Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Locked thread
ptier
Jul 2, 2007

Back off man, I'm a scientist.
Pillbug

pr0digal posted:

Yeah it doesn't have LOM unfortunately but for everything else that's where ARD and SSH come in.

Also the Sonnet one is ~$900 for the dual configuration and it's a piece of poo poo. And yes for everything that isn't Mac specific it's starting to poo poo over to actual servers. Telestream Episode runs so much better on Windows (since it depends on cores) but CatDV on Windows is annoying the hell out of me. The majority of clients are on Macs and it's much easier from a path mapping perspective to keep everything on Macs for the Worker Nodes and such.

The other MAM we sell (Reach Engine) runs entirely on Linux servers and our sync servers are Linux servers as well. So we are moving away from it but for certain deployments we have to go Apple.

*edit* Yeah I'm not a fan of the new Mac Pros, they just have a super high rate of failure. A lot of clients have started using iMacs as editing platforms and only using the Mac Pros for "high end" uses. Basically all our clients run Premiere though a few have Avid deployments and even fewer run Final Cut.

Unless something is different in ARD than normal Screen Sharing / VNC. Newer versions of OSX ( think 10.11) added a new fun feature where if you are trying to import certs into the keychain / server.app it won't let you click the last button to import if it detects VNC running. You can of course get physical access to the machines, reboot it and disable the super sweet security measures which always feels nice. Not sure about SSH. But seriously, if you actually use the "Server.app" you deserve what you get.

Upgrade the OS and watch all the customizations get shot to poo poo. Every time. So glad I don't have to deal with that anymore.

Adbot
ADBOT LOVES YOU

rndmnmbr
Jul 3, 2012

Dillbag posted:

I have it on direct authority that a recent and extremely successful major motion picture that used the new Mac Pros for picture editing chucked 11 of them in the trash over a 6 month period due to hardware failure. They run extremely hot and are experiencing very similar graphics chipset failures to the previous couple of Macbook Pro revisions.

They also used Adon'tbe Premiere but that's another story...

Why anyone uses Macs for Adobe programs these days is beyond me. Adobe poo poo works the exact same on Windows, so chuck the stupid trashcans, buy cheap grey boxes from Dell (with a support contract), and tell your bitchy whiny Adobe users to get over it or get a new job.

e. I freely swap back and forth between Macs and PCs at work, laying out newspapers, and there is quite literally nothing a Mac can do with Photoshop, Illustrator, and InDesign that a PC can't do just as well. Graphic designers just stick with Macs because that's what they were taught. gently caress that, I'd rather have onsite support and skip the Apple tax.

rndmnmbr fucked around with this message at 20:22 on Jul 26, 2016

Thanks Ants
May 21, 2004

#essereFerrari


MJP posted:

We have two distribution lists for our NY office. One of which has been hit by phish attempts twice in the last month. Fortunately, our users are smart enough to ignore and delete, and I ran my script from a few pages back to remove the offending mail from all mailboxes, but I want to make these distros internal only.

I tried removing their @companyname.com SMTP addresses but that threw errors in users' Outlook clients stating the address is no longer valid. I wanted to set the Accept Messages From to Enterprise Users or Domain Users, but those aren't selectable options - just individual users.

Is there any way I can restrict delivery to stop external messages? I have a ticket in to our corporate IT office to block traffic at the spam filter but I wanted to have something a bit quicker and easier to maintain on our side. I don't have access to make changes to the filter, just to work with quarantines of users in our OU.

Don't you just want Set-DistributionGroup [...] RequireSenderAuthenticationEnabled $true? Sounds like you're looking in the wrong place.

Gunjin
Apr 27, 2004

Om nom nom

rndmnmbr posted:

Why anyone uses Macs for Adobe programs these days is beyond me. Adobe poo poo works the exact same on Windows, so chuck the stupid trashcans, buy cheap grey boxes from Dell (with a support contract), and tell your bitchy whiny Adobe users to get over it or get a new job.

e. I freely swap back and forth between Macs and PCs at work, laying out newspapers, and there is quite literally nothing a Mac can do with Photoshop, Illustrator, and InDesign that a PC can't do just as well. Graphic designers just stick with Macs because that's what they were taught. gently caress that, I'd rather have onsite support and skip the Apple tax.

Because if you have ProRes in your workflow Windows is still a pain in the rear end.

A Frosty Witch
Apr 21, 2005

I was just looking at it and I suddenly got this urge to get inside. No, not just an urge - more than that. It was my destiny to be here; in the box.
I was just introduced to the iPad graveyard.

A sizable molehill, bordering on mountainous, of stacks of dead iPads.

I ask what's wrong with them. Did we not have them warrantied?

Oh, no, they aren't BROKEN, we just can't get into them. Apparently, my predecessor just handed them out without ever considering management or recovery options. So, faculty and staff just put passcodes and personal Apple IDs on these things and then left for greener pastures, leaving us with a bunch of iPads we can't get into.

Does anyone know how to work around this? I know I can do a factory restore by forcing them into recovery mode, but about 90% of these had Find My iPhone activated, so you have to login with your Apple ID even after a factory reset.

MJP
Jun 17, 2007

Are you looking at me Senpai?

Grimey Drawer

Thanks Ants posted:

Don't you just want Set-DistributionGroup [...] RequireSenderAuthenticationEnabled $true? Sounds like you're looking in the wrong place.

Seems fair enough, I don't know if the spammers were authenticated somehow but at least this'll weed out the obvious attempts.

GreenNight
Feb 19, 2006
Turning the light on the darkest places, you and I know we got to face this now. We got to face this now.

larchesdanrew posted:

Does anyone know how to work around this? I know I can do a factory restore by forcing them into recovery mode, but about 90% of these had Find My iPhone activated, so you have to login with your Apple ID even after a factory reset.

You need a receipt proving ownership then go to an Apple store and they'll reset them.

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum

GreenNight posted:

You need a receipt proving ownership then go to an Apple store and they'll reset them.
Yep.

A Frosty Witch
Apr 21, 2005

I was just looking at it and I suddenly got this urge to get inside. No, not just an urge - more than that. It was my destiny to be here; in the box.

GreenNight posted:

You need a receipt proving ownership then go to an Apple store and they'll reset them.

Cool, nearest Apple store is only a 6 hour drive away :suicide:

SeaborneClink
Aug 27, 2010

MAWP... MAWP!
Sounds like the perfect opportunity to get the minion out of your hair for a few days by having him bring a pallet of iPads into the nearest Fruit Stand.

GreenNight
Feb 19, 2006
Turning the light on the darkest places, you and I know we got to face this now. We got to face this now.

larchesdanrew posted:

Cool, nearest Apple store is only a 6 hour drive away :suicide:

Better make an appointment or you'll sit there waiting for hours!

Thanks Ants
May 21, 2004

#essereFerrari


MJP posted:

Seems fair enough, I don't know if the spammers were authenticated somehow but at least this'll weed out the obvious attempts.

Authenticated means internal. It's badly phrased.

https://technet.microsoft.com/en-us/library/bb124955(v=exchg.160).aspx

quote:

The RequireSenderAuthenticationEnabled parameter specifies whether to accept messages only from authenticated (internal) senders. Valid values are:
$true Messages are accepted only from authenticated (internal) senders. Messages from unauthenticated (external) senders are rejected.
$false Messages are accepted from authenticated (internal) and unauthenticated (external) senders.

Thanks Ants
May 21, 2004

#essereFerrari


larchesdanrew posted:

Cool, nearest Apple store is only a 6 hour drive away :suicide:

Once you get them sorted out then get them onto a management platform, even if it's just configurator:

https://support.apple.com/en-gb/HT202804

pr0digal
Sep 12, 2008

Alan Rickman Overdrive

ptier posted:

Unless something is different in ARD than normal Screen Sharing / VNC. Newer versions of OSX ( think 10.11) added a new fun feature where if you are trying to import certs into the keychain / server.app it won't let you click the last button to import if it detects VNC running. You can of course get physical access to the machines, reboot it and disable the super sweet security measures which always feels nice. Not sure about SSH. But seriously, if you actually use the "Server.app" you deserve what you get.

Upgrade the OS and watch all the customizations get shot to poo poo. Every time. So glad I don't have to deal with that anymore.

Death to Server.app. It's not used in our deployments but a bunch of our clients use it for various services and I hate having to interface with it.

I love having to rebuild the LDAP database after a server crash or it taking up all the RAM because someone left the logs window open.

And yes, ProRes is used heavily in almost our clients workflows, both as a mezzanine and delivery format. Even a few Avid clients decide not to transcode the media to DNxHD (which is basically the same thing as ProRes, just a different wrapper) and just AMA ProRes media. Or the people who work in Camera RAW and wonder why their 4K AVC-Intra/AVCHD timelines with six adjustment layers keep lagging :downs:

Khisanth Magus
Mar 31, 2011

Vae Victus

SeaborneClink posted:

Sounds like the perfect opportunity to get the minion out of your hair for a few days by having him bring a pallet of iPads into the nearest Fruit Stand.

It would be hilarious to show up at an apple store with a trunk completely full of locked ipads, a bunch of receipts, and say "Get to it fruit boy."

SeaborneClink
Aug 27, 2010

MAWP... MAWP!

Khisanth Magus posted:

It would be hilarious to show up at an apple store with a trunk completely full of locked ipads, a bunch of receipts, and say "Get to it fruit boy."
Just don't wear your TSA uniform in... :yarr:

Orcs and Ostriches
Aug 26, 2010


The Great Twist

larchesdanrew posted:

I was just introduced to the iPad graveyard.

A sizable molehill, bordering on mountainous, of stacks of dead iPads.

I ask what's wrong with them. Did we not have them warrantied?

Oh, no, they aren't BROKEN, we just can't get into them. Apparently, my predecessor just handed them out without ever considering management or recovery options. So, faculty and staff just put passcodes and personal Apple IDs on these things and then left for greener pastures, leaving us with a bunch of iPads we can't get into.

Does anyone know how to work around this? I know I can do a factory restore by forcing them into recovery mode, but about 90% of these had Find My iPhone activated, so you have to login with your Apple ID even after a factory reset.

Just leave them like that, because dealing with ipad poo poo in an education environment loving blows and isn't worth the effort.

GreenNight
Feb 19, 2006
Turning the light on the darkest places, you and I know we got to face this now. We got to face this now.

Orcs and Ostriches posted:

Just leave them like that, because dealing with ipad poo poo in an education environment loving blows and isn't worth the effort.

gently caress it, if he gets the OK to trash them all I'd spend a weekend at an apple store getting them reset then selling them on ebay.

GreenNight fucked around with this message at 21:01 on Jul 26, 2016

rndmnmbr
Jul 3, 2012

Gunjin posted:

Because if you have ProRes in your workflow Windows is still a pain in the rear end.

Okay, fair, I know precisely jack and poo poo about video production. But for print production, switch to Windows already, fucknugget!

Orcs and Ostriches
Aug 26, 2010


The Great Twist

GreenNight posted:

gently caress it, if he gets the OK to trash them all I'd spend a weekend at an apple store getting them reset then selling them on ebay,

Yeah, that's probably the ideal solution.

A Frosty Witch
Apr 21, 2005

I was just looking at it and I suddenly got this urge to get inside. No, not just an urge - more than that. It was my destiny to be here; in the box.

Thanks Ants posted:

Once you get them sorted out then get them onto a management platform, even if it's just configurator:

https://support.apple.com/en-gb/HT202804

I've already laid out and gotten approval to set up every iDevice we own on a Meraki server with departmental Apple IDs. I've always wanted to try configurator, though, since it allows you to use one Apple ID for more than the max allowed (I think)

ptier
Jul 2, 2007

Back off man, I'm a scientist.
Pillbug

pr0digal posted:

Death to Server.app. It's not used in our deployments but a bunch of our clients use it for various services and I hate having to interface with it.

I love having to rebuild the LDAP database after a server crash or it taking up all the RAM because someone left the logs window open.

And yes, ProRes is used heavily in almost our clients workflows, both as a mezzanine and delivery format. Even a few Avid clients decide not to transcode the media to DNxHD (which is basically the same thing as ProRes, just a different wrapper) and just AMA ProRes media. Or the people who work in Camera RAW and wonder why their 4K AVC-Intra/AVCHD timelines with six adjustment layers keep lagging :downs:

Yea, a former client ad agency thought it would be cute to run a little conference room webapp from their mac mini server. Update OSX, oh there go all the apache configs and plugins for that. And having to reauth to the domain because we just drop that like a hot potato. Before the windows domain it was just OD it would be a mess every time.

ptier fucked around with this message at 21:19 on Jul 26, 2016

pr0digal
Sep 12, 2008

Alan Rickman Overdrive

ptier posted:

Yea, a former client ad agency through it would be cute to run a little conference room webapp from theirs. Update OSX, oh there go all the apache configs and plugins for that. And having to reauth to the domain because we just drop that like a hot potato. Before when it was just OD it would be a mess every time.

10.11 also has a really annoying Xsan bug where it attempt the mount any volumes almost immediately before any disks are available and then never try again. So basically Xsan auto mounting is broken in 10.11 unless you use their Launch Daemon which basically kills the xsand process on startup for x seconds and then starts it back up.

Of course it's not always broken, it depends on your fibre infrastructure, your fibre adapters and your storage. It's annoying as poo poo.

ptier
Jul 2, 2007

Back off man, I'm a scientist.
Pillbug

pr0digal posted:

10.11 also has a really annoying Xsan bug where it attempt the mount any volumes almost immediately before any disks are available and then never try again. So basically Xsan auto mounting is broken in 10.11 unless you use their Launch Daemon which basically kills the xsand process on startup for x seconds and then starts it back up.

Of course it's not always broken, it depends on your fibre infrastructure, your fibre adapters and your storage. It's annoying as poo poo.

Apple :argh:

pr0digal
Sep 12, 2008

Alan Rickman Overdrive

Though I think my favorite wacky StorNext/Xsan bug was in Windows Server 2008. If you didn't install the StorNext and Fibre drivers before plugging in/zoning the storage to the machine it would attempt to label the disks automatically. In other words it would nuke the entire SAN if you installed things in the wrong order!

NeuralSpark
Apr 16, 2004

larchesdanrew posted:

I've already laid out and gotten approval to set up every iDevice we own on a Meraki server with departmental Apple IDs. I've always wanted to try configurator, though, since it allows you to use one Apple ID for more than the max allowed (I think)

If you're buying more iDevices, get enrolled in the Device Enrollment Program and the Volume Purchase Program. DEP is handy because Apple's activation servers tie the serial to your purchase order, so devices will enroll in an MDM of your choosing automagically upon activation.

NeuralSpark
Apr 16, 2004

pr0digal posted:

Though I think my favorite wacky StorNext/Xsan bug was in Windows Server 2008. If you didn't install the StorNext and Fibre drivers before plugging in/zoning the storage to the machine it would attempt to label the disks automatically. In other words it would nuke the entire SAN if you installed things in the wrong order!

Oh man, so much crying and gnashing of teeth with this at one of my clients years ago. Almost 100 TB gone because "how hard could it be?"

Varkk
Apr 17, 2004

larchesdanrew posted:

I was just introduced to the iPad graveyard.

A sizable molehill, bordering on mountainous, of stacks of dead iPads.

I ask what's wrong with them. Did we not have them warrantied?

Oh, no, they aren't BROKEN, we just can't get into them. Apparently, my predecessor just handed them out without ever considering management or recovery options. So, faculty and staff just put passcodes and personal Apple IDs on these things and then left for greener pastures, leaving us with a bunch of iPads we can't get into.

Does anyone know how to work around this? I know I can do a factory restore by forcing them into recovery mode, but about 90% of these had Find My iPhone activated, so you have to login with your Apple ID even after a factory reset.



We had one iPhone at work like that. My boss logged a ticket with Apple and eventually we were able to gain access to it.
No visit to Apple Store but it was a week or two of back and forth.

Terminal
Feb 17, 2003
The Void

Look on the bright side, you could have my boss, the iPad Queen, who keeps a printed clipboard of Apple ID's & passwords unique to every iPad in district. Yes, she creates a new GAFE account for EVERY iPad, though I think she's now moving to departmental groupings.

She refuses to let our Apple "Specialist" manage the iPads, not because the tech can't but because the Queen likes the methods & madness that are the status quo.

Also I totally have you tagged from k12sysadmin now.

Zephirus
May 18, 2004

BRRRR......CHK

NeuralSpark posted:

Oh man, so much crying and gnashing of teeth with this at one of my clients years ago. Almost 100 TB gone because "how hard could it be?"

You can re-label the disks and recover fine if you've got the labels from cvlabel saved (usually in the creation log on the MDCs). We had to do this several times.

NeuralSpark
Apr 16, 2004

Zephirus posted:

You can re-label the disks and recover fine if you've got the labels from cvlabel saved (usually in the creation log on the MDCs). We had to do this several times.

By the time they called me in they had already re-created the volume on the MDC and were restoring what they could. :(

pr0digal
Sep 12, 2008

Alan Rickman Overdrive

Zephirus posted:

You can re-label the disks and recover fine if you've got the labels from cvlabel saved (usually in the creation log on the MDCs). We had to do this several times.

We've had to do this recently as a client did something funky to their disk labels, thankfully StorNext does have a log of the cvlabels that is sometimes up to date. We've also started to keep the cvlabels in the client records.

It's always fun when you see PHANTOM under disks when looking at the StorNext GUI and wonder just what the hell happened.

Neural, I hate when that happens. "Oh the entire SAN disappeared, better gently caress around with it on my own instead of calling the people who installed it and support it"

Moey
Oct 22, 2010

I LIKE TO MOVE IT

Varkk posted:

We had one iPhone at work like that. My boss logged a ticket with Apple and eventually we were able to gain access to it.
No visit to Apple Store but it was a week or two of back and forth.

Yeah, if you can show proof of purchase to Apple, you can get them reset.

A Pinball Wizard
Mar 23, 2005

I know every trick, no freak's gonna beat my hands

College Slice
A hundred thousand tickets came in...

Our online environment has gone down every Monday for the past 3 weeks. The storage array holding the user profiles gets bogged down for reasons as yet undetermined, logins are slow if they work at all, and it's 50/50 if users will have the proper drives mapped to use their software. This was bad enough, and we already had people demanding compensation/refusing to leave yesterday, but at least the issue was clearing up by around 10 or 11 every morning.

It happened again today. Everything went down at 8, calls start rolling in, people are understandably PIIIIIIISSSSSEEEED that this is happening for a second time this week. Well our admins, in their brilliance, decide to disable access to Outlook for all users, to see if that helps. Of course, they don't let support know this for half an hour afterward, so we have to deal with irate customers who waited half an hour to get logged in and now can't even check their e-mail, and we don't even know why. Then the admins decide to try just loving disabling logins, because hey, why not. By 10 am we had 80 tickets in our backline queue and calls holding an average of 15min.

Best of all a bunch of new techs started yesterday, and lol if you think management is bothering to remove them from the "YOU'D BETTER BE DEAD OR JOB HUNTING IF YOU'RE NOT ON THE PHONE RIGHT NOW" e-mails.

e: and one surprisingly cheerful user sent me an e-mail he received from our chief competitor - "Sick of paying top dollar for an unreliable system? Contact us today!"

A Pinball Wizard fucked around with this message at 01:16 on Jul 27, 2016

SeaborneClink
Aug 27, 2010

MAWP... MAWP!
So you're :yotj: hunting right? Stop posting, start looking.

MF_James
May 8, 2008
I CANNOT HANDLE BEING CALLED OUT ON MY DUMBASS OPINIONS ABOUT ANTI-VIRUS AND SECURITY. I REALLY LIKE TO THINK THAT I KNOW THINGS HERE

INSTEAD I AM GOING TO WHINE ABOUT IT IN OTHER THREADS SO MY OPINION CAN FEEL VALIDATED IN AN ECHO CHAMBER I LIKE

A Pinball Wizard posted:

A hundred thousand tickets came in...

Our online environment has gone down every Monday for the past 3 weeks. The storage array holding the user profiles gets bogged down for reasons as yet undetermined, logins are slow if they work at all, and it's 50/50 if users will have the proper drives mapped to use their software.

so running chkdsk on storage during X critical time is not a good idea?

apparently our clients unix developers decided this would be a good idea and have caused a bunch of issues, the responses we've received when pointing out the issue boils down to: LOLWUT?!

Nerdrock
Jan 31, 2006

larchesdanrew posted:

Cool, nearest Apple store is only a 6 hour drive away :suicide:

Apple enterprise support is surprisingly good. Give them a call.

To my knowledge, my district doesn't have any 'support contracts' or anything with them besides apple care, we just buy a bunch of apple poo poo. If you're a school who buys apple poo poo, they WANT to help you.

Talk to your sales rep, if you have one. You might also have a mobility engineer available to you, who can point you in the direction you need to go very easily.

Nerdrock fucked around with this message at 01:38 on Jul 27, 2016

MiniFoo
Dec 25, 2006

METHAMPHETAMINE

it's almost 6 PM and I'm still onsite waiting for a third system restore to finish on this PC that's giving a BSOD but will boot into safe mode

the last two restore points didn't work, and I don't expect this one to work either

let sweet death release me from this mortal coil

[edit] MY GOD IT WORKED, I'M OUT OF HERE FUCKOS

[EDIT 2] SPOKE TOO SOON, BUT AT LEAST I'M BACK IN REGULAR WINDOWS AND WILL DEAL WITH IT REMOTELY TOMORROW

MiniFoo fucked around with this message at 01:59 on Jul 27, 2016

A Frosty Witch
Apr 21, 2005

I was just looking at it and I suddenly got this urge to get inside. No, not just an urge - more than that. It was my destiny to be here; in the box.

MiniFoo posted:

[edit] MY GOD IT WORKED, I'M OUT OF HERE FUCKOS

Throwing my vote in for this as the new thread title

Terminal posted:

Also I totally have you tagged from k12sysadmin now.

There is no escaping the awesomely far-reaching Cheetos fingers of goonkind.

A Frosty Witch fucked around with this message at 02:41 on Jul 27, 2016

Adbot
ADBOT LOVES YOU

the real blah
Oct 31, 2010
I have had the same ticket for about two weeks that a customer refuses to close. Guy has "high" latency between his two sites. Chicago and Bangalore. Over the public internet. No, that round trip looks right, more or less. No, my network is fine. No, there is nothing I can do about this. No, there is nothing anyone here can do about this. Did you look at the last hop in Bangalore like I asked? Do you see the 75ms difference between your destination and the hop immediately before it? Why am I still trying to explain this to you? Can I just close this ticket, PLEASE?

  • Locked thread