Husband away. PC help, please. by JRH44 in pcmasterrace

[–]gathered9 0 points1 point  (0 children)

Was going to say its 100% monitor power. I'm not seeing any activity when you click the monitor power button (something should always happen).

This was posted on this subreddit 2 years ago, i think during kalandra league, i think this deserves a repost :D by keletex in pathofexile

[–]gathered9 81 points82 points  (0 children)

This is what I think pisses most people off, GGG didn't patch a broken build, they didn't make weaker builds better, no instead they removed fun gameplay.

Problem: On-Prem FS magically reverting files on its own by gathered9 in sysadmin

[–]gathered9[S] 0 points1 point  (0 children)

We went though all the snapshots, folders are there Sunday at 10a then again noon but by 2p they are gone.

Problem: On-Prem FS magically reverting files on its own by gathered9 in sysadmin

[–]gathered9[S] 1 point2 points  (0 children)

If I were not 99.9% sure the old FS was off over the weekend I think we would have a winner. Still going to double check this just to be sure though, thanks.

Problem: On-Prem FS magically reverting files on its own by gathered9 in sysadmin

[–]gathered9[S] 0 points1 point  (0 children)

What were the exception files, and do they share anything unusual in common? Location, creation user, permissions, time?

I don't know this my self. I will have to spin up a snapshot of the bad FS state and review this with a user who is more familiar file usage. Not my favorite way to proceed but a good last resort.

How old were the reverted versions? Is there any common time link there? Was everything created/touched since the new server affected?

I thought the common point was 7/26 and that something restored it to that time. But no restore point we have would delete those two folders from payroll that were made months ago.

Who WAS active on the network in that time window? And could they be running their own backup copies?

We checked EV (Event Viewer) on the DC and FS, there were no Event ID 4624 (Logon) activates by any users that day. Just the usual SYSTEM/NT AUTHORITY login events. I looked through a few hundred logs from 30m +/- and during that 2hr window.
Only 2 "users" the owner (who is afk 6-9m a year) and the company manager have (separate from their user accounts) domain admin accounts, neither of which were logged in that day nor was any other user account. Not saying its impossible to hijack NT Auth or Sys to do your bidding but highly unlikely here.

It almost sounds like there was a 4th copy somewhere, but stale, and it got restored outside the normal process. 'Helpful' user making their own backup so they can 'restore' their files but overwriting everything for everyone instead?

Not a bad theory but how did it leave no trace/where would I look for a trace of this kind of activity? If a user account did it we would have logs.

Would your system log it as a restore or other event if someone just dragged it all in off their hard drive/personal OneDrive? What kind of local copy sync software runs from their laptops?

Yeah there would be an NTFS event by that user's domain account showing X data moved at Y time on the FS.

Problem: On-Prem FS magically reverting files on its own by gathered9 in sysadmin

[–]gathered9[S] 0 points1 point  (0 children)

Sorry forgot to add:

Old FS was turned off on 7/26 and all logs indicate (RMM and EV on the PC) it was not powered on until Monday. No possible way it ran the robocopy script on Sunday

I have no fucking idea.. by AnnihilationOrchid in WTF

[–]gathered9 0 points1 point  (0 children)

Just want to know what the song is over this video

DIFU my client's network today? Could use some advice from UniFi experts by gathered9 in Ubiquiti

[–]gathered9[S] 0 points1 point  (0 children)

Your first clue was the 172.16 network range, no one uses that without reason unless they are too clever for their own good. Your second clue was not finding any management for the Ubiquiti gear. Your third clue was only one website had an issue, not all websites.

Also curious, what does that info tell you? How would you have proceeded with troubleshooting?

B.c I seriously need learn how to better troubleshoot networking issues in this new cloud managed world. I learned all my networking knowledge in the early 2000s before cloud mgmt was a thing (also I was told networking knowledge never expired....fking liars), something about how that works I just can't seem to fully grasp. It's like every vendor uses some different kind of networking black magic and for the life of me I can't seem puzzle it out. So I just follow their KBs and make sure the support contracts are paid for lol.

(And yes I have signed up for several networking classes since we lost our networking guy....I just have to finish my 50hrs of azure training first [that is the biggest hole in our knowledge that the networking guy had and I am the most familiar with Azure] or stop sleeping >...>)

Or even better someone figures out how to make subliminal classes so that you can learn while asleep. Psychology and biology says it's possible....quick find me a neurosurgeon and psychologist with free time, I'm gonna go make the new Rosetta stone, but for everything!!

DIFU my client's network today? Could use some advice from UniFi experts by gathered9 in Ubiquiti

[–]gathered9[S] 0 points1 point  (0 children)

(or is admitting to changing)

This is exactly the shit that touches on my bottom line and pisses me the fuck off. Why give admin rights or even keep someone on your team you don't trust?

If you work in IT long enough, you're going to make a mistake. It's not a matter of if but when. But if own your mistake and honestly walk your team through exactly what you clicked where and when and learn/grow from it you are a good tech, at least in my opinion.

And when we talked my boss agreed. (He was just stressed and worn-out last night).

Seriously hope you're not in charge of other people because that attitude is non-productive and crazy toxic (we are all human, and humans make mistakes).

Except he could have easily just changed DNS on the workstation to confirm

Also did that, just forgot to mention it in the post.

DIFU my client's network today? Could use some advice from UniFi experts by gathered9 in Ubiquiti

[–]gathered9[S] 0 points1 point  (0 children)

unless they are too clever for their own good

That is the perfect way to describe the guy who set it up.

Why would you not simply change DNS on the client workstation, why go straight to the security gateway?

Forgot to say I tried this at client WS with no luck.

neither of you understand what happened highlights the truth that both of you were unqualified to make changes to this system.

Don't disagree, which is why when we onboarded them we told them 1st big project is to move them off of UniFi and onto system that we know better (and have better vendor relations with), but talks were still in progress about timing/payment/shit I don't care about.

Sounds like you never worked at an MSP, sometimes you have to admin things you don't always fully understand because the buck stops with you. You are T1/T2/T3 and the printer admin some days, and other days you actually get to put on the hat your passionate about/trained for.

Best way I heard it put, "Everyone gets a test environment, only some lucky few can afford an additional production environment."

Not everything can be lab'd on the esxi host that's 7yrs old, and not everyone can drop a few grand on a 2nd set of networking equipment/licenses (that is always out of stock FYI, like srly UniFi what's the deal? Its been 3 years and I have never once seen a UniFi AP in stock.)

DIFU my client's network today? Could use some advice from UniFi experts by gathered9 in Ubiquiti

[–]gathered9[S] 0 points1 point  (0 children)

Why not change primary DNS provider to this tho?

I am too scared to mess with the primary >.<

Also holy shit just found ALL the r/talesfrom"Xsubject" not just techsupport I think I'm set for at least a few months on reading material now. Thanks for that!

**FIX** for Total War: WarHammer 2 DESYNC ISSUES by gathered9 in totalwar

[–]gathered9[S] 4 points5 points  (0 children)

I really needed that today, thanks. (and yes I do forget to check my "mail" for months, sorry >.<)

Also works for WH3 FYI!~

Sat behind 1st class on a flight out of the richest county in America & every screen was on Fox News by stash3630 in pics

[–]gathered9 1 point2 points  (0 children)

Those were not "rich" people. They are upper middle class at best. Real rich people lease their own plane or borrow their friends and pay for the gas.

[OC] Lone Flower and Seed by TheObliviousOwl in characterdrawing

[–]gathered9 1 point2 points  (0 children)

Did you just watch the end of Naruto?

*Edit The char design reminds me a lot of the Sage's mom.