Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
Wibla
Feb 16, 2011

I just had a consultant go "oh right, the VMs have to be able to talk to Azure directly for <insert needed functionality here>" in a meeting discussing an already ill-fated OT VMware -> Azure Stack HCI migration earlier today.

My reply that I needed to go to the liquor store before discussing that further received some laughter.

Sigh.

gently caress this project.

Adbot
ADBOT LOVES YOU

i am a moron
Nov 12, 2020

"I think if there’s one thing we can all agree on it’s that Penn State and Michigan both suck and are garbage and it’s hilarious Michigan fans are freaking out thinking this is their natty window when they can’t even beat a B12 team in the playoffs lmao"

Wibla posted:

OT VMware -> Azure Stack HCI

Lmfao this is psycho poo poo for assholes. If y’all ever hear Stack, run. It is a joke. So is any other effort to put ‘the cloud on the edge’ or… whatever dumb poo poo people are saying now

Wibla
Feb 16, 2011

i am a moron posted:

Lmfao this is psycho poo poo for assholes. If y’all ever hear Stack, run. It is a joke. So is any other effort to put ‘the cloud on the edge’ or… whatever dumb poo poo people are saying now

Yeah, at this point I'm considering a whistleblower action to the CEO to get this poo poo stopped before they've wasted even more money on loving bullshit we don't even need.

gooby pls
May 18, 2012



Brad Johnson’s blog has some great C3PL templates:

https://www.ise-support.com/cisco-ise-nad-configuration-templates/

Cyks
Mar 17, 2008

The trenches of IT can scar a muppet for life
Early this week I made a post about how I’ve spent multiple hours in meetings discussing how to get a laptop to a new employee who will be showing up on Monday at the main office anyways and the decision was to drop it off at a satellite office sometime this week and the employee will have to go pick it up before coming into the main office for their onboarding.

Today during another meeting my coworker and boss tried to gaslight me by saying that isn’t what we decided at all, and instead somebody is to personally drive to the new employee’s home and hand deliver the laptop this week.

I’m done. I just can’t anymore. I’m the one who argued that the original plan was the dumbest thing I’ve ever heard and they were both adamant it was the way it was going to be.

Cyks fucked around with this message at 23:33 on Aug 9, 2023

Sepist
Dec 26, 2005

FUCK BITCHES, ROUTE PACKETS

Gravy Boat 2k

Vargatron posted:

This thread is basically the IT worker VFW.

Thread title imo.


Networkers are usually required to understand a lot more than just the network to get through some of the more challenging aspects of the job, or at least my opinion is that to be a great networker you really need to understand a lot more than just the network. Since the movement of a packet is mostly a black box to IT folk, blaming it is table stakes. My company is 100% cloud so blame hierarchy is

its the loving vpn > it's the loving palo altos > it's the loving SGs > it the loving network > it's the loving gitlab runner > it's the loving vpn again >>>>>>>> oh nevermind it's my code lol

Internet Explorer
Jun 1, 2005





Sepist posted:

Thread title imo.

I like it. Maybe some polish? I was thinking "IT worker VFW," but "Working in IT 3.0: IT worker VFW" seems like one too many ITs for me. Although I could be convinced.

How about "Working in IT 3.0: tech worker VFW"?

Internet Explorer
Jun 1, 2005





also the bike shed should be red, clearly

kensei
Dec 27, 2007

He has come home, where he belongs. The Ancient Mariner returns to lead his first team to glory, forever and ever. Amen!


Working in IT 3.0: This is our VFW Lodge

Sepist
Dec 26, 2005

FUCK BITCHES, ROUTE PACKETS

Gravy Boat 2k
I like it the way it is personally, it's just a hilarious off the cuff accurate statement of this thread

jaegerx
Sep 10, 2012

Maybe this post will get me on your ignore list!


Internet Explorer posted:

I like it. Maybe some polish? I was thinking "IT worker VFW," but "Working in IT 3.0: IT worker VFW" seems like one too many ITs for me. Although I could be convinced.

How about "Working in IT 3.0: tech worker VFW"?

where's the poll? i don't know if there's not a twitter poll on it.

jaegerx
Sep 10, 2012

Maybe this post will get me on your ignore list!


Sepist posted:

I like it the way it is personally, it's just a hilarious off the cuff accurate statement of this thread

That will be one of our legends to be fair.

Antioch
Apr 18, 2003
We got bought back at the beginning of the year. Been pretty hands off IT wise so far.
Until yesterday, when somehow someone somewhere decided that all my Dell sites were going to belong to New Company and all the assets got moved around all higgeldy piggeldy. No one will fess up to doing it, there's no paper trail of authorization, and it took me two full days to unfuck it to the point I can at least *see* my poo poo again. Now I get to, for the second time this year, spend a week opening SRs to get sites named, addresses proper, assets in the right places, and contacts updated.
I'm not looking for someone to blame. I'm looking for someone to ritualistically sacrifice to the Dark Gods of Corporate IT so this doesn't happen to me again.

tokin opposition
Apr 8, 2021

I don't jailbreak the androids, I set them free.

WATCH MARS EXPRESS (2023)

Sepist posted:

I like it the way it is personally, it's just a hilarious off the cuff accurate statement of this thread

tokin opposition
Apr 8, 2021

I don't jailbreak the androids, I set them free.

WATCH MARS EXPRESS (2023)
anyway is it possible to add a network printer with powershell if the printer itself isn't reachable at the time the script runs?

I ask because our half-assed cloud move means I'm trying to add a printer to laptops that may or may not be connected to the VPN and I haven't had any luck finding solutions elsewhere.

(I want to eventually use microsoft's universal print but lol if I have the authority to do anything as advanced as actually touching a server)

Nuclearmonkee
Jun 10, 2009


guppy posted:

All of this is 100% true.

This is a constant complaint of network specialists, but nobody but us understands networking even the tiniest bit, so the network is constantly blamed for problems even though it's almost always fine, so I spent a lot of time attempting to prove a negative, which is of course impossible.

To be fair networking is an arcane beast and lots of lovely software will just give you some generic rear end stupid “error 1000: connection failed”. As a network engineer, you are the plumber working on the plumbing under the house. No one gives a poo poo how it works and they’d rather not know what you did to get the black water line to stop spewing poo poo everywhere so their application can go brrrr.

I don’t begrudge people just kicking stuff over, and it is a big part as to why it is in your extreme best interest to have powerful tools to be able to very quickly and easily validate that the network is indeed working, and it doesn’t hurt if you also know enough to be able to show $junior_developer that his loving container isn’t even listening on that port of course it won’t work.

Nuclearmonkee fucked around with this message at 01:03 on Aug 10, 2023

MF_James
May 8, 2008
I CANNOT HANDLE BEING CALLED OUT ON MY DUMBASS OPINIONS ABOUT ANTI-VIRUS AND SECURITY. I REALLY LIKE TO THINK THAT I KNOW THINGS HERE

INSTEAD I AM GOING TO WHINE ABOUT IT IN OTHER THREADS SO MY OPINION CAN FEEL VALIDATED IN AN ECHO CHAMBER I LIKE

As a person that is/was server focused, I had to learn a lot of network stuff because otherwise I wouldn't be able to show the network folks how they hosed up.

Also because no one understands network stuff so I had to do it at every MSP I've been at.

jaegerx
Sep 10, 2012

Maybe this post will get me on your ignore list!


Are ya'll saying the cloud has replaced networking finally?!?!?!

Gucci Loafers
May 20, 2006

Ask yourself, do you really want to talk to pair of really nice gaudy shoes?


i am a moron posted:

I don’t give a gently caress about the OSI or TCP/IP model but to be frank you haven’t been around this stuff long enough or worked with enough teams if you can’t recognize saying ‘it’s layer 2/3/4/7’ problem sounds authoritative and ends a lot of arguing

Very true.

Vargatron posted:

This thread is basically the IT worker VFW.

Yes and I'll vote for this thread title change. Maybe a matching coffee mug?

The Iron Rose
May 12, 2012

:minnie: Cat Army :minnie:

tokin opposition posted:

anyway is it possible to add a network printer with powershell if the printer itself isn't reachable at the time the script runs?

I ask because our half-assed cloud move means I'm trying to add a printer to laptops that may or may not be connected to the VPN and I haven't had any luck finding solutions elsewhere.

(I want to eventually use microsoft's universal print but lol if I have the authority to do anything as advanced as actually touching a server)

without even looking at the powershell documentation, here’s a general approach to solve this type of problem. I’m assuming you can remotely execute code as an administrator on computers.

create a scheduled task (a ‘cron’ or ‘cronjob’ in the Linux world) that executes every X hours. test for VPN connection at the beginning of your script (ping an endpoint, check if a process is running, inspect the network, do this however you like). If you’re not connected, exit (don’t raise an exception, this isn’t an error). Wait for the next time the job executes. If you’re connected to the VPN, then attempt to add the printer. If you successfully add the printer, disable the scheduled task so it doesn’t run again. If it fails, retry 1-3 times. If the retries fail, you can exit with an error and log the results somewhere so you can debug further.

Or, more generally:
- test for the condition you care about (is my VPN available?)
- try to do the thing when condition is true (create a printer)
- handle failures (VPN not connected/printer creation fails)
- retry until you succeed (running a scheduled task on a schedule/handling transient failures when creating the printer)
- monitor for success/failure

It’s less efficient than just being able to use the magic argument or function that says “hey save this printer config for me, don’t try and connect to it yet”, but you can apply the methodology to any problem. Fundamentally, you’re creating a while loop, but you’re doing so using several different tools and services rather than doing it all in one script. Scheduled tasks handle a lot of retry logic and failure handling for you, so you don’t need to write that logic yourself.


E: vvvv also this is absolutely the right way to go, but it can be useful to think about how to solve the problem in general

The Iron Rose fucked around with this message at 03:13 on Aug 10, 2023

The Fool
Oct 16, 2003


printers should be deployed with group policy or not at all

The Fool
Oct 16, 2003


also, goodbye canada, it's been real

Internet Explorer
Jun 1, 2005





Sepist posted:

I like it the way it is personally, it's just a hilarious off the cuff accurate statement of this thread

Crosby B. Alfred posted:

Yes and I'll vote for this thread title change. Maybe a matching coffee mug?
So say we all.

jaegerx
Sep 10, 2012

Maybe this post will get me on your ignore list!


https://techcrunch.com/2023/08/07/zoom-launches-an-asynchronous-video-tool-for-the-meeting-averse/

IT has now become tiktok.

Clam Down how do I get to work on boats?

Cenodoxus
Mar 29, 2012

while [[ true ]] ; do
    pour()
done


Sepist posted:

its the loving vpn > it's the loving palo altos > it's the loving SGs > it the loving network > it's the loving gitlab runner > it's the loving vpn again >>>>>>>> oh nevermind it's my code lol

Gov IT version has “its loving booz allen” floating around in there somewhere

kung fu jive
Jul 2, 2014

SOPHISTICATED DOG SHIT

i am a moron posted:

I don’t give a gently caress about the OSI or TCP/IP model but to be frank you haven’t been around this stuff long enough or worked with enough teams if you can’t recognize saying ‘it’s layer 2/3/4/7’ problem sounds authoritative and ends a lot of arguing

100% - thank you. Stop loving looking at route tables when the other engineer on the call just informed us the access port isn’t getting a MAC address. Or a device isn’t showing up via CDP or LLDP or whatever. Nobody on that call is reciting the OSI model in their heads but everyone pretty quickly acknowledges it’s not layer 3. Honestly some of the previous posts on this subject had me scratching my head. :shrug:

Also the new thread title :golfclap:

Gucci Loafers
May 20, 2006

Ask yourself, do you really want to talk to pair of really nice gaudy shoes?


The Fool posted:

printers should be deployed with group policy or not at all

Just outsource printing entirely. gently caress those things.

Diqnol
May 10, 2010

What sucks is Printing could be good if there was any type of standardization

Alas,

cr0y
Mar 24, 2005



Lol zoom is trying RTO?

https://apnews.com/article/tech-work-pandemic-zoom-wfh-rto-e65d5359320bc600fa5e19b68993f52c

Going to short their stock a little bit just out of spite

SyNack Sassimov
May 4, 2006

Let the robot win.
            --Captain James T. Vader


The Fool posted:

printers should be deployed with Universal Print or not at all

Fixed, also I'm surprised at you, why are you pushing the old stuff in 2023. Don't get me wrong, GPO's still much more powerful/capable than Intune/Universal Print, though Print Nightmare continues to be, well, a pain in the rear end, but if you CAN use Universal Print you should because it Just loving Works From Anywhere (and they've finally integrated the agent into Windows/Intune's config profiles so you don't have to deploy it to machines).

tokin opposition
Apr 8, 2021

I don't jailbreak the androids, I set them free.

WATCH MARS EXPRESS (2023)

The Iron Rose posted:

without even looking at the powershell documentation, here’s a general approach to solve this type of problem. I’m assuming you can remotely execute code as an administrator on computers.

create a scheduled task (a ‘cron’ or ‘cronjob’ in the Linux world) that executes every X hours. test for VPN connection at the beginning of your script (ping an endpoint, check if a process is running, inspect the network, do this however you like). If you’re not connected, exit (don’t raise an exception, this isn’t an error). Wait for the next time the job executes. If you’re connected to the VPN, then attempt to add the printer. If you successfully add the printer, disable the scheduled task so it doesn’t run again. If it fails, retry 1-3 times. If the retries fail, you can exit with an error and log the results somewhere so you can debug further.

Or, more generally:
- test for the condition you care about (is my VPN available?)
- try to do the thing when condition is true (create a printer)
- handle failures (VPN not connected/printer creation fails)
- retry until you succeed (running a scheduled task on a schedule/handling transient failures when creating the printer)
- monitor for success/failure

It’s less efficient than just being able to use the magic argument or function that says “hey save this printer config for me, don’t try and connect to it yet”, but you can apply the methodology to any problem. Fundamentally, you’re creating a while loop, but you’re doing so using several different tools and services rather than doing it all in one script. Scheduled tasks handle a lot of retry logic and failure handling for you, so you don’t need to write that logic yourself.


E: vvvv also this is absolutely the right way to go, but it can be useful to think about how to solve the problem in general

Thank you, I'd been thinking of scheduling a Windows event to run every hour 7-6 M-F but I was hoping there was something I was missing.

I did roughly the same process for my previous script (check, try, report failure if applicable) but I'll need to look into scheduling tasks with powershell. Since it's microsoft there's probably a million ways, but that's an I'm-getting-paid question for tomorrow.

tokin opposition
Apr 8, 2021

I don't jailbreak the androids, I set them free.

WATCH MARS EXPRESS (2023)

SyNack Sassimov posted:

Fixed, also I'm surprised at you, why are you pushing the old stuff in 2023. Don't get me wrong, GPO's still much more powerful/capable than Intune/Universal Print, though Print Nightmare continues to be, well, a pain in the rear end, but if you CAN use Universal Print you should because it Just loving Works From Anywhere (and they've finally integrated the agent into Windows/Intune's config profiles so you don't have to deploy it to machines).

I was checking that and we already have the licenses to do like 1,000 pages a month but it also involves *gasp* me doing something with a server so it'll probably be veto'd

Susat
May 31, 2011

Taking it easy, being green

The Iron Rose posted:

Out of curiosity, how big is your org? It’s hard for my to imagine having a dedicated IAM team that handles nothing else.

Sorry I didn't mean to be confusing with my terminology, I just meant whoever is doing our Identity and Access as a task on our internal IT side.
Our org is pretty big though, we have like 15 different sites around the world.

It seems like they have different criteria of which policies should be applied, because the issues aren't universal. For example only the engineer I work with an I have had issues with the AV blocking USB devices. Two of the other techs haven't yet.

I did, despite having kind of a downer day (Bad drive to work and access issues, boo), manage to troubleshoot a data mismatch issue nobody else was able to do while our senior linux guy was on lunch and also get a good amount of scripting in python done.

mllaneza
Apr 28, 2007

Veteran, Bermuda Triangle Expeditionary Force, 1993-1952




The Iron Rose posted:

without even looking at the powershell documentation, here’s a general approach to solve this type of problem. I’m assuming you can remotely execute code as an administrator on computers.

create a scheduled task (a ‘cron’ or ‘cronjob’ in the Linux world) that executes every X hours....

PowerShell makes it very easy to create Scheduled Tasks. That's lucky for me, since I need to have things run locally for a couple of reasons.

1. Security blocked my ability to copy stuff to remote shares (c$ in particular). Code I'm running in a remote session can't access a file share at all (second hop). What my remote code can do is Set-Content to create a .bat file to xcopy the files locally, and then create a scheduled task to run that .bat.

2. After 1. above installs the package, I need to run a command-line utility that came with it on the remote system. That utility prompts for UAC, so it silently fails if I call it with Start-Process. A Scheduled Task running as SYSTEM can run a batch file just fine.

I hate Windows so very, very much.

Cup Runneth Over
Aug 8, 2009

She said life's
Too short to worry
Life's too long to wait
It's too short
Not to love everybody
Life's too long to hate



yeah but also

https://twitter.com/DenverChick1/status/1688379553163657216

CLAM DOWN
Feb 13, 2007




jaegerx posted:

Clam Down how do I get to work on boats?

please work out

CLAM DOWN
Feb 13, 2007





lmao between this and their other poo poo lately, wtf are they doing!?

nielsm
Jun 1, 2009



Maybe they've seen how Musk has been hard at work killing a platform, and think it's the cool thing to do.

tokin opposition
Apr 8, 2021

I don't jailbreak the androids, I set them free.

WATCH MARS EXPRESS (2023)
hell yeah let's destroy every big tech company

can we start with amazon or do we go by age or what

Adbot
ADBOT LOVES YOU

tehinternet
Feb 14, 2005

Semantically, "you" is both singular and plural, though syntactically it is always plural. It always takes a verb form that originally marked the word as plural.

Also, there is no plural when the context is an argument with an individual rather than a group. Somfin shouldn't put words in my mouth.
Got another surprise Mac today in an all windows environment so I’m good with burning down apple today

So much time wasted looking poo poo up because nobody at our shop uses loving macs because we don’t loving use them in our loving environment

gently caress

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply