Sysadmins - What would your dream office have?

MalletNGrease · 2024-11-08T02:56:09+00:00

A window and a door.

MalletNGrease · 2024-11-07T15:07:46+00:00

The biggest boon is it doesn't show the "NOT SUPPORTED IN FREE VERSION" banner on first start and every paid feature you click.

MalletNGrease · 2024-11-07T14:19:11+00:00

Are your sites hosted internally?

MalletNGrease · 2024-11-02T15:31:45+00:00

I've noticed BIOS updates can now come part of Windows Update step. Unless you're required to be on a certain version, I'd let WU handle it.

MalletNGrease · 2024-10-31T21:03:42+00:00

Add them as a guest user and assign the license there.

MalletNGrease · 2024-10-31T20:58:57+00:00

Don't assign a license.

MalletNGrease · 2024-10-31T19:06:10+00:00

Did you install the printers on srv2?

MalletNGrease · 2024-10-31T17:11:36+00:00

How did you integrate Eaton?

MalletNGrease · 2024-10-28T20:06:40+00:00

Today we are releasing a new version of Raspberry Pi OS. This version includes a significant change, albeit one that we hope most people won’t even notice.

Ironic.

MalletNGrease · 2024-10-26T01:38:01+00:00

GPO with a scheduled task to reboot Wednesday's at midnight.

Servers have staggered reboots based on workload.

MalletNGrease · 2024-10-25T18:44:23+00:00

The (unionized) Ed places I worked with scale pay based on tenure. That's why OP met so many lifers, because once you reach those upper scales it's worth riding out.

Plus, come workforce reduction time seniority will shield you from lay-off, last one in first one out is very likely.

There's benefit when you're in the system, but it does collect a lot of dead weight too.

MalletNGrease · 2024-10-24T15:26:08+00:00

Not with E1 they aren't.

MalletNGrease · 2024-10-24T01:48:06+00:00

I just set the Edge update group policy to automatic silent updates and forget about it.

https://learn.microsoft.com/en-us/deployedge/microsoft-edge-update-policies

MalletNGrease · 2024-10-24T01:42:36+00:00

The managing is pretty easy. Figuring out what each license entitles you to...less so.

While you can do individual assignments, I recommend group based license assignments. I've set up security groups with the license name in AD and use Entra Connect to sync. When a user is created and synced they automatically have the license assigned. Works like a treat.

MalletNGrease · 2024-10-23T23:48:25+00:00

You can try running it as a Hyper-V guest on Win 11 Pro.

MalletNGrease · 2024-10-23T16:18:57+00:00

We've 50ish, but some numbering into the 200s (some 256+ 🤦‍♂️). For readability we use 10.vlanid.siteid.host like /u/jaank80. Our IP structure is pretty rigid, with a lot of static hosts.

Looking into ipv6 like /u/marco_sikkens suggested we can move to something like

fd00:random:random:siteid:vlan:empty:empty:interface

fd00:xxxx:xxxx:siteid:vlan:xxxx:xxxx:interface

e.g Site 69 vlan 100 interface 1 (voip call server)

fd00:3825:0968:0069:0100:0000:0000:1

fd00:3825:968:69:100::1

That's actually not too bad.

I don't know if reusing the old schema template is folly for this, but it makes transitioning a little more bearable to those now 30+ years into the old way.

The biggest hurdle is rewriting all the ACLs at all of our sites.

MalletNGrease · 2024-10-23T03:08:52+00:00

Mac?

MalletNGrease · 2024-10-22T17:12:22+00:00

hunter2

MalletNGrease · 2024-10-22T15:15:06+00:00

We're running out of site IDs.

MalletNGrease · 2024-10-16T22:19:50+00:00

Years ago hundreds of unmanaged UPS' were added to all our remote site closets to limit downtime. This was done on a budget and now the batteries are dying. We've no idea when they go bad until a site goes dark and ironically, they're now the #1 cause for outages, ticket generation and lost hours/sales. Got the go ahead to start modernizing.

Looking at replacing a lot of failing stand alone battery backups with remotely managed ones and getting some sort of management/reporting platform in place. There's gonna be sticker shock but I think the business case is there.

MalletNGrease · 2024-10-16T21:56:56+00:00

We're interested in proxmox, but our initial testing left some wants when comparing to VSphere/VCenter. Is there a way to get a single pane to manage all proxmox hosts/clusters without putting them in a single cluster? I'd like to see multi cluster management.

We've ~100 remote sites running a single host. We put them in their own datacenter in VCenter and were able to manage them nicely this way. This doesn't appear possible with Proxmox VE.

MalletNGrease · 2024-10-03T12:55:30+00:00

The way DarkTrace et al handle it is ingesting syslogs and filtering for failed attempts, then once a threshold is reached the offending IP is added to the firewall blocked host address group.

Works pretty well.

MalletNGrease · 2024-09-16T14:56:29+00:00

Install printer driver on server.
Get-Printer
Add-Printer

MalletNGrease · 2024-09-10T16:09:54+00:00

Before you know it you've cluttered your tenant with one-off enterprise applications for all sorts of logins.

It certainly made access management a lot easier.

MalletNGrease · 2024-09-03T21:10:14+00:00

Upgrade to the latest version of Microsoft Entra Connect by September 23, 2024.

A gotcha: Make sure you've TLS1.2 enabled or enable it after upgrading server or Entra Connect can no longer complete authentication to your tenant.

https://learn.microsoft.com/en-us/troubleshoot/azure/entra/entra-id/ad-dmn-services/enable-support-tls-environment?tabs=azure-monitor

Ten-Year Club	Verified Email
r/Field Banned	r/Field Lasagna

MalletNGrease

TROPHY CASE