** Official IT Thread ** - Come in for some tech!

[seanb1979]

In my current environment we are 100% virtual, so I use Veeam Backup & Recovery. Because of the amount of data we have, it was actually cheaper for me to build out one of our offsite branches as a private cloud storage for my offsite/long term retention. I was looking into Amazon S3/Glacier and Microsoft Azure Block Blobs prior to making that decision though.

i had a problem with veeam working on a couple servers lately and most of their support was somewhat clueless so it makes me worry.. most people i know who use veeam use it with vmware and it seems a lot more stable there... i considered doing offsite veeam replication - is it easy to setup? i havent really started to research it yet.. amazon s3 seems the easiest since most NAS devices support it, and you can just store your backups there and have a nice disaster recover repository for fairly cheap

and after hours of failed troubleshooting with their support, the fix was to install a trial of altaro hyperv backup.. somehow it changed/reset something with the vss writer and hyperv requester service and they automagically started working

[da2ricky]

500+ users huh? That's cute.

Now tell me how you would respond to a request for a single file in an environment of 2 million users and 100 terabytes of data over 100+ locations world wide and still be able to audit secure file access for SOX compliance?

Your 4 requests every 3 months just turned into 40 a day and it would take you a year to audit something that should take you 20 minutes.

I love how you think you know everything. I think I am going to unsubscribe from this thread if you are the main poster here.

Best practice documented in books and what we get tested on was created in a vacuum. A perfect environment, of which there is no such thing in the real world.

The majority of your posts (at least the ones in response to people ITT) make you sound like a condescending *******.

How about this weather?

[seanb1979]

The majority of your posts (at least the ones in response to people ITT) make you sound like a condescending *******.

How about this weather?

****ing hot, im already ready for fall

[Ace Thedics]

Stupid question but is there any particular reason why people opt to run apache daemons on Windows Server boxes? Is it just because it's easier to stand up?

Why not have IIS handle it? Just seems unorthodox.

[seanb1979]

Replication and offsite back copies are super easy. To minimize wan traffic I just seed it by backup copy to and external USB drive and copy it to the target proxy server and reconfigure the job, but you can do it directly over the wan if you have the bandwidth and your backups are not too big.

I think most people do, and veeam recommends, creating one job for all your servers to get the best compression and deduplication, but if you have a lot of servers this doesn't really make sense. I create a separate job for every server and then use server 2012 deduplication on the repository drive. This gives me more granular control and if I were to use cloud storage, would reduce costs if I ever did have to recover a backup for only one server.

I think that if you don't have a **** ton of data like I do cloud storage is a good option. I was leaning toward Microsoft Azure because amazon hits you with insane transaction fees and unless you are using Veeam B&R cloud, I believe you need their gateway appliance.

We are on vsphere so, no experience with using it for hyper-v, but I have had vss issues once and it was because the previous engineer never uninstalled the net backup agent from one of the legacy servers.

at this client they have 100mb upload, but the total backups are like 3tb... for now I'm just going to go with old school offsite external drive swapping since they dont want to pay for cloud backups. and yes i have a separate backup job for each VM, although no replication setup yet... i just took over this client 2 months ago and have been ironing out a lot of crap

and yeah, no conflicting vss providers/writers on this server.. veeam's most senior tech was stumped, and i was almost going to reload which sucks since this is a crucial server that a lot of people use for a lot of apps, but luckily altaro somehow fixed it

[Iczer]

I rarely, VERY rarely ever had to modify permissions on a single file. There's a reason for separate departments/teams. Everything is organized by folder and groups. If it was a file that different people needed access to then they could use a more centralized location on a file server and request access be locked down, in turn we'd create a new group for that folder. Touching individual files just seems crazy.

I think we're 90% virtualized, thankfully I don't have to handle the backups. We use Avamar image level backups. They've gotten better over the years, but since I don't handle them I get no say in who we pick.


Anyone working on automation at all? This last year i've basically been thrown into automation with VMWare using vCAC...now known as vRealize Automation. Professional services were a waste of time, we had to figure it out on our own. Pretty nice feeling when you have everything up and going, answer a few questions and in 35 minutes a server pops out and is completely built to company standards/policies.

[depaulhifi]

Just think how much work you would have to do to run a secure file access report. Do you want to have to recursively scan every single file and export the ACL or just export the group memberships. Ultimately it is the owner of the secure directory to approve access requests and ensure the members it approves doesn't have access to sensitive data. In my last job I spent a year removing direct user ACLs and aligning department folders with security groups on literally trillions of folders and files. The **** was so thick, solid, tight when I was done I actually allowed directory owners in the business to approve and manage their own security groups and reduce my operational load by over 20%. If you a engineer, the last thing you want to be taking up your time is daily operational tasks. Get the process perfect, then train and offload to a lower tier.

Ok, so your super thick, solid, tight system is all well and good, with access granted based on groups/roles... so what do you say when a VP- or C-level tells you that so-and-so is being groomed for a new position and needs access to a file outside their group/role?

"No" ???

GTFO.

[depaulhifi]

What was it? "You're paid to figure it out, so figure it out."

If you are not in a position where you can say no to a VP, you haven't made it yet.

Can I say no to a VP? Of course I can. Is it in my best interest, as well as those of the company to do so? Not usually.

"Sorry Bob, looks like you're not getting that promotion after all; IT guy won't give you access to the spreadsheet. Sorry about that."

[seanb1979]

I rarely, VERY rarely ever had to modify permissions on a single file. There's a reason for separate departments/teams. Everything is organized by folder and groups. If it was a file that different people needed access to then they could use a more centralized location on a file server and request access be locked down, in turn we'd create a new group for that folder. Touching individual files just seems crazy.

I think we're 90% virtualized, thankfully I don't have to handle the backups. We use Avamar image level backups. They've gotten better over the years, but since I don't handle them I get no say in who we pick.


Anyone working on automation at all? This last year i've basically been thrown into automation with VMWare using vCAC...now known as vRealize Automation. Professional services were a waste of time, we had to figure it out on our own. Pretty nice feeling when you have everything up and going, answer a few questions and in 35 minutes a server pops out and is completely built to company standards/policies.

that sounds pretty amazing, although a bit counterintuitive to my billing strategy haha... i might have to check that out, although all my clients have hyperv or old school standalone servers

[seanb1979]

Can I say no to a VP? Of course I can. Is it in my best interest, as well as those of the company to do so? Not usually.

"Sorry Bob, looks like you're not getting that promotion after all; IT guy won't give you access to the spreadsheet. Sorry about that."

I always recommend that if a client wants to give someone access to a set of files, that they simply belong to a department that has access to those files. Of course sometimes you need to give an individual access to something, but I hate doing that too often. It becomes very messy in AD so I prefer to just use group access and then add users to the appropriate groups. But yeah you need to be flexible - in the end, we're simply a tool of whoever signs our check.

[Rectify]

Since you actually replied without being rude I will give you a real answer.

Right, you are not good at your job if you ever have to say no without being able to provide an alternate solution.

You have not set up your data security structure correctly if your solution is to modify a file's ACL. It should be 100% centrally managed because if you are a public company, your security will be audited regularly. If Bob is entering a new role, why would he only need access to one file amongst other files that he should not have access to? He wouldn't. Regardless, those sensitive files should be stored in their own restricted folder further locked down by their own security group. Even then my policy is to never secure a folder more than 3 levels deep, so they have to move a folder below that closer to the root.

I will say it again, it is the responsibility the secure directory owner to ensure that sensitive data is not co-mingled with non-sensitive data, not yours. We have no idea what the content of those folders are. The secure directory owner says that you cannot give Bob access to the whole folder, then you have to work with him to restructure the directory and security groups, so that it still aligns with your security best practices of central management. If you say ****-it and just modify the ACL, you are taking the easy way out and you will pay for it in the long run.

This topic has now been beat to a dead horse now. I can't believe the two of you took offense that I said modifying a file ACL is not a good idea. I didn't come here to argue, I came here to help. You can either take advantage of my vast knowledge and experience or not.

This is pretty much how my boss taught me to do it also. He's a bit of an infosec-type nut and cares a lot about structure and control when it comes to data.

We would rather create a new security group for whatever role/purpose/project is needed and apply that to the folder(s), rather than start messing with individual file permissions. The only difference is that i might go a little deeper than 3 levels, but this doesn't really cause issues currently, since we're a small company. As we grow we'll obviously end up restructuring all our systems/processes/policies as the need to scale things like this becomes more and more important.

Though now you mention it, maybe i should at least implement a policy of "how deep" we should go, even if it's just to make it easier to know where the ACLs are in place if/when they need altering (without having to export ACL lists to know this).

[Inclination]

Is it possible to write a script that can read through an excel file and also "click" buttons and fill spaces and read information from a web browser? There's this very very repetitive task that my team and I do at work and each request takes like 30min-1hour to process which can be brought down to at most 5 minutes if automated because you can only do one little step at a time.

[Ace Thedics]

Is it possible to write a script that can read through an excel file and also "click" buttons and fill spaces and read information from a web browser? There's this very very repetitive task that my team and I do at work and each request takes like 30min-1hour to process which can be brought down to at most 5 minutes if automated because you can only do one little step at a time.

Yep, with Vbscript. Question is - which one of you is gonna write it

[jerzyfit]

This thread just turned into a fighting battle. I'm not exactly sure what I expected considering it's the misc. If anyone else is willing to make a thread, let me know. Considering deleting this thread sometime today.

[depaulhifi]

This topic has now been beat to a dead horse now. I can't believe the two of you took offense that I said modifying a file ACL is not a good idea. I didn't come here to argue, I came here to help. You can either take advantage of my vast knowledge and experience or not.

Dude, I'm a DBA, I don't GAF about directories and permissions and chit anymore lol. I didn't take offense to anything you said, but rather how you said it. You come across as a pompous, control freak, typical IT-guy know it all jerk. I don't doubt you know your chit, but you don't have to get so high off the smell of your own ACL farts that you can't engage in meaningful discussion with someone with a differing point of view.

Take some Dale Carnegie classes, srs bro.

[omnip0tent]

I haven't been reading cuz as all internet threads it turns into a micro penis battle.


ON ANOTHER NOTE.... Anyone looking for entry level jobs, tiger direct is a JOKE.
Cliffs:
-Applied for PC tech
-Interview for PC tech (get asked if I want sales position instead cuz im so personable, say NO absolutely NOT.)
- Asked to come back for 2nd interview with GM for PC tech (supposed to be just Meet-N-Greet)
- GM wastes an hour of my life trying to convince me why sales would be great and either way I'd need to do 1-2 months on sales floor "to learn the store, and merchandise, etc" AND tells me PC techs make $10/hr
- I kinda lol and leave... thanks for wasting my time... How do u apply for PC tech, go to 2 interviews... and get offered a sales position?
- FCK THOSE F4GS

[jerzyfit]

I haven't been reading cuz as all internet threads it turns into a micro penis battle.


ON ANOTHER NOTE.... Anyone looking for entry level jobs, tiger direct is a JOKE.
Cliffs:
-Applied for PC tech
-Interview for PC tech (get asked if I want sales position instead cuz im so personable, say NO absolutely NOT.)
- Asked to come back for 2nd interview with GM for PC tech (supposed to be just Meet-N-Greet)
- GM wastes an hour of my life trying to convince me why sales would be great and either way I'd need to do 1-2 months on sales floor "to learn the store, and merchandise, etc" AND tells me PC techs make $10/hr
- I kinda lol and leave... thanks for wasting my time... How do u apply for PC tech, go to 2 interviews... and get offered a sales position?
- FCK THOSE F4GS

Trust me bruh, I didn't intend for it to end up this way. The first couple of pages were awesome. After that, it turned into a little pee-pee battle. Oh well I suppose, can't expect more.

I'm sorry that happened man. Keep busting your arsh and studying at home. Get as much studying done as you can.

[jerzyfit]

It rustles my jimmies that you started all this by being a douch first and can't take being proven wrong, but whatever, not going to waste my time here ay longer. I've deleted all my posts. Feel free to keep the thread open.

If you don't wanna waste your time anymore, why are you still posting? Dude, I WANT people to prove me wrong. You know why? Because that's how you learn. No one knows everything, INCLUDING you.

[jerzyfit]

To let you know you don't have to delete the thread because of me, *******.

I want to delete it because it turned into a cuark size contest. You're 35 years old and you're talking chit to a bunch of 20 something year olds. You must be a real tough guy. IT is one of the most argumentative fields because there are 1,000 ways to do something. I gave my perspective and you just started talking chit.

[pondus_levo]

I want to delete it because it turned into a cuark size contest. You're 35 years old and you're talking chit to a bunch of 20 something year olds. You must be a real tough guy. IT is one of the most argumentative fields because there are 1,000 ways to do something. I gave my perspective and you just started talking chit.

Okay Mr. "I wouldn't wanna step foot in that network."

[jerzyfit]

Okay Mr. "I wouldn't wanna step foot in that network."

What does that have to do with anything? There are a lot of networks I wouldn't want to step foot in. I'm in a field that I'm lucky enough to pick what type of environment I want to be in. Why is that so bad?

[pondus_levo]

What does that have to do with anything? There are a lot of networks I wouldn't want to step foot in. I'm in a field that I'm lucky enough to pick what type of environment I want to be in. Why is that so bad?

Because in the context, it seemed like you were referring to MY network, and I thought it was very disrespectful and uncalled for.

[seanb1979]

Trust me bruh, I didn't intend for it to end up this way. The first couple of pages were awesome. After that, it turned into a little pee-pee battle. Oh well I suppose, can't expect more.

I'm sorry that happened man. Keep busting your arsh and studying at home. Get as much studying done as you can.

this is my experience with a lot of IT professionals I've met from everywhere..... not everyone is like that, but a lot of them identify so much with their job that they want to get into pissing contests constantly with other techs... i sort of just come to expect it... my tech abilities are decent but not stellar and i rely more on my interpersonal skills, so ive never really identified with the people who get into those ego measuring battles

[seanb1979]

also, anyone here had an issue with a 2008 rds server not updating licenses per user properly? it just started and i cant figure out why... the client is using a 2003 domain functionality level and im considering migrating to a new primary dc and raising it to at least 08, but im not sure it has anything to do with the errors.. permissions in AD all seem to be correct

[jerzyfit]

this is my experience with a lot of IT professionals I've met from everywhere..... not everyone is like that, but a lot of them identify so much with their job that they want to get into pissing contests constantly with other techs... i sort of just come to expect it... my tech abilities are decent but not stellar and i rely more on my interpersonal skills, so ive never really identified with the people who get into those ego measuring battles

It takes 10,000 hours to master something bruh. I don't think any is ever TRULY an expert at ANYTHING. I know someone who's been doing Cisco for 20 years. EVERYONE goes to him for Cisco. HE doesn't even walk around like "yeah, I'm an expert"

[jerzyfit]

also, anyone here had an issue with a 2008 rds server not updating licenses per user properly? it just started and i cant figure out why... the client is using a 2003 domain functionality level and im considering migrating to a new primary dc and raising it to at least 08, but im not sure it has anything to do with the errors.. permissions in AD all seem to be correct

Probably a good idea regardless considering end of life is creeping up.

[pondus_levo]

Because in the context, it seemed like you were referring to MY network, and I thought it was very disrespectful and uncalled for.

It takes 10,000 hours to master something bruh. I don't think any is ever TRULY an expert at ANYTHING. I know someone who's been doing Cisco for 20 years. EVERYONE goes to him for Cisco. HE doesn't even walk around like "yeah, I'm an expert"

Anyhow, I really did come here to help, not come off condescending *******, so sorry if I mistakenly took offense to what you said.

[jerzyfit]

Anyone mess with the tech preview of Server 2016?

[jerzyfit]

Server 2016?? My school was using 2008 (not even R2) 4 months ago.

Yup, 2016.

[Yeahibench]

So I had my first annual review at my job(liberty healthcare IT helpdesk). Our IT department consists of 2 helpdesk, 2 net admins, one system admin, 2 developers and 3 "level 2" techs.

At the end of the review I asked so what is the possibility of moving up and it was basically put as not a possibility without someone leaving, or if the VP of our department saw the need for it. I know if one of the level 2 techs left i'd have the position easily as they promote from within but I just don't want to wait as I am already at their skill set or higher(get asked stupid questions on a daily basis by them)

Both my managers say they love my work and my review was all positive and they are going the extra step to get me a better raise than what the company standard is. I recently have been marked as a full time employee with benefits.

My question is what would you guys do in this situation?
I'm only making 20k a year with an associates in network administration degree. Don't have any certs yet, but i'm pushing myself to get them.

Any advice appreciated.