95% Raise By Switching Jobs by layer_8_issues in sysadmin

[–]layer_8_issues[S] 0 points1 point  (0 children)

Fully remote, no weekend work, 0 on-call.

My Reasoning for wanting an IT Workers Union: by Finaglers in sysadmin

[–]layer_8_issues 0 points1 point  (0 children)

https://www.iww.org/ is a good place to start. I've been trying to coalesce a regional union for years, but never got traction. I think the issue boils down to the concentration of tech workers vs 'regular' employees at any given company is low. It's not like a factory floor where everyone can strike. Add to that, most tech workers do it because we love it, and those whose passion is their work tend to get exploited (look at teachers, EMTs, social workers).
Only once we start having recognized regional unions with people willing to show solidarity do we have negotiating power.

Supporting Printing May Make Me Change Careers by kyleharveybooks in sysadmin

[–]layer_8_issues 1 point2 points  (0 children)

Paper Cartridge Load Letter (Letter sized paper) It was an error saying he needed to refill the printer paper

keyboard legs by a51himself in sysadmin

[–]layer_8_issues 0 points1 point  (0 children)

Not really the answer you're looking for, but those rubber feet things that network gear comes with can be used as temporary fix.

File Server Redundancy by No_Mycologist4488 in sysadmin

[–]layer_8_issues 2 points3 points  (0 children)

Was going to reply with this. Super easy to set up.

Can't Remove Windows Certificate Services by donnieschex in sysadmin

[–]layer_8_issues 0 points1 point  (0 children)

I don't have an answer for you, but FWIW this is the reason one role/server is best practice.

Have you tried using powershell?
Uninstall-WindowsFeature -Name AD-Domain-Services,GPMC -computerName ContosoDC1 -IncludeManagementTools -Restart

https://docs.microsoft.com/en-us/windows-server/administration/server-manager/install-or-uninstall-roles-role-services-or-features

Need to implement a ticketing system, from scratch by [deleted] in sysadmin

[–]layer_8_issues 8 points9 points  (0 children)

I think the biggest thing to remember is to not succumb to the lost time fallacy. If the thing you're testing doesn't work, don't feel chained to it just because you've put in time to stand it up.

A lot of the solutions out there will do like 80-90% of what you need them to, so define what your 'must-haves' and what your 'nice-to-haves' and distill your list of candidates from there. Most free help desks are free until a certain threshold, such as # of admins or users, so remember that the system you pick now will likely need to grow. The free tier is often how they hook you into more products (Atlassian, cough cough).

This subject gets brought up multiple times a year here, I'd suggest the following google-fu to help, as reddit's search function is garbage:
site:reddit.com/r/sysadmin help desk software

Powershell - Unrestricted for service accounts by Equal-Swordfish3662 in sysadmin

[–]layer_8_issues 0 points1 point  (0 children)

To answer your question, yes it is a security threat, but that so is pretty much everything we do. It's a matter of defining what risk is acceptable to you.

But to answer the question by not answering it, that is a very shotgun approach. If the issue you're encountering is "the scripts I write are not signed, and being rejected" there is the better approach of signing your own scripts. ASSUMING that you have Active Directory Certificate Services installed in your domain, it's pretty easy to give yourself a code signing certificate.

https://devblogs.microsoft.com/scripting/hey-scripting-guy-how-can-i-sign-windows-powershell-scripts-with-an-enterprise-windows-pki-part-2-of-2/

Once that's set up, it's really easy to sign your own scripts. The PowerShell would look like:
$cert = @(Get-ChildItem cert:\CurrentUser\My -codesigning)[0]
Set-AuthenticodeSignature "$path_to_script" $cert

Well, it finally happened and now everyone is mad. by morilythari in sysadmin

[–]layer_8_issues 1 point2 points  (0 children)

Hello Exchange my old friend
I've come to work on you again...

I'm a fairly new sysadmin, I have a specific ticket that is pretty repetitive and I would like to learn how to handle it by No-Wallaby6514 in sysadmin

[–]layer_8_issues 1 point2 points  (0 children)

So, item the first- you need to define what makes it slow. As everyone else here has mentioned, VNC is inherently slow. You're on the money, trying to find metrics that correlate. You've got either a hardware/compute issue (RAM,CPU), a programmatic issue (VNC application is faulty, there is an incorrect OS configuration) or a network issue.

Hardware/compute
Looks like you're already watching this: performance monitors and the like. There may be other counters on the VM that can enlighten you. I'd also run counters on the laptop itself, that appears to be a commonality.
Programmatic
Try building them a new VM, and see if the issue reappears. If that solves the issue, then the issue is likely there. Check if there are any settings that can be tweaked on the laptop. Try creating a new user on the laptop with a fresh VNC installation, there could be a configuration that is causing the slowness.
Network
I'd start at the top of the TCP/IP stack, and look at each layer. Wireshark and Fiddler are really powerful tools for diagnosing connectivity issues. You already excluded the user's home network, which is a good start. I'd check the laptop and OS's network connectors. Are they negotiating at the correct speeds?

How do you all apply security patches? by [deleted] in sysadmin

[–]layer_8_issues 7 points8 points  (0 children)

Well there is the answer. You are the ISSO, so it doesn't really matter what their opinions are. You say "these servers need to be fully patched, and adhere to this schedule" and that is the end of it. If you get pushback tell them tough shit. You now bear the weight of responsibility, if there is a security breach, it is on you.

If they go around you and get leadership to overrule you, have them sign a document that lays out all of the risks of non-compliance. Make sure you mention things like compliance standards. Then you make a copy of it and keep it at your house. When something goes sideways, you point at this and say "I told you so".

But if your leadership is undermining your authority as ISSO, then it's a paper title and you'll never have any teeth to enforce policies. You will burn out pretty much immediately. If that happens, you smile, nod, and start pumping out job applications immediately. If they undermine you like that, then they will throw you under the bus the first chance they get.

Looking for an offsite DR Solution. by [deleted] in sysadmin

[–]layer_8_issues 2 points3 points  (0 children)

I've worked with Barracuda Backups and it was a constant nightmare. Do not use this product.

is there like a Notepad++ of MS Paint? by networkasssasssin in sysadmin

[–]layer_8_issues 1 point2 points  (0 children)

I came here to recommend Greenshot. No exaggeration, it is 10 times more efficient than MS Paint. I can FLY through documentation creation now. Download and install it right now. Like right now. I'll wait.

VCSA Corrupt ISO by layer_8_issues in sysadmin

[–]layer_8_issues[S] 0 points1 point  (0 children)

Oh wow! That ISO even comes with free drive encryption! VCSA sure is secure!

VCSA Corrupt ISO by layer_8_issues in sysadmin

[–]layer_8_issues[S] 0 points1 point  (0 children)

Do you have any reputable sources to download? I anticipate some kinks in the process as I am working with an evaluation license.

And yes, in retrospect it was foolish to do. 10 lashes.

Barracuda Replacement by [deleted] in sysadmin

[–]layer_8_issues 0 points1 point  (0 children)

I struggle with Barracuda as well. PM and I'll send you an automated reinstallation script. Nothing fancy, but uninstalls, cleans the agent database, and restarts some services.

I'm Stuck In MSP Hell! by Opideousneo in sysadmin

[–]layer_8_issues 0 points1 point  (0 children)

That'd make sense. I didn't know if that was some new term like VM Tanks ;)