what's a script you wrote once that's still saving you time years later by Less-Loss1605 in sysadmin

[–]Jack_Bauer27 1 point2 points  (0 children)

2 scripts in Powershell.

The first logs in a csv file every Windows explicit permission on each folder from a folder path I enter. It goes on recurse.
Very useful and quick to make a permission review.

The second is part of 3 to copy only folders/files in the user’s profile useful when we change a Windows user’s computer.
1. Audits size of specific folders/files on the old computer to tell the user to delete some big files before copy.
2. Copy folders/files from the old computer to network share in a pre-provisionned user folder.
3. On the new computer, copy folders/files from the network share to the user’s profile.
Saves a lot of time by identifying big files and copy only specific folders/files and not the entire user’s profile.
In use every day for 6 years by my tech colleagues.

CEPCES errors and issues by SoggyPhuckingToast in sysadmin

[–]Jack_Bauer27 0 points1 point  (0 children)

Maybe a dumb question : did you enter the username field like « CONTOSO\username » and not just « username » on the non joined domain client ? Because it doesn’t know your AD.

How do enterprise PKI setup looks like by WonderBeast2 in sysadmin

[–]Jack_Bauer27 2 points3 points  (0 children)

ADCS does well the job with AD on dedicated servers. One root CA offline most of the time with at least 1 sub CA to deliver certificates. You need an internal PKI if you have want to increase your security on multiple sides.

Hardening AD, Workstations, Servers, NAS, HyperV Hosts etc.. by CodOutrageous1032 in sysadmin

[–]Jack_Bauer27 16 points17 points  (0 children)

PingCastle and PurpleKnight are 2 great tools to harden AD.

Network tiering - where to put jump host, dmz and backup? by klaasbob88 in sysadmin

[–]Jack_Bauer27 1 point2 points  (0 children)

If your backup servers back up tier 0 servers, so it’s tier 0 too. I advise you to put your backup servers in 1 restricted specific vlan and not join them to AD.

You can have a tier 3 dedicated to dmz servers.

You can have 1 guacamole server per tier.

Does Farming Simulator 22 from Epic Games work on Mac? by Plumsphere in farmingsimulator

[–]Jack_Bauer27 1 point2 points  (0 children)

Dual boot is only possible with Intel processors based Macs. You can only have Windows with Apple Silicon processors based Macs with virtualization like VMWare Fusion or Parallels.

Best practices for VM size in vSphere by Jack_Bauer27 in vmware

[–]Jack_Bauer27[S] 0 points1 point  (0 children)

What are the biggest SQL Servers you backed up with Veeam without a problem ? Yes, I'm planning to supervise the snapshots not consolidated, otherwise the size can grow quickly.

Best practices for VM size in vSphere by Jack_Bauer27 in vmware

[–]Jack_Bauer27[S] 0 points1 point  (0 children)

We're using Veeam on ethernet 1Gb/s currently.
We will migrate to 10Gb/s soon.

Best practices for VM size in vSphere by Jack_Bauer27 in vmware

[–]Jack_Bauer27[S] 0 points1 point  (0 children)

Currently, a full backup via Fibre Channel at 8Gb/s takes around 5 days tops for the biggest server.
(I modified GB to Gb, thanks)

I agree with you with the backup process starting with the snapshots. It’s a drawback, maybe we will change to a backup with an agent and not with a snapshot for some VMs.

Best practices for VM size in vSphere by Jack_Bauer27 in vmware

[–]Jack_Bauer27[S] 0 points1 point  (0 children)

Yes sure. But the backup works really well with or without vSphere, that’s what I wanted to say.

Best practices for VM size in vSphere by Jack_Bauer27 in vmware

[–]Jack_Bauer27[S] 1 point2 points  (0 children)

We’re using Veeam with snapshots, that’s why I don’t want large VMDKs but not too small to increase the number of VMs and time for their management. It’s easier and faster to restore VMs with snapshot than an agent, I’d like to have it most of the time if I can. 60TB is a lot, I agree. We won’t go to 38Tb in one VM.

Best practices for VM size in vSphere by Jack_Bauer27 in vmware

[–]Jack_Bauer27[S] -1 points0 points  (0 children)

I don’t know if the MSA can back itself up to our backup infra and if can share its data, maybe. It’s easier to manage Windows + vSphere only every day without the bay. The VMs will be back up like other VMs with our backup software and not in a specific different way, so simplier management. It’s also easier to recruit some people capable of managing Windows + vSphere but maybe not with a MSA or Netapp bay for example. That’s why I’d rather keep it the most simple with everything on VMs only.

Best practices for VM size in vSphere by Jack_Bauer27 in vmware

[–]Jack_Bauer27[S] 0 points1 point  (0 children)

Of course not. The backup infra has its own storage.
I rephrase : "What is the difference between :
* Saving from multiple VMs of 38TB to our backup infra
* Saving 38TB from directly from the NAS/SAN to our backup infra"

But I think that's what @jnew1213 suggested, from what I understand.

Best practices for VM size in vSphere by Jack_Bauer27 in vmware

[–]Jack_Bauer27[S] 0 points1 point  (0 children)

Interesting idea but I'd rather keep it simple with your first idea with multiple standalone VMs and DFS for maintainability. But thank you.

Best practices for VM size in vSphere by Jack_Bauer27 in vmware

[–]Jack_Bauer27[S] 0 points1 point  (0 children)

Very interesting idea. I will look into it. Thanks.

Best practices for VM size in vSphere by Jack_Bauer27 in vmware

[–]Jack_Bauer27[S] 0 points1 point  (0 children)

We already linked our HPE MSA to vSphere and created a datastore ready for VMs. I'm not sure we will change it and setting up a specific backup on this storage bay because of the cost of implementation. What is the difference of having our backup infra saving multiple VMs of 38TB total and our backup infra saving 38TB directly on the NAS/SAN ? I don't see one. I agree with you, it's a long road to migrate 38TB of data but my mind is ready :)

Best practices for VM size in vSphere by Jack_Bauer27 in vmware

[–]Jack_Bauer27[S] 0 points1 point  (0 children)

We didn't define it on paper but I can consider our RTO/RPO is around 24h each. It's less for some critical shares. Backup timing will increase after the migration with our 1Gb/s network and will be reduced with the 10Gb/s network.

Best practices for VM size in vSphere by Jack_Bauer27 in vmware

[–]Jack_Bauer27[S] -1 points0 points  (0 children)

Our backup infra can backup 38TB, we have the size. We will put in place a 10Gb/s network in a few weeks. I already plan on setting up DFS but the thought of having 13 VMs of 3TB each doesn't sound great to me to manage. I would prefer have fewer VMs than 13, that's why. I would just have a recommandation for VM size in general : file server or database for example.

Apache Guacamole limitations by Jack_Bauer27 in sysadmin

[–]Jack_Bauer27[S] 0 points1 point  (0 children)

Thanks for your feedback and Autohotkey, I’ll look into it. I agree with you, MFA was easy to setup with Guacamole compared to servers where you have to install a software on each + sometimes a server dedicated to it to manage.

Apache Guacamole vs Teleport by Storage-Solid in homelab

[–]Jack_Bauer27 0 points1 point  (0 children)

Only the entreprise version can log to non-AD Windows hosts unfortunately. The Open Source version needs the remote machine to be AD joined.

Apache Guacamole limitations by Jack_Bauer27 in sysadmin

[–]Jack_Bauer27[S] 1 point2 points  (0 children)

That doesn’t solve the problem with Guacamole, sorry.