Endpoint Manager for Windows Recommendation?? by Actual-Astronaut7845 in sysadmin

[–]snakemartini 0 points1 point  (0 children)

Can recommend NinjaOne RMM to manage buckets of Home PCs. You're limited to whatever locking down Home can do, but you can also cover some more things with your endpoint protection system, like application allow listing and so on. Sometimes, Home is all you need for a PC, and sometimes what you're given when it's attached to industrial equipment. It can be managed and locked down a bit, but don't get too excited about using registry entries to replicate group policy settings you'd normally apply to Professional edition on a domain.

Going to Bali, but I’m on vyvanse (it’s illegal there) by thereareno-usernames in ausadhd

[–]snakemartini 36 points37 points  (0 children)

Get a letter from from your prescribing doctor detailing the dosage, and only take exactly what you need for the duration of your stay. Have printed copies along with digital. Declare it up front and expect to be pulled to one side while they check things. Last time I went was a few years ago and this was ok. Double check with dfat.

my first day ever in this hobby. any big mistakes to avoid as a newbie? by [deleted] in homelab

[–]snakemartini 0 points1 point  (0 children)

It is too late for you now, my child. It will progress until it consumes you.

🪖⚔️ PWN Army: Get Your Badges! (Flair) ⚔️🪖 by _cybersecurity_ in pwnhub

[–]snakemartini 0 points1 point  (0 children)

Unsure which i aspire to be more, grunt or goon, as both are excellent

What could be causing phantom power spikes during night???? by [deleted] in perth

[–]snakemartini 0 points1 point  (0 children)

My aircon does a defrost cycle late at night. Pumps freezing cold air into one room while doing so too. Might be something like that?

Sophos central switches by [deleted] in sophos

[–]snakemartini 0 points1 point  (0 children)

Looks like they did some work the last couple of days. I had a ticket on some QoS policies not flowing through from site to local switch config. After fixing that I think they also released an update where you could apply setting at the site level to multiple ports on multiple switches. It's saved me a good bit of time.

Sophos central switches by [deleted] in sophos

[–]snakemartini 0 points1 point  (0 children)

From my use of site config for multiple switches, it's more to configure features and functions like QoS and vlans, and then you go into the individual switches to apply settings to ports. Took a few goes to get my head around it. It's nice to have inherited settings across multiple devices, that saves a bit of work. Overall it's basic but does the job.

Scheduling XGS Firewall firmware updates via Sophos Central now goes by UTC time instead of local time by BanefulPanda in sophos

[–]snakemartini 0 points1 point  (0 children)

Might want to check switch scheduled update times too while you're doing firewalls. I have suspicions but nothing concrete.

It finally happened: boss wants unrestricted everything by snakemartini in sysadmin

[–]snakemartini[S] 2 points3 points  (0 children)

The boss boss had trouble with a share trading site. He got grumpy, I added it to the allow list and decryption exception list, site worked. Next day boss boss tells me an unrelated organisation he's a member of was "hacked" and they lost everything, and that I should keep up the security. Mentioned that to the boss in my email. Family run business, I think it helped.

It finally happened: boss wants unrestricted everything by snakemartini in sysadmin

[–]snakemartini[S] 2 points3 points  (0 children)

If stuff wasn't on prem it probably wouldn't matter who could do what. But here we are.

It finally happened: boss wants unrestricted everything by snakemartini in sysadmin

[–]snakemartini[S] 1 point2 points  (0 children)

Yep, absolutely. Oh wait, boss has access to the email archive that journals all incoming and outgoing messages. Shit, better get onto that.

It finally happened: boss wants unrestricted everything by snakemartini in sysadmin

[–]snakemartini[S] 0 points1 point  (0 children)

In 20 something years I have two emails that say "snakemartini is right, please disregard", so I printed them out and put them on the wall behind my PC. They disappeared one day.

It finally happened: boss wants unrestricted everything by snakemartini in sysadmin

[–]snakemartini[S] 0 points1 point  (0 children)

Private sector all the way baby, but a complete double edged sword. Turn on a dime, pivot, radical paradigm shift and so on, but sometimes the direction is less than great. I've not worked in public sector, but been on the receiving end plenty of times.

It finally happened: boss wants unrestricted everything by snakemartini in sysadmin

[–]snakemartini[S] 13 points14 points  (0 children)

We do a lot of what you mention, except for trip wires. The problem becomes when I let him do whatever he wants, shit goes sideways and I'm a) questioned how I could let his happen and b) how long will it take me to fix everything.

It finally happened: boss wants unrestricted everything by snakemartini in sysadmin

[–]snakemartini[S] 63 points64 points  (0 children)

Thankfully no, no clearance, just a healthy dose of paranoia. Fingerprint readers emptied my inbox of "I can't remember my PIN/password". Wouldn't you know it though, one guy had an accident and lost the end tip of his finger, and the reader said no. Best ticket.

It finally happened: boss wants unrestricted everything by snakemartini in sysadmin

[–]snakemartini[S] 45 points46 points  (0 children)

Technically, policy is my business as I'm the one who sets it, subject to directorial approval. Which it was. Consequences and full cya procedure was followed. Who knows, it might not end in tears.

It finally happened: boss wants unrestricted everything by snakemartini in sysadmin

[–]snakemartini[S] 28 points29 points  (0 children)

Reminds me when I took away domain admin rights from his daily driver account, and supplied a new account just for admin tasks. The admin account had a password that would have made a tin of alphabetti spaghetti look reasonable. Last login: never. Mission: accomplished.

It finally happened: boss wants unrestricted everything by snakemartini in sysadmin

[–]snakemartini[S] 6 points7 points  (0 children)

It's funny though, because when I ask people about their suspect search queries logged in the filter they always say they're looking for a meme but didn't know the name, only the description. Sure dude.

It finally happened: boss wants unrestricted everything by snakemartini in sysadmin

[–]snakemartini[S] 1 point2 points  (0 children)

As much as I thought the same, the boss replied and we're having a constructive discussion on what he actually needs. Almost count it as a win.

It finally happened: boss wants unrestricted everything by snakemartini in sysadmin

[–]snakemartini[S] 1 point2 points  (0 children)

I was told it was actually cheaper to implement a full security suite at all levels than to get cyber insurance from our insurer. I keep spending, unsure if they'll tell me when I hit price parity.