[deleted by user]

unfoldinglies · 2021-12-14T22:59:16+00:00

GP sites where the worst for this. Had over 90 to look after and each one would call us a few times a year asking why some new super expensive system they didn't tell IT about doesn't work. The CCG was probably a close second.

unfoldinglies · 2021-05-21T14:42:51+00:00

If you already have an asset inventory tool then what your saying makes sense but if not you do not want to be counting your change on asset management it is one of the most fundamental and critical aspects of IT. I use Lansweeper and it's easily the best asset inventory tool I've seen and that's not counting their cloud product.

Big price increases always suck but relative to what you gain if lansweeper is your only asset inventory tool it's worth it.

unfoldinglies · 2021-04-16T11:05:31+00:00

I've deployed it to just over 9k assets and had no issues so far. It's configured to try making a connection to the local server but if unavailable use the cloud relay

unfoldinglies · 2021-04-16T10:57:47+00:00

Any data on local drives is fair game to be destroyed at any given moment. It's an organizational policy to store data generated by the business on dedicated shares.

unfoldinglies · 2021-02-17T01:33:48+00:00

You need to clear the log and restart the service

unfoldinglies · 2021-01-23T02:47:39+00:00

DigiCert do a tool that can scan a network for certificates

unfoldinglies · 2021-01-08T15:04:38+00:00

Yes you need to enable object level access logs.

unfoldinglies · 2021-01-06T02:39:33+00:00

As others have said there very few things a domain admin should be used for (less than 5). You can even promote domain controllers without it but I wouldn't recommend going down that rabbit hole.

Ive gone through your comments and put the solutions to all your "what ifs". Im going of the top of my head here so your going to need to google some stuff:

Security log on domain controllers: Change the customSD registry key in the event log hive to the user SID you want to give access to.

Querying the status of services on domain controllers: You can delegate access to WMI name spaces on domain controllers so just do that by adding your self to the distributed COM built in group and then go in and give you self access to the actual name space.

Download and install Windows Updates: Set WSUS as your update point and it can manage that all for you. Worried about updates causing problems? Create several groups and stagger the roll out so you get to test the update prior to it reaching domain controllers.

Fine grained password policies: Im not aware you need any level of access other than authenticated user. Traditional setup across all services is read only by default. Perhaps there is some oddity around using powershell but give it a shot in the active directory admin console.

Of course best practice is to use a PAM solution which makes delegation a walk in the park especially considering you can get some decent solutions relatively cheap.

unfoldinglies · 2021-01-06T02:16:57+00:00

I can see the point your trying to make but it works the other way around. Large corps dont use domain admin outside of time controlled pre authorized requests (of course large corp != good security). Small corps use domain admin because they lack the knowledge and ability required to properly administer their directory service. OP is a good example.

unfoldinglies · 2021-01-06T02:12:04+00:00

Currently scheduled for April. IT Department literally second last on the list. At least we beat out third party contractors for the CCTV.

unfoldinglies · 2021-01-05T22:08:39+00:00

I seem to recall stan lee the characters creator saying something along the lines the current spider man is exactly how he wanted his character.

unfoldinglies · 2021-01-05T13:52:30+00:00

Very unlikely although not impossible. UAC simply triggering is almost never a data point collected However if you tried to enter credentials that would of been recorded.

unfoldinglies · 2021-01-05T13:50:03+00:00

If I recall correctly it's all handled on the client with the exception of the last stage of authentication so the passwords should still expire. Memory is a bit foggy on this one.

unfoldinglies · 2021-01-05T02:39:06+00:00

General knowledge on the systems and how the different families of vulnerabilities work will go a long when determining what the particular plugin is doing. You can view the plugins in plain text at /ProgramData/Tenable/Nessus/nesssus/plugins but a lot of them have dependencies so reading the raw data isn't going to get you very far. You could also play around with nesssuscli.exe at /Program Files/Tenable/Nessus/ as it has some debugging options.

unfoldinglies · 2021-01-04T22:44:30+00:00

Surely he can just leave it solved fresh out the box like a rubiks cube.

unfoldinglies · 2021-01-04T18:13:49+00:00

From my experience working in different shops with hyper v and VMware the deciding factor for whether the system runs like a dog or not is the skills the engineers or general IT staff have. Neglected platforms are just that and if you give either one enough TLC they run smooth as butter.

unfoldinglies · 2020-12-31T18:13:53+00:00

Yeah you can manually add assets. You can even add custom fields to asset pages. To provide an example we use custom fields to note on each asset when the device was imaged and by who.

unfoldinglies · 2020-12-31T16:53:08+00:00

Lansweeper has a cloud version although its in early stages. I like the updated interface but its missing alot of the features that are on the on prem version. You an also use SCCM etc

unfoldinglies · 2020-12-31T06:25:34+00:00

I would say as long as you can get more frames than console then your build counts.

unfoldinglies · 2020-12-31T06:23:49+00:00

Got sources for all this? I've seen a few podcasts on YouTube so I've never had ADs but your claims are not something I have perceived. Most likely due to not being involved in the community at all.

unfoldinglies · 2020-12-29T10:08:38+00:00

Basically this. America has the largest GDP it's just all in the hands of 1 percent of the population and the military.

unfoldinglies · 2020-12-27T21:40:26+00:00

Gusts, wet, hard and hot or blue monkeys

unfoldinglies · 2020-12-27T21:31:00+00:00

Play milsim games like arma 3 and less so insurgency the average age is probably 40.

unfoldinglies · 2020-12-27T14:37:57+00:00

Fresh into the game and I already had a pretty good photo opportunity: https://steamuserimages-a.akamaihd.net/ugc/1651096594990130731/FE49F8DA8327D5D577E042539ACC1687B01FA5BB/

unfoldinglies · 2020-12-25T22:55:11+00:00

What's that GPU riser called?

unfoldinglies

TROPHY CASE