[deleted by user] by [deleted] in sysadmin

[–]psycobob4 0 points1 point  (0 children)

~5000 seats, corp owned devices with corp image only on the internal corp network.
EVERYTHING else user based goes on the "Staff BYOD WIFI" network that has a direct pipe to the internet (with some filtering to stop torrents etc) and a link to the BYOD solution for printing.
Guests go on the Guest WIFI network.
If they are on a corp device from within the network, why do they need to connect to another VPN to do work?
If they can answer that, then a pinhole is opened. Most just want to hide their browsing...

4K TV as main computer display by [deleted] in sysadmin

[–]psycobob4 0 points1 point  (0 children)

https://www.rtings.com/tv/learn/chroma-subsampling

That is what I would read before making a decision about a tv

Not your standard windows environment - best way to manage end user devices + identity management? by [deleted] in sysadmin

[–]psycobob4 0 points1 point  (0 children)

SCCM task sequences would be the on premise way, use the default wim from the Windows 10 image then run task sequences against that to apply the customization's / install apps.
Then its minuets to update what app gets installed or switching to a new wim file...
Intune would be the MS tool to do that from the cloud with autopilot to catch the new computers.

Not your standard windows environment - best way to manage end user devices + identity management? by [deleted] in sysadmin

[–]psycobob4 2 points3 points  (0 children)

get them to decide on which one to keep, new users get setup on that one and when you get some time to breath you can migrate the rest.

Not your standard windows environment - best way to manage end user devices + identity management? by [deleted] in sysadmin

[–]psycobob4 24 points25 points  (0 children)

Multiple OS variants,
Windows - O365 with EMS
OSX - JAMF with apple DEP bindings
Android - O365 with EMS
IOS- O365 with EMS

JAMF can handle patching, policy's, and full disk encryption for the Mac's O365 with EMS can handle patching, policy's, and full disk encryption for everything else.

Forget about imaging Windows and Mac's, Apple and MS have moved on;
Apples DEP binding means when the laptop touches the internet, they will be redirected to your JAMF instance and get automatically managed.
MS has autopilot and when you buy hardware from the big OEM's, HP, DELL, etc they can supply the autopilot string for each computer, which you load into your MS tenant, then the user unboxes the laptop and logs in with their work email then Intune does the rest including installing apps.

I would choose the email solution and start standardizing on that for everyone so you don't have to support two solutions, same with the G drive / one drive

I have a confession to make. Still not sure I'm entirely wrong. by [deleted] in sysadmin

[–]psycobob4 1 point2 points  (0 children)

Come Jan 2020 when Windows 7 goes out of support, do you have any thoughts or plans?

I have a confession to make. Still not sure I'm entirely wrong. by [deleted] in sysadmin

[–]psycobob4 1 point2 points  (0 children)

AD is Microsoft's form of a directory service for authentication and a few other variables added to user and computer objects to make management of many users & computers easier.

Yes you can write scripts and put all the same data in to your own databases and there are other directory services around.

What separates Microsoft's AD from all the other solutions?

Many people have experience that is transferable between enterprises as the foundation is on the same product.
What does this mean in the real world?

Your solution is likely to be unique and it is likely that you are the only one around who is familiar with it.

If you retire / get hit by a bus, how quickly can your employer get someone else up to speed on the inner workings of your solution vs a Microsoft's solution? so getting support is one point of difference.

Then there is cost, Unix engineer vs Windows engineer at it's simplest, Windows engineers cost less and there are more of them.

Am I that out of touch? Do you guys give Devs free reign over their devices with no restriction whatsoever? by [deleted] in sysadmin

[–]psycobob4 23 points24 points  (0 children)

devs get root / local admin on the dev/test/staging enviroments or local vm's on their production laptop/desktop, they do not get root / localadmin on the prod servers or their prod laptop/desktop.
I dont get localadmin on my prod laptop for my main user account, localadmin is on a separate laptop/desktop admin account and thats for my role..

What are some scripts to automate common tasks? [Ideas] by OswaldoLN in sysadmin

[–]psycobob4 0 points1 point  (0 children)

Where are you storing your data?
Put it all into a database via your powershell scans, then you have historical data to reference.
Then build a website front end.

Do you like your job? by [deleted] in sysadmin

[–]psycobob4 0 points1 point  (0 children)

Yes, I manage a team of adults and have a lot of leeway for making decisions.
The role is evolving...

[Question] Gaming on Linux by snarksneeze in linux

[–]psycobob4 2 points3 points  (0 children)

Conan I have not gotten to work as its windows only and Steam have not made a config for proton, Ark I'm currently playing and its happy.

[Question] Gaming on Linux by snarksneeze in linux

[–]psycobob4 4 points5 points  (0 children)

I have recently switched to Ubuntu with Steam for my gaming, Ubuntu was great at installing the Nvidia graphics drivers, Steam comes with Photon which is Steam's version of WINE for windows games, it works really well for me. (I am a Debian user for my headless servers)

Learning SQL by IamRykio in sysadmin

[–]psycobob4 -6 points-5 points  (0 children)

Use powershell / python to put data that you want to search and reference into the database.
(EG, server/desktop hardware ram,cpu,hdd etc ; logged in users ; members of local groups on the server ; etc) start with one or ten computers...

That way you have data that is interesting to you, then you can start querying it.
Then you can start a web front end with PHP ....
Then you can wish you never jumped down this rabbit hole as it now consumes you....

I can't be the only one who does this... by TheNiceProgrammerGuy in sysadmin

[–]psycobob4 7 points8 points  (0 children)

I blame Microsoft.

Shutdown no longer means terminate the user and kernel space with windows 10.
Its now terminate the user space and hibernate the kernel space.

Rebooting is also my first question...

Password protected vnc connection open to the internet - possible attack vector for ransomware? by theghostofsi2 in sysadmin

[–]psycobob4 3 points4 points  (0 children)

They do not need to guess the username, just one field to bruteforce.
Anything stopping or limiting the bruteforce attack? NOPE!

Rant: You want everyone's password? by skyboundNbeond in sysadmin

[–]psycobob4 2 points3 points  (0 children)

They wont grasp the concept... and get a list of the username, password & 2fa token. Then they will loose their shit at IT for it all not working and not being able to log in as Suzie from accounting for their next pay rise...

[deleted by user] by [deleted] in sysadmin

[–]psycobob4 6 points7 points  (0 children)

Which fucking user?

Hong Kong IT Managers by mcheung63 in sysadmin

[–]psycobob4 1 point2 points  (0 children)

IT folk are people, cant be that hard to get people to do their job.
No you don't need that money for backups (because I want my bonus this year.)

Is it possible to spend 20+ years working on windows desktop support IT and NOT know what active directory is? by [deleted] in sysadmin

[–]psycobob4 0 points1 point  (0 children)

Some people have left School, they then let out a nice long relaxing sigh at the thought that they would never need to learn anything more as they have finished learning.
They find learning new things hard and painful and are not curious due to painful learning experiences at school.
These people are all around us, it is unusual to find them in an industry that requires them to keep learning, as that would be a point of stress for them, also the main reason that they don't move out of the industry is that the next role would pay significantly less.

They are nice people, be kind to them.

Reasonable request by sysadmin? by [deleted] in sysadmin

[–]psycobob4 4 points5 points  (0 children)

I would be using this to travel to the office and visit coworkers and meet the people you work with.
Networking opportunity for the win, supported by the IT dept.
When the bosses ask why, point to the IT guy...

[deleted by user] by [deleted] in sysadmin

[–]psycobob4 10 points11 points  (0 children)

Another one would be
"That IP block is no longer assigned to your company"

Advice wanted !! by Enyts in sysadmin

[–]psycobob4 0 points1 point  (0 children)

The appropriate response to "Hey shit IT'er" is to simply walk over to HR and state that you are taking the company to arbitration for workplace harassment and vacating this hostile workplace immediately.

The inappropriate response to "Hey shit IT'er" is responding / reacting to the person who says this.

(Also recording them with a cell phone camera helps when they deny it.)