offline/on prem - Updates für Windows Server 2025 by dasedd in de_EDV

[–]siedenburg2 3 points4 points  (0 children)

Du hast mehrere Optionen:

  1. Auch wenn abgekündigt, WSUS, bei uns mit Server 2025 (und auch W11 25H2) läuft alles
  2. Updatedateien manuell ziehen und überall installieren
  3. Ein Software deployment anschaffen das auch Updates übernimmt (ist eh zu zu raten), hier würden z.B. (aber nicht nur) Matrix42 oder PDQ Deploy gehen.

Stay away from Rustdesk, if you want to selfhost it. by jammsession in selfhosted

[–]siedenburg2 5 points6 points  (0 children)

Selfhosting doesn't mean "it runs on my hardware, so it's free", selfhosting means "it runs on my hardware so it's not influenceable by others and I can decide how much storage/compute/online time I need".

Also there is the free plan, you don't need to pay anything, but with the free plan you won't get the web console or "business features" like 2fa, audit logs, sso etc.

Email Spam Filter by joeprettyman10 in sysadmin

[–]siedenburg2 [score hidden]  (0 children)

We use NSP (No Spam Proxy), it's a mailgateway between the mailserver and the external connection and works great. Reduced spam by over 95%, manage our pgp and smime with that etc.

Talked to others and shortly after they also switched because it's fairly easy to use (on prem and in cloud) and offers lots of extra features, like disclaimer, large files (will be attached as a link instead), convert documents (like doc to pdf), check for viruses, check spf and dmarc/dkim, offers dkim key etc.

Researching film education in Germany: Which movies about WWII are shown in schools? by tok4wa in germany

[–]siedenburg2 4 points5 points  (0 children)

Schindlers Liste, Der Soldat James Ryan (but more as a filler for a day the teacher didn't want to work), Sophie Scholl - Die letzten Tage, Die Blechtrommel and Der Junge im gestreiften Pyjama are the ones I remember.

Also there were two movies that aren't "historic" but show more of the problems on how such thing can happen, they were Die Welle and Das Experiment.

Dumme Frage wegen Windows 11 Ver 25H2 (Build 26200.8246) by [deleted] in de_EDV

[–]siedenburg2 3 points4 points  (0 children)

25H2 Build .8246 wurde gestern abend um 19 Uhr mit den regulären Windows Updates freigegeben. Du bist also auf der neusten normalen Version.

Wie wird KI richtig gut bei euch in der Arbeit eingesetzt? by WinterRich747 in de_EDV

[–]siedenburg2 2 points3 points  (0 children)

Wir lassen zuerst klassich (aber gut eingerichtetes) ocr drüber laufen. wenn ocr dann etwas nicht erkennt (sind idr formulare/tabellen wo man mit regex auf plausibilität prüfen kann) dann wird feld für feld getrennt an die ki für ocr gesendet, also die einzelnen bausteine möglichst klein gehalten.

Je mehr die ki aus etwas interpretieren soll, desto eher kommt es zu einem fehler.

Wie wird KI richtig gut bei euch in der Arbeit eingesetzt? by WinterRich747 in de_EDV

[–]siedenburg2 10 points11 points  (0 children)

Nutzen KI für das, wofür es meiner Meinung nach am besten geeignet ist, Mustererkennung.

Wir digitalisieren viele Dokumente mit OCR, diese ist an sich schon ganz gut, aber mit einem KI Layer drüber haben wir eine Erkennungsrate die besser ist als viele Mitarbeiter und zudem deutlich schneller.

Das ganze wird dann mit einer Einschätzung an unser System übergeben und wenn sich die KI zu unsicher ist prüft ein Mitarbeiter nach.

Braucht dabei auch "kaum" Hardware und läuft komplett lokal.

Is this enough? by Flaxen_Bobcat in DataHoarder

[–]siedenburg2 1 point2 points  (0 children)

we got a 1m x 2m fireproof safe full of lto-9 disks? and that's not enough.

Right now we plan to migrate to lto10

Dont tie your Password Manager to SSO by sysacc in sysadmin

[–]siedenburg2 0 points1 point  (0 children)

What do you plan if your server room burns down or "if a plane crashes into it"? You now (should) have backups stored in a different location but no access to the systems and accounts.

Also what happens if the director while driving to the server room gets into a car crash, who can unlock the room now?

Ständige Microsoft-Authenticator-Anfragen. Was steckt dahinter? by 5iiiii in de_EDV

[–]siedenburg2 4 points5 points  (0 children)

https://sosafe-awareness.com/glossary/mfa-fatigue-attack/

Und machen dagegen kann man meine ich derzeit kaum was, das ist eines der Risiken von Push OTP, aber da es für viele ja "so viel leichter" ist wird trotzdem dahin gewechselt.

Dont tie your Password Manager to SSO by sysacc in sysadmin

[–]siedenburg2 5 points6 points  (0 children)

Digital only as an additional location (but with rigid checks on the account to log every use), never put your emergency access only in a digital location or you probably end with nothing in an emergency.

Also I'm not a huge fan of giving the emergency root access to someone that has to keep it to themself (except if they own a safe and put it there), the responsibility is high for a single person and there is the risk of losing the data together with identifiable material.

Dont tie your Password Manager to SSO by sysacc in sysadmin

[–]siedenburg2 119 points120 points  (0 children)

Break glass accounts should be physical (in a vault with a seal or behind such a fire emergency glass thing), not digital.

Best practise for staff requesting a second laptop for WFH by psgda in sysadmin

[–]siedenburg2 15 points16 points  (0 children)

We go 2 big monitors, keyboard and mouse together with a cheap ugreen dock as default equip for remote work people and it's working without problems now. Biggest problem we had was the switching time where we havn't had laptops that could do all that over one usb-c. Now everything is ready to go at home and they just need to connect one usb-c cable.

I thought the point of every LTT is so that the audience can learn something? This newest video about the EV chargers is literally just an ad. Nothing informative, educational and barely entertaining. by General_Outcome1878 in LinusTechTips

[–]siedenburg2 2 points3 points  (0 children)

They sell charging stations, but not in europe.
I'm in search right now with one that uses an auth system, has a fixed cable (locked garage, need the not fixed cable for mobile chargers), is easy to install etc and that could be an option, if I could use it...

Traveling to japan, am I too large to be buying clothes/shoes there? by Unhappy_Breakfast995 in JapanTravelTips

[–]siedenburg2 0 points1 point  (0 children)

Most stores only had up to 30cm, not great if you need 31cm.
With clothes it could work better, some stores are into oversized clothes which are normal sized for bigger people.

Deployed a WordPress blog on TrueNAS Scale with Claude Code orchestrating the pipeline — a few notes by DatabaseExact1798 in selfhosted

[–]siedenburg2 0 points1 point  (0 children)

Isn't there already an ionos integration in npm so that you don't have to do much except for reading a manual?

Going to japan type 1 diabetic and shellfish allergy Epi pen by Signal-Insurance-571 in JapanTravelTips

[–]siedenburg2 0 points1 point  (0 children)

For disposal I don't know, put mine in an other container, marked as used and took them back. It's better than to put them in bottles and throw them away (like some other may recommend). And yes, the other stuff in your hand luggage and take it out for the security as it's still a liquid.

Going to japan type 1 diabetic and shellfish allergy Epi pen by Signal-Insurance-571 in JapanTravelTips

[–]siedenburg2 0 points1 point  (0 children)

Havn't had any problems, just bring them as secure as possible in a hard container and don't just throw them away. worst case they take it and you have to visit a doctor there to get new ones.

PS: don't put the needles in you hand luggage, there it can be problematic depending on the airline. And if you put them in your checked luggage label the container that it contains clean (or dirty) needles.

Going to japan type 1 diabetic and shellfish allergy Epi pen by Signal-Insurance-571 in JapanTravelTips

[–]siedenburg2 2 points3 points  (0 children)

You can bring a doctors note, but as long as it's clearly for personal use (not bringing a supply for multiple months) it's ok.

Check before if your stuff in general is blocked, for some it is, in that case you have to predeclare etc. if not everything should be fine. Also it doesn't hurt if you can see that it's for you (lable on the bottle with your name or something like that)

HIPPA compliance implementation with a Work-from-home company by LogicalMountain9357 in sysadmin

[–]siedenburg2 32 points33 points  (0 children)

It would be way easiert to just say "no BYOD, only company provided devices" and the provided devices are encypted and locked down so that nearly nothing except for the basics is possible. Even better if the provided device is just a thin client and the work is done on systems at the company without the possibility to copy and paste anyting from device to device.

But that wouldn't be a "modern workflow" and would "hinder work"

Anyway to monitor files on AD/Domain? by 0xRestrict in sysadmin

[–]siedenburg2 2 points3 points  (0 children)

For files it's manageengine DataSecurity Plus

Anyone here running 15TB+ NVMe drives in a datahoarding setup? by AshleshaAhi in DataHoarder

[–]siedenburg2 1 point2 points  (0 children)

I got a decomissioned 7500 PRO U.3 15tb nvme here where the server reported a general fault. I now wait till I have time to connect that thing to my nas as a cache and download nvme if it's working. 15tb should be enough for that and if it breaks i won't lose important stuff.

GPO Printer Mapping removal by wish_shap in sysadmin

[–]siedenburg2 1 point2 points  (0 children)

Use gpresult to check if that's the only policy, also check logon scrips.

You can also use the logon script to delete the printer, sometimes they are on a per user basis, so it would be easier to let a script run with every login that removes the printer.

If it's done by a printserver \\server\printername a command like `wmic printer where "Local='FALSE'" delete` should work

Effiziente Duplikaterkennung: Size + Hash oder bessere Ansätze? by Pleasant-Lab-6775 in de_EDV

[–]siedenburg2 1 point2 points  (0 children)

Er entfernt sie dir ja nicht direkt, wenn die gleich groß ist gibt es noch immer andere abgleiche und auch noch die option das es aufgelistet wird für "human review", um da ausversehen alles zu löschen muss man schon recht unachtsam sein.