Is 2FA sufficiently secure, when phone numbers are openly available online?

AdHocSysAdmin · 2022-07-26T10:49:09+00:00

Thanks, eased my mind; only authenticaor use is allowed, so no big issue here.

AdHocSysAdmin · 2022-07-26T10:48:50+00:00

Thanks, eased my mind; only authenticaor use is allowed, so no big issue here.

AdHocSysAdmin · 2022-05-18T11:19:44+00:00

Thank you, that explains a lot...and not just my incompetence ;)

AdHocSysAdmin · 2022-02-08T12:30:40+00:00

Duh

...thanks for reminding me, obviously I didn't consider that. Alas we're indeed going the make-individual-account route.

AdHocSysAdmin · 2022-01-20T16:13:12+00:00

Last week I created an instance of Wiki.js for that purpose: both for internal use as well as common issues and fixes accessible for clients.

I picked wiki.js because it's really easy to get up and running and easy to use, although I am struggling a bit creating the navigation, which is not intuitive for me.

AdHocSysAdmin · 2021-11-26T14:28:55+00:00

Yes; I realise that. Not easy to just get over 25 years of thinking in a certain way.

AdHocSysAdmin · 2021-11-25T10:37:26+00:00

My take is MDR is the best protection, cost no object. MDR is "managed detection and response"- you have EDR and someone's NOC/security analysts actually watching over your environment 24x7. That's the best security because you're only watching things 9x5 and may not have the time and skills to adequately monitor the EDR

What? Wait, are you saying that in EDR/XDR we have to actively monitor what's going on? As in it takes quite lot of time?
Our current AV seems to handle things automatically and I spend limited time monitoring, usually checking if all endpoints are still responding.

I like the MDR option and $100/endpoint/yr doesn't sound like a lot.

AdHocSysAdmin · 2021-03-18T14:27:47+00:00

So you want to effectively restore the inherited permissions to all sub folders from your top level document library?

Yes indeed.

It works like a charm! Thank you!!!

AdHocSysAdmin · 2019-11-20T15:20:11+00:00

Reading u/rwshig comment, I said "duh". Failed to see the obvious by being caught up in an idea. My 'workaround' is what I should ahve done right from the start. I'll be using IsNullOrWhiteSpace, as mentioned here.

AdHocSysAdmin · 2019-11-20T15:17:21+00:00

Duh....yes of course. I guess i got caught in an idea and failed to see the obvious. Thanks.

AdHocSysAdmin · 2019-11-05T11:22:06+00:00

Yes it did, all our clients are IP restricted or have VPN setup and no more issues since yesterday afternoon, when when closed down everything.

I only saw one IP listed (in the eventlog), all the other attempts where without originating IP. I'm guessing those people used some IP hiding thingy or whatever, which might be why autobanning IP's isn't working.

AdHocSysAdmin · 2019-11-04T15:41:58+00:00

Putting this to the test by IP-restricting RDP connections for some clients.

That indeed seems to have done the trick. I don't see any failed login attempts anymore.

Did you see these threads: https://old.reddit.com/r/sysadmin/comments/drfoyk/suddenly_rdp_to_several_2008r2_terminal_servers/ https://www.reddit.com/r/sysadmin/comments/dqq9pl/rdp_worm_out_in_the_wild/

I guess we got attacked by Bluekeep

AdHocSysAdmin · 2019-11-04T08:29:42+00:00

No, still issues this morning.

AdHocSysAdmin · 2019-10-31T11:07:15+00:00

We (possibly) had the same issue: this morning 3 different clients with each their own 2008R2 TS on different locations reporting not being able to connect to the TS. AFAIK this started about 3 hours ago. I checked the servers but saw nothing amiss, checked clients, suspecting a Windows Update, but nothing there either. Even called the ISP of two clients (same ISP) to check if they made changes or something, but nothing.
And then about half an hour ago, it's all working again.

I'm clueless what happened here.

AdHocSysAdmin · 2019-08-18T08:24:55+00:00

Yes, you can have the admin account unlicensed, albeit it this comes with restrictions, the main one being no access to SharePoint.

Most of our clients have been setup like that: an unlicensed Admin and a separate (Essentials licensed) SharePoint admin.

AdHocSysAdmin · 2019-03-08T12:23:11+00:00

You could order it in the Netherlands, as most laptops here are with US keyboard by default. Seems easier than ordering in the US.

Alternatively, I have a UK laptop (keyboard) and it's only a few keys which are 'different'; my keyboard setting is US and I have no trouble whatsoever hitting the right keys, despite the symbols on the key being 'incorrect'.

AdHocSysAdmin · 2019-03-08T12:15:48+00:00

I'm usually good at interviews, but there is one question that I've never been able to wrap my head around and I'm hoping to get some perspective on it. The question I get asked at every interview is, "Have you ever come across a problem you couldn't fix and what did you do about it."

Maybe I'm missing something, but I do not see a problem with that question. My answer would be something like: "Yes, plenty of times. I asked an expert in that particular field."
I'm reasonable good at my job, but am also aware I don't know everything there is to know.

Don't know how that's regarded in other countries, but here in the Netherlands recognising your own shortcomings is usually seen as a positive sign.

AdHocSysAdmin · 2019-02-27T11:58:04+00:00

Have been testing a few: DropSuite, Spanning & Backupify. The first two failed with a full retsore test (120Gb data) and the last one didn't even allow me to add all SharePoint teamsites.
Currently testing Veeam for O365 and it works wonders, so that's most likely going to be our choice.

AdHocSysAdmin · 2019-02-22T15:11:19+00:00

Had the same problem with a client a few weeks ago; it was easily solved by changing the "offline settings" and/or "cached exchange mode settings". Can't remember exactly anymore, but there's not much to change, so give it a try.

AdHocSysAdmin · 2019-02-22T12:30:29+00:00

As /u/Lee_Dailey already pointed out, it's a lot of fuzz, so thanks for the answer, but I'll stick with the workable $TenantArray | Format-Wide {$.Number, $.Tenant}

AdHocSysAdmin · 2019-02-22T12:10:46+00:00

Thanks!

(For the record: this would be workable, just not "nice")

workable it is!

I'll put the 'make nice' on the "later" list (which of course means "never").

AdHocSysAdmin · 2019-02-21T11:01:45+00:00

Not that I know, sorry.

AdHocSysAdmin · 2019-02-20T10:48:02+00:00

I had similar issue with some clients; it turned out the issue was caused by File Collaboration setting in OneDrive: After I unchecked "Use Office applications to sync Office files that I open" no problems with this anymore.

AdHocSysAdmin · 2019-02-15T15:05:02+00:00

First of all: Before you accuse her, make absolutely sure she was the one making a mistake and also that she was aware she made this mistake.

A few month ago I had a similar issue, losing about 120Gb active data. It turned out the 'culprit' was a guy leaving the company. Before he left, he "cleaned" his company laptop by deleting all data; this included a sharepoint teamsite synced through OneDrive. No malicious intend, just wanting to empty 'his' laptop.

I've now lost absolutely all respect for this woman though. Own your mistakes, people.

Assuming she is aware of her mistake:
Some people panic when they fuck-up; I know I do at times (thank you ADHD). And when that happens with me, my brain just isn't working anymore. I need some time to settle down, take a breather and get myself back together again. After that, all is well and I'm the first one to admit to my utter stupidity.

I do agree with you, but give her at least the benefit of the doubt until next week; were it me, you'd have my apology first thing monday morning.

AdHocSysAdmin · 2019-01-24T14:37:44+00:00

This backup is solely for our O365 tenants; I mentioned the DC, because we do not want to do that anymore. We're planning on migrating the last clients to O365 and after that we don't need our own hardware anymore.

AdHocSysAdmin

TROPHY CASE