|
Office talk: I am in an open plan office with everybody else from accounts (insert Office Space stereotype of accounts here), to sales, to our goddam helpdesk team, and I just use it to work the "I can't concentrate in this environment, I'll work from home" angle. The only person with a private office is the owner of the business because they took a class in how to manage people like it's 1980, and stick to it religiously.
|
#
?
Aug 6, 2016 10:51
|
|
|
|
| # ? Jun 11, 2024 11:37 |
|
|
CLAM DOWN posted:I have my own private office, suck my god drat ballz Luckily a few days before we moved in the CEO saw me trying to clean all the drywall dust from the counters and was surprised I'd be given such a lovely spot. His solution: he gave me my boss's office.  She worked from home most of the week so it made sense, but it was the beginning of the end for me as she blamed me for being moved. She eventually was given a spot in a shared office but that was not enough to soothe her wounded soul. After I left at first my replacement took over my office, but he was quickly bumped out by her. I still enjoyed it though. I had a nice view and enough workspace, and for a while I could smile at the CEO booting out my worthless boss for me. I miss having actual office furniture with like, drawers and poo poo.
|
|
#
?
Aug 6, 2016 10:56
|
|
|
adorai posted:1) titles in banks are often loving retarded 2 billion. I've heard that a lot of banks are merging now so that they can be above the government's minimums to be considered "too big to fail". I think they're trying to get absorbed so maybe that's why he doesn't care.
|
|
#
?
Aug 6, 2016 13:50
|
|
|
2b is large enough that it makes merging into someone a pain in the rear end. How many branches are we talking? 40ish? I would say at that size they should have some redundancy in their core. We started adding better redundancy around that point in part because that is one of those humps that gets you more regulatory scrutiny.
|
|
#
?
Aug 6, 2016 14:38
|
|
|
Here's a question I should probably have learned the answer to a while ago... When I use my access to the Microsoft volume license site to help myself to software for the home lab, because it's in my company's best interest that I be up to speed on everything I could come in contact with, am I costing my company money? Or that kind of thing would only come up in an audit and since my PC isn't in scope, does it not matter?
|
|
#
?
Aug 6, 2016 15:08
|
|
|
adorai posted:2b is large enough that it makes merging into someone a pain in the rear end. How many branches are we talking? 40ish? I would say at that size they should have some redundancy in their core. We started adding better redundancy around that point in part because that is one of those humps that gets you more regulatory scrutiny. We don't manage their branches we just do one off projects for them. We have a client with 45 branches who is valued at 12 billion in assets so I can't even really estimate the amount of branches these guys have.
|
|
#
?
Aug 6, 2016 15:28
|
|
|
Sepist posted:Client is a bank and has a core network that's all single devices, one routers one switch, one firewall, one wan router but for some reason orders two palo altos to do threat protection since the ASA doesn't. Our guy installs both but client(director of IT) refuses to provision vlans so we can configure the ha pair and instead says when he wants to fail over he'll unplug the ethernet wires from the first device and move them to the second..... A board member of a small regional bank referred their IT director to us a year or two ago, wanted to look at us consulting on upgrades and possibly taking on tier 2+ roles when their staff needed. Met the guy and he was nice enough but I viewed their 'datacenter' which was just a room with poo poo stacked on tables and boxes and servers and a giant loving spider web of cables. The word redundancy was completely lost on him, too. In the end I shook his hand, gave him a bit of advice and left. gently caress that poo poo and the regulatory hell it lives in.
|
|
#
?
Aug 6, 2016 16:11
|
|
|
This week I found out that a bank is using public IP space that doesn't belong to them on their LAN. They have over €1T in assets.
Thanks Ants fucked around with this message at 16:18 on Aug 6, 2016 |
|
#
?
Aug 6, 2016 16:16
|
|
|
MC Fruit Stripe posted:Here's a question I should probably have learned the answer to a while ago... I believe this depends on your exact volume license agreement, but most of the time it will not incur any additional cost. Regardless, don't worry so much about costing them maybe $100 a couple of times tops, other companies shell out tons more for formal training.
|
|
#
?
Aug 6, 2016 16:34
|
|
|
Thanks Ants posted:This week I found out that a bank is using public IP space that doesn't belong to them on their LAN. They have over €1T in assets.
|
|
#
?
Aug 6, 2016 16:39
|
|
|
fishmech posted:I believe this depends on your exact volume license agreement, but most of the time it will not incur any additional cost. Regardless, don't worry so much about costing them maybe $100 a couple of times tops, other companies shell out tons more for formal training. Not my company 
|
|
#
?
Aug 6, 2016 16:40
|
|
|
fishmech posted:I believe this depends on your exact volume license agreement, but most of the time it will not incur any additional cost. Regardless, don't worry so much about costing them maybe $100 a couple of times tops, other companies shell out tons more for formal training. 
|
|
#
?
Aug 6, 2016 16:48
|
|
|
RE: open floor plan. It is the loving devil. I hate it with all myheart, but in my last 10 years I have only had 1 customer who did not have an open floor. It is always noisy, distracting and sucks privacy wise. People harrass you approximately once every 30 minutes breaking your workflow. I get more done in 3 hours wfh than I would 9 hours at the office.
|
|
#
?
Aug 6, 2016 16:49
|
|
|
LochNessMonster posted:It is the loving devil. I hate it with all myheart, but in my last 10 years I have only had 1 customer who did not have an open floor. It's "cheaper" and "more flexible". And why would the C Levels care? They get offices. 
|
|
#
?
Aug 6, 2016 16:53
|
|
|
Thanks Ants posted:This week I found out that a bank is using public IP space that doesn't belong to them on their LAN. They have over €1T in assets. I've seen this done before. There's a 25.0.0.0/8 and 26.0.0.0/8 that have been unused by the UK Ministry of Defense that at least one service provider uses as the inside scope of their CGNAT.
|
|
#
?
Aug 6, 2016 16:58
|
|
|
MC Fruit Stripe posted:Well it came to mind as I downloaded SQL Server Enterprise, which can cost a pretty penny. You can get SQL (2014/2016) Developer Edition, it's free for sandbox/dev/test environments and is feature-equivalent to Enterprise. There's no MSDN subscription requirement anymore.
|
|
#
?
Aug 6, 2016 16:59
|
|
|
adorai posted:To put in my two cents, I oversee the 9 people at my bank that provide traditional IT related support. Systems and network admins as well as helpdesk. How many employees do you support? That seems sparse?
|
|
#
?
Aug 6, 2016 17:00
|
|
|
Tab8715 posted:How many employees do you support? That seems sparse? edit: we also have some b2b clients, but they don't require much effort.
|
|
#
?
Aug 6, 2016 20:35
|
|
|
Super Slash posted:
I have a folder for these people:  It's where email goes to die.
|
|
#
?
Aug 6, 2016 22:17
|
|
*Furiously working on things*
|
I like Orchestral Manoeuvres in the Dark as much as the next guy, but that seems like overkill IMO.
|
|
#
?
Aug 7, 2016 01:48
|
|
|
MC Fruit Stripe posted:Well it came to mind as I downloaded SQL Server Enterprise, which can cost a pretty penny. You need an active MSDN subscription or the actual license for the software in order to download it for your home lab. If you have a MSDN account, there is a separate portal to download software. One great thing about MSDN is that any software you download is yours forever even if the subscription lapses.
|
|
#
?
Aug 7, 2016 02:38
|
|
|
 I'm starting a new job on Monday as sysadmin for a game dev studio. I've spent the last 12 years working in finance, energy and construction so this'll be a real change of pace - just having one office is going to be interesting, and not having to deal with changes when working across 12 different timezones is going to be wonderfully chill.
|
|
#
?
Aug 7, 2016 05:13
|
|
|
Cthulhuite posted:
Rip. Everything I've heard about game dev is terrible. It's not star citizen right?
|
|
#
?
Aug 7, 2016 05:53
|
|
|
Cthulhuite posted:
It's crunch time, why are you not working 80-hour weeks like everyone else? You need to be a team player, Cthulhuite!
|
|
#
?
Aug 7, 2016 06:04
|
|
|
jaegerx posted:Rip. Everything I've heard about game dev is terrible. It's not star citizen right? God no, although I imagine they pay pretty well They're a pretty big studio, and I have the chance to implement a lot of stuff from scratch so I think that'll help. What kind of stuff have you heard?
|
|
#
?
Aug 7, 2016 06:04
|
|
|
Cthulhuite posted:God no, although I imagine they pay pretty well Crunch time 24/7. Devs dictate to IT. Just make it happen for them even when it's just completely insane stuff. Mostly my friends work in the mmo area so your experience might be different
|
|
#
?
Aug 7, 2016 06:14
|
|
|
adorai posted:750 You've got less than a dozen standard-IT roles for the whole organization? I suppose that seems okay but drat I'm sure that keeps everyone busy.
|
|
#
?
Aug 7, 2016 07:46
|
|
|
Tab8715 posted:You've got less than a dozen standard-IT roles for the whole organization? I suppose that seems okay but drat I'm sure that keeps everyone busy.
|
|
#
?
Aug 7, 2016 13:54
|
|
|
farttt
Chickenwalker fucked around with this message at 05:05 on Sep 23, 2018 |
|
#
?
Aug 7, 2016 17:02
|
|
|
oh rly posted:You need an active MSDN subscription or the actual license for the software in order to download it for your home lab. If you have a MSDN account, there is a separate portal to download software. One great thing about MSDN is that any software you download is yours forever even if the subscription lapses. With the only caveat that you keep the installation media AND the product keys. When I was laid off at my previous company, their MSDN subscription expired and I couldn't login anymore I was SoL.
|
|
#
?
Aug 7, 2016 17:28
|
|
|
Does anyone here work with Oracle Identity Manager, IBM Tivoli Identity Manager or Microsoft Identity Manager? I'm trying wrap my head around these products but I'm having a hard time understanding their exact purpose. I understand what they do but what wouldn't work if they didn't exist?
|
|
#
?
Aug 8, 2016 01:25
|
|
|
Tab8715 posted:Does anyone here work with Oracle Identity Manager, IBM Tivoli Identity Manager or Microsoft Identity Manager? I'm trying wrap my head around these products but I'm having a hard time understanding their exact purpose. They're meant to make things easier. Managing thousands of groups, users, and process IDs is a lot harder without an IDM platform.
|
|
#
?
Aug 8, 2016 01:48
|
|
|
PBS posted:They're meant to make things easier. Managing thousands of groups, users, and process IDs is a lot harder without an IDM platform. This can't be scripted? What's a real world scenario of management with one of these tools?
|
|
#
?
Aug 8, 2016 01:48
|
|
|
I need to ship some thumb drives containing company proprietary/trade secret information (~16 GB of videos) to two overseas remote offices in Hong Kong and London. Neither of these locations are proper offices, in that we do not actually control any of the infrastructure or have any managed end-points there, so I unfortunately cannot just copy the data to a server there. I'd opt for Bitlocker on the drives but some of the remote users have Macs so we cannot go with a Windows only solution. My plan at this point is to just encrypt the flash drives and provide a passphrase for an end user to decrypt with. I'm not worried about the data after it's received as it becomes squarely 'not my problem' but I would like to guard against that information being accessible if the drives happened to get lost in transit. I came across VeraCrypt which looks to be a fork of TrueCrypt, are the thread opinions for or against this? It looks at this point to be one of the better options I've come up with but wanted to see if anyone had better ideas.
|
|
#
?
Aug 8, 2016 01:53
|
|
|
Tab8715 posted:This can't be scripted? What's a real world scenario of management with one of these tools? It can be scripted in the same way anything can theoretically be coded in house. They can be used for some of the following, Self-service (password reset portal, etc), provisioning accounts across unrelated systems (mainframe, open systems, etc), access requests (request/approval workflows), account permissions risk scores (auditing). One of the bigger draws is probably the potential for self-service. You have everything that can be requested in a single place, all documented. The department/individual that owns that permission can approve/deny the requests without you having to have a team that handles all that. I'm sure there are more reasons, but that's just a few off the top of my head.
|
|
#
?
Aug 8, 2016 02:02
|
|
|
Tab8715 posted:This can't be scripted? What's a real world scenario of management with one of these tools? MIM, at least, can inject directly into Kerberos ticket issuance and adjust identity based on where, how, and when you logged in. Some fancy environments use this to have zero resident members in the Domain Admins group (for example). When someone uses smartcard local auth on one of the hardened DA workstations, then and only then does it inject the DA identity into their Kerberos ticket. If their NTLM hash gets stolen and reused, lookups on it will evaluate the user as not being a DA. You couldn't "script" this one out without writing your own Kerberos auth module which would invariably have thousands of awful bugs.
|
|
#
?
Aug 8, 2016 02:32
|
|
|
Our exchange admins use FIM for some kind of cross-domain syncing, that's about as helpful as I can be.
|
|
#
?
Aug 8, 2016 03:28
|
|
|
For us, the IDM system helps keep track of permissions and accounts required for different responsibilities, where multiple may be active at once, and may have some level of overlap. This allows us to set expiry date on a responsibility for an employee and have just the necessary permissions removed.
|
|
#
?
Aug 8, 2016 13:52
|
|
|
FIM is the devil. But it's the devil you live with if you don't want to pay for expensive migration software.
|
|
#
?
Aug 8, 2016 13:55
|
|
|
|
| # ? Jun 11, 2024 11:37 |
|
|
Open office plans are terrible. A few jobs ago IT went from being in their own big office/section with private cubes to thrown out in the middle of the floor. Despite our protests about not being able to secure equipment, constant walk up distractions, etc. We were ignored and thrown to the wolves. People quit putting in tickets as often instead just walking up to people to request things leading to more stress for the frontline guys as they entered in tickets on behalf of these people, or just got further behind as they had to deal with the people in their face immediately. And then a few months later a ton of poo poo walked itself out the door, because again we had no place to lock it up anymore. The company's solution was to give us a lockable janitors closet on the other side of the building to try and cram stuff into. And thats on top of the noise! Lord help you if they don't install some sort of white noise system in an open office. People just start talking over one another gradually until it peaks and you're yelling at someone 4 feet away from you. Then everyone realizes how loud it is and it dies down again for a bit only to raise again and again.
|
|
#
?
Aug 8, 2016 14:44
|
|
