/migrate-email-and-contacts-to-office-365-a3e3bddb-582e-4133-8670-e61b9f58627e?ui=en-US&rs=en-US&ad=US
Or use Migrationwiz

MigWiz for the win here.

@jaredbusch said in O365/Gmail migration issues:

did you create the O365 account first and give them email?

Yes, including a subscription from Ingram Micro, licensing was applied, and also logged into email for first time. Tested mail flow with each user first. Migration was done very last after services were all verified.

@bbigford said in ESXi single host rebuild / VM restore:

@scottalanmiller said in ESXi single host rebuild / VM restore:

Well the one VM for Veeam could be a manual copy and restore. Then the rest through that method.

I've found that to be about as hands on for the most part, since templates are pretty easy to create. Has that been your preferred method for any similar situations in the past?

I've actually never needed to do this. Not that it is a bad situation, it's just that RAID expansion is not something we normally face. We've been lucky, I guess, only needing that either in situations where it doesn't matter (clusters) or not outgrowing the local RAID until it was time to swing to a new server.

@rojoloco said in A little information doesn't go a long way:

This pic helps sum it up... Just substitute forum names for the years.

0_1517504307969_27336286_10160659911655377_7330831516502802224_n.jpg

Thickness of skin can be measured in thickness of hair, according to the pic. Those hair follicles run deep in 97!

[HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\AutoDiscover]
"OURDOMAIN.com"="C:\autodiscover\autodiscover.xml"
"ExcludeScpLookup"=dword:00000001
"ExcludeHttpsRootDomain"=dword:00000001
"ExcludeHttpsAutodiscoverDomain"=dword:00000001
"ExcludeHttpRedirect"=dword:00000001
"ExcludeSrvLookup"=dword:00000001
"ExcludeSrvRecord"=dword:00000001
"PreferLocalXML"=dword:00000001

Take a look at this:
https://community.ubnt.com/t5/UniFi-Wireless/Unifi-AP-AC-and-AP-AC-v2-firmware/td-p/2000178
Unfortunately you are in the latest Firmware
https://www.ubnt.com/download/unifi/unifi-ap-ac/default/unifi-firmware-3815-uap-ac-uap-ac-v2-uap-ac-outdoor

@bbigford said in Unifi controller install errors:

@dbeato said in Unifi controller install errors:

This error usually means the service was still running...

I'd have figured it would terminate as part of the upgrade. I figured wrong!

It never does in Windows 😞 In Linux it works great.