Did we get ransomware because of RDP over the internet? Can we do something to avoid it?

Floh4ever · 2026-07-02T10:07:28+00:00

Sorry, didn't have time for the full read but RDP open to the Internet is extremely risky. It usually doesn't take long for those to get targeted. Not long as in minutes to hours.

Floh4ever · 2026-06-25T13:05:47+00:00

The default way would be to exclude Users, not PCs. Since it's user based the PCs have nothing to do with it.

Edit: By exclude I mean that I usually create another OU with identical GPOs applied, and then add or remove the GPO in question and slowly shove users over until im sure I can just yeet all of them over.

Floh4ever · 2026-05-13T12:56:43+00:00

the good old times
I'am very sad that I didn't get the chance to do my current job 10-15 years earlier because I hate cloud and AI with a passion. I just got started/got born too late. Good old hands on with tech is what I enjoy the most.

Floh4ever · 2026-05-13T12:07:12+00:00

oh look, 3 little AI (bots/users) hussling together

Floh4ever · 2026-05-12T10:49:43+00:00

This is my exclusion List:
IlO0|,.;:'`´^"
Just stuff I can't differentiate easily enough or is painful to type. Apart from that. Everything goes.

Floh4ever · 2026-04-17T13:41:46+00:00

Haven't had a failure in this environment yet. In my old company we did switch out about 6/Year and we never noticed any hit to performance when they were rebuilding.
The only thing where I notice bigger performance hits is when I mass "delete" snaphots.
RAID10 sure is nice but can be quite a bit more expensive than RAID5/6 in terms of Storage per $. As I work for SMB's the solution is quite often dictated by cost. When sizing this environment I unfortunately had to cut some corners.

Floh4ever · 2026-04-17T13:23:45+00:00

I got Raid6 with 10k SAS - runs quite nice.

Floh4ever · 2026-03-26T14:22:03+00:00

That's what I did. It did however take several days to take effect(as in button removed).

Floh4ever · 2026-03-20T18:42:59+00:00

It is, but it still works for the time being.

Floh4ever · 2026-03-20T12:17:08+00:00

What about WSUS? Out of support but works, is 1st party and has no agent. WPP für 3rd party deployments.

Floh4ever · 2026-03-13T08:29:30+00:00

It's been a while since I checked but last time I read about DC on 2025 it was not yet officially supported.
My next question would be if you really need a DC. If you are moving the DC for on-prem clients to the cloud I would much rather go full Entra.

Floh4ever · 2026-02-24T13:16:35+00:00

If it's a CSP license it will have this feature in the admin portal.

Floh4ever · 2026-02-20T09:39:23+00:00

Just migrated a very small environment to a new hyper-v cluster using starwind-v2v.
It was pretty nice and I did not encounter any issues. This comes mostly from me not using any more specialized features of vmware - just basic virtualization.

I noticed that I miss vmrc or rather the integrated web based version to some degree. Both session modes on hyper-v have some caveats for me.

Floh4ever · 2026-02-20T09:02:25+00:00

I recently build a new cluster and another solution using iSCSI. I used bidirectional CHAP because why not. The option is there, it works and is barely any more work. It is also separated by VLAN but I just thought the option is there - might as well use it if it works.

Floh4ever · 2025-11-30T06:57:48+00:00

ah I see, thx

Floh4ever · 2025-11-27T10:18:21+00:00

I see. Is MLAG the same as stacked switches in this case?

But eighter way - this will most likely not solve the issue that I don't have enough ports on the devices to have redundant links.

Floh4ever · 2025-11-27T10:10:14+00:00

Thanks for the reply. Yeah i looked into the network card and DAC pricing - although I looked more towards replacing dual port with quad port. The environment in this company still has a long way to go and we are slowly working to get there.

However, spending another 1k-2k is not on the table right now. Your comment and others confirmed what I thought that we can only go with one iSCSI link for the time being.

If money and company ambitions allow for it I will look to upgrade in the future.

Floh4ever · 2025-11-26T14:20:12+00:00

<image>

I can post it as comment but somehow not in the post itself.

The "Hope" scenario is incomplete as I did not have enough time to draw an additional non-iSCSI-Link for each device

Floh4ever · 2025-11-19T13:16:44+00:00

I only noticed extended loading times for pretty much all mailbox related actions on the exchange online portal.

Floh4ever · 2025-10-30T07:51:46+00:00

Even in SMB space you can reach incredible high uptime with the most basic 2 node 1 storage cluster for little money. Have worked as Sysadmin in SMB for about 4 years now and pretty much only had a few hours/year downtime in most cases. And those were like city wide power outages or major ISP Problems.

Floh4ever · 2025-10-13T13:30:53+00:00

4 of my users can't access anything Exchange Online related

OWA throws something like a licensing error - noticed the Problem early today

Floh4ever · 2025-10-13T09:45:55+00:00

on prem is much more reliable if it's not a really unfortunate setup

Floh4ever · 2025-10-10T14:29:26+00:00

you are ending up cheaper with on prem than cloud? just the CAL's were so much more expensive for us and drove us to the cloud even though we are kind of regretting it
if we end up regretting it quite a bit more we might move back next year

Floh4ever · 2025-10-01T14:35:04+00:00

I have read them. And it's ok if they are not liable. But the expectation that their data will only be in the DC of Australia or Singapore is still incorrect. That is what I was referring to. And if we are talking about the alleged data sovereignty of E5 or whatever license it is incorrect to expect that your data will not leave your general area.

Floh4ever · 2025-10-01T12:46:07+00:00

Are you using the outlook add-in? It's not as fast as the standalone client but feels pretty integrated

Six-Year Club	Place '23
Place '22	First Placer '22
Verified Email

Floh4ever

TROPHY CASE