@EddieJennings said in What Are You Doing Right Now:

@dbeato said in What Are You Doing Right Now:

@EddieJennings said in What Are You Doing Right Now:

Just learned that System Center Endpoint Protection exclusions lists don't like the %exchangeinstallpath% variable.

So what will you be using instead?

Apparently, you can import a template with the variable and all is fine. Also, it appears to only complain for excluded processes. So I followed the advice of an article and input stuff with the extra , exported it, removed the , and imported.

That is good to know!

@ccwtech said in Computers not syncing with Domain Controller. Is my GPO blocking it?:

Computers in a domain are not syncing time with the Domain Controller (Hyper-V). They are all set to the local CMOS clock.

I had to restrict the ability for local users to change time by themselves. Is the GP that I created preventing the computers from syncing to the domain?

The time can be in different zones and not affect connectivity to the domain as long as it is 5 minutes from the DC time via UTC. Now I would really make the computers to just point to the DC as their NTP Server instead of anything else.

@wrx7m said in What Are You Doing Right Now:

@wrx7m said in What Are You Doing Right Now:

Finished Wazuh installation. Now, adding all the agents to the new server API.

7 servers to go

no automation for that ?

@wirestyle22 said in What are you using to track daily tasks?:

I am currently using Asana to track my day to day tasks but I'd like to find something self-hosted and open source if possible.

We use Kanbanflow although not entirely free works for us and the web team/developers.

@Jimmy9008 said in What Are You Doing Right Now:

Just finishing off agreeing and signing a new job! Exciting news

Congratulations!

On a domain, it is kinda of hard to get the accurate logon date if you have multiple DCs and the attribute syncs randomly as users connect through Different DCs in that same manner even if you had only one DNS Server setup.

@brandon220 said in Random Thread - Anything Goes:

I witnessed a person put RDP open to the internet on a new server and used Admin* as the password. Server was hit with ransomware in less than 2 days. Needless to say, they had to start over.

Wat!

@pchiodo I will be there, although I am not as familiar face. I will be arriving on Sunday.

@StuartJordan said in What Are You Doing Right Now:

I know the company is frowned here but I Was using Proxmox earlier that a client has, not going to lie, I loved using the interface....

I used to use it before I moved to XCP-ng (on a lab).

Not sure what you went through and where you are but we have had barely that experience and the ProSupport team is based in the US. Now you can ask for a manager which is something I have needed to do when issues were not resolved or had delays but for the most part it has been great.

@WrCombs said in What Are You Doing Right Now:

@dafyre said in What Are You Doing Right Now:

@gjacobse said in What Are You Doing Right Now:

@WrCombs said in What Are You Doing Right Now:

my phone has rang 6 times today based all on Health Insurance - I have insurance !!! why do they keep calling me.
It's all recordings too ! like wtf.

not that many today, but I'm using the AT&T Call Blocker - and report then block everyone of the number.

I've been using the Google Call Screener. Since I started doing that, the number of calls I get has dropped drastically.

ooo.. app store?

No, the Pixel (I have the Pixel3) have it. Not sure about others.

@scottalanmiller said in Outlook Out of Memory to Open Large Folder:

@dbeato said in Outlook Out of Memory to Open Large Folder:

It would be like expecting a Linux end user to do bash and work on the command line, doesn't seem to be different in my eyes.

I'd say even worse. BASH commands are trivial compared to Regedit. Regedit is difficult to explain, takes many steps, and is not repeatable.

BASH commands can be copy/paste.

And even still, expecting Linux end users to open a shell is ridiculous.

But some programs do ask for it. Microsoft can however make a line for that registry change too, they just make it with more steps since it is a GUI that is doing the changes.

@scottalanmiller said in What Are You Doing Right Now:

Dealing with another ransomware event. This is getting "fun".

With another customer?

@siringo said in W10 VPN connection via iPhone = Grrr:

I'm having lots of trouble trying to VPN from Windows 10 when tethered to an iPhone running iOS 12.0.1.

I'm using IPSec but getting nowhere. When tethered to my Android phone I have no problems, but the iPhone just will not work.

I know there are lots of variables, but first I'd just like to know if this is at all possible?

Do I have to upgrade/update anything? Is this a known issue?

Thanks for any help.

So what are the errors you are seeing? Since Iphone would not cause this.

@StuartJordan said in What Are You Doing Right Now:

Just signed up for this webinar, looks like an interesting one:
https://xcp-ng.org/blog/2019/03/07/full-vdi-stack-xcp-ng-xen-orchestra-uds-enterprise/

Yeah, I just got that email too

@aaronstuder said in Synology High-Availability Cluster:

you trust it, or am I better to just rsync the data ever so often?

I trust rsync better for this, a lot of times the SYnology Syncing or HYpervBackup files

@JaredBusch said in What Are You Doing Right Now:

@scottalanmiller said in What Are You Doing Right Now:

Just back from a 3.14m walk.

3.14 meters? To the fridge?

Lol, hahaha this made tonight for me hahaahahha

In a windows environment with AD I setup a domain CA and all the servers and devices get an internal SSL that is trusted by the devices joined to the domain. That's the only use I do for internal SSLs but it takes some time to setup though.

Installing more Wyze Cams

@emad-r said in Proxies as VPN?:

@emad-r

They are using reverse proxy squid on a PFsense router as VPN. or to access company resources.

For example, I think they made LAN 7.7.7.* and put company resource like http://web/company
and only 7.7.7.* can access it in the config on PFsense.

It does not work 100% of course. As you can bypass it if you do http://web/company?32141 and access it from WAN

So you will need a Firewall Access Rule then, just allow that network to access that site from their WAN Connection, no need of Proxy or VPN. Just limit the site access.