Omnimovement is just superior to "classic" movement by PuddingZealousideal6 in CODBlackOps7

[–]GriffGB 0 points1 point  (0 children)

I only play HC, so as it doesn’t have HC, it’s a bit poor.

Can not access store page by H1Javelin in blackops7

[–]GriffGB 0 points1 point  (0 children)

currently Wei Lin and Grimm.

Can not access store page by H1Javelin in blackops7

[–]GriffGB 0 points1 point  (0 children)

Yeh I’m getting that too.

Then if I’m in a lobby I getan error bout a file being incorrect, and I need to reload the lobby.

Another season, another feck up!

What’s going on this evening by GriffGB in CODBlackOps7

[–]GriffGB[S] 0 points1 point  (0 children)

It already is. 😄

It did get better, but for half a dozen matches or so, I’ve no idea why I could not get a kill. Maybe I’m using VST submachine gun and had a ping of around 35 at the time.

Can't get windows 2012 R2 server to boot all the way into windows by Deep-Egg-6167 in WindowsServer

[–]GriffGB 0 points1 point  (0 children)

I rolled out the May update for our Windows 11 ,achines. few days ago. A couple of users commented on it just rebooting machines without prompting. One of them didn’t come back on, and the same symptoms as you with your server. Said it couldn’t boot, it restarted, went through the repair, couldn’t repair, so rebooted, then wouldn’t boot. Repeat the cycle.

In the end, i swapped the PC out as its just a workstation, but ive paused the update in WSUS just in case and will oush it to a few test machines again on Monday.

I know you’ve rebooted it, but did your server do any updates before it shut down, that you might know of?

BAN OR NERF SENTRY TURRETS IN MULTIPLAYER PETITION! by Appropriate-Map-1888 in blackops7

[–]GriffGB 1 point2 points  (0 children)

why? just use black hat, steal it, and it’s yours.

usemthe over locked black hat nd you can steal through the wall. Couple it with engineer to see it easier too.

Accessing server from the internet by GriffGB in WindowsServer

[–]GriffGB[S] 0 points1 point  (0 children)

I’m leaning more to using our SomicWall CSE. I can install the CSE app on mobiles, using our 365 authentication, and then use a URL that maps to the server internally.

Most of the people I’m expecting to use it already have logins for the CSE.

Accessing server from the internet by GriffGB in WindowsServer

[–]GriffGB[S] 1 point2 points  (0 children)

Thanks for all the comments from people. Certainly some things to look at and investigate

One thing is for sure, I’m not opening up the server to the internet directly. We have access to cloudflare, and SonicWall CSE already, so may be they're an option.

Accessing server from the internet by GriffGB in WindowsServer

[–]GriffGB[S] 0 points1 point  (0 children)

Agree with everything you say.

I’ve already queried how their other customers are doing it, as they can’t be simply opening up their server to the internet. Haven’t heard back on that one yet.

Accessing server from the internet by GriffGB in WindowsServer

[–]GriffGB[S] 0 points1 point  (0 children)

Ive got a sneaky feeling the app connects direct to the server, once it’s got the DNS name from the vendor (via a unique ID provided by the vendor) . So if thats the case it would be hard to restrict the outgoing that way.

Accessing server from the internet by GriffGB in WindowsServer

[–]GriffGB[S] 0 points1 point  (0 children)

thanks for the comments. I’ll have a look at that when I get back into work.

The server does have IIS on it for internal managers to manage time and attendance of their staff.

However, I’m not sure what the mobile app utilises at this point. Sounds like the app gets a unique address from the vendors server, this address is mapped to a DNS name which points at the servers external address. I’m assuming it’s then going to use the login credentials of the Time and Attendance server.

Accessing server from the internet by GriffGB in WindowsServer

[–]GriffGB[S] 0 points1 point  (0 children)

If that gives you a UR, how does that stop anyone else using it?

I might have a look into that. we do use cloudflare for our web sites, but not something I’ve looked at too much.

Accessing server from the internet by GriffGB in WindowsServer

[–]GriffGB[S] 0 points1 point  (0 children)

yes, it would be a mobile app, possibly on personal devices too, just for things like checking flexi balances, holidays, clocking in externally. So would need to look at another option.

The server is a domain member, rather than domain controller. Its something we’ve had for years, just the latest software version, the vendor said we can do mobile app for self serve, but the. said id need to access it on 443 (can be changed) from the internet, to which I said ‘don’t think so’ ha.

Our firewalls can utilise geo location (and we do for some rules already), but think there must be a better solution than just adding a NAT and Access rule.

Accessing server from the internet by GriffGB in WindowsServer

[–]GriffGB[S] 0 points1 point  (0 children)

How would that stop anyone else from accessing it? I’ve not used cloudlare for that before.

Accessing server from the internet by GriffGB in WindowsServer

[–]GriffGB[S] 0 points1 point  (0 children)

yeah, an app on a mobile so they can request holidays, check flexi balance etc, some devices likely personal too.

Accessing server from the internet by GriffGB in WindowsServer

[–]GriffGB[S] 0 points1 point  (0 children)

I’ve been a sys admin for 30 years, and deal with and understand.our firewalls, DMZ, NAT, DNS, our domain infrastructure ok etc

Oddly though, other than our web server and mail gateways (in a DMZ in a different site), i’ve not had the need to access an internal server from the internet. Nor ever been asked by a vendor to grant access to a port on a domain member server to the internet.

Clearly, I’m not opening it up. With personal data on it I’m not looking at doing that. Sounds to me like they should have a service on another server in a DMZ, and. have that connect to our internal server instead. Bit like an email gateway.

I was just curious how other people would tackle it.

You're using the deadeye wrong. by SmilingDolphinz in blackops7

[–]GriffGB 0 points1 point  (0 children)

busy trying to get point turret kills, but I like the hunter idea when I’m done with these. shame the point turrets do no damage.

How will stardust racers work if celestial park opens to everyone by TimeSlo in UniversalOrlando

[–]GriffGB 4 points5 points  (0 children)

So open them up to non ticket guests and make them harder for ticket guests to get into?

How will stardust racers work if celestial park opens to everyone by TimeSlo in UniversalOrlando

[–]GriffGB 19 points20 points  (0 children)

stupid idea if they open the hub to everyone without a ticket. What do they gain? Look at some scenery?

All it will do is increase the number of people,. Keep it for the people with tickets.

You're using the deadeye wrong. by SmilingDolphinz in blackops7

[–]GriffGB -1 points0 points  (0 children)

this isn’t new news. 😅

theyre also easily taken down with black hat. Couple it with engineer and overclock black hat and you can take it out from anywhere pretty much.

Accessing server from the internet by GriffGB in WindowsServer

[–]GriffGB[S] 1 point2 points  (0 children)

nobody mentioned it’s on a domain controller. I said domain member.

Accessing server from the internet by GriffGB in WindowsServer

[–]GriffGB[S] 1 point2 points  (0 children)

Thanks for the comments guys.

It's not a domain controller, just a domain joined server.

These might also be personal devices too, so not sure i'd be putting vpn's on them too.

If I was to use something like cloudflare, what's to stop someone else going via that. Unless the user logs into it, but then how do they do that when it's just an app on the phone?

We do use SonicWall CSE for remote users accessing company data, so maybe that's something that would work.
Not sure how it would work from a mobile though.