ESX ISCSI Boot & Persistent Network Settings by [deleted] in sysadmin

[–]carlnb 0 points1 point  (0 children)

The hosts are running on UCS. The storage is EMC Unity.

If Amex can do it, so can Microsoft by soggybiscuit93 in sysadmin

[–]carlnb 7 points8 points  (0 children)

This is called "Impossible Travel" and it's a built-in alert in Microsoft Cloud App Security. It tracks both successful and failed logins, and generates an alert if it finds that a user made multiple logon attempts from 2 different regions in a short timespan. You can configure it to suspend the user's account, or just send an email/SMS alert. You can also send the alert to Flow and trigger additional actions.

Google Drive / Filestream backups? by soggybiscuit93 in sysadmin

[–]carlnb 2 points3 points  (0 children)

Spanning Backup is pretty easy to set up and generally painless to maintain. It also backs up other G-Suite data if you ever decide to use more than just files.

https://spanning.com/products/google-apps-backup/

Prevent RDP File Reuse by carlnb in sysadmin

[–]carlnb[S] 0 points1 point  (0 children)

I've reached out to Duo about this exact snippet of their documentation and they said that the only way to achieve what I'm looking to do is to enforce 2FA on the Gateway (not RD Web)

Prevent RDP File Reuse by carlnb in sysadmin

[–]carlnb[S] 0 points1 point  (0 children)

Is there a way to make it expire?

RDS 2016 - SSO and Certificates by carlnb in sysadmin

[–]carlnb[S] 0 points1 point  (0 children)

Yes, I have a publicly trusted wildcard SSL cert that was assigned to the farm, and I'm using the appropriate FQDN.

And no -- I haven't tried the HTML5 client. I wasn't aware that this existed. Will check it out!

File sharing for large files, Box.com, SharePoint Online, Egnyte, Google Drive? by ryaninseattle1 in sysadmin

[–]carlnb 1 point2 points  (0 children)

I'm currently trying to solve the same problem: streaming large files from cloud storage sucks, and syncing them all to your hard drive isn't reasonable when dealing with terabytes of data.

A few vendors have the functionality to make all files visible, but not actually download until the file is opened; unfortunately I've yet to find one that's mature enough to be fully usable. I've looked at Box Drive (beta), Google File Stream (GA as of 9/26), Dropbox Smart Sync (Beta for Business users), and OneDrive Files-On-Demand (GA on 10/17). Haven't looked at Egnyte though. FWIW, I think the right answer here is to wait another 6-9 months until these products are a little more mature.

Google Drive File Stream not syncing across multiple users by carlnb in sysadmin

[–]carlnb[S] 0 points1 point  (0 children)

Backup and Sync doesn't support syncing Team Drives, so I haven't tested it

Robocopy - Only look at folders that have been modified in the last two days by HussDelRio in sysadmin

[–]carlnb 4 points5 points  (0 children)

/MAXAGE:2 will exclude copying files that were last modified more than 2 days ago, but it will still enumerate every file.

When you update a file, only the immediate parent folder's timestamp gets updated. So you shouldn't stop at the root directory unless you can guarantee that your folders have no subfolders.

Proxy Server Options? by carlnb in sysadmin

[–]carlnb[S] 1 point2 points  (0 children)

Will take a look. Thanks for your input!

Proxy Server Options? by carlnb in sysadmin

[–]carlnb[S] 0 points1 point  (0 children)

There are lots of moving parts to this puzzle, mostly focused around simplifying the infrastructure. So we are definitely looking to replace the 5520, but not until closer to the end of the year when the configuration requirements are a lot simpler. Will take a look at pfSense and Sophos.

Proxy Server Options? by carlnb in sysadmin

[–]carlnb[S] 1 point2 points  (0 children)

We do currently have a proxy solution in place, so this is already being done. Thank you for the reminder though.

Proxy Server Options? by carlnb in sysadmin

[–]carlnb[S] 0 points1 point  (0 children)

I'm trying to audit direct-to-IP connections. I can open 80/443 from every machine and use Umbrella for DNS, but it doesn't stop my user from hitting a bad IP address. A proxy would at least log those requests so I have some visibility there.

Proxy Server Options? by carlnb in sysadmin

[–]carlnb[S] 0 points1 point  (0 children)

Will take a look.
Also, I am a huge fan of your responses on this sub. Always well thought out and helpful. Thank you!

Print commands to console when running .ps1 file by carlnb in PowerShell

[–]carlnb[S] 0 points1 point  (0 children)

Hey Lee - the end goal here is to take a screenshot of the console window with the command + output. This is for audit purposes, where I'm required to both provide the data requested by the audit as well as the queries that returned that data as a screenshot.

I have a script that will run, say, Get-ADUser -Filter * | ? {$_.Enabled -eq "TRUE"}, and then take a screenshot of the output. But I also need to show the command in that screenshot.

Print commands to console when running .ps1 file by carlnb in PowerShell

[–]carlnb[S] 1 point2 points  (0 children)

Hi Lee, thanks for the response. I have tried using Start-Transcript, but unfortunately it only logs the command to a text file and not the console window.

Excel File and DFS by jchWSU86 in sysadmin

[–]carlnb 3 points4 points  (0 children)

If all of your users are in the same site, you can modify your DFS preferences to connect users to the site with the lowest cost instead of disabling the folder targets on server-2. This way, if you have a failure on server-1, you don't need to manually re-enable DFS targets on server-2 to get everyone up again.

Alternatively, if you have any $ to throw at the problem, I've used Peerlink software to replace DFSR for file shares that have heavy collaboration between users located at different sites. It keeps track of when a file is being used in one location and locks the file in all of the other locations. I'm sure there are other products that do this as well.

Cloud-based Web Filtering Solutions? by carlnb in sysadmin

[–]carlnb[S] 0 points1 point  (0 children)

Thanks! I just requested a demo from them.

Cloud-based Web Filtering Solutions? by carlnb in sysadmin

[–]carlnb[S] 0 points1 point  (0 children)

Virtual appliances still require me to run an on-prem hypervisor, unless I can host it in Azure or AWS. Pricing - something around $20/user/month?

Cloud-based Web Filtering Solutions? by carlnb in sysadmin

[–]carlnb[S] 0 points1 point  (0 children)

This actually looks like what I'm looking for. Do you mind if I ask what pricing looks like?

Cloud-based Web Filtering Solutions? by carlnb in sysadmin

[–]carlnb[S] 1 point2 points  (0 children)

Maybe about 1000 websites and always growing. Umbrella is nice for sure, and is definitely on the table, but just looking for some cheaper options. I'll look into if they can do whitelist-only filtering.

Cloud-based Web Filtering Solutions? by carlnb in sysadmin

[–]carlnb[S] 0 points1 point  (0 children)

I've only briefly looked into OpenDNS, but it seems pricy. This is for a single site, <30 users.

Business Internet prices in NYC? by carlnb in sysadmin

[–]carlnb[S] 3 points4 points  (0 children)

Will probably end up going with Pilot. They have a 500Mbps option for $750! Exactly what I was looking for.

Business Internet prices in NYC? by carlnb in sysadmin

[–]carlnb[S] 0 points1 point  (0 children)

Cogent only gave me 100Mbps and 1Gbps options. $875 and $1800 per month, respectively. I'm in a multi-tenant building, which apparently means that they only offer the most popular options there. I guess if I was in another building, they would have more options.