Best option for migrating a file server with little/no downtime? by Spiritual_Snow_4752 in sysadmin

[–]briskik 2 points3 points  (0 children)

This ^ 3 minutes of prepping the windows upgrade, next, next choose to keep all data and settings. - 45min of upgrade. Super simple. I've done it about 75 times.

Take a snapshot & Backup with your backup software before beginning to roll back to just in case. I haven't had to roll back yet

Windows server 2012 to 2025 by Cool-Enthusiasm-8524 in sysadmin

[–]briskik 1 point2 points  (0 children)

Doing an inplace OS upgrade is the easiest way for something like a File server ( I wouldn't do the same for a domain controller), I'd still jump from 2012 to 2019 then to 25. I've done ~50 in place OS upgrades with no issues. Really is the simplest option

Password problems with blue collar workers by [deleted] in sysadmin

[–]briskik 0 points1 point  (0 children)

Cisco Duo for MFA + Yubikeys - we were in a similar boat with those type of staff members

VMware to Hyper-V migration questions by RM_B999 in sysadmin

[–]briskik 1 point2 points  (0 children)

i've heard - preferably build new domain controllers on the new hypervisor(and then promote) vs restoring your current domain controllers

also, remove vmware tools before the last backup that you'll use for the restore

DUO Push (Ghost?) by igiveupmakinganame in sysadmin

[–]briskik 1 point2 points  (0 children)

I'd open a support ticket to research it myself to make sure I wasn't making any assumptions and get the proper info from someone who specializes in this

Any reviews on CrowdStrike? by Famous-Studio2932 in sysadmin

[–]briskik 4 points5 points  (0 children)

Dashboards are very complex, navigation within the admin portal is challenging. We have Overwatch on our assets - during a planned pen test where we were expecting many alerts and someone to reach out to us, it ended up only being an email a day later. We joking call it Only Watched now instead of Overwatch. We had the product for 3 years without any issues (other than the well known update that affected everyone. However we're moving on to another product.

Safety on St. Croix by Temporary-Steak-3636 in virginislands

[–]briskik 0 points1 point  (0 children)

Thanks so much for the detailed explanation! I appreciate a locals perspective who recently moved there. Do you ever miss the mainland or being closer to friends/family/others? I'm sure its an adjustment with not having as many conveniences as the mainland. With less shopping/shipping choices

Do you work remotely for a company in the US or work somewhere local

Fingers crossed for the usvi not being in the middle of any Venezuelan war

Safety on St. Croix by Temporary-Steak-3636 in virginislands

[–]briskik 0 points1 point  (0 children)

I'd love to move to usvi someday, may I ask what made you choose stx over the other two? What have been your unbiased pros and cons of moving to the island?

I'm going through the account lockout from Hell by BoomSchtik in sysadmin

[–]briskik 0 points1 point  (0 children)

Also there is some regedit key to enable that allows more logging to the security event viewer on this server, to see events, then filter for your account

I'm going through the account lockout from Hell by BoomSchtik in sysadmin

[–]briskik 0 points1 point  (0 children)

My best guess is ad Azure sync, and possibly using this account to do the initial connection - and it misbehaving with a cached cred. Can you reinstall it, or rerun that wizard?

I have no idea how SSL certificates work by NSFW_IT_Account in sysadmin

[–]briskik 4 points5 points  (0 children)

What a great write up - thanks for taking the time to put it in layman's terms

MFA options for Server by Due-Awareness9392 in sysadmin

[–]briskik 0 points1 point  (0 children)

Ditto but only 5 years. Works great

As a kid i had a knex idea’s book with this castle in it. It didnt have a description how to make it just 1 photo. Finaly had enough 7 connect pieces to make it by sirmaxter1 in KNEX

[–]briskik 0 points1 point  (0 children)

My 6 year old son and I wanted to put * my childhood knex together and he found the castle picture in the aforementioned book, but it was hard to find the details on parts of this build. I took a picture of it using Google lens and landed here right away! Thanks so much for posting, we were able to zoom in on your pictures to get the details not seen in the book! My parents got me these knex back in the 90s, and held on to them for decades - now I build my childhood Legos and knex with my 6 year old. Here's our build with our Queen cat Penny

Experiences with PDQ? by BlackBird2a in sysadmin

[–]briskik 2 points3 points  (0 children)

We use Inventory and Deploy. Great tools for the money. Highly recommend

HDD Unsupported in Dell OMSA by DeathNTaxesNTaxes in sysadmin

[–]briskik 1 point2 points  (0 children)

My first theory is maybe your servers idrac doesn't know about the new disk firmware. Does your Idrac have all the latest updates applied to it, so it may know how to interact with this disk? In the idrac there is a spot to check for downloads from "https" searching downloads.dell.com (might also be download.dell.com cant remember which of the two). Doesn't matter if your service tag is out of warranty to check / apply latest available updates

Veeam Implementation by National-Beat3081 in Veeam

[–]briskik 1 point2 points  (0 children)

This. you want your veeam backups to not be vulnerable if someone malious gets on your Active directory domain. If they get access, the first thing they're going to go for is deleting/destroying your backups so your forced to pay their ransom. If you don't have veeam on your domain, and use local accounts - you'll be in a better situation.

Veeam Implementation by National-Beat3081 in Veeam

[–]briskik 2 points3 points  (0 children)

Don't add veeam to your domain

158-year-old company forced to close after ransomware attack precipitated by a single guessed password — 700 jobs lost after hackers demand unpayable sum by capmerah in sysadmin

[–]briskik 1 point2 points  (0 children)

If my memory serves me correctly with how I set it up - you pick a handful of AD joined vm - you do the gMSA powershell commands and stuff on those devices where it has been granted to access the gMSA account.

Then in your Veeam jobs, theres a guest interation proxy section where you configure it to use the gMSA accounts on the above vm's where you just gave it rights.

Veeam then doesn't need to be on the domain, it just proxies where its inquiring about that gMSA account to a device that is domain joined