@frodooftheshire said in Safely transferring sensitive information:

Hi everyone,

I have a non profit client that asked me yesterday about sending/receiving sensitive information (SS numbers for example).

Currently when they're looking for volunteers data is sent from the volunteer's email address to an employees account (in charge of finding volunteers & using Google Workplace account) and then to the director's email address (Again Google Workplace account).

They were looking to implement DocuSign to more securely handle this process but I wanted to see if anyone else had any other recommendations.

DocuSign is for e-signatures which doesn't sound like what is needed.

How about a secure form app? Sound like it would get the job done much better than email. Formstack for example seems like a good example, I'm sure there are plenty to pick from.

Non-profits often have different pricing as well.

@pete-s said in Strangest Airprint issue has me stumped:

@jaredbusch said in Strangest Airprint issue has me stumped:

@frodooftheshire said in Strangest Airprint issue has me stumped:

M477fnw

This is a close to $1000 printer. How old is it though? Printers can work for years, but after a couple, they are typically more expensive to repair than replace once depreciation and your labor time is added in.

Looks like it was introduced late 2015 or so. But it could have a 5 year warranty, in which case it might still be in warranty.

HP don’t have a warranty past 1 year unless you pay for a care pack. It will be known if there is a warranty or not.

You could look at changing the autosave to 1 min instead of 10.. no idea how that will impact the system.

@frodooftheshire said in Router placement with PTP Unifi network:

At the new office I have their new router in the rack and now I'm trying to decide if it should stay there or be placed at the original office where the Comcast circuit will reside.

Second site doesn't have any need for a firewall, do they? They don't have a WAN link.

I appreciate everyone's help!

@IRJ said in FIPS encryption (non domain laptops):

@frodooftheshire said in FIPS encryption (non domain laptops):

@IRJ Wow. So I'm guessing I would need to wipe these machines and put on Windows 10 Enterprise 1809 to go a. get compatibility and b. make sure these devices continue to get security updates? But when I check 1809 EOL is May 11 2021???

I may just have this client work directly with a third party to manage all this as I don't imagine this will come up again, and I'm not sure it's worth the time investment to really get a grasp on everything and what's involved.

Yeah it looks like it. I've not dealt with FIPs 140-2 on Windows before, only Linux.

This document is from May 2020 and shows 1809 still as the latest FIPs 140-2 certification.

https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp3092.pdf

Before you get into a rabbit hole here, what's your actual requirement?

This is the correct approach. What's the requirement?

It takes a good amount of time and money to certify the OS so that's why the FIPS certified releases are behind. I'm not sure on Windows but with RHEL/CentOS you can enable FIPS mode on any release, it's just not "certified".

@dbeato said in Outlook failing to open from multiple customers...:

@Dashrender said in Outlook failing to open from multiple customers...:

@WLS-ITGuy said in Outlook failing to open from multiple customers...:

@Dashrender said in Outlook failing to open from multiple customers...:

@dbeato said in Outlook failing to open from multiple customers...:

Fix for this is to revert to an earlier version of Microsoft. I have a .bat file here

https://github.com/dbeato/scripts/blob/master/Office 365/Fix-Outlook-Restart.bat

Do you know - does this only affect O365 Office users?

So far Windows O365 users are the only ones that are chirping to me. I do have two users who aren't on O365 who aren't complaining...yet.

Right - I'm 100% non O365, and no chirps yet - WSUS is used here, and those office updates are approved to push.

What Office version? Office Click-to-Run would be affected, Office 2013 and up would have been affected.

I have zero click 2 run - I'm all office 2016

@frodooftheshire said in Windows NLA service on 2016/2019 DCs:

@CCWTech Exactly - it's mainly about firewall rules. Like you said I guess I could go into all the firewall rules and make sure its ticked for private as well as domain. It's just annoying because this shouldn't be an issue.

I can see a member server getting confused if the DC isn't booted up and it boots up, but for a DC not to know it's in a domain is just a bit crazy.

@DustinB3403 said in Verzon One Talk - Yeallink T41s no dialtone on handset (works on speakerphone):

@JaredBusch what do you charge for a managed PBX?

For no support, simply updates performed monthly, I've quoted people $150.

@Dashrender said in Shadow Tracker Live:

Though - if you don't tell them that they lost you as a possible customer - they will likely never fix their shit.

Probably best, to help make people aware of how bad they are.

@JaredBusch no one said that hey didn't OFFER something else, but what makes them a viable product is their unique Windows offering.

In keeping with the thoughts about who allows you to use other name servers, we have been using DirectNic as our registrar for many years. Make sure to give them a look. The can register about any name you can think of including Columbia 😉 allow you to create your own custom name servers, and allow you to point to any name server you wish. This all means ultimate flexibility for us.

We found a solution - setting the Epson printer as the default resolved the issue. Makes no sense. We discovered this because we moved the printer to a different computer and immediately had no issues. Then we realized Windows had set the Epson as the default because in settings this computer was set to "let windows manage my printer." When we went back to the other computer and switched it to the Epson receipt printer as default - voila - no weird issues on the first print.

Not sure what you went through and where you are but we have had barely that experience and the ProSupport team is based in the US. Now you can ask for a manager which is something I have needed to do when issues were not resolved or had delays but for the most part it has been great.

Here is a discussion on this from two years ago. The Finder Bug hasn't been talked about that much on ML since it was so well known and established for Mac storage needs prior to ML coming into existance. But you can find a lot about it on SW, since it happened and got documented during that era.

https://mangolassi.it/topic/5499/nas-for-mac-environment/

I have seen this work like this for a long while. But it can be weird because I've seen it fail too. If the client in question don't present some time of machine/domain name automatically, I think the domain auth will just assume the domain that's being authenticated against and if an account matches it tries the password.. but, if the client does pass along machine/domain type info, of course it fails if it doesn't match.

@frodooftheshire said in Actionpack/Azure:

Took 20 mins on the phone with Microsoft but the licenses includes with MAPS does not qualify.

That sucks.

@Francesco-Provino well then poop, that just sucks.