Enterprise Microsoft Q&A: Hello for Buttprint

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > Enterprise Microsoft Q&A: Hello for Buttprint

«‹›260 »

Thanks Ants: May 21, 2004; #essereFerrari

Everything that would only really have a use in 'Enterprise' is unmitigated poo poo.

# ? Jul 28, 2014 22:21

Adbot: ADBOT LOVES YOU

# ? Apr 25, 2024 08:24

vanity slug: Jul 20, 2010

If you have a GPO that overrides the local users / groups, then you're also going to lose them.

# ? Jul 28, 2014 22:40

Yaos: Feb 22, 2003; She is a cat of significant gravy.

Jeoh posted:

If you have a GPO that overrides the local users / groups, then you're also going to lose them.

You mean with restricted groups or something else?

Edit: I did discover that DNS may be an issue though. Right now everybody is setup with computername.location.local(not the real name), and when I join the domain this changes to computername.domain.local(again, not the real name). Since nobody has domain.local as a search suffix the name does not resolve. I'm not a DNS guru so I've asked our network admin what he thinks I should do in this situation. I'm hoping something can be done in DNS to make it resolve.

Yaos fucked around with this message at 23:02 on Jul 28, 2014

# ? Jul 28, 2014 22:56

vanity slug: Jul 20, 2010

Yaos posted:

You mean with restricted groups or something else?

Yes

# ? Jul 28, 2014 22:58

Yaos: Feb 22, 2003; She is a cat of significant gravy.

Jeoh posted:

Yes

That's good to know, I don't think this will effect this server though, maybe. We do have restricted groups setup, but when I tested the change on my test server I was still able to access the server with .\mylocallogon, so I'm fairly certain that won't cause a problem, I hope. :eek:

Yaos fucked around with this message at 23:09 on Jul 28, 2014

# ? Jul 28, 2014 23:04

incoherent: Apr 24, 2004; 01010100011010000111001
00110100101101100011011
000110010101110010

Cpt.Wacky posted:

Is there an industry name for this type of product? Are there any that don't suck?

http://www.proofpoint.com/products/privacy/index.php

I would guess it's enterprise grade files sharing. I got the company from one of their emails. (Spoiler: My users are too dumb to read the simple direction and I get them :/)

# ? Jul 28, 2014 23:19

Docjowles: Apr 9, 2009

Yaos posted:

You mean with restricted groups or something else?

Edit: I did discover that DNS may be an issue though. Right now everybody is setup with computername.location.local(not the real name), and when I join the domain this changes to computername.domain.local(again, not the real name). Since nobody has domain.local as a search suffix the name does not resolve. I'm not a DNS guru so I've asked our network admin what he thinks I should do in this situation. I'm hoping something can be done in DNS to make it resolve.

You should be able to add search suffixes through Group Policy and/or DHCP.

edit: actually it looks like maybe Windows doesn't support setting it via DHCP :confused:

You can definitely do it with a GPO though.

Docjowles fucked around with this message at 23:42 on Jul 28, 2014

# ? Jul 28, 2014 23:35

Yaos: Feb 22, 2003; She is a cat of significant gravy.

Docjowles posted:

You should be able to add search suffixes through Group Policy and/or DHCP.

edit: actually it looks like maybe Windows doesn't support setting it via DHCP You can definitely do it with a GPO though.

You have to manually add the option for it, might only be 2003. http://technet.microsoft.com/en-us/library/dd572752(v=office.13).aspx Problem is that means going around and doing ipconfig /renew. I can't do it through a GPO since they are not on AD yet, and if I go to the computer it may be easier just to go into network connections and do it there.

I'm thinking a trip to 26 computers that are connected to the server is in my future.

I'm thinking I may just move everything over to another server which may also be an equal pain in the rear end, not sure yet. I'm on VMWare so I should just be able to add a second hard drive and give it all the space it needs. I didn't want to do this because the only server I can move it to is also the print server, although it's not in use yet but I already have all the printers installed. I'll have to check what resources I have on it tomorrow. Nobody is using the print server yet so maybe it will all work out for me.

Yaos fucked around with this message at 23:55 on Jul 28, 2014

# ? Jul 28, 2014 23:47

hihifellow: Jun 17, 2005; seriously where the fuck did this genre come from

I swear the domain suffix gets listed as a search suffix automatically upon joining a domain, as in doesn't get listed in the search suffix list under the advanced TCP/IP settings for the adapter so you can't even remove it automatically.

But yes you can add suffixes using GPO, I use it for a bastard site that sits on another org's network and uses a VPN to get home; they're domain joined but still have to access resources on that other org so they needed that suffix in there.

edit: bleh took too long writing a reply. Comments in that link say windows clients don't accept DHCP option 119 anyway. With only 26 PCs you're not saving a whole ton of time anyway.

hihifellow fucked around with this message at 00:02 on Jul 29, 2014

# ? Jul 28, 2014 23:58

CLAM DOWN: Feb 13, 2007

hihifellow posted:

I swear the domain suffix gets listed as a search suffix automatically upon joining a domain, as in doesn't get listed in the search suffix list under the advanced TCP/IP settings for the adapter so you can't even remove it automatically.

I'm pretty sure this isn't automatic, I know there's a GPO for the suffixes and this registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Dnscache\Parameters\DomainNameDevolutionLevel

But I don't believe it's automatic on domain join unless I'm just forgetting.

e: Oh whoops, I was thinking of the suffix search order list, not the actual suffix setting that does change when you join a domain, sorry!

CLAM DOWN fucked around with this message at 00:18 on Jul 29, 2014

# ? Jul 29, 2014 00:02

Thanks Ants: May 21, 2004; #essereFerrari

The domain suffix is added through a domain join and also provided in a DHCP offer, but that doesn't let you specify multiple options.

# ? Jul 29, 2014 00:18

Zaepho: Oct 31, 2013

Yaos posted:

You have to manually add the option for it, might only be 2003. http://technet.microsoft.com/en-us/library/dd572752(v=office.13).aspx Problem is that means going around and doing ipconfig /renew.

Add it to DHCP now, next time they renew they should get the updated info if I recall correctly. If your renewal times are sane it means doing it a day ahead takes care of this issue. If the lease times are less sane, a week early.

# ? Jul 29, 2014 01:00

Yaos: Feb 22, 2003; She is a cat of significant gravy.

Zaepho posted:

Add it to DHCP now, next time they renew they should get the updated info if I recall correctly. If your renewal times are sane it means doing it a day ahead takes care of this issue. If the lease times are less sane, a week early.

I set it to add it but I will have to check my DHCP lease time but I'm pretty sure it was set to a week.. One problem is a time limit coming up. We access data covered by CJIS rules and in September we are required to have multi-factor authentication or the state cuts us off. We decided to do this with DigitalPersona and fingerprint readers which authenticate against AD. I'm doing this now instead of a year ago because the previous admin did nothing to implement it.

Thanks for all the help and advice everybody. Hopefully DHCP can take care of this for me.

# ? Jul 29, 2014 04:22

hihifellow: Jun 17, 2005; seriously where the fuck did this genre come from

DHCP leases are renewed when the lease is halfway to expiring, if it is a week they'll get it in 3 1/2 days.

# ? Jul 29, 2014 10:00

Zaepho: Oct 31, 2013

hihifellow posted:

DHCP leases are renewed when the lease is halfway to expiring, if it is a week they'll get it in 3 1/2 days.

This is absolutely true.

Yaos posted:

I set it to add it but I will have to check my DHCP lease time but I'm pretty sure it was set to a week..

Consider taking this opportunity to drop the lease time as well. Do you really need desktops having a lease longer than a day? you could go 8-10 hours and really squeeze down the number of leases out there but that's probably not entirely necessary. I usually go for 24 hours on workstation subnets since the environments I've been in are made up of a large number of Laptops that have a tendency to migrate at a fairly rapid pace and this makes sure I'm not wasting space in my scope for machines that have already moved on.

# ? Jul 29, 2014 19:18

CLAM DOWN: Feb 13, 2007

I hope someone here knows about SQL Server, being the enterprise Windows thread.

SQL Server 2012, I want to shrink my transaction logs, if I run:

code:

DBCC SHRINKFILE(dbname_log, ### MB)
GO

1) Can this be done in full recovery mode or do I have to switch to simple?
2) Does this even work?

# ? Jul 31, 2014 23:42

Gyshall: Feb 24, 2009; Had a couple of drinks.
Saw a couple of things.

Don't quote me but I believe if you back the server up using a VSS aware solution it will flush those logs.

# ? Aug 1, 2014 00:43

Thalagyrt: Aug 10, 2006

Gyshall posted:

Don't quote me but I believe if you back the server up using a VSS aware solution it will flush those logs.

This is correct. If the SQL Server VSS writer is enabled simply creating a VSS snapshot for backups will flush the logs. You can do this without actually taking a backup if you really want using the diskshadow utility.

Start diskshadow as admin
1. add volume c: (or whatever volume is appropriate)
2. begin backup
3. create
4. end backup

At that point the logs should be truncated. That said, you should really set up proper backups. That'll truncate the logs for you and you won't lose any logs - the thought process with the logs is that it makes it possible for you to do a point in time restore to any point during the day by restoring the full backup then replaying the logs until the point in time you want to restore to.

# ? Aug 1, 2014 01:22

CLAM DOWN: Feb 13, 2007

I think something else might be hosed up then. Every night there is a maintenance plan to back up the DB to another drive and flush the logs. vCenter snapshot grabs the whole thing at another time for enterprise network backup. I logged on the other day to a low disk space alert and there's something like 40GB of transaction logs for a 5GB DB that clearly were not being flushed properly.

I didn't set up the maintenance plan so something is probably off there.

# ? Aug 1, 2014 01:28

Thalagyrt: Aug 10, 2006

CLAM DOWN posted:

I think something else might be hosed up then. Every night there is a maintenance plan to back up the DB to another drive and flush the logs. vCenter snapshot grabs the whole thing at another time for enterprise network backup. I logged on the other day to a low disk space alert and there's something like 40GB of transaction logs for a 5GB DB that clearly were not being flushed properly.

I didn't set up the maintenance plan so something is probably off there.

When we say VSS aware backup, we're not talking about a scheduled task in SQL Server, which is what I presume you're talking about here. Try using Windows Server Backup to back up the DB, or try that diskshadow bit I outlined. It should truncate the logs.

# ? Aug 1, 2014 01:34

wyoak: Feb 14, 2005; a glass case of emotion; Fallen Rib

CLAM DOWN posted:

I think something else might be hosed up then. Every night there is a maintenance plan to back up the DB to another drive and flush the logs. vCenter snapshot grabs the whole thing at another time for enterprise network backup. I logged on the other day to a low disk space alert and there's something like 40GB of transaction logs for a 5GB DB that clearly were not being flushed properly.

I didn't set up the maintenance plan so something is probably off there.

Flushing transaction logs (via a backup or whatever else) doesn't shrink the file itself, you'll need to do that manually with DBCC Shrinkfile with truncateonly. Your log file is probably 99% whitespace. And yes, you can run that whenever.

Also, full DB backups when run from SQL (VSS is different as outlined above) do not flush transaction logs - if your backup is being done by maintenance plan, you'll need another maintenance plan to backup the tlogs. If this is the case and your transaction log is actually full and 40 gigs and you don't care about losing the ability to do a point-in-time restore, you can either do a VSS snapshot or change the database recovery model to simple, then back to full, that'll flush it. After that you can run shrinkfile. But transaction logs are a good thing and you should have backups of them.

wyoak fucked around with this message at 05:16 on Aug 1, 2014

# ? Aug 1, 2014 04:58

CLAM DOWN: Feb 13, 2007

wyoak posted:

Flushing transaction logs (via a backup or whatever else) doesn't shrink the file itself, you'll need to do that manually with DBCC Shrinkfile with truncateonly. Your log file is probably 99% whitespace. And yes, you can run that whenever.

Also, full DB backups when run from SQL (VSS is different as outlined above) do not flush transaction logs - if your backup is being done by maintenance plan, you'll need another maintenance plan to backup the tlogs. If this is the case and your transaction log is actually full and 40 gigs and you don't care about losing the ability to do a point-in-time restore, you can either do a VSS snapshot or change the database recovery model to simple, then back to full, that'll flush it. After that you can run shrinkfile. But transaction logs are a good thing and you should have backups of them.

Oh goddammit, thank you. I've learned a lot about SQL Server over the past year or so but this kind of thing I'm still learning, thank you very much! I'm going to try the recovery model swap tomorrow, we do have backups of them and it's just a matter of saving disk space at this point.

# ? Aug 1, 2014 06:45

Mr. Clark2: Sep 17, 2003; Rocco sez: Oh man, what a bummer. Woof.

In one of our buildings we have roughly 20-25 laptop users. When these machines are here and plugged into the network via an ethernet cable, both the wireless adapter and the wired interface both pull an IP address via DHCP (currently handled by some lovely Adtran box, it was like that when I got here, working on fixing that in the near-future). Is there some way of stopping the wireless interface from requesting/getting an IP address when the cable is plugged in? Short of asking these users to switch the wifi interface off when they're here, thats not really an option.

# ? Aug 1, 2014 18:11

MrMoo: Sep 14, 2000

That is how it should work, what is the problem you are trying to actually solve?

# ? Aug 1, 2014 18:15

Mr. Clark2: Sep 17, 2003; Rocco sez: Oh man, what a bummer. Woof.

MrMoo posted:

That is how it should work, what is the problem you are trying to actually solve?

The wifi interface taking up an IP address when it doesnt need to. When I ping the machines, I get replies from the IP assigned to the ethernet interface, the users are able to work, so there is no real problem per se, but...maybe I'm just sperging over it unnecessarily.

# ? Aug 1, 2014 19:15

AlternateAccount: Apr 25, 2005; FYGM

Mr. Clark2 posted:

I'm just sperging over it unnecessarily.

But fwiw, Lenovo has a utility that does exactly this. I can dig up a link if that's what kind of machines you're using.

# ? Aug 1, 2014 20:23

MrMoo: Sep 14, 2000

Each vendor has their own system, there are even a few third party systems now:

http://www.mobilenetswitch.com/
http://www.netsetman.com/

# ? Aug 1, 2014 20:26

Thanks Ants: May 21, 2004; #essereFerrari

It shouldn't be an issue. Just set your DHCP lease time on your wireless network to a non-crazy duration.

Is it actually causing any problems?

# ? Aug 1, 2014 21:24

Mr. Clark2: Sep 17, 2003; Rocco sez: Oh man, what a bummer. Woof.

Thanks Ants posted:

It shouldn't be an issue. Just set your DHCP lease time on your wireless network to a non-crazy duration.

Is it actually causing any problems?

Nope, no problems. Like I said, it's probably just me sperging over nothing. I was just hoping that there was something I could do quickly via GPO or similar. I've found a script that will do this, but since it's not causing any problems, I'm just going to leave well enough alone and double check the lease time on the wifi

# ? Aug 1, 2014 22:50

Bob Morales: Aug 18, 2006; ~~Just wear the fucking mask, Bob~~

I don't care how many people I probably infected with COVID-19 while refusing to wear a mask, my comfort is far more important than the health and safety of everyone around me!

What's the recommended event log consolidation/alert tool? Bonus points if it's free but we'll pay for it if it's awesome.

# ? Aug 6, 2014 19:40

skipdogg: Nov 29, 2004; Resident SRT-4 Expert

There's quite a few, what exactly do you want alerts on?

# ? Aug 6, 2014 20:30

Bob Morales: Aug 18, 2006; ~~Just wear the fucking mask, Bob~~

I don't care how many people I probably infected with COVID-19 while refusing to wear a mask, my comfort is far more important than the health and safety of everyone around me!

skipdogg posted:

There's quite a few, what exactly do you want alerts on?

I'd want it configurable I guess. What normally happens is we have some issue and then we go through the event logs on a server and see that for the last few days X has been happening.

# ? Aug 6, 2014 20:45

Docjowles: Apr 9, 2009

Splunk and Logstash can both index event logs and alert/take actions based on specific events. Splunk is much easier to use but if you exceed the data/day limit of the free version, the licensing goes through the goddam roof in a hurry.

I'm sure there's other more Windows-friendly tools that I don't know about. Both of those come from the Linux world and also happen to have some Windows support.

# ? Aug 6, 2014 21:10

MrMoo: Sep 14, 2000

loggly and sumo logic are another two. The former uses ZeroMQ internally and the latter uses a Java based collector.

# ? Aug 6, 2014 21:50

Spazz: Nov 17, 2005

If you are looking into Logstash, set up a full Elk stack. It takes some time to set up, but I'd rather spend the time on configuration than how much Splunk charges. The last quote I got from them was staggering how much they wanted.

# ? Aug 6, 2014 22:28

KillHour: Oct 28, 2007

Alright, this is driving me insane, so hopefully someone can help.

I'm having a permissions issue getting a piece of software (Milestone XProtect Corporate) to integrate properly with IIS. This is the error I keep getting:

quote:

===================================

Slave IIS service account 'Sxx.EDU\Gxxxx$' is not administrator on home site 'http://Bxxxx.Sxx.EDU:80' (VideoOS.Management.Client)

------------------------------
Program location:

at VideoOS.Management.Client.VmoObject.FilterException(Exception ex)
at VideoOS.Management.Client.VmoObject.CreateInternal()
at VideoOS.Administration.FormMain.Sites_OnAddSlaveSite(Object sender, AddSlaveSiteEventArgs e)

===================================

Slave IIS service account 'Sxx.EDU\Gxxxx$' is not administrator on home site 'http://Bxxxx.Sxx.EDU:80' (mscorlib)

------------------------------
Program location:

Server stack trace:
at System.ServiceModel.Channels.ServiceChannel.HandleReply(ProxyOperationRuntime operation, ProxyRpc& rpc)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)

Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
at VideoOS.Management.Client.Proxy.IManagementServerService.CreateSlaveSite(String slaveSiteId, ServerAddress[] slaveSiteAddresses)
at VideoOS.Management.Client.Proxy.ProxyClientServiceBase`1.CallWithRetry[TResult](Func`1 call)
at VideoOS.Management.Client.Proxy.ManagementServerClient.CreateSlaveSite(String slaveSiteId, ServerAddress[] addresses)

I've tried giving every account I can think of read/write permissions on the www root folder. What am I doing wrong?

# ? Aug 7, 2014 02:50

Zaepho: Oct 31, 2013

KillHour posted:

Alright, this is driving me insane, so hopefully someone can help.

I'm having a permissions issue getting a piece of software (Milestone XProtect Corporate) to integrate properly with IIS. This is the error I keep getting:

I've tried giving every account I can think of read/write permissions on the www root folder. What am I doing wrong?

I'm betting based on the error that this is something internal to the Milestone XProtect Corporate software. Is this the initial install/config or was something changed in IIS after an installation?

# ? Aug 7, 2014 15:04

KillHour: Oct 28, 2007

Zaepho posted:

I'm betting based on the error that this is something internal to the Milestone XProtect Corporate software. Is this the initial install/config or was something changed in IIS after an installation?

Milestone sets up the IIS server through a wizard, but it doesn't set up permissions. This is on a new installation of IIS set up for this purpose

# ? Aug 7, 2014 17:00

incoherent: Apr 24, 2004; 01010100011010000111001
00110100101101100011011
000110010101110010

I'd hate to be that guy reposting wsus mailing list notifications, but this may impact you if you use .net apps (or if you're a devop)

http://blogs.msdn.com/b/dotnet/archive/2014/08/07/moving-to-the-net-framework-4-5-2.aspx

# ? Aug 7, 2014 19:42

Adbot: ADBOT LOVES YOU

# ? Apr 25, 2024 08:24

Gyshall: Feb 24, 2009; Had a couple of drinks.
Saw a couple of things.

How do you goons handle installing a certificate for firewall HTTPS deep packet inspection on client devices not managed by Group Policy? I'm talking BYOD for iPads, laptops, etc.

We have three WLAN VLAN networks where I need to present a login page and possibly a config/certificate import or something along those lines, if that makes sense.

I realize this can be done using MDM/Cloudpath whatever, but the client has a budget unfortunatley and he blew his wad on wireless equipment with nothing left over for MDM.

# ? Aug 7, 2014 22:21

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > Enterprise Microsoft Q&A: Hello for Buttprint

«‹›260 »