Starting on Server 2012 you can have as many SSLs on your IIS Because of SNI support as you want however anything OS than that you can have multiple SSLs but won’t be able to apply them to different sites. I use certifytheweb for Let’s encrypt client with Windows Servers and it works beautifully with Exchange, RDS servers, Application Servers and even internal servers as they use DNS Verification.

@Pete-S said in sftp without ssh shell access?:

Thanks guys.

To summarize the link above, it's these lines in sshd_config that does the magic.

Match User sftpuser ForceCommand internal-sftp <snip>

The first line will tell sshd what user(s) the rest of the settings apply to.
The second line tells it to go straight into sftp mode. So this will only apply to the users that match the rule above.

Just make sure to test SSH after you do the changes ok a new session otherwise you might just have broken SSH access.

@scottalanmiller I haven't used them, but from what I hear it's only network storage. I could easily build something that would be faster for less money.

@Obsolesce said in MFA - who pays for authentication solution?:

@JaredBusch said in MFA - who pays for authentication solution?:

@Dashrender said in MFA - who pays for authentication solution?:

@stacksofplates said in MFA - who pays for authentication solution?:

@Dashrender said in MFA - who pays for authentication solution?:

@stacksofplates said in MFA - who pays for authentication solution?:

@Dashrender said in MFA - who pays for authentication solution?:

@IRJ said in MFA - who pays for authentication solution?:

Why not just supply hardware tokens? They are not that expensive.

for multiple sites? Just what everyone wants, a pocket full of tokens.

EHR
email
2nd EHR
3rd EHR
4th EHR
5th EHR

it's PHI so I could easily see insurance companies at some point also requiring it, so that could be another 20.

This is a joke right? You can use a token across multiple sites. Especially Yubikeys.

yeah I know you can with something like a Yubikey - but that assumes that the site supports Yubikeys -and our EHR only supports Symantec VIP tokens - super lame!

I'd argue it might work anyway. Yubikeys support up to 31 or so OATH-TOTP codes (like an RSA token or Google auth app type token). It also supports any number of u2f applications and two slots for TOTP/HOTP, hmac-SHA1, and GPG keys.

As long as the VIP tokens use some standard for the way it generates the TOTP token you can scan it/enter it with the Yubikey Authenticator app and have it manage that.

Interesting.. thanks.

It is the same for using Authy instead of Google Authenticator. A lot of sites only say Google Authenticator, but they all use standards, thus Authy works just fine.

Exactly. Anything that says it uses Google Authenticator, can also use MS Authenticator. Same standards as JB said.

That part I know, but Symantec VIP uses their own what they call credential IDs, it's not a generic number like GA or MS auth uses... but I'll have to dig into it to see if it's cross compatible.

@Dashrender said in Weird thing on O365 account:

@Kelly said in Weird thing on O365 account:

@Dashrender said in Weird thing on O365 account:

Alright, the user has confirmed that she made changes yesterday, and those change could associate with GMT based time.

Anyone know if the logs are only/mainly in GMT?

Almost all O365 logs are UTC 0 regardless of the timezone of the server or requestor.

yeah, OK that makes the time line up for when the user added the rules, I'm just curious why it took MS 6 hours to send the noticed of alert?

They batch some of their processes, so it may have had to wait for the group to run rather than being on demand/occurrence.

@JaredBusch said in Installing Windows 10 without a Microcoft account:

@computerchip said in Installing Windows 10 without a Microcoft account:

@Dashrender I did an install last weekend of a freshly created usb installer from MS website, and there was no option to create local for the home version.

Do not connect to the network during setup is the only way around that on a home install now.

Yep,

@magicmarker said in Renaming a Hyper-V Host:

@PhlipElder said in Renaming a Hyper-V Host:

@magicmarker said in Renaming a Hyper-V Host:

I want to rename a Hyper-V host to comply with a new server naming scheme. The Hyper-V host runs 2 production servers that are replicating to another host along with being a host that other Hyper-V hosts replicate to. I’ve been unable to find anything that says this not a good idea or explaining what this can break. If this can break things, or is a hassle, I’ll leave the name alone. I don’t know how the Hyper-V replication handles a host name change. Has anyone renamed a Hyper-V host?

How is Replica set up? HTTPS or are both members of the guest's domain?

Off the top the rename would break things either way. With the need to re-establish replication the existing replicated data should be okay to use as a seed.

Replica is setup on HTTP. I'm leaning towards not renaming the host. Seems like it will not be worth the effort.

Not HTTPS so not using certificates? It's not much of a chore if straight HTTP.

That being said, if it is HTTPS then the certificates need to be generated, seated, and applied again to get them happy with each other.

It's the capability of the device to be hot-swappable. Purchasing one then adding another for some other time for a proper set-up is possible.

@black3dynamite said in Disable update checks in the Nextcloud client (windows):

@JaredBusch said in Disable update checks in the Nextcloud client (windows):

jsut upgraded a system from 2.5 something. I made sure the key was set first.

after the upgrade it is gone.

37ce8b3e-b622-417f-9771-e93c6f5d7f78-image.png

What a pain in the ass.

Where did you add the registry key?
HKLM\SOFTWARE\Policies\Nextcloud GmbH\Nextcloud?

I did not add the second key because that was to prevent user override? My users don't have admin rights so even if they attempted ot override, it would never work.

If your nginx reverse proxy is on Fedora, confirm that SELinux isn't denying anything.

sudo tail -f /var/log/audit/audit.log | grep 'denied'

Theoretically there could be a link aggregator somewhere down the line that is putting loads of smaller connections together to create this effect by accident.

@Pete-S said in Opinions on POS/label printers?:

@Dashrender said in Opinions on POS/label printers?:

@Pete-S said in Opinions on POS/label printers?:

@scottalanmiller said in Opinions on POS/label printers?:

Any reason not to look Dymo? We like them a lot.

Does Dymo make standard thermal transfer printers? I thought they only made printers that would print on their own media.

What does this mean? I have Dymos all over, we buy non Dymo branded labels from Amazon and they work fine. Is there something special about that type of label though?

What I meant was that Dymo makes printers that takes Dymo labels. Sure other might make compatible labels but that is not what Dymo had in mind. Dymo sells their printers because they want you to buy their labels (which is where they make money).

Zebra and others on the other hand makes generic printers that take standard size media - just like an office printer takes "letter" size paper.

OK I getcha... like Keurig tried to pull with scanning a barcode on coffee pods - total fail! People will do damned near anything to override your lock-in when possible.

@scottalanmiller said in Making an RDP Terminal Server with Ubuntu Linux:

I recommend the Remmina RDP client tool, it's the bomb.

I love Remmina as a client.

@JasGot said in Exchange 2010 (On-prem) Migration to Hosted Exchange/Office 365 Planning:

@wrx7m How did your migration go? Have you done any more? Just curious what tools (if any) you used......

I'm about to start a migration and need to decide if I am going to do it as a pst import, or a migration from on premise exchange to cloud, and if so, do I use the built-in migration tool at admin.exchange.microsoft.com or a third party tool.

I am interested in what you did and what the pros and cons were.

Thanks!

Ended up doing a migration using the standard MS tools. Been a few years now and am glad I did it.

@RojoLoco and that's what I appreciates about you RL.

@DustinB3403 said in Office 365 Suite - User Licensing T&C:

And what I specifically was hoping someone had a link for was to MS's license or T&C saying that "no you can't share an account for multiple people".

Obviously this doesn't exists since the way the software is procured is per user.

Right, they won't repeat it because they have it in writing already. But you can always show that it is 1) assigned to a named user 2) at the time of procurement you have to agree to a single human.

That's better than any T&C link.

@scottalanmiller said in BitWarden - Self Hosted for many users:

@IRJ said in BitWarden - Self Hosted for many users:

@scottalanmiller said in BitWarden - Self Hosted for many users:

@IRJ said in BitWarden - Self Hosted for many users:

You can however use an unofficial Bitwarden server fork that is free.

Is it a fork? Looks like a separate project.

Yeah, you are right. I didnt know much about it. My coworker uses it for his personal server and really likes it. When I saw this thread I asked him about it again so I could help @Kelly clear things up.

Looks perfectly nice, wish it had more of a "showing it off" website.

He says its actively maintained and follows BW updates pretty frequently.