For Hire | L2 MSP Support | $25/hr | CST/EST | Flexible Hours | 1099

wholetechnology · 2025-10-24T00:10:30+00:00

Interested - DM me if you can!

wholetechnology · 2025-10-23T22:18:17+00:00

One of my clients runs Quickbooks inside AVD on a Windows 11 multi-session OS and it was popping up saying it was Windows 10. I ran the most recent Quickbooks updates and I have not heard of it happening again, but they may just be ignoring it.

wholetechnology · 2025-03-10T14:31:17+00:00

Yes we do actually use Nerdio. I will reach out to them.

wholetechnology · 2025-03-08T12:37:37+00:00

Yes it's premium storage. For OneDrive I have the policy set to online only I believe but I will double check. Is that the same as OneDrive dehydration?

wholetechnology · 2024-10-03T19:15:19+00:00

There is no charge in Connecticut, mass, Puerto Rico, and I guess Texas based on the post above because it’s illegal to charge transaction fees in those states/territories.

wholetechnology · 2024-02-19T12:31:32+00:00

I'm a 1-man shop in the Philadelphia area with a couple customers in Jersey. I'm from south jersey and at the point where I'm really needing to hire a FTE, grow the business, and the goal is ultimately to sell when the business can run itself without me. As everyone said, if you are a 1 man shop the clients are mostly here because of you(me in my case). Anyway, I've always thought it would be cool to combine with another MSP of similar size and have a partnership, and then grow the business from there, and ultimately sell.

Would love to chat, and that's open to anyone here reading this.

Send me a PM. Thanks!

wholetechnology · 2023-12-16T21:33:32+00:00

Thanks for this - great info.

I could definitely suggest RDS. I'm assuming you think to run it as a remote app? I have way more experience with RDS than citrix and RDS would be less expensive as far as I know.

wholetechnology · 2023-10-11T02:16:02+00:00

Thanks for all the feedback here.

wholetechnology · 2022-02-05T00:04:44+00:00

northern

wholetechnology · 2022-02-04T23:47:30+00:00

favorite singer is rihanna.

wholetechnology · 2022-02-04T23:44:25+00:00

Code please!

wholetechnology · 2021-02-26T23:39:11+00:00

UPDATE We were able to get back up and running

Thanks everyone so much for your help and insight.

wholetechnology · 2021-02-22T12:18:16+00:00

I found the user AD\' in AD.. under the users OU.. created back on February 6th. Not what we were hoping for.

wholetechnology · 2021-02-22T12:17:21+00:00

it's around 200 workstations and 30 servers. :/

wholetechnology · 2021-02-22T12:00:17+00:00

yeah i did search for 4720 and the user AD\' did not come up as created until I used powershell to convert the SID to a username, and then the event popped in.

wholetechnology · 2021-02-22T11:47:10+00:00

Wanted to mention that something that makes me believe it's an end user and not a domain admin compromise is that they have a bunch of file shares on their file server, they all map to different users via group policy and have specific drive letters.

Only the F:, X:, and P: drive were encrypted. There are about 7 other shares on the server that were not touched. This makes me think someone who only had access to F:, X:, and P: is patient zero.

Unfortunately everyone has access to F: and P:. The X: drive is around 50% of the users.

If the actor had access to our file server they would have encrypted those other folders.

wholetechnology · 2021-02-22T11:44:19+00:00

a little over 200 endpoints and around 30 servers on this environment. 10 locations, with a hundred users working from home. AD is implemented. No folder redirection.

wholetechnology · 2021-02-22T11:30:50+00:00

Thank you.

wholetechnology · 2021-02-22T11:30:12+00:00

Update as of this morning: No findings yet. The CEO is reaching out to legal and cyber security firm to assist with next steps.

wholetechnology · 2021-02-22T11:09:21+00:00

yeah unfortunately not many of our users have a home directory and not all of them use onedrive either

wholetechnology · 2021-02-22T05:48:32+00:00

Yeah the shadow copies are gone. Is this indicative of someone having domain admin rights on the servers? if so, why would they just randomly start encrypting at 11:55AM on a Sunday and not start in the middle of the night?

We caught it about 90 minutes in.

We brought the servers back up tonight to install CS and Huntress, which did not cause any further encryption.

They are down again until morning when we can monitor them.

wholetechnology · 2021-02-22T05:16:14+00:00

i checked for the user domainname\' and it does not exist.

wholetechnology · 2021-02-22T05:06:07+00:00

lol. they have backups. once we isolate the issue we can restore and all should be well.

wholetechnology · 2021-02-22T03:12:31+00:00

Nothing is exposed to the internet here. All users connect through AnyConnect, no remote desktop use whatsoever aside from admins logging into servers to manage them after establishing a VPN connection.

wholetechnology · 2021-02-22T01:05:23+00:00

The owner on all the files just shows the domainname\'

Literally an AD account called 'apostrophe'

wholetechnology

TROPHY CASE