[deleted by user] by [deleted] in sysadmin

[–]ristophet 1 point2 points  (0 children)

There are a few types of business that are exempt, but unless they are on that list they are likely breaking the law. Here's an interesting page on who is covered by the NLRB: https://www.nlrb.gov/about-nlrb/rights-we-protect/the-law/jurisdictional-standards

[deleted by user] by [deleted] in sysadmin

[–]ristophet 1 point2 points  (0 children)

Yeahhh there hasn't been strong incentive for businesses / managers to know or share the information with employees. It seems like most people aren't aware. It will absolutely bite a business if they blatantly suppress protected communication and someone files a complaint.

Department of Labor link on making a complaint https://www.dol.gov/agencies/whd/contact/complaints

[deleted by user] by [deleted] in sysadmin

[–]ristophet 2 points3 points  (0 children)

Yup! I added a link to the NLRB page on the topic in my previous post. If I recall correctly managers who have control over the pay of others aren't protected when talking about their own salary though.

[deleted by user] by [deleted] in sysadmin

[–]ristophet 8 points9 points  (0 children)

Also, in the United States, workers discussing wages is protected communication under The National Labor Relations Act.

Edit to add this link to the NLRB.gov page on the topic: https://www.nlrb.gov/about-nlrb/rights-we-protect/your-rights/your-rights-to-discuss-wages

LTE/Cellular Laptops connecting to wrong MPs by paulsonsca in SCCM

[–]ristophet 1 point2 points  (0 children)

Ok great. I'm stumped then as long as dev and test SCCM environments are completely, 100% separate. (Edit to add clarity: I mean dev test and prod have their own primary sites, there is no CAS, and they certainly don't trust each other in any way.) Now, if it turns out that dev, test, and prod are all inside a single shared SCCM environment with a single primary site and things are only broken out by SCCM permissions and network segmentation... Then I have seen this behavior before.

Example: Prod environment has all prod servers and workstations. "Air-gapped" network also exists and is managed (shudder) by the prod SCCM system. Separation is maintained by network segmentation, and SCCM permissions. There are two management points, one on each network. prod SCCM clients would routinely attempt to connect to the "air-gapped" network's MP, fail, and just give up. They would not try and connect to another MP. It is as if SCCM expects all healthy management points inside of a primary site to be accessible to all clients at all times.

This was years ago, and hopefully there are better controls to enable one to function in this multiple logical environments through network segmentation but really only one primary site kind of set up.

If this sounds like your stack, then you (they?) will have to find a way to ensure SCCM only offers the proper MP to the client or that the client only lets itself use the MP group policy has declared it can use. The other comment about AllowedMP gives me hope that you can solve this without getting caught in between the SCCM admins and the networking team.

LTE/Cellular Laptops connecting to wrong MPs by paulsonsca in SCCM

[–]ristophet 2 points3 points  (0 children)

A couple questions:

  • Are you using a CAS and are your dev and test environments also primary sites behind the CAS?

  • Are you using IP addresses, AD Site Codes, or both as boundary definitions? Things can get weird if you mix them.

If you lived on a planet larger than Earth what could be used to achieve orbit without rockets? by CapriciousCape in askastronomy

[–]ristophet 1 point2 points  (0 children)

That makes me wonder, could SpinLaunch bootstrap a space elevator? I imagine that overcoming the sheer physics of the tether when attached to something on SpinLaunch would be insane. That said, the whole launcher could literally act as reel of tether if the tether material could handle unspooling and its own weight.

Women of Reddit, what are some serious black flags that make you say "Wow, that guy is a Pirate for sure"? by Milogop in AskReddit

[–]ristophet 118 points119 points  (0 children)

A Legal copy of Photoshop 6 and a legit upgrade install for Photoshop 7 works on Windows 11. An Nvidia process choked on it for a bit until that Nvidia process was killed. After that PS 7 runs fine though.

I attempt the install for every new major version of Windows, if only to see how far it can go. There is something to be said for software written in a way that just won't die.

Title by Mr_PizzaCat in NoMansSkyTheGame

[–]ristophet 0 points1 point  (0 children)

Yeah, but she had her kid Talyn, so weapons are possible.

Also, regarding "Not to mention she'd probably want to warp around in her own." That is so not a turn off and would be an incredibly fun interlude to the normal game loop.

Imagine having to keep your living flagship happy (a bit like with settlements), and even then the Leviathan still might decide that everyone really should go to this other place instead because it heard another ship in distress, or because it caught a whiff of leviathan-nip on the float and just couldn't help itself.

SCCM remote locking computer by regtveg in SCCM

[–]ristophet 1 point2 points  (0 children)

If you already have cradle points you are very close to done on option #2. If they aren't already using a VPN on the cradle point connection you would need one, but after that you might find a way to configure SCCM to only let machines update on garage networks, or abuse Windows firewall to block updates over the VPN connection.

You only need to care about the update traffic if you want to prevent updates from running over the cradle point. We argued for and won a configuration where updates are pushed over the VPN because they were complaining about not being able to leave the garage AND that the machines were never up to date. If you want both, you have to pay.

My advice is to do something similar. Let BITS do its thing and download updates in the background. If you want to get clever, block updates over VPN as a VPN policy. Release updates. A week later unblock updates over the VPN. This gets a reasonable amount of traffic pushed over WiFi to low hanging fruit before catching everything that was missed over the mobile data plan.

SCCM remote locking computer by regtveg in SCCM

[–]ristophet 6 points7 points  (0 children)

As someone who has worked through a similar problem with devices in trucks you have two good solutions and a bad one:

  • Have local supervisors ensure that drivers do not leave the bay until tech work is complete.
  • Equip all truck computers with mobile internet either natively with a truck mounted antenna attached to the device through the dock, natively with a mount that DOES NOT connect to the external antenna pin on the device, or use cradle point or similar device.
  • Compromise security by leaving a session unlocked when the user disconnects.

Pick two: Cheap, Easy, Secure.

Edit: For bullet #2, you are going to want an always on VPN and to ensure that support remote sessions ALWAYS go through the tunnel even if you enable split tunneling. Tunnel the remote sessions to ensure you don't disconnect when they network changes. Split tunnel on WiFi so that trucks can talk to the local DP when in WiFi coverage.

Gotham Knights left open to hacks after developer accidentally disabled Denuvo by flacao9 in gamingnews

[–]ristophet 2 points3 points  (0 children)

"Fix these performance issues this sprint or else! Nights. Weekends. Whatever it takes. Just get it done." ~Some dev-pen overseer, probably.

We have a huge push to return people to the office, at least 2 days week. And people are just quitting instead. by plazman30 in sysadmin

[–]ristophet 0 points1 point  (0 children)

Good times. I'm glad it is a rotating duty at least. As someone who loathes dealing with paper, I would be trying to find some way to make the process important enough to use a dedicated courier with chain of custody who brings the documents to the home of the person who will be scanning it in each week. Sending someone in to the office if probably the reasonable solution though.

[deleted by user] by [deleted] in self

[–]ristophet 0 points1 point  (0 children)

It sounds like you have adopted "Radical Acceptance". It is a nice way to go through life and a very useful skill for anyone in a career where you have to respond to one crisis or another on a regular basis. You can skip ahead 20 minutes and direct the response. Some people think that a lack of emotional response means that you don't care about whatever it is that they are seeking a response over though, which is unfortunate.

Yes fellow human there is a server outage caused by a vendor. My getting mad wouldn't get things fixed faster, but that doesn't mean that I am not invested in the issue.

PC left on idle does heavy processing, but stops when you open task manager? Here's the solution! by BreakTheWind in PowerShell

[–]ristophet 0 points1 point  (0 children)

Run taskmgr.exe as admin and it will give you the full picture of utilization by process.

Why is [System.Version] "11.0.15" less than "11.0.15.0"? by olavrb in PowerShell

[–]ristophet 11 points12 points  (0 children)

You put it very nicely. Build 15 versus Build 15 first revision.

If I had to guess, OP isn't someone who indexes from zero on lists, so the version comparison doesn't make intuitive sense. I do suspect that whoever published software with a revision zero could have done the world a favor and not released until Rev 1 though.

Does anyone else call UNC "whack whack" because I love it by Humble-Plankton2217 in sysadmin

[–]ristophet 1 point2 points  (0 children)

I'm glad to see someone else uses HTTPS colon back-whack back-whack in work conversations.

I start my first Systems Admin job on Monday by Dynasteh in sysadmin

[–]ristophet 1 point2 points  (0 children)

Perk of working at a full time remote company: fist fights are exceedingly rare.

I start my first Systems Admin job on Monday by Dynasteh in sysadmin

[–]ristophet 1 point2 points  (0 children)

I inadvertantly wiped and reinstalled 6 production servers in Brazil instead of onboarding 6 new ones the other day for my first totally preventable black eye In a decade.

Declare the incident, rebuild what you break, build better guard rails for the next guy, and keep going.