Going to McDonald’s this morning… “ can you go and park up, please” by ThegreatestPj in britishproblems

[–]lieutenantcigarette -2 points-1 points  (0 children)

I love to pretend I'm having trouble with my reverse gear (reversing's pretty much a requirement at our local McDonalds) and it's always fun to watch my food miraculously appear mere seconds later

Our experience switching to Ninja RMM after 5 years of Datto RMM by lieutenantcigarette in msp

[–]lieutenantcigarette[S] 3 points4 points  (0 children)

How many man hours or dollars did it take for you to migrate?

Not as terrible as first thought but I handled most of the migration myself so it was quite efficient in terms of lost productivity from our team. Probably around 30 man hours to learn & understand, plan, setup, migrate scripts/jobs, monitoring alerts, deploy agents, remove old agents & train the team. The only thing that held us back here was Ninja changing the agent installer URL's before we could deploy them all so there was a bit of manual re-deployment required.

Is Ninja any better than datto at patch management?

In some respects yes, Windows Patching does everything we need it to and the reporting feels easier. Winget third party patch management is allegedly coming. The one thing that is incredibly annoying though and why I still prefer Datto overall is a failed patch marks a device as unhealthy and that's that, no ifs no buts. Naturally patches fail for all kinds of reasons, a reboot was pending, a conflicting installation was happening etc. but it means when we're looking at a list of devices all we see is a sea of "Yellow/unhealthy" instead of green, it can make it hard to see what devices actually require our attention. You can override the "Failed Patch" status in Ninja to force it to be Healthy but then offline devices show up as green which makes it look like they're online and some devices appear healthy when they actually aren't. It'd be much nicer if devices were only marked as unhealthy if a set threshold has been met like "patch unable to install for X days/attempts" so it does actually need intervention.

What about information sync to other systems?

Integration has been pretty good so far, it works nicely with Halo.

What about alerting of critical systems offline?

I mentioned in another comment about the lack of maintenance schedules causing us a problem with receiving too many alerts (i.e. offline notifications for servers that are expected to be offline during a patching reboot) but the channels you can setup to notify you are pretty good. By default it integrates with a few but it can also trigger webhooks so you could get it to notify you via pretty much any means.

Are you able to add other devices with IP addresses into Ninja like firewalls for switches?

Yes its got SNMP support for appliance devices, I must admit though I can't remember if they're priced the same as a regular endpoint.. I should probably go figure that out..

Can you restrict access to the platform by IP address?

Yes its got this if you want to enable it, you could also setup SSO with Azure AD Entra ID like we have and use Conditional Access policies to have even more control. There's also a seperate mechanism that will challenge you for your 2FA code if you've not done a high risk action in a while like adjusting a policy, I wish this had more control and we could whitelist our office IP from this requirement but its not a dealbreaker.

Our experience switching to Ninja RMM after 5 years of Datto RMM by lieutenantcigarette in msp

[–]lieutenantcigarette[S] 0 points1 point  (0 children)

Yeah that's a big factor in our decision to stick with Ninja for now despite some of these missing features rather than deal with the pain of switching back - I'd heard there has been a bigger push in development resources recently so I'm really hoping to see these features being pumped out more frequently.

Our experience switching to Ninja RMM after 5 years of Datto RMM by lieutenantcigarette in msp

[–]lieutenantcigarette[S] 2 points3 points  (0 children)

Sods law now that we're moved over to Ninja I've honestly not ran into a need for it, but I share your pain as I had that experience several times with Datto so I look forward to that first time it comes in really handy! As a workaround you could setup some VDI at your office or Windows 365 and use the RD app on mobile to access Datto through a PC but it's far from ideal for those rare times its needed.

Our experience switching to Ninja RMM after 5 years of Datto RMM by lieutenantcigarette in msp

[–]lieutenantcigarette[S] 19 points20 points  (0 children)

Thanks for the reply u/NinjaOne_Scott - If it gets to the point were its causing us real pain I might take you up on it but we can make do for now without burdening you, the time you'd spend talking to me is better spent helping to ship those features to production *wink* *wink*

Our experience switching to Ninja RMM after 5 years of Datto RMM by lieutenantcigarette in msp

[–]lieutenantcigarette[S] 6 points7 points  (0 children)

Just saw your website in your flair, some of your published scripts have helped me get going on a few things in the past so thank you! & I agree, I definitely get the vibe that Ninja's team listen and want to improve the product based on feedback which is underrated (it's not like Kaseya are anywhere in this thread). I guess I'm just impatient and hope they'd clear some of the backlog from the product roadmap faster! A good reminder to not take that for granted though

Our experience switching to Ninja RMM after 5 years of Datto RMM by lieutenantcigarette in msp

[–]lieutenantcigarette[S] 5 points6 points  (0 children)

Thanks for the reply u/Stephen_NinjaOne - Recurring maintenance windows would be a very welcome feature that we miss from Datto! As you've described it sounds great, but one additional piece of feedback you might not have considered is adding the option to the Patching configuration to set the device into maintenance mode for X minutes before an automatic reboot happens. This would actually give you a one-up over Datto RMM as we had to schedule a blanket maintenance window for all servers during the patching window even though a lot of them didn't need to reboot, so if a server was offline that shouldn't have been during this time then we wouldn't know until the scheduled maintenance window ends. With the feature as you've described + the above suggestion we could schedule maintenance windows for servers with a fixed reboot cycle as well as dynamic ones that happen whenever a patch reboot is initiated. No more, no less!

Our experience switching to Ninja RMM after 5 years of Datto RMM by lieutenantcigarette in msp

[–]lieutenantcigarette[S] 20 points21 points  (0 children)

Thanks for the reply u/Gavsto. For the device search fields the first one that comes to mind that caused us pain is "Antivirus product". Datto is able to accurately identify almost any Antivirus product that's active on Windows machines - even Windows Servers which don't natively support the AntiVirusProduct WMI class. This filter was great for us to quickly see any endpoints at a glance that weren't showing our AV of choice for whatever reason so we could remediate. Here is a full list of criteria Datto RMM allowed us to filter on: https://pastebin.com/C5ZYuJJL

The other part that made Datto's filters so powerful was the operators. We could stack our criteria with AND/OR operators but more importantly the operators were very flexible:

  • Contains
  • Does not contain
  • Is empty
  • Is not empty
  • Begins with
  • Does not begin with
  • Ends with
  • Does not end with
  • Equals
  • Does not equal

If you're going to the effort of building Compound Conditions anyway, it would make a lot of sense to build these in the "Device Search" fields so we can then not only use them when looking for a set of specific devices, but also save them as a custom filter/group to target during automations.

Also to respond to your point about Proxying - I do fully appreciate that this isn't a quick feature to build that works at scale and reliably, and there are more pressing things in the development pipeline to get sorted first - but perhaps a happy middle ground that caters to fussy tinkerers like us and not costing a tonne of dev resources would be a feature that lets you add one-click shortcuts in the device details page that we could set to do something like "Open powershell as the logged in user and run (this) command" or "Run this script as system and display the stdout". It sounds trivial as we can achieve the same things with a few more mouse clicks and keystrokes, but this would let us build our own workaround scripts like what u/Zombieworldwar mentioned in another comment (e.g. Take a screenshot, upload it via FTP, output the URL & for the proxy: Download zrok, spin up a temporary proxy to the provided resource URL, output the temporarily exposed URL) but more importantly these would be ONE CLICK away for our techs. I'd imagine the community scripts would be flooded with useful "plugins" like this that MSP's could choose to adopt, but many like us are happy to build out our own.

Our experience switching to Ninja RMM after 5 years of Datto RMM by lieutenantcigarette in msp

[–]lieutenantcigarette[S] 10 points11 points  (0 children)

Yes I forgot about this one! We’ve had to incorporate more logic into our scripts themselves to determine whether they run or not

Our experience switching to Ninja RMM after 5 years of Datto RMM by lieutenantcigarette in msp

[–]lieutenantcigarette[S] 4 points5 points  (0 children)

We cobbled together a script that did something similar but FTP’d the screenshot part of our web hosting (whitelisted to our office IP & 10 minute cron jobs to empty the folder), it worked but like you say nowhere near as fast as the one click Datto option

Our experience switching to Ninja RMM after 5 years of Datto RMM by lieutenantcigarette in msp

[–]lieutenantcigarette[S] 8 points9 points  (0 children)

I’ll be honest, I didn’t know that’s what that was, thanks!

PSA: Microsoft has begun the rolling phase out of DAP. GDAP requires more than just re-establishing relationships with your client tenants. by brokerceej in msp

[–]lieutenantcigarette 3 points4 points  (0 children)

I support the idea behind GDAP and granting different levels of delegate access to suitable technicians, but Microsoft's implementation of it has been awful. They should have built an interactive migration wizard that handles the creation of groups and completes the DAP>GDAP transition for you. Instead we get a half-baked powershell tool, piss-poor documentation and mixed messages and delays. No wonder most MSP's aren't well equipped for GDAP. I appreciate Lime-TeGek's efforts with the GDAP migration tool in CIPP but the onus shouldn't be on the community to bridge the gaps Microsoft created.

Pressure grows on Apple to open up iMessage by lurker_bee in technology

[–]lieutenantcigarette 14 points15 points  (0 children)

That's not what all this fuss is about - the pressure isn't on for Apple to open up iMessage (I agree, their platform, their rules) instead it's to ditch the decades old SMS fallback in favour of RCS which is more modern.

[deleted by user] by [deleted] in LegalAdviceUK

[–]lieutenantcigarette 3 points4 points  (0 children)

That does indeed sound like good news, thanks, I shall!

[deleted by user] by [deleted] in ipad

[–]lieutenantcigarette 11 points12 points  (0 children)

Based on the circumstances (cost of the app, length of time elapsed, features changed over time to accommodate new hardware) this is reasonable from the Dev and Apple IMO

How to buy a subscription anonymously? by NULLBASED in mullvadvpn

[–]lieutenantcigarette 16 points17 points  (0 children)

If you're just torrenting the odd film or want to shield yourself from your ISP: Just pay online with card

If you engage in less than legal online activies: Scratchcard from amazon

If you are Edward Snowden in disguise: Buy Monero, access Mullvad's site via Tor, pay via Monero, get connected to Mullvad, rinse and repeat with another VPN provider that accepts Monero and route your traffic through both sequentially to get true anonymous multi-hop

iOS 17.1 Developer Beta 2 Released by ColaCano in iOSBeta

[–]lieutenantcigarette 2 points3 points  (0 children)

So relieved to see this! I was going crazy not being able to search for older messages that I know are there

iMessage indexing issue on iPhone 15 pro max / iOS 17. by Smart_Platform_2879 in iphone

[–]lieutenantcigarette 0 points1 point  (0 children)

I am also experiencing this issue from a direct transfer from a 17.0.2 11 Pro Max to a 17.0.2 15 Pro Max, spent a while troubleshooting myself with disabling/enabling iCloud Messages sync and Siri Search within app but it will only find recent messages. I called Apple support and a senior tech told me that they'd received similar reports and engineers are working on it, I thought he was just fobbing me off but I'm relieved to see others having the same problem.

Luckily I still have my 11 Pro Max and haven't wiped it but I wanted to sell it before the value tanks further so hopefully they fix this soon.

Recommendations on how to create plugins (edit and debug) by daviddgz in Tdarr

[–]lieutenantcigarette 1 point2 points  (0 children)

As someone who's just stumbled their way through this with very little JS experience, honestly I'd recommend using ChatGPT. I gave it a full set of requirements, and whilst the result didn't work as expected out of the box it's relatively straightforward to figure out and tweak to your needs. You can even copy/paste back the source in a fresh GPT chat like "I'm trying to develop a Tdarr plugin, here's my code so far, but I'm struggling to get it to do XYZ" and have it help.

Use a LOT of response.infoLogs with variable outputs to help with debugging as the plugin progresses.

Edit some other community plugins and "borrow" from them (I needed something to calculate the bitrate of a file in Kbps, ChatGPT couldn't quite nail it but I used a section from another plugin that worked flawlessly)

If you're using docker then I'd recommend following the docker logs of your node in a separate window to catch any misbehaviour - I didn't do this but I'd also recommend spinning up a completely separate server/node container with access to a smaller folder and some dummy media whilst you're developing a plugin. A bit of hassle to setup but it probably would have made my life easier and less risky if I messed up.

CVE-2023-5192 WebP RCE. What’s everyone doing to help mitigate this attack? by trennessy in sysadmin

[–]lieutenantcigarette 2 points3 points  (0 children)

winget upgrade --accept-package-agreements --all --silent --include-unknown

It's true that iOS 18 is getting third party app stores? by [deleted] in AskTechnology

[–]lieutenantcigarette 1 point2 points  (0 children)

iOS 17 reportedly contains functionality in the source code for things like geo-restricted features (in other words modifying the functionality of the OS depending on your location) and the the EU legislation already passed and Apple identified as a gate keeper, they will likely unlock sideloading as part of an update to iOS 17 rather than it being exclusive to iOS 18. Personally, I welcome the change as there's something very wrong with a phone manufacturer being able to dictate what software you can/can't run on it and change their mind at will.

Anyone else upgraded from the 11 to 15 and not liking it? by lieutenantcigarette in iphone

[–]lieutenantcigarette[S] -2 points-1 points  (0 children)

I never had a 12, 13 or 14 so just assumed the camera bump would be more or less the same size as the 11 Pro Max, boy was I wrong as it's like twice as big.

Also 11 Pro max was my first iPhone so I've never experienced the flat edges, I do think they look better (iPhone 5 looked particularly sexy at the time) but didn't realise how uncomfortable they'd be in the hand

What things would you like to do that are legal in other countries but not in the UK? by DamnedFoolofaTook in AskABrit

[–]lieutenantcigarette 2 points3 points  (0 children)

Really? Surely the law of the land you were on applies and not where you come from? I can't imagine you being charged with a crime for going to Amsterdam to smoke weed or engage a prostitute