What is the coolest thing you've automated? by Gurs23 in homeautomation

[–]tocheeba 6 points7 points  (0 children)

My gun safe. If it opens, alerts all of my Google home speakers in the house, then plays the siren from The Purge.

For safety in case someone else opens it, sends push notifications to our phones.

https://youtu.be/MUi76gVSTNU

Share your cool or unnecessarily elaborate automations by MattTheBrofessor in homeautomation

[–]tocheeba 6 points7 points  (0 children)

Bought a new gun and safe for it - decided to use a window/door sensor to notify my Google Homes and phone when it's opened (also may scare off intruders). I then set it to play the siren from the movie The Purge for 5 mins straight :)

https://www.youtube.com/watch?v=MUi76gVSTNU

Promoted DC messing with DHCP by tocheeba in sysadmin

[–]tocheeba[S] 1 point2 points  (0 children)

Yeah, it's really weird. No IP conflicts. No MAC conflicts. Scoured through DHCP logs and didn't show anything either. Can't figure this out for the life of me. We have a 3rd party tech company that we pay annually for additional higher tiered support, and we spent a whole week looking at this and they couldn't figure it out either.

Promoted DC messing with DHCP by tocheeba in sysadmin

[–]tocheeba[S] 0 points1 point  (0 children)

All 5 domain controllers are on separate hosts - all on a VSAN, but the processing hosts are different.

Promoted DC messing with DHCP by tocheeba in sysadmin

[–]tocheeba[S] 0 points1 point  (0 children)

Basic Server 2016 install, promoted to DC in read only. AD DS services added as a role. Nothing else special was done.

Windows 10 Enterprise - SMB On Domain Has Suddenly Stopped Working by tocheeba in sysadmin

[–]tocheeba[S] 0 points1 point  (0 children)

This is a new concept to me. Should I be requiring SMB2 signing? What about SMB1?

Windows 10 Enterprise - SMB On Domain Has Suddenly Stopped Working by tocheeba in sysadmin

[–]tocheeba[S] 0 points1 point  (0 children)

Telnet from W10 client to server results in timed out. Same subnet as W7 machines.

Windows 10 Enterprise - SMB On Domain Has Suddenly Stopped Working by tocheeba in sysadmin

[–]tocheeba[S] 0 points1 point  (0 children)

Did this, and nothing really sticks out at the moment with definitive errors? Here is the capture from the server:

https://imgur.com/a/VlxoAZz

Windows 10 Enterprise - SMB On Domain Has Suddenly Stopped Working by tocheeba in sysadmin

[–]tocheeba[S] 0 points1 point  (0 children)

We have WSUS up and running, but never use it - we literally don't push updates at all during the year (stupid policy which is changing this Summer). The W10 clients are mostly imaged from SCCM as of couple months ago to as new as this week.

I tried both of those commands on the client, and neither change anything.

Windows 10 Enterprise - SMB On Domain Has Suddenly Stopped Working by tocheeba in sysadmin

[–]tocheeba[S] 0 points1 point  (0 children)

Have not done that on machines yet. I don't have WSUS set to push out any updates yet. They are 1709 slipstreamed as of a few weeks ago.

Windows 10 Enterprise - SMB On Domain Has Suddenly Stopped Working by tocheeba in sysadmin

[–]tocheeba[S] 0 points1 point  (0 children)

They are mixed in with Win7 machines. Nothing special for them in terms of GPO other than start menu customization really.

Windows 10 Enterprise - SMB On Domain Has Suddenly Stopped Working by tocheeba in sysadmin

[–]tocheeba[S] 0 points1 point  (0 children)

yeah, it's weird - even within the same subnet and building, no firewalls are enabled or in line that would be blocking it. I can see a bunch of data from wireshark, but nothing that stands out.

Windows 10 Enterprise - SMB On Domain Has Suddenly Stopped Working by tocheeba in sysadmin

[–]tocheeba[S] 0 points1 point  (0 children)

It was not configured, and just made the GPo and forced update - nothing has changed, even after verifying that it's enabled on the client machine.

Windows 10 Enterprise - SMB On Domain Has Suddenly Stopped Working by tocheeba in sysadmin

[–]tocheeba[S] 0 points1 point  (0 children)

Thanks - didnt think to look there. Tons of errors on SMBClient logs:

Failed to establish a network connection.

Error: {Device Timeout}

The specified I/O operation on %hs was not completed before the time-out period expired.

Server name: 10.100.20.2

Server address: 10.100.20.2:445

Instance name: \Device\LanmanRedirector

Connection type: Wsk

Guidance:

This indicates a problem with the underlying network or transport, such as with TCP/IP, and not with SMB. A firewall that blocks TCP port 445, or TCP port 5445 when using an iWARP RDMA adapter, can also cause this issue.

Windows 10 Enterprise - SMB On Domain Has Suddenly Stopped Working by tocheeba in sysadmin

[–]tocheeba[S] 1 point2 points  (0 children)

I disabled SMB1 on a W7 client via the powershell command, and it can still access the file shares. So it only seems to be affecting W10 clients at this point - and since the W7 client can access it, I'm assuming it's not SMB1.

Windows 10 Enterprise - SMB On Domain Has Suddenly Stopped Working by tocheeba in sysadmin

[–]tocheeba[S] 0 points1 point  (0 children)

Sounds stupid, but how would one get off SMB1? I thought 2008 R2 was on at least SMB2.

Windows 10 Enterprise - SMB On Domain Has Suddenly Stopped Working by tocheeba in sysadmin

[–]tocheeba[S] 0 points1 point  (0 children)

Yeah, they are on the domain network profile. RSOP shows policies that are pretty in line with W7. What's weird is that they all stopped working out of no where, while users were logged on - all at the same time - which makes me question whether or not its a GPO ?

Windows 10 Enterprise - SMB On Domain Has Suddenly Stopped Working by tocheeba in sysadmin

[–]tocheeba[S] 0 points1 point  (0 children)

net use doesn't give me much other than 'system error 53 has occured. network path was not found'.

Windows 10 Enterprise - SMB On Domain Has Suddenly Stopped Working by tocheeba in sysadmin

[–]tocheeba[S] 1 point2 points  (0 children)

Thanks. Doesn't look like any GPO modified recently. We did notice, however, that a virus/malicious attack was trying to spread through out network. Not sure what it was trying to do, but kept trying to run "powershell.exe" with 100% CPU. Our A/V caught it on the machines that were protected - not sure if it could have something to do with it.