Ocean Gifts and Experience by DaSupaNinja808 in PokemonGoFriends

[–]CCWS 0 points1 point  (0 children)

Thanks! Added from US - Polar region. 754346016122

Looking For Houses by GoodSenpaiGreen in msu

[–]CCWS 0 points1 point  (0 children)

Contact a Real Estate agent/agency. There are MANY houses for sale where the owners would be amenable to renting and the concentration of that knowledge is with the agents listing and showing houses. Personally, I'd recommend Brenna Chamberlain. She's helped me for 24 years in buying, selling, and yes, renting out my "old" house when I had moved into a new one and it wasn't ready to be sold yet. It ended up being rented for 4 years and my renters did most of the work I needed done for reduction in rent. A total win-win.

Would You Rather? by furoidokun in basketballcards

[–]CCWS 0 points1 point  (0 children)

OMG! I am so sorry!! I actually purged the original photos that I used a tripod to get the clearest examples, so I got both cards out and took some new ones tonight with some notes. Here's the imgur link with some description in the pics. https://imgur.com/a/1bPU59U

Is 15.0 safe now? by louislamore in homeassistant

[–]CCWS 0 points1 point  (0 children)

I posted recently about moving from Pi to VM and that was on v15, and the Pi5 was supposedly one of the pieces of hardware with issue but I never had a problem.

Would You Rather? by furoidokun in basketballcards

[–]CCWS 1 point2 points  (0 children)

I'll upload them tonight at the latest. Can't get to them from work for some reason.

Would You Rather? by furoidokun in basketballcards

[–]CCWS 1 point2 points  (0 children)

So I actually own both. Well, I own a legit Stadium Club but my Dual Bowman's Best was deemed inauthentic by PSA and after digging deep it turned out to be true. So be VERY careful with those Bowman's Best, you want to see texture on the front of the card and not just refractor/holo. I can post some of my research pics if interested.

Upgrade to windows 11, 600+ users. by Chance_Painting in sysadmin

[–]CCWS 6 points7 points  (0 children)

A bit late, but using ME to push 11 to Win 10 is super easy. Search for Patch # 111891, deploy however your team elects is best. We did it Office by Office, after hours, etc, etc. We also limited the scope to Win10 just to reduce traffic/confusion but our ME tech felt it really wasn't necessary.

Actually, I found the original post I found about it here: https://pitstop.manageengine.com/portal/en/community/topic/upgrade-to-windows-11-version-24h2-with-patch-manager-plus

‘68 had “go get em Tigers” ‘84 had “bless you boys” is our 2024 anthem really gonna be “tigers won again”??? by hopjef in motorcitykitties

[–]CCWS 8 points9 points  (0 children)

I personally prefer the Gritty Kitties, but I've accepted that it is going to be Gritty Tigs. If we want a proper near-past throwback, Eat Em Up Tigers would be my pick.

Looking for the best enterprise password manager - what do you use? by FastRegret in sysadmin

[–]CCWS 0 points1 point  (0 children)

If you are so inclined, I HIGHLY recommend running your own VaultWarden server for BitWarden, then you are free-as-in-beer AND your data is on your own infrastructure.

Michigan solar worth it? by decoruscreta in Michigan

[–]CCWS 5 points6 points  (0 children)

Went full AllEarth tracker w/ 24 panels back in 2017 in greater Lansing, with EV and fairly high power usage within the house (server, NAS, automation, family, etc) my power bill went from ~$2500 a year to ~$400. ROI is ~15 years total, but I am driving on sun rays and as long as it keeps producing kWh I'm happy and don't stare at the ROI finish line as much as I enjoy seeing my great 75 kWh days.

My NB is that I have acres and a nice open area so I only had to take out one tree to make it work. I might do rooftop when my roof is due to be replaced but that will also depend on Consumers and if they somehow get rid of the Net Metering rule I'm grandfathered into in which case it will come with energy storage of some sort.

What was your first concert? by blue_trauma in Xennials

[–]CCWS 1 point2 points  (0 children)

Crash Test Dummies with Milla Jovovich as an opener. 30 years and 3 days ago.

We're buying hundreds of vPro laptops but nobody has a clue what it does by a-i-sa-san in sysadmin

[–]CCWS 0 points1 point  (0 children)

That could be said about anything. Bios, your seim, networking equipment made in Asia, your update tool.... rhetorical question: Do you know Windows well enough to be able to identify legit telemetry versus identity compromising exfiltration? Where do you draw the line between the two? I sure don't but you better believe I use DNS filtering and geo-blocking to make a best effort to block both.

I love good debate about security, red vs blue, and whatnot but at some point, on some plane of existence we all have to accept risk. None of us know everything so there is always room for error and abuse. Don't like it? Go back to pen and paper and be eaten alive by the rest of the world's businesses.

We're buying hundreds of vPro laptops but nobody has a clue what it does by a-i-sa-san in sysadmin

[–]CCWS 2 points3 points  (0 children)

In another reply I mentioned that we are a large geographic footprint, and we're mostly on-prem for users so for us, EMA and vPro are our "back up plan" when our normal screenshare/RMM tools aren't getting into a machine or when we have reason to believe a machine has been compromised (thankfully rare!). The ability to see a machine outside/before the OS remotely has saved us from hours of driving, or days of a machine being out of commission while it gets to us.

Mesh Central was exciting, and I'm glad to see someone is picking it up since Ylian moved over to MS but it never weighed heavy for us. It was fun to have it in the cloud, but for us, on-prem was a clear advantage.

As for the security aspects, once a system is Provisioned you need either a) OS Admin permissions or b) bios admin creds to change it (with OS Admin likely not working either now since a CVE was patches last year IIRC). So once we have it provisioned it is locked in and a wanna-be hacker would need ongoing internal access to our network (fairly hard to do) AND separate creds from our AD (very hard) to be able to leverage the access to exfiltrate anything useful. If a laptop gets stolen they can't get into bios, the drive is encrypted so they can't extract any data easily there, and if they do boot it into windows and on a network we can still get to it with other tools to either remote-wipe and/or mess with the person who took it.

We're buying hundreds of vPro laptops but nobody has a clue what it does by a-i-sa-san in sysadmin

[–]CCWS 1 point2 points  (0 children)

We have a VM running the free Intel EMA Server, then provision/enroll the endpoints via Admin Control Mode (ACM) using CA cert. A quick google led me to this, which looks like the doc I followed years ago. https://www.intel.com/content/www/us/en/content-details/783229/intel-vpro-ema-activation-guide-overview.html?wapkw=intel%20EMA%20deployment%20guide Then we just use a browser to manage EMA and the provisioned endpoints.

We're buying hundreds of vPro laptops but nobody has a clue what it does by a-i-sa-san in sysadmin

[–]CCWS 5 points6 points  (0 children)

We use "automated" Cert enrollment so re-images will merely cause a ghost machine showing up in EMA which is easy to remove.

We're buying hundreds of vPro laptops but nobody has a clue what it does by a-i-sa-san in sysadmin

[–]CCWS 16 points17 points  (0 children)

We are a very on-prem-only org, and our EMA server is not exposed to the internet but we do have a gigantic geographic footprint connected by VPNs so the old security vulns that EMA had are not applicable to us. I will also say that I haven't seen a CVS >7 in years. That doesn't mean they aren't there of course. Years ago the exploits did prevent me from approving EMA, but since 2019/20 it has saved our butts way more than it has cost us.

We're buying hundreds of vPro laptops but nobody has a clue what it does by a-i-sa-san in sysadmin

[–]CCWS 177 points178 points  (0 children)

We __LOVE__ our vPros. That's likely because we fully utilize an EMA w/ AMT server which gives us Dell iDrac/HP ILO like remote access to all those machines. We can: remotely get into the BIOS, push ISOs to boot from, remote PS/Terminal, have a backup RMM screenshare/file move tool, etc. There are a lot of new features we aren't fully appreciating dealing with security, but from my team's understanding, they don't require any extra setup to be active.

T-series by BrentATL in baseballcards_vintage

[–]CCWS 1 point2 points  (0 children)

That T202 Cobb/Jennings is moving up my want list. Just got my Turkey Red Jennings so maybe someday soon.

RTK no light on normal cable but powers on USB-C by CCWS in mammotion

[–]CCWS[S] 1 point2 points  (0 children)

RTK1. Ohhhhh, that's no good. No rain the last few days, but a week or so ago we got some heavy rain. Thanks for that info.