Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us $3,400 per month for bandwidth bills alone, and since we don't believe in shoving popup ads to our registered users, we try to make the money back through forum registrations.
«51 »
  • Post
  • Reply
pixaal
Jan 8, 2004

All ice cream is now for all beings, no matter how many legs.

Rick posted:

So we have some laptops at an offsite location we have limited control over the local internet. We used to have stable staff there but suddenly we don't. Is there a way to allow users to access these laptops without having been logged on to them at one of our main locations first?

Set your VPN connection to connect before they log into Windows. If they aren't connecting to any domain resources just make local user accounts and have them log in as .\localuser

You can also just have it not on the domain at all if it will never need to be and go solely on local admin (never give this out) and local user.

I think there's also a way with Windows 10 and an Azure Domain Controller but that's very likely outside the scope for small shop.

pixaal fucked around with this message at Jul 17, 2018 around 17:52

Adbot
ADBOT LOVES YOU

Thanks Ants
May 21, 2004

Bless You Ants, Blants



Fun Shoe

Either look at running everything off Azure AD, or if this is a few clients and everything else is on a domain and you're happy with it, use DirectAccess.

drk
Jan 16, 2005


A couple pages ago people were suggesting Ringcentral as a solid VOIP provider. Anyone else to consider or avoid?

We are looking to replace a Comcast VOIP and an AT&T copper line in our small office. Reliability and quality are more important than price (we are paying ~$60 and ~$150/month to Comcast and AT&T, respectively). Don't particularly care about fancy features.

powderific
May 13, 2004



Grimey Drawer

We are really tiny but OnSip has worked great other than some latency in the conference line that I've never figured out (or bothered to look into to be fair, we don't use it that much.) We have 6 extensions and a conference line and usually pay around $60 per month.

Rick
Feb 23, 2004
And now the whole nation - pulpit and all - will take up the war-cry, and shout itself hoarse, and mob any honest man who ventures to open his mouth; and presently such mouths will cease to open.

pixaal posted:

Set your VPN connection to connect before they log into Windows. If they aren't connecting to any domain resources just make local user accounts and have them log in as .\localuser

You can also just have it not on the domain at all if it will never need to be and go solely on local admin (never give this out) and local user.

I think there's also a way with Windows 10 and an Azure Domain Controller but that's very likely outside the scope for small shop.

VPN might be the way to go. The issue is that people are just sent to this location as sort of desperation fill-ins , so it's been difficult for me to anticipate who will show up there. We wanted to break the habit of communal logins but that might in fact be the easiest given our infrastructure.

Thanks Ants posted:

Either look at running everything off Azure AD, or if this is a few clients and everything else is on a domain and you're happy with it, use DirectAccess.


I would be fine with Azure AD actually but for whatever reason it's a bit of a boggie man here. Also we're still running Server 2008 R2 (I actually deployed Azure connect at my last job and there weren't any problems although I never tried to sign anyone in that way either, that was for Office 365 purposes).

Direct Access seems to be not that hard.

Thanks Ants
May 21, 2004

Bless You Ants, Blants



Fun Shoe

Do they need to be laptops or can do you a thin client type of setup? It wouldn't be my ideal choice but it might be a fit here.

Rick
Feb 23, 2004
And now the whole nation - pulpit and all - will take up the war-cry, and shout itself hoarse, and mob any honest man who ventures to open his mouth; and presently such mouths will cease to open.

I'd love to put Thin Clients in there but they move from courthouse to courthouse so we're stuck with latoptops. We have some tablets (that I was pretty skeptical about buying when they requested them but it ended up having worked) that connect to Horizon which works pretty good, but we have to get approval from the city every time an employee goes there to use the private city wifi, at each separate court site.

Thanks Ants
May 21, 2004

Bless You Ants, Blants



Fun Shoe

Don't you have the same problem with laptops and Wi-Fi?

MDMd tablet with LTE, a keyboard cover and a VDI app could be a winner if there's also a need to keep the data secure in the event of the device being lost.

Internet Explorer
Jun 1, 2005

OFFICIAL BITCH OF DANBO DAXTER




Oven Wrangler

They make thin client laptops, but at that point I'd look more towards a Chromebook.

Rick
Feb 23, 2004
And now the whole nation - pulpit and all - will take up the war-cry, and shout itself hoarse, and mob any honest man who ventures to open his mouth; and presently such mouths will cease to open.

Thanks Ants posted:

Don't you have the same problem with laptops and Wi-Fi?

MDMd tablet with LTE, a keyboard cover and a VDI app could be a winner if there's also a need to keep the data secure in the event of the device being lost.



For laptops users are able to access our reporting software even if nothing else so they still end up being useful, the reporting software is unfortunately Internet Explorer only which makes the tablets unable to use it unless connected to VM. They are LTE but it gets poo poo reception in 2 of the 3 court rooms. Also boss is trying to cheap out on the data plans.

I guess we could get windows tablets though.

Jack the Lad
Jan 20, 2009

Feed the Pubs



Jack the Lad posted:

Thanks for the AV advice peeps. I have a new thing I'm struggling with.

We're on G Suite and since late last month a lot of our emails are going to spam/quarantine and not reaching recipients.

These are emails sent through third party newsletter services like sign-up.to, emails sent direct from the Gmail web UI, via Outlook with G Suite Sync, from the iOS app etc, to a range of businesses, some of them big enterprises, and including random individual emails sent to people we've corresponded with before and even replies to their emails.

I've had a bunch of the recipients send me headers and it looks like everything is passing SPF/DKIM but (e.g.) Office 365 just mark even innocuous personal emails from us as spam all of a sudden. I've switched our SPF from hard to soft fail and subsequently to neutral anyway, just to do something, but it's made no difference.

Google Postmaster Tools says we have a 0% user-reported spam rate, High IP and Domain reputation, 100% SPF success rate and so on.

I've looked the affected domain up on every blacklist/reputation checker I can find and haven't found anything bad.

We haven't changed our signatures to include links or GDPR disclaimers or anything recently.

We've contacted all our clients and asked them to whitelist us, but that isn't a great look, and we can't do that for prospects or anyone else we're communicating with for the first time.

Our CEO is angry and willing to spend lots of money on "high powered consultants" getting this fixed, but I don't know what the problem is or who I could give money to that would be able to fix it.



Update: After going back and forth with Office 365 support for a few weeks, this is mostly fixed (it's still happening for emails from our own servers but they say they'll fix those too in 2-3 days).

Apparently it was nothing on our end, there was a problem with Exchange Online Protection that was fixed after being escalated to their Product Group team, but they don't do root cause analysis and can't tell me why it happened or what the fix was.

So, uhhh, yeah. What.

Old Binsby
Jun 27, 2014


Jack the Lad posted:

Update: After going back and forth with Office 365 support for a few weeks, this is mostly fixed (it's still happening for emails from our own servers but they say they'll fix those too in 2-3 days).

Apparently it was nothing on our end, there was a problem with Exchange Online Protection that was fixed after being escalated to their Product Group team, but they don't do root cause analysis and can't tell me why it happened or what the fix was.

So, uhhh, yeah. What.

par for the course on EOP related stuff. Answer: the spam algorithm machine learned something dumb. They gently prodded it so your domain (or all of G apps?) would not be seen as super spammy. Unless recipients on other services were having the same issues, in that case i'd suspect blacklists. Though because EOP uses a few commercial, varying, spam engines even that might not be a guarantee

Thanks Ants
May 21, 2004

Bless You Ants, Blants



Fun Shoe

I rip on G Suite a lot for being weird and the features changing all the time and basic poo poo just not being there, but the mail filtering is about four thousand times better than anything else I've seen.

JackDRipper
Feb 13, 2013

Its all about the Fishing.

Jack the Lad posted:

Update: After going back and forth with Office 365 support for a few weeks, this is mostly fixed (it's still happening for emails from our own servers but they say they'll fix those too in 2-3 days).

Apparently it was nothing on our end, there was a problem with Exchange Online Protection that was fixed after being escalated to their Product Group team, but they don't do root cause analysis and can't tell me why it happened or what the fix was.

So, uhhh, yeah. What.

Cause the escalation engineer would not know the back-end root cause, nor be given that information . More than likely it was a Service Incident that went unchecked in the service health, I've seen more than a few EOP related incidents with service level tickets , but not showing in the service health panel with the SI attached to it.

Internet Explorer
Jun 1, 2005

OFFICIAL BITCH OF DANBO DAXTER




Oven Wrangler

Thanks Ants posted:

I rip on G Suite a lot for being weird and the features changing all the time and basic poo poo just not being there, but the mail filtering is about four thousand times better than anything else I've seen.

That's because they bought Postini a long time ago.

NevergirlsOFFICIAL
Apr 24, 2004



Internet Explorer posted:

That's because they bought Postini a long time ago.

yeah postini going away (from us non g suite users) was a huge pain in the rear end because we had to switch to a bunch of inferior spam filters

Matt Zerella
Oct 7, 2002

JEG VILLE KLEMME DEG


I forgot what I moved to but it was decent with an absolutely terrible web interface. Postini was good as hell.

NevergirlsOFFICIAL
Apr 24, 2004



Matt Zerella posted:

I forgot what I moved to but it was decent with an absolutely terrible web interface. Postini was good as hell.

we went postini -> something terrible that I don't remember -> mxlogic. then mcafee shut down mxlogic and we did proofpoint which was garbage and now mimecast.

Matt Zerella
Oct 7, 2002

JEG VILLE KLEMME DEG


NevergirlsOFFICIAL posted:

we went postini -> something terrible that I don't remember -> mxlogic. then mcafee shut down mxlogic and we did proofpoint which was garbage and now mimecast.

Mime cast was it. It's been a few years but I remember the web interface was terrible. If you hit the back button on the browser you would lose all your work. It was a good service though.

NevergirlsOFFICIAL
Apr 24, 2004



Matt Zerella posted:

Mime cast was it. It's been a few years but I remember the web interface was terrible. If you hit the back button on the browser you would lose all your work. It was a good service though.

yeah the ui is kind of all over the place and a huge pain.

they have a signature mgmt component (like for mail signatures to replace outlook sigs) that's actually pretty good but it's so loving complicated compared to exclaimer/code2/whatever

Rick
Feb 23, 2004
And now the whole nation - pulpit and all - will take up the war-cry, and shout itself hoarse, and mob any honest man who ventures to open his mouth; and presently such mouths will cease to open.

Have you guys had luck getting people to back off the "just use E-mail for all communication" train, or is it even worth bothering trying?

I got a surprising amount of resistance to implementing Slack so I'm kind of deciding on what to do next, if anything. We will eventually migrate to 365 so I'm not as worried about the storage aspect (although that might be the most immediate problem given the rate of some user's email) but I still think that email just sucks as a collaborative communication tool. I know Slack isn't perfect either but during my brief time in corporate, it was functional improvement to email at least.

dogstile
May 1, 2012

fucking clocks
how do they work?


I set up teams, everyone has it pushed out, my boss is concerned it'll "waste time, people will just talk to eachother".

Like they don't already, come on man.

GreenNight
Feb 19, 2006
Turning the light on the darkest places, you and I know we got to face this now. We got to face this now.

dogstile posted:

I set up teams, everyone has it pushed out, my boss is concerned it'll "waste time, people will just talk to eachother".

Like they don't already, come on man.

We're not allowed to give Jabber to everyone or have any type of chat solution, only email. We got the same reasoning. It's so stupid.

Old Binsby
Jun 27, 2014


people talking to each other....... hosed up if true

sneakyfrog
Mar 16, 2011




Fan of Britches

o365 comes with skype for business

Albinator
Mar 31, 2010



sneakyfrog posted:

o365 comes with skype for business

You shut your filthy mouth. Teams is much better, and is replacing SfB in due course anyway: https://docs.microsoft.com/en-us/mi...ams/faq-journey

As for a chat tool in the business, some places just aren't a great fit for it. Older staff who all work at the office in a paper-pushing kind of job may simply not see a point - and they may not be wrong.

It's fantastic if you're running a conference in a big location, though.

Digital_Jesus
Feb 10, 2011



lol who wants to talk to their coworkers?

Email is for referencing three weeks later when your boss asks why something isn't done and you forward him your sent mail to someone asking for information that never got a response.

Communication in the workplace is cancer.

carlcarlson
Jun 20, 2008


We couldn't implement IM at my old place because we couldn't get people to stop saying dumb poo poo in emails, that would then get turned over in a lawsuit. God only knows how e-discovery would have worked with chat logs. I imagine we'd have to turn over the entire chat log between employees, which would inevitably include them talking about wanting to see the new girls tits or whatever other terrible poo poo that was worse than what they already said in email.

GreenNight
Feb 19, 2006
Turning the light on the darkest places, you and I know we got to face this now. We got to face this now.

For the few people we have IM, we have logging disabled. Itís policy, so no problem.

Old Binsby
Jun 27, 2014


carlcarlson posted:

We couldn't implement IM at my old place because we couldn't get people to stop saying dumb poo poo in emails, that would then get turned over in a lawsuit. God only knows how e-discovery would have worked with chat logs. I imagine we'd have to turn over the entire chat log between employees, which would inevitably include them talking about wanting to see the new girls tits or whatever other terrible poo poo that was worse than what they already said in email.

tell them very clearly everything that you are able to(/required to if that's the case) log any form of communication using their company device. Anyone unable to fathom the stupidity of things like discussing the new girls tits deserves the eventual shenanigans that will ensue if they send it to the wrong person or accidentally post something along those lines to a team group chat, the last of which I've seen happen with a phone jockey once. That guy had to go but no incidents since, it's been a couple years now. Skype f Business can do this at the start of every IM session for instance.

Digital_Jesus
Feb 10, 2011



E: Wrong Thread

sneakyfrog
Mar 16, 2011




Fan of Britches

my intern said to me yesterday "it seems like most of this job is dealing with other peoples fuckups and them not being able to google anything, its not always like that right?"

pixaal
Jan 8, 2004

All ice cream is now for all beings, no matter how many legs.

sneakyfrog posted:

my intern said to me yesterday "it seems like most of this job is dealing with other peoples fuckups and them not being able to google anything, its not always like that right?"



That's the sign of someone that's going to do very well in IT. It gets better, but that's what low end IT positions are, helpdesk, or doing bitch work for the server team. A small shop where they are the only IT person is a pretty good position if they can land it. Something with a contractor budget, and they can slowly bring that stuff in house not only saving the company money, but getting some really good stuff for their resume. Sure they could do the standard helpdesk grind, but that's soul crushing.

sneakyfrog
Mar 16, 2011




Fan of Britches

pixaal posted:

That's the sign of someone that's going to do very well in IT. It gets better, but that's what low end IT positions are, helpdesk, or doing bitch work for the server team. A small shop where they are the only IT person is a pretty good position if they can land it. Something with a contractor budget, and they can slowly bring that stuff in house not only saving the company money, but getting some really good stuff for their resume. Sure they could do the standard helpdesk grind, but that's soul crushing.

eh thats pretty much kind of it, my shop is growing to the point of where i need to do way too many focus based tasks and management type stuff for long hours to do general IT bitchwork. so just practical lessons along the A+ course curriculum lines, and letting him take first crack at general helpdesk type stuff with supervision. kids a bit too hands on to sit still for much of the lecture/theory work so just been spoonfeeding it slowly as we go along. its definitely sharpening me up on some of the menial poo poo i had to do at first.

Gerdalti
May 24, 2003

SPOON!


I'm struggling with a WDS/MDT deploy setup. I have everything configured, captures work great, domain join parameters with custom computer names, custom driver sets based on model, etc.

But. Now that I have the domain join setup properly, the deployment fails. The image is installed, and the computer reboots from Litetouch to Windows.
Windows has disabled the local admin account, which means the install script doesn't continue unless I boot into safe mode, enable local admin, reboot, and then manually continue it.

I read that this could be a gpo issue, so I created a new OU for the domain join script, disabled gp inherence, made sure the admin user is enabled via gp, etc. Same thing.


I just rejoined my image pc to ad, moved it to the blocked inherence OU, updated group policy, unjoined AD, and kicked off another capture. I'll test another deploy when it's done.

Any suggestions???

Gerdalti fucked around with this message at Aug 10, 2018 around 13:25

MF_James
May 8, 2008
I CANNOT HANDLE BEING CALLED OUT ON MY DUMBASS OPINIONS ABOUT ANTI-VIRUS AND SECURITY. I REALLY LIKE TO THINK THAT I KNOW THINGS HERE

INSTEAD I AM GOING TO WHINE ABOUT IT IN OTHER THREADS SO MY OPINION CAN FEEL VALIDATED IN AN ECHO CHAMBER I LIKE


Gerdalti posted:

I'm struggling with a WDS/MDT deploy setup. I have everything configured, captures work great, domain join parameters with custom computer names, custom driver sets based on model, etc.

But. Now that I have the domain join setup properly, the deployment fails. The image is installed, and the computer reboots from Litetouch to Windows.
Windows has disabled the local admin account, which means the install script doesn't continue unless I boot into safe mode, enable local admin, reboot, and then manually continue it.

I read that this could be a gpo issue, so I created a new OU for the domain join script, disabled gp inherence, made sure the admin user is enabled via gp, etc. Same thing.


I just rejoined my image pc to ad, moved it to the blocked inherence OU, updated group policy, unjoined AD, and kicked off another capture. I'll test another deploy when it's done.

Any suggestions???

What version of windows are you installing? Are you setting the admin password? Is the password blank? I (think) sometimes windows doesn't like blank passwords and that might cause problems, if you're trying that.

Adbot
ADBOT LOVES YOU

Gerdalti
May 24, 2003

SPOON!


MF_James posted:

What version of windows are you installing? Are you setting the admin password? Is the password blank? I (think) sometimes windows doesn't like blank passwords and that might cause problems, if you're trying that.

Win7, I've tried setting the password via Rules and by hand. I'm just sort of undoing a ton of my automation and settings now to see what fixes it, and then I'll work my way forward again.

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply
«51 »