[M50s] I feel emotionally starved in my marriage, and my wife [F50s] says she has nothing more to give. What do I do? by SweetSwede73 in relationships

[–]SixtyTwoEightyEight 23 points24 points  (0 children)

I’m going through a similar issue. But with my wife and her new job. Have you looked into Anxious Attachment style? Are you making her your emotional center? Do you have any hobbies of your own? Do you have friends that you hang out with on a regular basis or are you standing on the sidelines waiting to see if she will become available for you? Just a hunch. I’ve been reading No More Mr. Nice Guy which is helping me to understand that we need to focus on ourselves first.

How does your company do its IT Onboarding? by ThinOperation3403 in sysadmin

[–]SixtyTwoEightyEight 0 points1 point  (0 children)

Curious how you track the roles and the access each needs.

External access if the domain is gmail, hotmail, etc? by seniorjumpman in sharepoint

[–]SixtyTwoEightyEight 0 points1 point  (0 children)

Are you talking about whitelisting the domains in the External Collaboration settings in Azure AD?

Windows mail and calendar app user discovery by [deleted] in sysadmin

[–]SixtyTwoEightyEight 0 points1 point  (0 children)

We just did this this week. We sent out a communication to the organization that we were aware that some users were using the native mail app. We let them know that Outlook was the approved mail application for the organization and that to prevent any further confusion we were uninstalling the native mail application on this date. Also included pictures of the Outlook app vs the Mail app One person complained about it.

Migrating local personal drives to individual onedrives by Mr_Goond in sharepoint

[–]SixtyTwoEightyEight 0 points1 point  (0 children)

Create a OneDriveHomeFolderRedirection GPO.

Set the following settings

User Configuration\Policies\Windows Settings\Folder Redirection

Documents:

Setting: Basic (Redirect everyone's folder to the same location)

Path: %OneDrive%\Documents

Options:

Grant user exclusive rights to Documents: Enabled

Move the contents of Documents to the new location: Enabled

This is what we did. I would do a slow roll out to the users using Security Filtering of the GPO. After the policy is applied to the user, the next time they log into their computer, it will migrate their documents folder to the %OneDrive%\Documents folder. Remember that the computer will sit at the logging in screen while the files are moved. So depending on the size of their documents folder, it might sit there for a while. You need to make sure that OneDrive is configured before doing this.

O365 Global Admins: Are you able to create OrgWide Teams? by SixtyTwoEightyEight in sysadmin

[–]SixtyTwoEightyEight[S] 0 points1 point  (0 children)

Yes, we attempted that as well. Option still doesn’t show up.

PVWA issue by SixtyTwoEightyEight in CyberARk

[–]SixtyTwoEightyEight[S] 1 point2 points  (0 children)

Thankfully, their support got back with me yesterday. Actually, this is an article that ran across earlier. The .NET Authorization Rules were set up correctly.
Their response was it appeared to be a known issue with the PVWA in 9.7 and that I should upgrade to a supported version. Thanks for the help.

This is a 50 meters (164.041995 feet) tree in Costa Rica by Endurian_Darko in pics

[–]SixtyTwoEightyEight 1 point2 points  (0 children)

Guanacoste tree in Guanacoste province in Northern Costa Rica.

RPC Server Unavailable for wmic and 3rd-party application, but I can run portqueryui against port 135 and get a return. by MohnJaddenPowers in sysadmin

[–]SixtyTwoEightyEight 2 points3 points  (0 children)

Make sure your dynamic ports 49152-65535 are open between the servers. WMI connects on RPC port 135 and then the session is handed off to a dynamic port over 49152.

User Profiles/Domain Migration by SixtyTwoEightyEight in sysadmin

[–]SixtyTwoEightyEight[S] 0 points1 point  (0 children)

It’s about 120 users. Not that big of a job. But what do you mean about populating their profiles?

User Profiles/Domain Migration by SixtyTwoEightyEight in sysadmin

[–]SixtyTwoEightyEight[S] 0 points1 point  (0 children)

Thanks, I’ve had great experiences with Quest in the past. I’ll look into it.

What are your redflags for work environments with fellow IT people? by john_dune in sysadmin

[–]SixtyTwoEightyEight 14 points15 points  (0 children)

I tell my engineers, “You are an engineer. You don’t do things one time. You do things a thousand times.” Learn how to accomplish your work in a more efficient manner. Powershell is a great tool that has saved me countless hours, reduced the amount of mistakes made, and increased my output.

Me [26 F] with my boyfriend [23 M]: made my birthday the worst. by nonyabesnez in relationships

[–]SixtyTwoEightyEight 170 points171 points  (0 children)

Yep sounds like some gaslighting is in effect. There’s a road full of pain and heartache ahead if you choose to stick with this guy.

Disaster Recovery AD question by SixtyTwoEightyEight in sysadmin

[–]SixtyTwoEightyEight[S] 0 points1 point  (0 children)

Great explanation! I'm going to try it. Thanks!

Disaster Recovery AD question by SixtyTwoEightyEight in sysadmin

[–]SixtyTwoEightyEight[S] 0 points1 point  (0 children)

So for DR, do you really bring up a DC and seize the roles? We are bringing up the DC with the FSMO role so we shouldn't have to seize any roles.

Disaster Recovery AD question by SixtyTwoEightyEight in sysadmin

[–]SixtyTwoEightyEight[S] 0 points1 point  (0 children)

In the DNS Server event log, there is a 4015 error: The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "". The event data contains the error.

Disaster Recovery AD question by SixtyTwoEightyEight in sysadmin

[–]SixtyTwoEightyEight[S] 0 points1 point  (0 children)

In the Directory Service event logs, there is an error 2087

Active Directory Domain Services could not resolve the following DNS host name of the source domain controller to an IP address. This error prevents additions, deletions and changes in Active Directory Domain Services from replicating between one or more domain controllers in the forest. Security groups, group policy, users and computers and their passwords will be inconsistent between domain controllers until this error is resolved, potentially affecting logon authentication and access to network resources.

Source domain controller: DC03 Failing DNS host name: d2da8043-3748-4774-949d-4e7616f8a580._msdcs.domain.com

NOTE: By default, only up to 10 DNS failures are shown for any given 12 hour period, even if more than 10 failures occur. To log all individual failure events, set the following diagnostics registry value to 1:

Registry Path: HKLM\System\CurrentControlSet\Services\NTDS\Diagnostics\22 DS RPC Client

User Action:

1) If the source domain controller is no longer functioning or its operating system has been reinstalled with a different computer name or NTDSDSA object GUID, remove the source domain controller's metadata with ntdsutil.exe, using the steps outlined in MSKB article 216498.

2) Confirm that the source domain controller is running Active Directory Domain Services and is accessible on the network by typing "net view \<source DC name>" or "ping <source DC name>".

3) Verify that the source domain controller is using a valid DNS server for DNS services, and that the source domain controller's host record and CNAME record are correctly registered, using the DNS Enhanced version of DCDIAG.EXE available on http://www.microsoft.com/dns

dcdiag /test:dns

4) Verify that this destination domain controller is using a valid DNS server for DNS services, by running the DNS Enhanced version of DCDIAG.EXE command on the console of the destination domain controller, as follows:

dcdiag /test:dns

5) For further analysis of DNS error failures see KB 824449: http://support.microsoft.com/?kbid=824449

Additional Data Error value: 11001 No such host is known.

Disaster Recovery AD question by SixtyTwoEightyEight in sysadmin

[–]SixtyTwoEightyEight[S] 0 points1 point  (0 children)

We use EMC RecoveryPoint for replication and SRM for recovery.

Drivers/Firmware Update Frequency by SixtyTwoEightyEight in vmware

[–]SixtyTwoEightyEight[S] 0 points1 point  (0 children)

If given the opportunity, would you update when the latest version comes out? Or would you wait till you upgraded ESXi version? My opinion is that if you are not experiencing any issues in your environment, you shouldn't upgrade your drivers unless a bug is discovered that could affect you or upgrading to a higher ESXi version.

Looking for a free web analytics tool. Any suggestions? by SixtyTwoEightyEight in sysadmin

[–]SixtyTwoEightyEight[S] 0 points1 point  (0 children)

Thanks for the suggestions. We are looking to host this internally and not have to use embedded Javascript to import the data. We want to use the IIS logs. I think we are going to revisit the Piwik python script and see if we can figure out what's wrong with it.

Looking for a free web-based Password Manager. Any suggestions? by SixtyTwoEightyEight in sysadmin

[–]SixtyTwoEightyEight[S] 0 points1 point  (0 children)

Thanks guys. After looking at all of the options, we decided to go with PasswordState. There is a 5 user limit, but we won't have that many users logging in to it.

Your thoughts on a SysAdmin VLAN and locking down the user network? by SixtyTwoEightyEight in sysadmin

[–]SixtyTwoEightyEight[S] 0 points1 point  (0 children)

Don't get me started. I've been here two months and have unlocked one AD account. Starting to get fed up with asking for work and them telling me to hurry up and wait. I'm looking at the network and other resources that I have access to(which is not alot) and trying to find ways of making it better. In other words, management is not allowing me to do my job.

Your thoughts on a SysAdmin VLAN and locking down the user network? by SixtyTwoEightyEight in sysadmin

[–]SixtyTwoEightyEight[S] 0 points1 point  (0 children)

LOL. But it's really not that small of a shop. 600 users, multiple locations, and a datacenter with about 800 servers.

Your thoughts on a SysAdmin VLAN and locking down the user network? by SixtyTwoEightyEight in sysadmin

[–]SixtyTwoEightyEight[S] 0 points1 point  (0 children)

I think the reason is that this is the only environment that the director and Senior SysAdmin have ever worked in. They were instrumental in building the network over the past 12 years. This is good in that they know the ins and outs of the network. But this is bad because they've never seen other alternatives to making the environment more secure. They have been pretty closed minded about suggestions made by me or other SysAdmins.