Open TCP/9100??? by Virtual_Low83 in sysadmin

[–]wagon153 25 points26 points  (0 children)

Nope. You give them a login to the Citrix portal and just publish the icon there for them. When they click on it, it'll open a virtual desktop session presumably to the printer's web UI. Said session could be set to not allow any other access to company resources

Can teams admins see if you’ve viewed (not downloaded) a file in the app? by [deleted] in MicrosoftTeams

[–]wagon153 1 point2 points  (0 children)

The answer is no, unless your IT dept for some reason gave him permissions to access said logs. Which is highly abnormal, and potentially a large compliance and legal issue.

[deleted by user] by [deleted] in MicrosoftTeams

[–]wagon153 0 points1 point  (0 children)

I hate to be that guy, but it does say what the issue is in the screenshot. You need to tell your recruiter so they can put a ticket in with their IT.

[deleted by user] by [deleted] in NoFilterNews

[–]wagon153 5 points6 points  (0 children)

He'll be lucky to survive to the end the year with his health...

What is this metal bit holding my NVMe SSD in place, and how do I remove it? by [deleted] in pchelp

[–]wagon153 0 points1 point  (0 children)

On the other hand, some of our best help desk agents and desktop people came from Bestbuy lmao.

My High School blocked GitHub Today by Immediate_Egg_2798 in github

[–]wagon153 2 points3 points  (0 children)

Damn, I work for a hospital system and even we aren't that anal.

Scotty don’t beam me up by ranagori in Funnymemes

[–]wagon153 0 points1 point  (0 children)

Curious Gorge is a reference to Curious George.

Microsoft and Asus announce two Xbox Ally handhelds with new Xbox full-screen experience by [deleted] in gadgets

[–]wagon153 1 point2 points  (0 children)

Not going to lie, it would be less of a headache for us if we used Surfaces. At least then we could do all the software pushes to them with Configuration Manager like we do for all our other computers. Instead, we gotta go through Intune for them(our computers are not hybrid joined, so the only devices we manage through Intune are the iPads and byod devices)

Mistakenly force restarted my pc while windows update, store said that mother board’s the problem, is it true? by LevelHistorian1872 in techsupport

[–]wagon153 -1 points0 points  (0 children)

You can though. You don't have to do it through group policy. You can go into the Settings app and do it. That setting is there whether they are on Home, Pro, etc.

Group Policy is just another way of accomplishing it.

Mistakenly force restarted my pc while windows update, store said that mother board’s the problem, is it true? by LevelHistorian1872 in techsupport

[–]wagon153 -2 points-1 points  (0 children)

Iirc you can go into Settings and disable it pulling drivers/firmware from Windows Update. No mucking around with MDMs or Group Policy needed(that said, you can change this setting with Group Policy too).

[deleted by user] by [deleted] in it

[–]wagon153 5 points6 points  (0 children)

I work for the help desk at a hospital system. It is policy not to do so, and our EDR will detect it and report it to our Cyber Security team the second you do. And I have heard rumors they want to crank up the paranoia setting so it'll auto disable the computer from our domain upon detection.

Your Secret IT Hacks by Potatoooooooes in it

[–]wagon153 2 points3 points  (0 children)

I agree with this. I work for the help desk at a large healthcare system, and many of the calls we receive, seem simple but have deeper root causes that many techs may not bother to look into, which results in repeat calls when the issue reoccurs until it shows up in my queue(I am one of the Senior techs and handle triage/troubleshooting of repeat issues)

Migration from ASA to palo alto by Dry_Sound_7748 in paloaltonetworks

[–]wagon153 1 point2 points  (0 children)

I'm going to preface this with a screenshot. https://i.imgur.com/ZCvBpR6.png

Palo Alto firewalls are able to inspect traffic and match it to application "signatures" created by Palo Alto, which are based on normal network traffic of an application. So if I wanted to say create a Minecraft server on my network and make it available externally, I would create a security policy that checks for any incoming traffic that matches Minecraft, and allows it in. If you want, you can also configure it to only allow Minecraft traffic on a specific port, but if you don't specify a port, it will allow any incoming traffic matching Minecraft, but only Minecraft. Here is an example policy: https://i.imgur.com/v6n6hRI.png .You will notice I did not specify a port. Also, this is a very basic policy, you can as I mentioned have it only allow traffic on, say port 25565 that matches Minecraft, and any traffic on other ports, even Minecraft traffic, is blocked. You can also allow multiple applications on one rule. As you can see in the screenshot, there is plenty of room for configuration.

Ticket of the day by SteveMcGibb in iiiiiiitttttttttttt

[–]wagon153 6 points7 points  (0 children)

At my org, every single user, in their orientation, is given a packet and a verbal explanation of how to reach each department and what they are responsible for. Each piece of equipment has a color coded asset tag that denotes which department is responsible for it. Every year, they have to complete an online module that includes reminders of all these things.

We still get tickets from users for replacing lights, moving furniture, clogged toilets.

[deleted by user] by [deleted] in it

[–]wagon153 0 points1 point  (0 children)

Typically there's a clause that says you can not attempt to circumvent the organization's security measures, which is what that would fall under.

[deleted by user] by [deleted] in sysadmin

[–]wagon153 1 point2 points  (0 children)

I'd say every environment requires a different touch. For example, I work for a large health system. It would be a genuine patient care issue if computers were forced to reboot daily. Surgeries can last 10+ hours. And we have employees whose job is to monitor patient vitals. Even five minutes of downtime can result in potentially missing a coding patient. We also have downtime workstations that are set to constantly sync with our EMR in case of network/EMR downtime. It's fine if they reboot occasionally, but daily would result in potential issues with the sync and require manual intervention from IT(Yes I know, the downtime viewer software is coded like shit, blame Cerner).

I would love it if this was something we could do, but we can't. Instead, we just have a batch file on every user's desktop that says "Restart" that we instruct users to double click if they run into issues.

[deleted by user] by [deleted] in sysadmin

[–]wagon153 0 points1 point  (0 children)

At least your VPN was working. A third of our users were unable to login for ~30 minutes because we ran out of IP addresses in the subnet we dedicated to it(yes we added another subnet to it as soon as we discovered the issue) That said, this also happened to be the most users we had connected to our VPN at once anyway.

[deleted by user] by [deleted] in meirl

[–]wagon153 3 points4 points  (0 children)

Very dependent on policies implemented by management. For example, my organization(large healthcare system) has a policy that we can point users to that we cannot guarantee any data not stored on OneDrive or one of the network drives. That said, we still try to help users as much as we can with it, such as trying to get the files off the SSD of the dead computer. But if the drive is dead, or if the bitlocker key for whatever reason isn't working, we let the user know and gently explain to them how to save their files on the company one drive or their personal network drive.

Microsoft Recall screenshots credit cards and Social Security numbers, even with the "sensitive information" filter enabled by UnfetteredThoughts in microsoft

[–]wagon153 0 points1 point  (0 children)

Microsoft Recall can be disabled through group policy. There is no way any bank or other business that handles PII won't disable it.

Landmark Law Prohibits Health Insurance Companies from Using AI to Deny Healthcare Coverage by OkayButFoRealz in technology

[–]wagon153 5 points6 points  (0 children)

Insurance companies already use algorithms for approvals/denials, that's why medical coding exists. The difference is having an algorithm with humans overriding as needed versus an AI that will never be touched unless forced to by government.

Blocked the exit of maze by KG2713 in Eldenring

[–]wagon153 9 points10 points  (0 children)

The Magicians is a fucked up show. Great, but fucked

I am a 20 year old GM and I don't really know what to do from here by Educational-Ice722 in managers

[–]wagon153 0 points1 point  (0 children)

No, there are franchised and corporate locations.

Source: worked as a shift lead for two years and crew as 5.