Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
xzzy
Mar 5, 2009

Eh, we ran raid 5 for years on 1tb+ drives in trays that staged data being read off tape robots. Never lost a filesystem to disk failure (admin error, yes, but that's it). We're pretty religious about replacing disks as soon as warning lights pop though.

Not that what we do now is significantly "better," we merely shifted to raid 6. :v:

Adbot
ADBOT LOVES YOU

bull3964
Nov 18, 2000

DO YOU HEAR THAT? THAT'S THE SOUND OF ME PATTING MYSELF ON THE BACK.


I'm sure a lot of people manage to try heroin just once and never do it again too, that doesn't make it any more advisable.

Johnny Aztec
Jan 30, 2005

by Hand Knit

anthonypants posted:

Yeah if it's like WD Greens then who cares
Also this

I accidentally bought a Green once.


It was terrible.

Agrikk
Oct 17, 2003

Take care with that! We have not fully ascertained its function, and the ticking is accelerating.

Johnny Aztec posted:

What brand was that?

The first three were WD Greens, yes. The replacement were WD Blues.


bull3964 posted:

8 drive RAID 5 gives me the shakes. Unless those are all 200gb drives, you have a very high probability of losing the whole array.

Dual parity if you value the data at all.

They're a bunch of 1TB disks copped from a bunch of servers being decommissioned. Yep. Welp.

The new array will be RAID-6 on WD Blues.

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum

Agrikk posted:

The first three were WD Greens, yes.
Wow, weird, I wonder why they all failed.

Paladine_PSoT
Jan 2, 2010

If you have a problem Yo, I'll solve it

Bob Morales posted:

:downs: Bob we need some training

:colbert: Training on what?

:downs: We just want to know how to do some stuff better

:colbert: What kind of stuff?

:downs: Why are you being so difficult?! Get us some training!

http://www.imdb.com/title/tt0028346/

Training done.

Neddy Seagoon
Oct 12, 2012

"Hi Everybody!"

Agrikk posted:

The first three were WD Greens, yes. The replacement were WD Blues.


They're a bunch of 1TB disks copped from a bunch of servers being decommissioned. Yep. Welp.

The new array will be RAID-6 on WD Blues.

Isnt there a specific model for RAID arrays? Red or Purple I think?

Terminal
Feb 17, 2003
The Void

Agrikk posted:

The first three were WD Greens, yes. The replacement were WD Blues.

Good news, no more worrying about WD Greens :downs:

http://www.techspot.com/news/62598-western-digital-converts-green-hard-drives-blue-branding.html

Also anyone doing anything beyond RAID-1 with non-TLER drives is just sitting on a future data sinkhole.

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum

Neddy Seagoon posted:

Isnt there a specific model for RAID arrays? Red or Purple I think?
Yes, Red and Red Pro is their RAID-supported line.

Bunni-kat
May 25, 2010

Service Desk B-b-bunny...
How can-ca-caaaaan I
help-p-p-p you?

:wtc: that is so bad

EoRaptor
Sep 13, 2003

by Fluffdaddy

Avenging_Mikon posted:

:wtc: that is so bad

The blue branding was already used for their OEM drives, and those were already generally available in most shops because that's how OEM's dump excess stock. WD just simplified their offerings and eliminated a bunch of overhead, which benefits both the company and the consumer.

mllaneza
Apr 28, 2007

Veteran, Bermuda Triangle Expeditionary Force, 1993-1952




Hewlett Packard you worthless shits. A week and a half ago I I find out that the logic boards that are already late have been backordered. Today I come back from lunch to find all three on my chair. Cool, someone's getting their laptop back.

Motherfucker. First board installed has two dead USB ports and to top it off, it's already serialized. Two reasons to DOA that board. Pity I can't DOA the time I spent installing the thing.

Remember the good ol' days ? When HP was an engineering company ? Apple has gone insane with the 2016 MacBook Pros, but their DOA rate on parts is so much lower than HP.

Bunni-kat
May 25, 2010

Service Desk B-b-bunny...
How can-ca-caaaaan I
help-p-p-p you?

EoRaptor posted:

The blue branding was already used for their OEM drives, and those were already generally available in most shops because that's how OEM's dump excess stock. WD just simplified their offerings and eliminated a bunch of overhead, which benefits both the company and the consumer.

What? The only overhead reduced is packaging.


Oh, jokes, right. Sorry, not drunk enough yet.

Sheep
Jul 24, 2003

skooma512 posted:

A department here suddenly came into 30 iPads that I had to put on the network and add an icon to.

I never saw any one of them ever again.

Yeah this is basically what I am expecting. Best part is we have oodles of extra MDM licenses with Meraki so it's not like this couldn't have easily been done the right way, but this particular department has one of those directors who is "good with computers" (despite being obviously not so) and gets indignant at anyone else having ultimate authority/control over their toys.

Anyways, not my problem!

Corsair Pool Boy
Dec 17, 2004
College Slice
Is the WD Green hate just because they're cheap and cheaply made, or is there more to it? I mean, I'd never buy one either way, but we sold a lot in Geek Squad, so I'm curious.

Rexxed
May 1, 2010

Dis is amazing!
I gotta try dis!

MANime in the sheets posted:

Is the WD Green hate just because they're cheap and cheaply made, or is there more to it? I mean, I'd never buy one either way, but we sold a lot in Geek Squad, so I'm curious.

They wear out earlier because of the aggressive head parking built into their firmware. You used to be able to change that behavior with some DOS utility put out by WD but I'm not sure if that's still a thing (also even if it is, I'd be amazed if 1% of people ever do it).

DigitalMocking
Jun 8, 2010

Wine is constant proof that God loves us and loves to see us happy.
Benjamin Franklin

Bob Morales posted:

Rackspace's support is loving joke



A number of users (at least ten) here are having performance issues with Outlook. Very laggy switching between messages, etc. We have hosted Exchange with Rackspace. Everyone here is in the same building, wired desktops. What network am I supposed to switch these users too?

Hosted exchange makes no sense any more, move off that poo poo to o365.

probably cost you less too.

For the record: gently caress Rackspace and everything they do and sell.

Agrikk
Oct 17, 2003

Take care with that! We have not fully ascertained its function, and the ticking is accelerating.

anthonypants posted:

Wow, weird, I wonder why they all failed.

After five years? I'm not.

I'm more irritated that the blues I bought to replace them died so quickly.

Oh wait: WD rebranded greens as blues? gently caress me and gently caress magnetic drives.

Well, I have four reds in the mail to replace the whole shitshow that is my home storage.

Agrikk fucked around with this message at 20:07 on Mar 18, 2017

Alereon
Feb 6, 2004

Dehumanize yourself and face to Trumpshed
College Slice
For all the hate on WD Green drives, at least they warned you if you were using them wrong by being slow as dog poo poo. They were perfectly fine drives when used for storing large files, just not as system drives. I look forward to interesting failure modes for Seagate's Shingled Magnetic Recording drives when used to save torrents.

Super-NintendoUser
Jan 16, 2004

COWABUNGERDER COMPADRES
Soiled Meat

DigitalMocking posted:

Hosted exchange makes no sense any more, move off that poo poo to o365.

probably cost you less too.

For the record: gently caress Rackspace and everything they do and sell.

I'm not a proponent of hosted exchange but aren't there a few things that o365 can't do like public folders or journaling for compliance purposes that you need onprem or hosted for?

Super Slash
Feb 20, 2006

You rang ?
Our old SBS 2011 server was equipped with two WD Greens in RAID1, and two WD Blues in RAID1. I found this out reading the integrated system tools, but I had to pull the drives when powered off to actually see for myself... loving bizzare.

Sickening
Jul 16, 2007

Black summer was the best summer.

Jerk McJerkface posted:

I'm not a proponent of hosted exchange but aren't there a few things that o365 can't do like public folders or journaling for compliance purposes that you need onprem or hosted for?

Considering public folders is old as balls, what in the hell is it useful for that isn't totally outclassed by another solution?

Super-NintendoUser
Jan 16, 2004

COWABUNGERDER COMPADRES
Soiled Meat

Sickening posted:

Considering public folders is old as balls, what in the hell is it useful for that isn't totally outclassed by another solution?

Having a shared folder that isn't tied to a user identity? I guess you can setup an account tied to a nonhuman entity but then you'd have to share the password and it gets to be an expense since it's a license seat. How else would you do that?

I mention this because we have o365 and we have a support mailbox that is shared between the support team. We all access it and have send from permissions. Is there a better way? I don't manage it now but back when I did manage an onprem exchange (10 years ago) I did that with a public folder. Just curious.

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum

Jerk McJerkface posted:

I'm not a proponent of hosted exchange but aren't there a few things that o365 can't do like public folders or journaling for compliance purposes that you need onprem or hosted for?
I don't know what use you have for public folders, but Office 365 does support public folders.

Thanks Ants
May 21, 2004

#essereFerrari


You can make a shared mailbox and grant access to it, it doesn't need licensing and it's not a public folder.

I have a journaling address configured for getting internal messages into Mimecast, but there are retention policies and compliance options native to the product that achieve the same result.

DigitalMocking
Jun 8, 2010

Wine is constant proof that God loves us and loves to see us happy.
Benjamin Franklin

Jerk McJerkface posted:

Having a shared folder that isn't tied to a user identity? I guess you can setup an account tied to a nonhuman entity but then you'd have to share the password and it gets to be an expense since it's a license seat. How else would you do that?

I mention this because we have o365 and we have a support mailbox that is shared between the support team. We all access it and have send from permissions. Is there a better way? I don't manage it now but back when I did manage an onprem exchange (10 years ago) I did that with a public folder. Just curious.

Shared mailboxes only need like an EO2 license which is like 2 bucks a month and that includes voicemail.

If you don't want voicemail it's an EO1 license.

DigitalMocking fucked around with this message at 03:19 on Mar 19, 2017

SyNack Sassimov
May 4, 2006

Let the robot win.
            --Captain James T. Vader


DigitalMocking posted:

Shared mailboxes only need like an EO2 license which is like 2 bucks a month and that includes voicemail.

If you don't want voicemail it's an EO1 license.

Eh? Shared mailboxes in 365 don't need a license at all, unless I'm missing what you're talking about as shared mailboxes. You can't login to 365 as the mailbox (since there's not an active user with a license to login with), but you can open it fine from accounts that are granted access to it and send mail as the mailbox if granted send as.

https://support.office.com/en-us/article/Create-shared-mailboxes-in-Office-365-871a246d-3acd-4bba-948e-5de8be0544c9

Super-NintendoUser
Jan 16, 2004

COWABUNGERDER COMPADRES
Soiled Meat

Super Soaker Party! posted:

Eh? Shared mailboxes in 365 don't need a license at all, unless I'm missing what you're talking about as shared mailboxes. You can't login to 365 as the mailbox (since there's not an active user with a license to login with), but you can open it fine from accounts that are granted access to it and send mail as the mailbox if granted send as.

https://support.office.com/en-us/article/Create-shared-mailboxes-in-Office-365-871a246d-3acd-4bba-948e-5de8be0544c9

Interesting. I don't manage my current job's o365, but the guys there tell me that it doesn't work like that. We have a support mailbox, but we all share the password and login in outlook with that a secondary mailbox. I guess they are wrong.

SeaborneClink
Aug 27, 2010

MAWP... MAWP!
They're very wrong, and very dumb.

nielsm
Jun 1, 2009



Jerk McJerkface posted:

Interesting. I don't manage my current job's o365, but the guys there tell me that it doesn't work like that. We have a support mailbox, but we all share the password and login in outlook with that a secondary mailbox. I guess they are wrong.

In fact, if you grant a user Full Access permission on a shared mailbox, the desktop Outlook client will automatically open it and display it as a secondary mailbox in the folders pane.
When you do this there are a few complications with where Sent Items get stored, since even when you have Send As permission on the shared mailbox the sent message still goes into your personal Sent Items folder. But there is a flag settable on shared mailboxes that causes those to receive an extra copy of sent messages, so the team using the shared mailbox can keep track of what messages have been responded to.
If you use OWA instead of desktop Outlook, you will need to open the shared mailbox from the user menu, since OWA appears to only work on a single mailbox at a time.

(This is from an on-prem Exchange perspective, I don't know if o365 is different on some of these points. I do know o365 has some differences in how you assign the permissions and possibly flags on the shared mailbox.)

DigitalMocking
Jun 8, 2010

Wine is constant proof that God loves us and loves to see us happy.
Benjamin Franklin

Super Soaker Party! posted:

Eh? Shared mailboxes in 365 don't need a license at all, unless I'm missing what you're talking about as shared mailboxes. You can't login to 365 as the mailbox (since there's not an active user with a license to login with), but you can open it fine from accounts that are granted access to it and send mail as the mailbox if granted send as.

https://support.office.com/en-us/article/Create-shared-mailboxes-in-Office-365-871a246d-3acd-4bba-948e-5de8be0544c9

It's Exchange Online 1 if you want it to work as a unified messaging endpoint.

We have about a dozen shared mailboxes, the only ones with a licenses are the ones that have their own DID for leaving messages for the team, so I was wrong about the licensing levels.

SyNack Sassimov
May 4, 2006

Let the robot win.
            --Captain James T. Vader


^^interesting - I haven't dealt too much with UM in 365, so I wasn't aware of that. Good to know.

nielsm posted:

In fact, if you grant a user Full Access permission on a shared mailbox, the desktop Outlook client will automatically open it and display it as a secondary mailbox in the folders pane.
When you do this there are a few complications with where Sent Items get stored, since even when you have Send As permission on the shared mailbox the sent message still goes into your personal Sent Items folder. But there is a flag settable on shared mailboxes that causes those to receive an extra copy of sent messages, so the team using the shared mailbox can keep track of what messages have been responded to.
If you use OWA instead of desktop Outlook, you will need to open the shared mailbox from the user menu, since OWA appears to only work on a single mailbox at a time.

(This is from an on-prem Exchange perspective, I don't know if o365 is different on some of these points. I do know o365 has some differences in how you assign the permissions and possibly flags on the shared mailbox.)

From what I've seen if you use security groups to control permissions on the mailbox in 365 Outlook won't automatically add them, which is a bit annoying, though adding them manually works fine. I'm actually going through this entire process at a client the moment, cleaning up their shared mailboxes & permissions, and have just set up a test GPO to enable the registry tweak for Outlook that sets the sent messages to be in the shared mailbox' sent items, so we'll see how that goes.

There's also apparently a lovely bug in Outlook 2016 and maybe only in a Server 2016 domain where it keeps trying to use the root domain SMTP address to autodiscover (i.e. http://blah.com/autodiscover/autodiscover.xml) and won't fail over to the autodiscover CNAME before about 16 tries, which takes literally 10 minutes and is hilariously annoying and stupid when you don't have an internal subdomain (because whoever set up the domain didn't know to do so and made the internal domain the same as the external) so http://blah.com is actually pointing at the DCs. Easy enough to "fix" with a GPO using the Office 2016 ADMX' to tell Outlook not to use the root domain discovery method, but loving stupid that it won't just fail over to https://autodiscover.blah.com within 10 seconds of failing at the root domain discovery.

Also, since I'm on the subject - does anyone have an opinion now on what the best way to do internal domains is? Obviously for years Microsoft's recommendation has been a subdomain, i.e. internal.contoso.com or ad.contoso.com, but with 365 and AzureConnect from a user perspective it's very confusing to sign in to 365 resources with your full UPN if the UPN doesn't match the email address. Yeah, you can add the external domain (i.e. email address) as a new UPN on the internal domain, but then you have to make sure to create that and set it as the UPN when creating users since the default UPN will still be the internal domain one, which is a real pain (yeah yeah, should be automated via Powershell, it still seems hacky).

So far I've kind of come down on the side of going back to internal matching external, and dealing with the DNS hassle and telling users that they have to use http://www.company.com to hit the website since http://company.com goes straight to the DCs, but that's just as annoying as it was in 2005 or whatever and since I got into server admin exactly when Microsoft was telling people not to do that it hurts me internally to do so. I haven't seen any real guidance on this from MS unless I'm missing something.

Crowley
Mar 13, 2003

ConfusedUs posted:

Today I had to break the news to two different partners that they cannot restore to recover from ransomware.

Their local backups were not restorable (they got crypto'd like everything else).

Don't keep your backup servers in the AD, people. Also use unique passwords for the admin accounts on your backup servers, and make sure the backup services running on your AD machines can't actually log into the backup servers.

It's actually pretty simple to keep local backup server (at least somewhat) secure.

RFC2324
Jun 7, 2012

http 418

Crowley posted:

Don't keep your backup servers in the AD, people. Also use unique passwords for the admin accounts on your backup servers, and make sure the backup services running on your AD machines can't actually log into the backup servers.

It's actually pretty simple to keep local backup server (at least somewhat) secure.

Just run a Unix for your backup server.

Crowley
Mar 13, 2003

RFC2324 posted:

Just run a Unix for your backup server.

That doesn't help if you push backups onto it through SMB. (yes, that happens)

Thanks Ants
May 21, 2004

#essereFerrari


There are far too many people who confuse documentation with "please spoon feed me the steps I need to take to complete any task I can think of".

Virigoth
Apr 28, 2009

Corona rules everything around me
C.R.E.A.M. get the virus
In the ICU y'all......



Thanks Ants posted:

There are far too many people who confuse documentation with "please spoon feed me the steps I need to take to complete any task I can think of".

We call those playbooks!

slightpirate
Dec 26, 2006
i am the dance commander

Avenging_Mikon posted:

So we're upgrading from Lync to Skype for Business on Tuesday. How hosed am I? Or did they finally fix SFB to not suck?

It's Lync with a new icon, and a couple security updates. We rolled over from Lync to SFB earlier this year and the biggest complaint we've had is computer time drift getting +/- 7 minutes from server time and SFB doesn't let the user login. User's aren't allowed to change their own time, and the SA's refuse to spend any time trying to fix the NTP server.

PSTools / psexec works great for jumping into a remote command line to run 'time 08:00' when someone has a meeting right when they arrive at work and can't login.

Judge Schnoopy
Nov 2, 2005

dont even TRY it, pal

Thanks Ants posted:

There are far too many people who confuse documentation with "please spoon feed me the steps I need to take to complete any task I can think of".

There are also far too many people who confuse a closed ticket and an email chain for documentation. "It's written down somewhere, so it's documented!"

Adbot
ADBOT LOVES YOU

3D Megadoodoo
Nov 25, 2010


(I still have a license to operate a forklift truck and they used this movie in the course I took to get it in 2005 or so. So it's actual training.)

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply