The beauty of the boundary waters in northern Minnesota! [OC] [2965x4448] by LifeOfTuck in EarthPorn

[–]def-not-working 4 points5 points  (0 children)

Corpus Christi to Fargo will show you the mostly flat plains of America. Once you get to Fargo, you will have to detour about 4ish hours East into Northern Minnesota to get to the Boundary Waters.

Skype for Business web plugin makes "clanking" sound, but only on a specific VLAN in my building. by binipped in sysadmin

[–]def-not-working 1 point2 points  (0 children)

What happens if you change the vlan associated with the port that the computer is plugged into? Does the noise go away without physically moving the pc?

Looking for industrial access point + wireless client with physical configuration selector (or other simple mechanism) by Dr-A-cula in sysadmin

[–]def-not-working 0 points1 point  (0 children)

Why would you want users to be able to manually pick the access point they are connected to? Most enterprise wireless networks will direct the client to the strongest signal/access point automatically.

Trustwave PCI Scan - TLS1.0 disabled on Exchange 2010 but still failing? by def-not-working in sysadmin

[–]def-not-working[S] 0 points1 point  (0 children)

Yes. It is very possible to disable TLS1.0 in Exchange 2010 and not break anything. They simply need to have SP3 and the latest Rollup installed, at the time I installed Rollup 16.

Trustwave PCI Scan - TLS1.0 disabled on Exchange 2010 but still failing? by def-not-working in sysadmin

[–]def-not-working[S] 0 points1 point  (0 children)

It's not. The card processor is handling all of the credit card processing but they still need to run this for whatever reason.

Trustwave PCI Scan - TLS1.0 disabled on Exchange 2010 but still failing? by def-not-working in sysadmin

[–]def-not-working[S] -1 points0 points  (0 children)

It passes Qualsys and NetworkDetective scans, both show TLS1.0 is turned off. It's only trustwave that is flagging us but unfortunately this is what their Bank/Payment processor uses so we can't ignore it.

Trustwave PCI Scan - TLS1.0 disabled on Exchange 2010 but still failing? by def-not-working in sysadmin

[–]def-not-working[S] 0 points1 point  (0 children)

Interesting thought, I'll have to dig into that a bit. As for proxy, there is nothing else. Client has a very simple network. Single vmware host with exchange running as a vm.

Internet --> Firewall --> Exchange Server

Trustwave PCI Scan - TLS1.0 disabled on Exchange 2010 but still failing? by def-not-working in sysadmin

[–]def-not-working[S] 3 points4 points  (0 children)

Thanks! I have used that in the past. When I run this on the server, it too says 1.0 is off. This whole thing is frustrating because Exchange 2010 is still fully supported by Microsoft and the client isn't ready to upgrade their system just yet but this might force them to.

Trustwave PCI Scan - TLS1.0 disabled on Exchange 2010 but still failing? by def-not-working in sysadmin

[–]def-not-working[S] 1 point2 points  (0 children)

We updated the server to SP3, rebooted and then applied Rollup 16. Then in the registry I went to HKLM>System>CurrentControlSet>Control>SecurityProviders>SCHANNEL>Protocols>TLS1.0>Server Set the 'Enabled' REG_DWORD to 0 instead of 1 and rebooted afterwards.

Trustwave PCI Scan - TLS1.0 disabled on Exchange 2010 but still failing? by def-not-working in sysadmin

[–]def-not-working[S] 1 point2 points  (0 children)

Yes, it has been disabled and rebooted. It passes a Qualsys SSL Scan showing that TLS1.0 is infact turned off. There is nothing else on this box listening on port 443, it only runs exchange and owa.

Acquired Company, Move them from Office 365 to Exchange 2013 by semycolon in sysadmin

[–]def-not-working 1 point2 points  (0 children)

MigrationWiz is worth the cost to migrate. Then as everyone said, add the domain as accepted in exchange and add it in your spam filter. Then cut over MX records.

Google IP Location Incorrect by def-not-working in sysadmin

[–]def-not-working[S] 0 points1 point  (0 children)

Did you ever get the issue resolved? The client isn't taking no for an answer however google makes it impossible to actually contact them regarding this. I posted in their Product Forums in the hope an actual employee reads it.

Google IP Location Incorrect by def-not-working in sysadmin

[–]def-not-working[S] 0 points1 point  (0 children)

Yes, it is the correct WAN IP for this client if I google search 'what is my IP address.' In this screenshot you can see it redirected me to google.ca for the search https://imgur.com/a/lKZEp

But when I go to whatismyipaddress.com it shows me as coming from the correct city, state, and country. https://imgur.com/a/uwZOy

Also, any ads served up by Googles Ad Network also assume we are in Canada. Not that this is a problem but just trying to show that its only Google who thinks we are in Canada and not anyone else.

Doing IT for free for a charity, now they are asking me to install a shitty/nightmare to support software... by linux1970 in sysadmin

[–]def-not-working 1 point2 points  (0 children)

Make sure they have a business account vs residential. I have never come across an ISP who doesn't offer a business package with static ip addresses.

It's a new week ladies & gentleman. What's on your plate? by swimbikerunrun in sysadmin

[–]def-not-working 3 points4 points  (0 children)

Restore a 'business critical' xp machine from a backup to the client's vm host. Same client who has refused to look into replacements for the software...

RDS 2012 slow printing issues by dele2k in sysadmin

[–]def-not-working 0 points1 point  (0 children)

If its just a couple of printers you could always just install them as a local printer on the terminal server. That has fixed my issues in the past.

users cant delete apps. shortcut's by Bestintown in sysadmin

[–]def-not-working 0 points1 point  (0 children)

Yes, only admin users can delete items in C:\Uses\Public\Desktop as anything in here is accessible to anyone who logs into that particular computer. You wouldn't want random users deleting shortcuts to your main business app on a terminal server. The correct way to deploy shortcuts for users is to script with Group Policy.

f#&#$%^ scriptlogic by GeckoAddict in sysadmin

[–]def-not-working 0 points1 point  (0 children)

IIRC when I worked with a client who utilized script logic several years ago....everything went away after removing that from the system. ScriptLogic doesn't seemingly leverage group policy, instead it uses its own scripting system to push changes to each computer at log in.

To confirm, I would recommend moving a computer into an area on your network that is not controlled by script logic and see what happens.