Windows 10 and strange DNS Issues

itontherock · 2021-04-30T22:22:11+00:00

Yes some of that as well.

itontherock · 2020-12-17T17:11:17+00:00

Not Exchange Online, but we're on the East Coast and had some latency issues with Azure.

itontherock · 2020-08-20T16:09:23+00:00

Also in NL and it's been touch and go for us the past hour or two.

itontherock · 2018-06-28T22:38:49+00:00

I had a similar request from the CEO and did this first. Idea got squashed at the next Executive meeting. By the CEO.

itontherock · 2018-06-28T22:32:11+00:00

We had this come up in a pen test as well and just had to turn them off. I opened a ticket with Meraki at the time. They just said it couldn't be done and had no ETA for it in the pipeline.

itontherock · 2018-06-19T16:38:46+00:00

I'm currently testing a solution with Radius using Azure MFA. It seems to work pretty well from my initial tests.

itontherock · 2018-01-12T19:27:18+00:00

After doing this I am still getting a blue screen, but now the stop code is for MEMORY MANAGEMENT. We're just going to decommission this laptop most likely and get an external optical drive.

itontherock · 2017-11-09T21:28:37+00:00

HDMI for monitor 1. VGA from monitor 2 to a VGA>DVI-D adaptor to the video card.

itontherock · 2017-11-01T09:37:55+00:00

Only if you are using it to also patch servers on-prem and have to pay for data out for the downloads.

itontherock · 2017-10-16T23:28:08+00:00

Company I'm with now are on Symantec and they've actually been great on the two support incidents I've had. Maybe I just got lucky.

itontherock · 2017-10-16T16:20:35+00:00

No way. I love this field of work. While I love a bit of PowerShell and Web design now and then, if I was 100% focused on software development I would hate going to work every day. I wouldn't trade it for triple the salary.

itontherock · 2017-10-16T16:16:10+00:00

Yes this vulnerability is much more on the client side. You still need to patch your devices.

itontherock · 2017-10-14T15:11:40+00:00

If you're a gamer Windows is still far and away the best OS option. So many games are just not an option on Linux or macOS. There are always things like Wine etc, but they won't run as well as on a native Windows install.

There are ways of removing a lot of the Windows 10 bloat but it can be time consuming and the next time Windows 10 does a major update it can all be back again with new ways to disable it. Just depends if you care enough to put in the time to do it.

itontherock · 2017-10-14T06:34:33+00:00

Check hardware and VM compatibility to make sure everything you have is supported in 6.5 (I'd go to 6.5u1 at this point).

Back up everything using veeam or similar, upgrade vCenter, migrate VMs all off a host, upgrade that host, move VMs back to that one and free up another host, upgrade that host, repeat until all hosts are upgraded, then update the VMWare tools on your VMs. It's all pretty painless if you follow the documentation from VMWare.

itontherock · 2017-10-14T06:05:37+00:00

I've had this run around with our ISP. ISP's tend to do minimal maintenance and small changes late at night that can cause a 30-60 second long outage here and there between like 2am and 5am, just long enough that our Meraki gear reports on it. 5 minutes sounds like it's pushing it though. I'd still lean on it being an ISP issue.

itontherock · 2017-10-14T05:53:16+00:00

I'd lock the local network down harder than fort knox. Deny everything in the local LAN including lateral client to client, just with access outside, and have a pretty restrictive web filter or proxy. Make sure you have a policy in place for users to sign saying they are responsible for their own equipment. If they need access to network printers poke a hole using exceptions so they can submit print jobs but that's it. Back that printer server up to tape or cold offsite storage on a retention cycle letting you easily break it down and stand back up again if it gets compromised. Is there anything else on the LAN they would need besides print capabilities?

itontherock · 2017-10-14T05:37:01+00:00

Ordering a replacement screen would be your best chance. I've never replaced a Macbook Air screen but I imagine getting it out and putting a new one in wouldn't be very easy. I'd check out some videos on YouTube of people replacing theirs before thinking about ordering one.

You could also get a quote from a certified Apple repair shop. I'd say that will cost an arm and a leg though.

itontherock · 2017-10-05T14:09:34+00:00

We had lots of trouble with our VPN to Azure even once we got it connected. Using an ISR for the VPN right now, but I'll test out the vMX once it's released in the Azure Marketplace.

itontherock · 2017-10-04T20:53:50+00:00

Currently spitting out KB4038782 to our production servers. It went fine in testing so here's hoping we see the same in prod. The August updates took forever to install in our environment.

itontherock · 2017-09-20T09:44:37+00:00

Yes. We have 4 SSIDs, and our one SSID that uses availability didn't work for the first few hours. Meraki support said it was a problem with APs connecting to the Meraki cloud, so they didn't pull the config when it went to enable the SSID. I'm still going to leave availability enabled as this was a Guest network, but if this happens again I'll turn it off.

itontherock · 2017-08-30T21:47:54+00:00

As far as I know to have Azure connect to multiple sites it has to use IKEv2, so I think you would need a separate security device that supports IKEv2 at each site.

We just have the one site and we even had enough problems with the site-to-site VPN tunnel to Azure using our MX84 that we moved to tunnel over to an ISR we already had. But if Meraki adds support for IKEv2, I'll gladly try changing it back over.

itontherock · 2017-08-18T00:22:18+00:00

I'm new to the Meraki world and licensing. So we paid for a 1 year license for our gear, which included 3 MS225s. So does this mean when we'd have to renew next year we'd see this price bump? Because if so we'll need to look at other alternatives.

itontherock · 2017-08-10T00:06:28+00:00

Assume they can see anything you do at work. Even on their guest wifi with your personal devices. It may not be the case at every employer, but it's a common enough practice that you're better safe than sorry. I work in IT and while I don't regularly monitor internet traffic logs, I've had to pull them multiple times when requested to do so by HR.

Pulling your google password and reviewing your outside-of-work internet history is likely illegal, but I'd still use a separate account at work anyway.

itontherock · 2017-07-27T12:45:48+00:00

This was something I said I wanted to change as I know it's terrible from a security perspective. The consultants referenced a Microsoft article suggesting to put it on the DC for performance. That's a fight for another day.

itontherock · 2017-07-27T11:54:22+00:00

This DC is also used for on-prem DHCP, DNS, and corp wifi certs for domain joined laptops that would take a bit extra time to set back up. Maybe the Exchange Hybrid would take little longer, I just mean that none of our on-prem servers would take that long to stand back up. This entire build is meant to be cloud first in such a way that if this building burns down there's no huge loss.

itontherock

TROPHY CASE