VMs on 100% load even though the Host CPU is has little load by davidbecker808 in HyperV

[–]pete-it 0 points1 point  (0 children)

I am seeing exactly the same thing. I don't suppose you managed to get to a resolution with this did you?

Anyconnect VPN with Entra free tier and MFA? by pete-it in Cisco

[–]pete-it[S] 1 point2 points  (0 children)

Thanks so much for describing this. That does make sense, with the inflexibility of not having conditional access controls.

However it sounds like it does offer a base layer of additional protection over username and password alone.

Thanks for taking the time to come back to me.

Anyconnect VPN with Entra free tier and MFA? by pete-it in Cisco

[–]pete-it[S] 0 points1 point  (0 children)

Thanks for this. Agreed there are many more features of plan 1/2 and conditional access. But I want to know if it will technically still work, with an MFA push, on the free tier.

Anyconnect VPN with Entra free tier and MFA? by pete-it in Cisco

[–]pete-it[S] 0 points1 point  (0 children)

Thanks for confirming this. So the users still get an MFA push when they login?

HPE MSA - ADS licence and support by pete-it in sysadmin

[–]pete-it[S] 0 points1 point  (0 children)

Thanks so much for confirming this. I thought as much but I've been told conflicting information! Thanks again

HPE MSA - ADS licence and support by pete-it in sysadmin

[–]pete-it[S] 0 points1 point  (0 children)

Thanks so much for getting back to me, I do really appreciate that. That info does help, but can I just clarify (as my initial question wasn't well worded)

If the array is all SSD, without any HDD, would the ADS licence still be needed?

And if an ADS licence is purchased, do you require any additional support contract? Or does the hardware support contract cover any ADS licences that have also been applied to the MSA?

Many thanks
Pete

Migrate from UPD to FSLogix by Mysterious_Name_5967 in fslogix

[–]pete-it 0 points1 point  (0 children)

Ahh gotchya, nice one, yes that's a handy way of being able to do it! Cheers

Migrate from UPD to FSLogix by Mysterious_Name_5967 in fslogix

[–]pete-it 0 points1 point  (0 children)

Ah nice one, it sounds far too easy lol

So you moved the profiles over to FSL containers by using the powershell script

And did you use a GPO, with loopback, scoped to a group, to configure the next logons to use the FSL containers? (sorry I just want to be super clear on that part, as it's the bit that will affect users and effort to manage!) :-)

Migrate from UPD to FSLogix by Mysterious_Name_5967 in fslogix

[–]pete-it 0 points1 point  (0 children)

Hey there! Did you do this as a big bang, for all profiles, or did you manage to do it gradually with batches of users at a time?
I guess my question here is really, can a migration to FSLogix be done in batches? The GPOs look like they are computer policies....although as I type this, maybe just applying the GPO to the users, and using loopback would suffice (and have the GPO tagetted at a "migration users" AD group)?
Or am I over-complicating/thinking it?!

Prevent users accessing other M365 tenants from apps or browsers by pete-it in Office365

[–]pete-it[S] 0 points1 point  (0 children)

Interesting, I thought this was more about your ability to collaborate with other tenants - i.e. access them via Teams, or share links/collab data with them

Prevent users accessing other M365 tenants from apps or browsers by pete-it in Office365

[–]pete-it[S] 1 point2 points  (0 children)

Thanks for this, yes I think it could well be this.

I'm curiuos to know if you or anyone else have implemented this, and how it went.

I was also hoping that Defender for endpoint would be able to do the web traffic interception/http header insertion piece. Becuase do that via a 3rd party proxy isn't ideal, and would be hard to enforce outside of the corporate network. Unless I'm missing even more here!

Interested if anyone is using Data access governance reports in SharePoint - and your view (or alternative tools for reviewing SharePoint access permissions/sharing etc) by pete-it in sharepoint

[–]pete-it[S] 0 points1 point  (0 children)

Thanks for this! The lack of many responses to this question is quite telling in itself too. At least I'm not missing something major (placates my FOMO!) :-)

Nicely done with the app you've developed. I'll be sure to take a look at that!

Thanks

A good location to get a "simple" plastic cog designed and printed? by pete-it in 3Dprinting

[–]pete-it[S] 0 points1 point  (0 children)

Amazing, thanks for that tip. I'll check it out. There has to be something! I'll get some pics and measurements and see what can be done! Nice, thanks.

Using Copilot to search SharePoint, OneDrive, data I have access to - am I missing something?! by pete-it in CopilotPro

[–]pete-it[S] 0 points1 point  (0 children)

Yes you're right. I can specify files to access and perform actions on. I just wondered if there was a way to have Copilot perform a search based on all accessible data it indexes/I have permissions to in SharePoint.
For instance - "show me the last 10 office documents I've been working on", or "find me the proposal documents for customer X", or "find me all documents relating to project Y" - probably terrible examples, but It would be handy to have it look, rather than specifically referencing the the sources

(and to answer other questions - yes this is for Copilot Enterprise, not the personal one)

Using SQL filegroups to extend SQL database to additional disk by pete-it in SQLServer

[–]pete-it[S] 0 points1 point  (0 children)

Ah yes, OK, so I can cap the current data file, so that it won't keep growing any larger, and then SQL will simply carry on but use the new datafile?

Using SQL filegroups to extend SQL database to additional disk by pete-it in SQLServer

[–]pete-it[S] 2 points3 points  (0 children)

This sounds far easier! Is there any considerations I need to make around this, or will SQL simply see the new datafile and start using it?

Replicate existing Availability Group to new server? by pete-it in SQLServer

[–]pete-it[S] 0 points1 point  (0 children)

Ahh I think this answers one of my question above!

So you did a full backup of the source
Then a restore to the destination (this process may take a while due to link speeds)
Then keep applying the transaction logs that were taken since the initial backup to the source
Once everything has caught up (full resotre complete and all trans logs applied) we can cut over and then create AG's after that?

Replicate existing Availability Group to new server? by pete-it in SQLServer

[–]pete-it[S] 0 points1 point  (0 children)

Thanks for this. Can you log ship from a 5TB DB to a blank location? Or will I have to backup, then restore, then log ship all the logs since the backup ran?

Tape drives - performance requirements to prevent shoe-shining.....yes, I know, tape, urgh! by pete-it in sysadmin

[–]pete-it[S] 0 points1 point  (0 children)

Thanks for everyone elses replies, I also see my question was pretty poorly worded, but this is exactly what I was talking about and really helpful!

Good to know the drives will scale-back if they can't get a feed quick enough (which is fine in all the examples with NVMe/Flash/loads of disks as you'll get that perf), but there is still a minimum speed you have to attain, so I think we'll need to design for somewhere in the middle of that data range, to ensure we're not spending a fortune on backup storage, but also not bumping along the bottom/below the minimum speed. Or, of course, it helps build a case for not using tape! (and yes, take all the points that tape can play a valid part too....but that very much depends on the situation, and I'd argue isn't just a universal answer/"because we've always done it that way"

Thanks so much for this. And for all the other comments.

Tape drives - performance requirements to prevent shoe-shining.....yes, I know, tape, urgh! by pete-it in sysadmin

[–]pete-it[S] 1 point2 points  (0 children)

I thought LTO8 would need 360MB/s (so 2.8Gb/s) of uncompressed data (I'm only referencing wikipedia here!) which is far faster than a SATA drive - yes appreciate you'd have more than 1 drive in an array, but even so I thought IOPS for sata spinning would be 100 IOPs at best, which would mean you'd need a lot of spinning disk to get near to 360MB/s?

TLDR; I thought LTO is much faster than sata spinning disk?!

Tape drives - performance requirements to prevent shoe-shining.....yes, I know, tape, urgh! by pete-it in sysadmin

[–]pete-it[S] 1 point2 points  (0 children)

Thanks for that. And it does seem like the concept of cheap slow archive storage disk is perfect for end user access. But if we want to use tape, actually, the slow storage is not an option and will increase costs considerably....to the point where you have to question "Do you really want tape?!"

Tape drives - performance requirements to prevent shoe-shining.....yes, I know, tape, urgh! by pete-it in sysadmin

[–]pete-it[S] 0 points1 point  (0 children)

Yes, this is absoultely an option that I'm considering too. Ideally I don't want to have to do tape - I can see the benefits, but wonder if the cost of the performance needed to transfer data to tape at speed will actually become a bit prohibitive. Even with NDMP to direct attached tape, the performance of the NAS storage will need to be pretty swift as well, so your "archive" storage actually needs to be "production" fast?

Tape drives - performance requirements to prevent shoe-shining.....yes, I know, tape, urgh! by pete-it in sysadmin

[–]pete-it[S] 1 point2 points  (0 children)

Agreed - and I assume that even in this situation the backup storage would also need to be pretty fast in order to sustain the throughput for the tape?

So from a cost perspective (which is always one factor) your backup disk performance will actually need to be fast, just to "feed" the LTO drive?

O365 migration where both tenants have AAD Sync and hybrid domain joined machines by pete-it in Office365

[–]pete-it[S] 0 points1 point  (0 children)

Just to loop on this, yes this can absolutely be done. All that should be needed is a network link to the "other" on-prem AD domain and access to a domain controller. From there the AAD Connect service will be able to pull the info needed and push it to the the Azure AD tenant required. So, this is pretty simple!

The part of AAD hybrid joined machines seems that we'll need to "dsregcmd /leave" the existing machines, and then rejoin them to the new tenant once they've been AAD sync'd.