I have postponed the laptop/desktop updates in WSUS for a week or so until this stuff is fixed. I don't want to mess with colleagues that complain they are not able to search and find something anymore 🙂

We are a mixed shop, having Mac, Windows and different Linux flavors including some weird ones. IP is the only way for us to get everything working.

But even in a pure Windows environment, I would stick to IP. WSD is crappy. WSD + some HP Devices is a noitmare.

@JasGot said in DHCP Question...:

I guess I am going back subnet school.

I found it, it's in the faded greyed out area under the red rectangle.

There's also a lot more that can be done, especially with the credentials... storing them as an encrypted file and retrieving them for the function (function just for that, functions using other functions), keeping all the parameter data in an object to retrieve, or from CSV, etc....

It depends on how far down the rabbit hole you want to go, and how much time you want to spend making it.

Honestly, I'd do this kind of thing with a different project, but this can work too. There's a lot you can do.

@scottalanmiller said in Blank Screen After Fedora 30 Update to 5.3.5 Kernel on Dell Inspiron Laptop:

Issue returned for the last two weeks even on Fedora 31. Luckily the old F30 kernel was still there because of the lock and continued to work. But the 5.4 kernel came out today and it works again.

I've had no issues again

@stacksofplates said in How to script a process upon wake up on Ubuntu:

You could just modify the bluetooth.service to have this :

[Unit] ... `After=suspend.target hibernate.target hybrid-sleep.target` ... [Install] WantedBy=suspend.target hibernate.target hybrid-sleep.target

What file are you using?

This is what I found /etc/systemd/system/bluetooth.taget.wants/bluetooth.service

b6be4a94-06d8-4b71-9052-a6508b604f6d-image.png

@scottalanmiller said in Group Policy Object - Copy Database frontend from NAS WITH icon:

@G-I-Jones said in Group Policy Object - Copy Database frontend from NAS WITH icon:

I'm looking for an option similar to User Configuration>Preferences>Windows Settings>Files where you can copy a file from a directory directly to C:%userprofile%\Desktop, but I want to be able to include a custom made .ico.
....
Any experience or ideas?

Now if we have figured out that this is a database file, not a front end application component that is stateless, then the need and reason for copying the files makes sense. It's a stateful backend file called a front end, but that isn't a front end (facepalm)...

Then a script is one option that will be decently easy. Or a tool like Salt or Ansible will do this easily. GPO probably can, I just don't know the mechanism that would normally be used outside of just calling a script.

Yea, I'm just going to run a script for the xcopy and then configure the GPO to point to it's location as @Dashrender suggested earlier. Makes sense, and seems pretty straightforward and easy.

Didn't we have one of these threads last year?

tags - please?

@Dashrender said in Comparing a Small Server and a Printer:

The waiting for a response on those LCDs and on the web interface I'm assuming are CPU/RAM bound.

Web, maybe. LCD very unlikely. Can't be RAM bound, if that was a case you'd need swap space but printers don't have hard drives and swap space. So RAM is either enough or not enough, not fast or slow like a desktop.

CPU is possible, but displaying an LCD screen at full speed is trivial for a 486 or an M68000. So it's safe to assume that that is no the case. Web? Possible. But does the web interface impact using the product?

@Dashrender said in Is there a thing as to much security:

@IRJ said in Is there a thing as to much security:

This sounds pretty standard to me.

This is exactly the kind of tasks I would expect PC support team to do. This is pretty standard in an enterprise environment. Your environment may be a bit smaller than the typical enterprise, but still this stuff is pretty standard nowadays.

NAC is standard in enterprises? I don't work in one, and haven't in 20 years... so maybe that's the case.

I'd guess it's more likely that you'd have a LANLess setup and competely distrust the local LAN, seems a lot easier. But that's likely harder to secure when it comes to using AD.

It's all dependent on requirements. I worked in one where it was required and am in one where it isn't now. If it's ISE prob the reason for moving it is because it doesn't have the certificate when PXE booting so it can't verify. However you can override that with MAC assignments.

Congrats

@DustinB3403 said in Looking to create a 20TB RAID5 volume with SSD drives in an R720:

@dave247 said in Looking to create a 20TB RAID5 volume with SSD drives in an R720:

I'm thinking I may just go with 4 of these drives: https://www.newegg.com/micron-5210-ion-7-68tb/p/1Z4-00CB-00035

4 x 7.68TB SSD in RAID10 for 15.36TB of storage

It's SSD, use RAID5 or 6. RAID10 is going to be really expensive per GB.

yeah I just realized that... if I did 4 x 7.68TB SSD drives in a RAID5, that would give me 21TB. This might be my best option!

I like the idea of the web application firewall, and that looks like something that can setup on the same VM as what would be running Nextcloud, etc.

@JasGot said in E-911 When moving to VoIP?:

@Dashrender said in E-911 When moving to VoIP?:

yeah, in this case - if their old PBX doesn't support it - they will be required by law to get a new PBX.

Fortunately, the rules are pretty forgiving for a lot of businesses. (under 7,000sq ft).

I had to inquire about my office - we are 14,500 sqft, definitely have to split the building - at least there is a good dividing line here.

Our other building has two floors, so I'll have to split them by floors.

https://groups.google.com/forum/#!topic/wazuh/qTwOj_MQHNU

Do you have access to any remote management tools like TeamViewer, ScreenConnect, Salt, Ansible, etc.?

@JaredBusch said in I like Edge chromium so far......:

@black3dynamite said in I like Edge chromium so far......:

You can install via Chocolatey.

does this clutter up chocolatey though? because the official down load is a replacement for Edge with Credge and updates come from Windows update like normal.

Yes it would clutter up chocolatey just like Google Chrome or any other applications that can auto updates itself. Also chocolatey uses the MicrosoftEdgeEnterpriseX64.msi installer just like Google Chrome MSI file.

After it's installed, you do see it shows up in Program and Features unlike the installer from https://www.microsoft.com/en-us/edge.
7efd9e9f-7397-4830-8849-e86344c59315-image.png

@ing-joserivera26 said in VitalPBX - exts can't call each other:

@JaredBusch On Next major versions of VitalPBX, the main protocol will be PJSIP instead of SIP, due as you know SIP has been totally deprecated.

Looking forward to that!

I asked if they really had customers who would pay that amount. They said hundreds... Ummm ok, not thousands? Really?

OK peoples. I got this working both ways: LAN > ZT and ZT > LAN. The trick was to configure a source NAT, which you can only do via the command line. Along with destination NAT, a bidirectional NAT is setup. BOOM! Here's my config:

firewall { all-ping enable broadcast-ping disable group { network-group LAN { description "Switch LAN" network 192.168.50.0/24 } network-group Upstream { description "Upstream Network" network 10.1.1.0/24 } network-group ZeroTier { description "ZeroTier Network" network 10.147.20.0/24 } } ipv6-receive-redirects disable ipv6-src-route disable ip-src-route disable log-martians enable receive-redirects disable send-redirects enable source-validation disable syn-cookies enable } interfaces { ethernet eth0 { address 10.1.1.10/24 description "Local Upstream" duplex auto speed auto } ethernet eth1 { description Local duplex auto speed auto } ethernet eth2 { description Local duplex auto speed auto } ethernet eth3 { description Local duplex auto speed auto } ethernet eth4 { description Local duplex auto poe { output off } speed auto } loopback lo { } switch switch0 { address 192.168.50.1/24 description Local mtu 1500 switch-port { interface eth1 { } interface eth2 { } interface eth3 { } vlan-aware disable } } zerotier ztklh3kllj { description ZeroTier } } protocols { static { route 0.0.0.0/0 { next-hop 10.1.1.1 { description "Default Gateway" } } } } service { dhcp-server { disabled false hostfile-update disable shared-network-name LAN2 { authoritative enable subnet 192.168.50.0/24 { default-router 192.168.50.1 dns-server 192.168.50.1 lease 86400 start 192.168.50.38 { stop 192.168.50.243 } } } static-arp disable use-dnsmasq disable } dns { forwarding { cache-size 150 listen-on switch0 name-server 10.1.1.1 } } gui { http-port 80 https-port 443 older-ciphers enable } nat { rule 1 { description "ZeroTier DNAT" destination { group { network-group ZeroTier } } inbound-interface ztklh3kllj inside-address { address 10.1.1.10 } log disable protocol all type destination } rule 5000 { description "ZeroTier SNAT" log disable outbound-interface ztklh3kllj outside-address { address 10.147.20.1 } protocol all source { group { network-group Upstream } } type source } } ssh { port 22 protocol-version v2 } unms { disable } }