Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
Inspector_666
Oct 7, 2003

benny with the good hair

MJP posted:

Quest Secure Copy is a great way to do it if you can scare up the $200ish for a month. Start it up, let it sync over time, cut over, test, done.

OK, but that seems like a luxury rather than "the norm." I guess I just don't see robocopy as a brute force method for file migration as opposed to it being...the expected solution.

Adbot
ADBOT LOVES YOU

BaseballPCHiker
Jan 16, 2006

Robocopy has always worked perfectly fine for me, just my two cents.

Does anyone have any recommendations on books or resources online to learn more about DNS sync with AD? I suspect that some issues aI'm having at remote sites are related to DNS and I'm either to stupid or ignorant on knowing what to look for and how to fix them.

Japanese Dating Sim
Nov 12, 2003

hehe
Lipstick Apathy
Does anyone have experience either first-hand, or supporting someone else doing so, with traveling to China with an full-disk encrypted laptop? According to what I've found, traveling to China with an encrypted laptop requires a special pass granted by some bureau within the Chinese government, and I know I'm having nothing to do with that.

We're ordering a new laptop for someone - a Latitude E7250 - specifically because it's pretty portable and travel-friendly, but I've told him that you can't bring an encrypted device into China without a pass (and our devices are all full-disk encrypted). My recommendation is that we give him a clean, unencrypted temporary laptop and format it (read: nuke it from orbit due to all the malware that it'll have, etc.) upon its return, but I don't think he'll want to do this. He's been to China a few times already, and says that he's brought his current beater laptop, which is also full-disk encrypted, a few times with no issues.

Here's what I'm wondering: I'm assuming that this is true, and it's probably because they don't check every single laptop that comes in. And if they do, your average customs agent is going to know an extremely easy to way to determine whether or not a laptop's encrypted. Obviously though, you're playing the odds and I have no idea what happens if they realize that it is encrypted - nothing good I'm sure.

I'm still strongly encouraging that he NOT take his personal laptop, or anything that has any data at all, with him, but that's probably going to be out of my hands.

Thanks Ants
May 21, 2004

#essereFerrari


It's not uncommon for laptops taken to China to be shredded when they come back. Some companies just won't take the risk.

Regarding your issue, this might clear it up: http://www.freshfields.com/en/global/Digital/China_rules_on_encryption/

Methanar
Sep 26, 2013

by the sex ghost
Why are there several videos of naked women on my DC.

Come on guys.

theperminator
Sep 16, 2009

by Smythe
Fun Shoe

Inspector_666 posted:

OK, but that seems like a luxury rather than "the norm." I guess I just don't see robocopy as a brute force method for file migration as opposed to it being...the expected solution.

Robocopy is the way to go imho.
Copies attributes, permissions, timestamps etc and allows you to start where you left off if it stops for some reason.

It's a simple command imho, if that's "brute force" to someone it's probably because their idea of migrating is literally just "copy from old nas and paste on new"

Methanar posted:

Why are there several videos of naked women on my DC.

Come on guys.

Someone needs to be sacked & pushed off the top of the building, inappropriateness of the material isn't even my main concern, security is.
"Hey here's a critical piece of our infrastructure, that controls access to everything else we have"
*downloads malware infested porn*

I'd be resisting the urge to beat the poo poo out of someone.

theperminator fucked around with this message at 23:16 on Aug 20, 2015

Roargasm
Oct 21, 2010

Hate to sound sleazy
But tease me
I don't want it if it's that easy

Methanar posted:

Why are there several videos of naked women on my DC.

Come on guys.

Your boss clearly carved out a great job doing gently caress all unnoticed and watching porn in the server room. Who are you to take that from him :colbert:

RFC2324
Jun 7, 2012

http 418

theperminator posted:

*downloads malware infested porn*

From what I have seen, porn seems to be the safest when it comes to malware. I get more hits after visiting Yahoo or CNN.com than when scanning the porn VM.

TeMpLaR
Jan 13, 2001

"Not A Crook"
For the file server cutover, the big thing I'm not seeing is that you should use an alias for the fileserver. Run robocopy a few hours before, change the DNS alias, update robocopy for the changes, done. No scripts to update.

Beef Of Ages
Jan 11, 2003

Your dumb is leaking.

Japanese Dating Sim posted:

Does anyone have experience either first-hand, or supporting someone else doing so, with traveling to China with an full-disk encrypted laptop? According to what I've found, traveling to China with an encrypted laptop requires a special pass granted by some bureau within the Chinese government, and I know I'm having nothing to do with that.

We're ordering a new laptop for someone - a Latitude E7250 - specifically because it's pretty portable and travel-friendly, but I've told him that you can't bring an encrypted device into China without a pass (and our devices are all full-disk encrypted). My recommendation is that we give him a clean, unencrypted temporary laptop and format it (read: nuke it from orbit due to all the malware that it'll have, etc.) upon its return, but I don't think he'll want to do this. He's been to China a few times already, and says that he's brought his current beater laptop, which is also full-disk encrypted, a few times with no issues.

Here's what I'm wondering: I'm assuming that this is true, and it's probably because they don't check every single laptop that comes in. And if they do, your average customs agent is going to know an extremely easy to way to determine whether or not a laptop's encrypted. Obviously though, you're playing the odds and I have no idea what happens if they realize that it is encrypted - nothing good I'm sure.

I'm still strongly encouraging that he NOT take his personal laptop, or anything that has any data at all, with him, but that's probably going to be out of my hands.

I work for a giant morass of a financial institution and I have full disk encryption on my laptop. I've been to China seven times in the last couple of years and I'm going back in a few weeks. I've flown into Shanghai, Beijing, Chengdu, and Guangzhou. I've never been questioned or had any interaction with Chinese Customs whatsoever, nor have any of the immigration agents (at the APEC line or otherwise) done anything other than scan my passport, verify my business visa, and provide the correct stamps. I know the situation you describe has happened, and I take precautions (like bringing my own router that serves as a VPN concentrator so that none of my devices, encrypted storage or not, touch an open Chinese network as well as making sure I remove any sensitive data from my laptop prior to the trip) but have never had an issue. None of those steps are foolproof, of course, but I'm also rather unimportant and likely don't rate much scrutiny (6'8" white American nerd who talks about digital analytics all day).

GnarlyCharlie4u
Sep 23, 2007

I have an unhealthy obsession with motorcycles.

Proof
Happy Friday!
For those of us in positions/places now better than previous jobs, let's take a moment to reflect and be thankful.
:yotj: 2015!



GnarlyCharlie4u fucked around with this message at 13:08 on Aug 21, 2015

crunk dork
Jan 15, 2006

Thanks Ants
May 21, 2004

#essereFerrari


This was 2013, I have since :yotj: twice.

MrMoo
Sep 14, 2000

GnarlyCharlie4u posted:

Happy Friday!
For those of us in positions/places now better than previous jobs, let's take a moment to reflect and be thankful.
:yotj: 2015!





D-Link may be worse than the cabling here.

Aunt Beth
Feb 24, 2006

Baby, you're ready!
Grimey Drawer
I'll add this one I saw earlier this week.

GnarlyCharlie4u
Sep 23, 2007

I have an unhealthy obsession with motorcycles.

Proof

MrMoo posted:

D-Link may be worse than the cabling here.

There's a perfectly good Cisco hiding somewhere in there. Plainly visible, and atrociously installed.
See if you can find it.

Ahdinko
Oct 27, 2007

WHAT A LOVELY DAY

GnarlyCharlie4u posted:

There's a perfectly good Cisco hiding somewhere in there. Plainly visible, and atrociously installed.
See if you can find it.

The one hanging in place by the cables on the right?

Edit: Someone passing by my desk saw these pictures and chimed in with the best one they saw last week, a friend working at a bank, to be honest its making some of these other ones look neat:

Ahdinko fucked around with this message at 16:53 on Aug 21, 2015

Docjowles
Apr 9, 2009

I love that there's plenty of cable management and zip ties available. And maybe, at first, they got used a little bit. Then less and less every day, as the admin slowly sank into an abyss of alcohol and nihilism. As one does.

Aunt Beth
Feb 24, 2006

Baby, you're ready!
Grimey Drawer
What are the chances that if you lift up that mess and look behind the cables, you'd find that to cut costs there is no networking hardware in those racks at all, just a poor, disheveled contractor routing all the bits by hand? Pay no attention to that resource behind the curtain!

Fiendish Dr. Wu
Nov 11, 2010

You done fucked up now!
Was just chatting with my old boss from my last job. We were both interviewing for positions at the same job. I ended up taking this other job, which is loving awesome (and paid me over 15% more). He started at that other place this monday, and as a part of their security they block all outside connections. As director, he plans on changing that. I just thought it was funny.

Proud Christian Mom
Dec 20, 2006
READING COMPREHENSION IS HARD

Aunt Beth posted:

What are the chances that if you lift up that mess and look behind the cables, you'd find that to cut costs there is no networking hardware in those racks at all, just a poor, disheveled contractor routing all the bits by hand? Pay no attention to that resource behind the curtain!

im convinced that when you spin up an Azure VM its really just a room full of H-1Bs setting them up and last one to get it done gets sent back home. some sort of bizarre IT Survivor.

KillHour
Oct 28, 2007


GnarlyCharlie4u posted:

Happy Friday!
For those of us in positions/places now better than previous jobs, let's take a moment to reflect and be thankful.
:yotj: 2015!





I cried looking at this.

Edit:


:catstare:

KillHour fucked around with this message at 19:13 on Aug 21, 2015

Thanks Ants
May 21, 2004

#essereFerrari


I like the fake raised floor on top of a raised floor, and what look to be reasonably expensive Panduit cable management sitting completely unused.

Vulture Culture
Jul 14, 2003

I was never enjoying it. I only eat it for the nutrients.

go3 posted:

im convinced that when you spin up an Azure VM its really just a room full of H-1Bs setting them up and last one to get it done gets sent back home. some sort of bizarre IT Survivor.
this is basically how softlayer provisioning literally works

tomapot
Apr 7, 2005
Suppose you're thinkin' about a plate o' shrimp. Suddenly someone'll say, like, plate, or shrimp, or plate o' shrimp out of the blue, no explanation. No point in lookin' for one, either. It's all part of a cosmic unconciousness.
Oven Wrangler

GnarlyCharlie4u posted:

There's a perfectly good Cisco hiding somewhere in there. Plainly visible, and atrociously installed.
See if you can find it.

This is like the Hoarder I Spy the read that was pinned to GBS recently.

3 Action Economist
May 22, 2002

Educate. Agitate. Liberate.
We have a conference center here at the resort that drives most of our summer business. This week, there's a group meeting that does some sort of genetic research. They have a vendor in who is adamant that we allow him to connect to our internal network because he "needs to."

Sorry, dude, no loving way am I letting unknown devices on to my network. We provide WiFi to guests for this purpose and it's perfectly adequate.

Judge Schnoopy
Nov 2, 2005

dont even TRY it, pal
Maybe he has network devices that don't have WiFi adapters? I'd ask if an Ethernet connection to the guest network will do, and do the needful on your end to segment his port over.

CptJackLaser
Jul 16, 2013
I'm doing some research on an ESXi whitebox build with at least 64GB of RAM for a CCIE home lab setup. I figured I'd ask around here if anyone else has built one recently, and if so, do you have a parts list? Is anyone else studying for the CCIE R&S?

3 Action Economist
May 22, 2002

Educate. Agitate. Liberate.

Judge Schnoopy posted:

Maybe he has network devices that don't have WiFi adapters? I'd ask if an Ethernet connection to the guest network will do, and do the needful on your end to segment his port over.

Oh, he does. But he thinks it'll be too slow.

I could block out a single port just for him, but I don't really want to. It's late notice, no one asked us in IT if they could, and it's not a service we provide.

E: I see his trying to go through a VPN, so I can't be too surprised his Internet is "slow" but it's also the same Internet whether he's on WiFi or plugged in. And while WiFi might only get him 54mpbs at the last leg, the switches are only 100mbps, and I'd bet his VPN is slower than either.

Oh and I'm seeing botnet activity get blocked. As if to prove my point....

3 Action Economist fucked around with this message at 15:19 on Aug 24, 2015

rafikki
Mar 8, 2008

I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD


CptJackLaser posted:

I'm doing some research on an ESXi whitebox build with at least 64GB of RAM for a CCIE home lab setup. I figured I'd ask around here if anyone else has built one recently, and if so, do you have a parts list? Is anyone else studying for the CCIE R&S?

Just a heads up that there is a Home Lab thread http://forums.somethingawful.com/showthread.php?threadid=3561669 and Cert thread http://forums.somethingawful.com/showthread.php?threadid=3521165

This isn't me telling you to take the question out of this thread, by any means, because this is definitely the most active one with presumably the largest number of eyes, just a FYI.

CptJackLaser
Jul 16, 2013

rafikki posted:

Just a heads up that there is a Home Lab thread http://forums.somethingawful.com/showthread.php?threadid=3561669 and Cert thread http://forums.somethingawful.com/showthread.php?threadid=3521165

This isn't me telling you to take the question out of this thread, by any means, because this is definitely the most active one with presumably the largest number of eyes, just a FYI.

I appreciate the direction. I will take the question there as well. Thanks again.

Proud Christian Mom
Dec 20, 2006
READING COMPREHENSION IS HARD

Colonial Air Force posted:

We have a conference center here at the resort that drives most of our summer business. This week, there's a group meeting that does some sort of genetic research. They have a vendor in who is adamant that we allow him to connect to our internal network because he "needs to."

Sorry, dude, no loving way am I letting unknown devices on to my network. We provide WiFi to guests for this purpose and it's perfectly adequate.

We get this occasionally for a hotel chain we support and its always last minute and the answer is always nope nope nope. Sales has a form to fill out and submit with 3 days notice if they want special poo poo like this and if that can't be followed tough poo poo.

Methanar
Sep 26, 2013

by the sex ghost
I've just done my first migration from the comfort of my room playing video games for a few hours.

Everyone just needs to log out and back in tomorrow morning and it'll otherwise be invisible.

I'm very proud of myself.



This was a little stressful though.

Internet Explorer
Jun 1, 2005





Good job! There will inevitably be something broken tomorrow. Just keep calm and work through it and you'll be fine!

siggy2021
Mar 8, 2010
I'm looking to get an inventory/asset management system in place where I work. At the moment, if someone leaves/gets fired/whatever, I have no loving clue what they have. My only resources are what the position they held would generally have, asking their manager, and for phones praying someone actually updated the name on the line on our carrier's website.

Does anyone have any suggestions on where to start looking on best practices and software to help get this done?

Japanese Dating Sim
Nov 12, 2003

hehe
Lipstick Apathy

siggy2021 posted:

I'm looking to get an inventory/asset management system in place where I work. At the moment, if someone leaves/gets fired/whatever, I have no loving clue what they have. My only resources are what the position they held would generally have, asking their manager, and for phones praying someone actually updated the name on the line on our carrier's website.

Does anyone have any suggestions on where to start looking on best practices and software to help get this done?

Would love to hear any responses to this myself!

Dick Trauma
Nov 30, 2007

God damn it, you've got to be kind.
I started making my own FileMaker inventory db back around 2000, updating it with each new job. I have every laptop, desktop, server, major peripheral and software license stored in it. The hardware is attached to a user, licenses are attached to a PC, so I can pull up a user and see all their equipment, or pull up a PC and see who's using it and if any software licenses are attached. Each user is attached to a location so I can see everything by location as well, run warranty expiration reports, etc. Each item has a notes field so when someone leaves I can note who last used the machine, or if a machine underwent a repair. I also built a cellphone table that I used at the last couple of jobs but don't need here.

It gets the job done.

Richard Noggin
Jun 6, 2005
Redneck By Default
I'm (lightly) using Spiceworks for this. Seems to do the job, but I've only been using it for 3 months.

Rhymenoserous
May 23, 2008

Dick Trauma posted:

I started making my own FileMaker inventory db back around 2000, updating it with each new job. I have every laptop, desktop, server, major peripheral and software license stored in it. The hardware is attached to a user, licenses are attached to a PC, so I can pull up a user and see all their equipment, or pull up a PC and see who's using it and if any software licenses are attached. Each user is attached to a location so I can see everything by location as well, run warranty expiration reports, etc. Each item has a notes field so when someone leaves I can note who last used the machine, or if a machine underwent a repair. I also built a cellphone table that I used at the last couple of jobs but don't need here.

It gets the job done.

I have software that does this for me, I just provide it an administrative username. These days it will even pull serial #'s from OEM dell shitboxes.

Adbot
ADBOT LOVES YOU

Inspector_666
Oct 7, 2003

benny with the good hair

Rhymenoserous posted:

I have software that does this for me, I just provide it an administrative username. These days it will even pull serial #'s from OEM dell shitboxes.

Getting the service tag from a Dell of any type is super easy.

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply