Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam
I got a job offer yesterday doing exactly what I do now for a competitor but with more pay, certifications paid for, and a clear promotion path. I called my boss this morning because I quite frankly have no idea if I signed a non-compete when I started here two years ago, and when he asked why I'd need that information I told him honestly.

30 seconds later the senior vice president of the Midwest called me, offered to match the other company, plus cert reimbursement and a clear plan to move into an analyst role.

I told him I'd stay if he could make that happen. He has 48 hours before I accept the other job. Hoping that was the right call.

Funnily enough no one directly answered if I signed a non-compete, but given the quick turnaround and counteroffer I'm going to guess the answer is "no".

Adbot
ADBOT LOVES YOU

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam

Jaded Burnout posted:

Very possible, but also possible that they were so wrapped up in their own lives and objectives that they needed a little jolt to remind them that their well-performing employee existed and shouldn't be taken for granted. We don't know they were "unwilling to budge" before because we don't know if Oyster ever asked for these things.

During my last reviews I specifically stated that what I make is not sustainable, especially on 3% raises that were handed out. My boss responded that he had no control over it and in fact didn't even know how much I make, which I was a bit dumbfounded by. When the SVP called he quoted exactly what I make and asked specifically if matching the other company would be enough. Seems like I just needed to get to the correct people.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam

totalnewbie posted:

Your company values you enough not to want to lose you, but are clearly trying to offer you the minimum to get you to stay.

You should ask for more concrete things, whether it's salary, vacation, etc. that makes staying MORE attractive than moving on. The other company is already offering those things and so you are much more likely to get more from them than they're offering now, whether it's through negotiating your current offer or in the future.

Not to mention that unless your raises are set in stone, you could just be negotiating yourself out of future raises. "Sorry, we don't have the budget anymore, ever since we gave you that raise, haha, what a coincidence."

He came back with $2k higher than what the other company was offering (and what he offered this morning) and specific instructions on how to get certs counted as tuition reimbursement. You raise a valid point about future raises and that crossed my mind as well, along with the fact that the other company has set advancements that my current one does not. I have 24 hours yet, and it may come down to if I can get milestones for advancement with my current company that ends with me in an analyst position.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam
A text from a friend who is a unit secretary came in:

"Our printer is on the fritz again :\

Wait, I fixed it. It needed toner. I swear nobody can do anything for themselves here, you're a doctor for gods sake figure it out."

I thanked her profusely for being competent and this is why we're friends.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam

kensei posted:

We're having a terrible time filling a Network Engineer 1 slot, the guy interviewed today was nice but no where near an entry network person. Ugh.

Portland Job market is on fire.

Point me to the posting I have a CCENT aiming for the CCNA by the end of the month with very little practical experience.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam

AlexDeGruven posted:

2 cases confirmed in MI. CEO announcement at noon.

Kinda hoping I don't have to commute for the next month or so.

I'm out in west Michigan. Was told today that if we get it let our managers know and we'll get paid sick leave, if we don't let them know it'll be unpaid. Otherwise business as usual.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam
Hospital printer tech checking in now that I've caught up with the thread.

I've been pretty well taken care of as I work, I have N95's and the masking policies are pretty good. Here's a practice that is bad.

I was on one of the covid floors in an office at the end of a hall replacing a blown psu on a printer when respiratory went into a room two doors down from where I was, full gowns, masks, face shields equipped. They started aerosolizing the patient. They left the door open.

I immediately contacted a higher up in the department that I'm on good terms with and they were pretty horrified. She told me the following week that the patient being aerosolized had died that night. At this point I'm thinking I wasn't actually exposed, but drat I'm thankful for the N95s.

Edit: A positive - my girlfriend has been complaining about shopping, how people aren't following the one way aisles, aren't using masks or using them improperly, etc. I did some shopping yesterday and wore an N95 and my hospital badge. People gave me a *wide* berth. One guy without a mask was standing and looking at stuff I needed, saw me coming, and literally ran to the next aisle. I'm doing the shopping from now on.

Oyster fucked around with this message at 20:24 on May 15, 2020

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam
Hospital printer tech checking in.

Ticket came in for a machine not booting up. Yup, hangs on the boot screen. Status LED's indicate it's either hard drive or motherboard. Swapped the drive, no go. Swapped the board, still nothing. Noticed that the new board doesn't even have the status LED's. Escalated twice and just found out that a vendor can't produce a certain chip anymore, the firmware is different, and on this particular model it can't be loaded.

Nice of my company to provide any documentation at all about this issue that literally bricks $800 printers of which this hospital has literally 1,023 of.

I have an interview in 20 minutes that a goon helped me procure, here's hoping it goes well.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam
Printer tech contracted to giant hospital system checking in:

:yotj:

Got an offer from a local MSP as a level 2 tech. After 6 years roaming the hospitals fixing the big printer issues, I now get to touch servers and networks of small to mid sized businesses. Haven't accepted it yet but there's very little reason not to on Monday.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam
One last check in from hospital printer support:

Back at the end of February, everyone on my team's accesses to the hospital intranet were expired because the hospital system transitioned to WorkDay at about the same time our contract manager retired and we were never put in the WorkDay system. A month later, all our provisional accounts were expired, it was a big hullabaloo to get them back. We were given a month extension with the idea that our new manager would get us accounts in WorkDay set up. She never did, and all our accounts expired again about a week ago. It took me 4 tickets to get all my accesses back, but once I had done it the rest of the team was just templated off me.

Just got word that I've finally been added to WorkDay and my account won't be expiring at the end of the month! The day after I handed in my 2 weeks notice.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam
Started a job at an MSP last week. It's going okay, recently found out why the CEO said "welcome to the blender" on my first day so that's nice.

Learning a ton about AD! I had touched it for the Google IT Support Professional cert but hadn't had any real hands on experience. Just found out that, if you search for someone in AD, you can't edit the attributes. They have to be navigated to, then the attributes can be edited, like hiding them from Exchange.

Something tells me learning Powershell would be a good move.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam

The Fool posted:

Use ADAC, it will also display the powershell for the task you are doing.

This is awesome and how does no one here know about this, thank you!

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam
Okay goon hivemind.

I've been at an MSP for ~4 months now, finally out of healthcare printer support. I've done my share of fuckups; took down a phone system by following a client request to remove the Teams license on an o365 account called "Test Main", the client then cancelled the contract, etc.

Now I've probably broken something and no one seems able to fix it, so I figure I'd throw it here.

A client couldn't open any reports in Crystal Reports. Application opens fine, just any time a document is loaded it crashes with a memory error. No one else has this problem and it follows her from PC to PC.The computers all have local profiles, but they use RemoteApps, and it seemed to be tied to her profile.

Having just done a profile refresh in the previous ticket that went swimmingly, I went ahead and did it. Logged her off the remote session, went on to the RDS server, .old'ed her profile, deleted the registry keys in ProfileList and ProfileGuid, and probably broke something here.

They use profile disks. I had never heard of profile disks before, but soon became very familiar with Sidder. That said, nothing I did worked; deleting the disk and logging her back in gave her the same ID, same crashes. I ended up nuking her entire profile in AD and o365 and recreating it. Now the RemoteApp connection has been spinning for ~20 minutes.

I'm not necessarily looking for an answer (unless the answer is "RemoteApp usually takes 30 minutes to build a new profile on the server") because there's a lot of moving parts and probably some client specific stuff I'm missing that's getting in the way, but I am curious if I was on the right track to begin with. None of my coworkers or supervisors seem to quite know what's going on with this and I'm feeling a bit left out to dry.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam

Thanks Ants posted:

I can't help you with the issue you're having but if you're an MSP and working with Microsoft then you have access to a certain number of engineering hours to get support on stuff like this, and if you've used them up then just buy per-incident support.

If there's nobody you can escalate to and you've been there 4 months then escalate to Microsoft, it's got to be cheaper than just slamming your head into a wall.

https://support.microsoft.com/en-us/topic/technical-support-for-microsoft-partners-b18bd338-f9d6-55a6-bc0f-9bb4a1595a06

https://support.serviceshub.microsoft.com/supportforbusiness

This is what my partner portal has, I can activate the support entitlement and then open a business support ticket



Didn't think of that since I typically don't think of Windows as Microsoft, but they use Azure AD and such. I've def escalated to Microsoft before and they've tended to be hit and miss; I've had one really, really good interaction and two where they left it worse than it started, though both of those were about calendars. gently caress Outlook calendars and gently caress their changing permissions structure. Will give that a try in the morning, thanks!

Internet Explorer posted:

Nothing profile related should be taking 30 minutes on first login. I can't speak to your specific issue, as I haven't used UPDs, only similar solutions, but reading up on User Profile Disks might be helpful. This seems like a good start - https://bobcares.com/blog/rds-user-profile-disks-on-windows/

It sounds to me like you might have deleted her local copy of her profile and not the actual profile disk itself. Going into the registry and removing her entries manually may have confused UPD. I'm almost wondering if maybe it just matched a UPD based on username and it's trying to load it? I'm not sure. Does the Event Log on the RDS show anything?

Yes and yes. After the reg shenanigans I noticed that every time she logged in it was with a new temporary profile. I did end up managing to unmount and delete the disk itself. Then when she logged in the recreated disk had the same ID slapped on it and the issue wasn't fixed, so I unmounted it, deleted it, and nuked her profile in AD (with my supervisor's blessing).

Oyster fucked around with this message at 22:44 on Aug 2, 2021

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam

Internet Explorer posted:

When she logs in with a black screen, does the disk in the UPD storage location get recreated? Is there anything in the Event Log on that RDS server when she logs in? Do you see any odd processes running as that user that aren't running under any other users? Have you found where UPD stores logs and checked there?

Previously, when I had deleted the disk, yes, it gets recreated when she logs in. Since recreating the AD profile I have not deleted the disk. Even as RDS isn't "working" now (it's hanging on configuring session) there is an active session for her on the server. No odd processes that I'm seeing, will have to check where logs are stored.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam

Thanks Ants posted:

If you make an entirely new AD account unrelated to this person, does it work? It's possibly that this RDS environment has been hosed for a while but it's just not become apparent.

Also check group memberships have been preserved when you deleted and recreated the account.

Hadn't thought to try a completely new account.

Group memberships were def preserved. She wasn't even in the "Remoteappusers" group when it did work, and I did compare group memberships to a known working person, nothing changed when I added those. Tried both permutations (the original and the person's whose works) on the new profile.

Edit: I'm off the clock now, will be picking this up first thing in the AM, but now I am excited instead of anxious. Thank you.

Edit Edit: New user works just fine. Now to find out what's different about her new account and why that isn't working when a new user is.

Triple Edit: Just went into ProfileList and it's not building her a profile at all. Gonna start over again.

Quadruple Edit: Solved.

I created another account for her and the same thing happened, hung on starting windows in the remoteapp session. I deleted that account, created *another* account with a different login name, mapped the proxy address as SMTP:<original address>, and everything fired right up. RemoteApps works, she's got her original email, all good. I don't know why she can't have her original login, neither does anyone else, but the ticket is closed. Thank you for the assist on my very first non-printer Ticket Came In.

Oyster fucked around with this message at 16:41 on Aug 3, 2021

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam
Hello everyone. I come to you with magic.

Have a mailbox you can't access because it's hard deleted or O365 admin can see it but Exchange can't? (both of these things happened in the last two days)

Create another mailbox.

Get-Mailbox -identity <insert deleted mailbox here> | format-list exchangeguid

Get-Mailbox -identity <insert new mailbox here> | format-list exchangeguid

New-MailboxRestoreRequest -SourceMailbox <deleted mailboxes exchangeguid> -TargetMailbox <new mailboxes guid> -AllowLegacyDNMismatch

Say hello to all the inaccessible mail. Full credit to Thanks Ants for telling me to contact Microsoft through the partner portal.

Holy poo poo I love powershell.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam

larchesdanrew posted:

We've been in sore need of an onboarding specialist for a while, and I feel I've finally gotten the service desk in good enough shape to move on to bigger and better things, and lovely awful documentation for newly onboarded clients is a huge problem for helpdesk.

This has been the bane of my existence the past few weeks and will continue to be for the next month. The person onboarding three new clients in a month just provided a link to 500+ page PDFs of exports of the previous MSP's documentation and service center is supposed to "deal with it and break out the information as needed".

Can I come work for your company? And good luck with the promotion!

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam
The MSP that signs my paychecks uses Watchguard, and they've decided that I'm the new Watchguard guy.

This is my first real firewall. How does that compare to fortigate?

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam
Hello everyone, I have what I think is a remnant of Print Nightmare giving my entire company a nightmare, and I've come for help.

First, grats Larches, get it!

Now, we have a client that does a lot of sharing of USB label printers. These are very specific label printers that interface with very specific medical software, of course. Since Print Nightmare, my company has adopted a standard process ripped wholesale off r/sysadmin that entails disallowing the spooler to accept client connections and only allowing Point and Print to the server. Not the ultimate fix, but keeps people printing for now. Unfortunately, this locks computers out of sharing over network via USB.

My technical escalation created another OU for 'printer hosts' under Desktops and broke inheritance. This allowed for an HP printer to be shared over USB, but not the label printers. He was unable to add security permissions to share the label printers.

I added the computers hosting the label printers to the 'allowed connections' list and it took right off, they can now print.

It's after hours and no one knows that it's fixed - would that create a security concern for the computers hosting the printers? I'm a bit out of my depth and wondering if I need to break it before they notice it's working.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam

dragonshardz posted:

Same, but it's not even related to PrintNightmare. Just everyone and their loving dog wants their desk printer and the fifteen MFPs in their quarter of one floor set up NOW NOW NOW NOW because it's business critical to turn square fractions of inches of solid state storage into 8.5x11 sheets.

Apparently the fix that I implemented yesterday was totally fine if you want a stab at it. At least, I cya'ed it three ways and it was approved each time.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam

dragonshardz posted:

Uh, sure. Does your solution involve sledgehammers?

I worked for The Business Printer Manufacturer for the better part of a decade, I had my time with sledgehammers. The boneyards can be fun places.

Serious answer: I don't know what the security ramifications of this are - I do know it is not a replacement for v4 drivers, but everyone is just shrugging until v4 drivers are widely available I guess. If anyone has a better fix or a reason why this should be broken, please let me know.

Create a group policy object linked to the PCs OU. The server cannot be in this OU or it won't work.

Change:
Computer Config/Administrative Templates/Printing/Allow Print Spooler to accept client connections

-Set to disabled

Computer Config/Administrative Templates/Printing/Point and Print Restrictions

-check Users Can Only print to These Servers
-Enter the FQDN of the print server
-when installing for a new connection, don't elevate
-when installing for an existing connection, don't elevate

Computer Config/Preferences/Registry
-Add new registry item
-Hive HKLM
-Key Path: SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint
-Value Name: RestrictDriverInstallationToAdministrators
-Value Type: REG_DWORD
-Value Data: 0

Run gpupdate. Add Driver. Done.

If a PC is sharing a USB connected printer, create a sub OU, break inheritance, and add the FQDN to the PaP Restrictions list.

vvv well played

Oyster fucked around with this message at 04:56 on Oct 7, 2021

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam
Tomorrow I have to go to a client site, change the password on their "streaming" SSID, and connect all their chromecasts and apple tv to the network. They don't know how they are managed, they are a new client, and there is no documentation.

So uh, what's the best way to manage a bunch of chromecasts and apple tvs and get their SSID password changed?

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam
Reading those responses it is clear that context is required.

Everyone got moved to the streaming SSID because the main SSID authenticated with a Radius server whose SSL cert expired which took the better part of a day to remedy thanks to aforementioned lack of documentation. Everyone moved to the streaming SSID to continue to work, but now that the main SSID is fixed they'd like the password for streaming changed so no one can access it again.

Looks like I'll just be running around with my phone and getting them back on!

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam
Yeah same guy that made the decision to dump the previous MSP looked up the password in the export of the former's docs and made the executive decision to migrate everyone, I get to clean up the mess.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam

Sywert of Thieves posted:

Rename the streaming SSID to regular, rename the regular SSID to streaming, boom - done.

If the regular wasn't RADIUS authentication and the streaming WPA2 Personal then yeah, I'd be doing that.

Didn't end up going out there yesterday because point of contact (dude who made the decision to move everyone to streaming) wasn't in, so now it's next week Friday I guess.

Arquinsiel posted:

Looks to me like the streaming SSID was just a way for everyone to get wifi when the regular network shat itself. Were I to be asking questions here I'd focus on why that was even possible and why the streaming SSID was equivalent to the the userspace LAN given that they tend to exist just to handle conference rooms etc.

It was bandwidth limited and all that, he just did it so he could get his people internet. He's not a tech guy, just the "IT manager" who deals with the MSP's, and sadly my MSP didn't set up the environment.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam

Arquinsiel posted:

Bandwidth limited is not the same thing as firewalled.

Please tell me it was firewalled.

All behind a meraki, yeah.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam
I'm full remote due to a TBI sustained back in early December; management still wants everyone, including service desk, in the office. Got a job offer from the job fair thread, had to put it on hold during my treatments. They said they'd hold it for me, I hope that holds true as recovery is taking longer than anticipated.

My job counts the minutes I put in tickets. I've had appointments every day this week; Monday was occupational therapy, Tuesday was acupuncture, Wednesday was speech therapy, today is optometry, tomorrow is med management, Saturday is an MRI. I get to make up the minutes those appointments cut out of the workday until I hit 40 hours.

I am very very jealous of those 9-5 "just get your work done" jobs; my last position as a printer tech was like that. I put in 11.5 billable hours yesterday around speech therapy just to make up for what I couldn't finish after occupational therapy. If short term disability were an option I'd be on it.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam

SlowBloke posted:

HP and Ricoh do, good luck having a driver not designed in the late nineties for kyocera or sharp tho

Xerox and Canon also do, the problem with Type 4 at the moment is when installed directly they are fantastic and great, when they are installed from a server they are stripped down to Microsoft Point and Print with zero features.

Mercurius posted:

It’s related to the PrintNightmare stuff and there’s a few other settings needed to get point and print installations working again on regular accounts.

MS has an article on all the settings you can change now but I believe we had to allow non admins to install drivers and then specify the print servers they could print to and then specify the same set of print servers to be valid for point and print installations.

You can also see if there’s the new print drivers available from your manufacturer (I think it’s the v4 stuff?) since those should theoretically work as before with the key allowing non-admins to install drivers.

Just gonna throw what my org is doing on here to get printers installed:


• Temporary GPO Bypass – Use for when there is a larger number of users to keep from going to every machine to update every print driver
o Create a new Group Policy Object
o Link it to an Organizational Unit that contains the client’s Workstation
 The print server cannot be in this OU and the GPOs settings will prevent the Print server from working
o Change the following settings
 Computer Configuration/Administrative Templates/Printing/Allow Print Spooler to accept client connections
• Set to Disabled

 Computer Configuration/Administrative Templates/Printing/ Point and Print Restrictions
• Check, Users can only point and print to these servers
• Enter the fully qualified domain name of the printer server in the text box
• When installing driver for a new connection, set to Do not show warning or elevation prompt
• When updating driver for an existing connection, set to Do not show warning or elevation prompt

 Computer Configuration/Preferences/Registry
• Add a new Registry item
• Hive: HKEY_LOCAL_MACHINE
• Key path: SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint
• Value name: RestrictDriverInstallationToAdministrators
• Value Type: REG_DWORD
• Value Data: 0
o Save the run gpupdate on machine that should be affected
o Try to update print driver, check registry for changes

• Permanent Fixes
o Find a way to easily push out drivers to all end user’s workstations.
 I don’t have a solution at this point but will be researching over the next week or so
o Update Printer driver to use V4 printer drivers
 I have heard/read very mixed reviews when this is tried. V4 drivers, if the printer manufacturers made them, often do not have the same feature as the V3 printer drivers. Any change to V4 would have to test with client to verify printer driver(s) would still work for them



Keep in mind that this is not a perfect fix and does still allow for "rogue" print servers; you can add this if you want to restrict installation to specific servers:

• Computer Configuration/Administrative Templates/Printing/Package Point and print - Approved servers
o Select Enable
o Enter the fully qualified domain name of the printer server in the text box



Eventually Type 4 drivers will be usable and all this will be moot. Hopefully. Someday.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam

PremiumSupport posted:

Yeah, that's basically where I'm at currently with this issue. I've got GP set up the way you describe here as a temporary solution, but even that's not working. The deployment starts, but the progress bar never moves past 10%.

I can add non-print server networked printers, but afaik that has to be done on each individual machine rather than through GP.

1) is the print server affected by this GPO in any way?
2) gpupdate (or log off/log on) does not seem to be enough, it requires a full reboot (maybe because it's computer configuration? I'm still pretty new at this).

Also, if the error when manually adding from the server is 0x000011b there is a different fix regarding a registry entry.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam

PremiumSupport posted:

Yeah, unfortunately the way our AD is set up the server is in the same (only) OU as the rest of the computers. I do reboot the clients after each GP change.
Manual installation never produces an error. The progress bar just stops at 10%

Yeah it's not going to work if the print server is in the same OU as the clients, thats part of the disabling of client connections. Make another OU, note what GPOs affect the server, and throw it in there.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam

PremiumSupport posted:

So I got it working and I didn't have to move the print server. I had to explicitly define the full domain path of the print server in both "Packaged Point and print Approved servers" and "Point and Print Restrictions".

That coupled with the registry changes letting non-admins to install drivers allowed GP to push the printers to users at login.


What a mess.


Edit: We are not using "Computer Configuration/Administrative Templates/Printing/Allow Print Spooler to accept client connections • Set to Disabled" part which is why it works without moving the server. It remains "Not Configured"

Oh! Yes, I absolutely should have thought of that. We didn't restrict "Packaged Point and Print approved servers" until several months after we instituted the original, so that went way past my head.

I want to say keeping that setting as "not configured" still leaves a vulnerability but that's over my pay grade at the moment. If it works, use it.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam
Just spent two hours troubleshooting a VoIP issue, the phone vendor insisted it was blocked at our firewall.

The firewall for that particular site has an explicit allow all policy at the end of it. Nothing is blocked.

Two hours later, phone vendor admitted it was blocked at their firewall.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam

Zorak of Michigan posted:

This is the way.

Today I took a company-wide survey. One of the questions was whether I expected to be with the company a year from now. I gave a neutral response because that's really up to them, isn't it?

I was told last week that my raise was halved because I was concussed this past December and didn't perform to standards due to it.

What they don't know is I have a standing offer from the Job Board thread that I intend on starting as soon as I get the all clear from my speech therapist, which at my current rate will be in 3 weeks. Totally is up to them. If they want to keep me, don't hold getting injured against me, and especially don't cut a promised raise when I'm in $8000 medical debt due to their poo poo insurance.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam

TheParadigm posted:

Uh, did you get that in writing, because that's lawyer time

Unfortunately no, it was all verbal. I have a friend who is literally the executive director of Disability Advocates for my county. I haven't reached out to him because he also just won county commissioner seat and is likely wrapped up in all that, but it might be worth dropping him a line.

I've got one foot out the door thanks to a kind goon who posted an opening, anyway.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam
A recruitment came in:

The president of an MSP in my area messaged me on LinkedIn. I interviewed with this place a few years ago when I freshly had my CCNA but was still a printer tech and didn't get a call back.

He wrote:

quote:

I am the President of $MSP and wanted to introduce myself. We have been around for 16 years and are growing like crazy. I thought it made sense to connect and see if you are interested in learning how we could help you develop your skills and grow your career. Thank you!

And so I responded:

quote:

Hi! I interviewed with $MSP a few years ago hoping to get into the MSP realm. I didn't get a return call, but am now in a much better position having been with $Current MSP.

My interest is largely in networking; I have the CCNA, but have not had much opportunity for practical experience, and the first year after acquiring it was spent in printer support so unfortunately much was lost. I am absolutely looking to grow my skills in networking, virtualization, and server administration.

And he responded quickly:

quote:

Thank you for the reply and the history! I am sorry we didn't reach out and update you last time you interviewed with us. We have better processes in place to make sure that doesn't happen. I'd love to have you talk with $OfficeAdmin, and start the process over again. We have a pretty quick interview process now. If it fits well for everyone, we'd love to get you on the team and help you gain those experiences.

So I thought sure, what the hell. Wouldn't hurt to practice interviewing after the concussion and all that. I set up an interview and they want me to take an aptitude test. That's fine, gotta know what things your prospective employees know. But there are a few restrictions: no calculators, only pen and paper, and a personality test is included. I stopped, and wrote back directly to him:

quote:

Hey $president,

I'm going to pass on the opportunity. I do not have interest in a company that places stock in personality assessments and/or aptitude tests with restrictions such as not using a calculator.

I was concussed this past December and a large part of speech therapy has been learning to use the tools that I have available. I can still subnet in my sleep even post-concussion due to getting the CCNA, but a company that places emphasis on that kind of stress is not a company I am interested in joining. Further, personality tests have been shown in several studies to operate against those with anxiety, of which I work to mitigate.

I will call $OfficeAdmin when business hours resume in the morning to cancel my scheduled interview for Friday as well.

All the best, and thank you for the opportunity.

I don't think I would've done that if I didn't have the standing offer from the company from the Job Fair thread, and I certainly wouldn'tve done it if I were still a printer tech, but goddamn did that feel good.

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam
The president of the local MSP isn't letting it drop. He sent me a novelette asking me to sleep on it. I did (albeit poorly) and I stand by my decision. I will not participate in a personality test during the hiring process. Afterwards, maybe, if it helps you know how to approach me.

Also came in to work this morning to find my title changed from L2 support center to Net Admin. Okay. I guess that tracks with our head network engineer quitting last week and many of his responsibilities shifting to me.

I am anxiously awaiting the all clear from my speech therapist so I can jump ship.

Oyster fucked around with this message at 12:06 on Mar 24, 2022

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam

guppy posted:

Did this come with a pay raise commensurate with your new title and responsibilities?

lol, my raise got cut because of the aforementioned concussion. I was scheduled to take a Watchguard cert the week after I was concussed and I still don't have it. Again, I'm on my way out.

I responded to his novella with a wall of text of my own. For context I'll put both here:

quote:

Hey Oyster,

Thank you for expressing your concerns about our interviewing process. I am going to follow up with $OfficeAdmin on this, but you are allowed to use whatever you need to complete the tests to the best of your abilities. If you want to use a calculator, go for it. I don't think we have ever had anyone ask us that question before, so thank you for helping us flush that out in our processes. :)

The assessments that we ask everyone to take help us get a more complete picture of the person we are talking to. These assessments are not used to filter anyone out of the process. They help us ask more insightful questions, which help us determine a better fit for our company culture and the specific role.

Nothing about my company is designed to be stressful. Our line of work is stressful enough. We don't want to add any more stress to the world. In fact, we try to reduce stress by working with caring and fun teammates and awesome clients (just to give a couple of examples).

I'd like you to reconsider your position on this and even talk this through with me on the phone. You are painting us in a pretty negative way and might be jumping to some conclusions about the type of company we are.

Please sleep on it and let's follow up with each other in the morning.

Thank you,

$President (cell phone number included)

And my response:

quote:

Hey $President,

I truly appreciate the followup. Having slept on it, I stand by my decision. I would like to be perfectly clear on my reasoning:

I completely believe that aptitude tests are necessary in this line of work. You have to know your prospective employees strengths and weaknesses. I have the CCNA but have spent more time with Watchguard firewalls than Merakis, for example. I admit that I bristled when I saw that a calculator was not allowed - as I outlined previously, my concussion recovery has taught me to use the tools available and forbidding a calculator seemed extremely arbitrary. It would absolutely be best to have your vendor remove that from the start as it gives the impression of ableism.

I don't disagree with knowing your employees and how to approach them. I disagree heartily with including that in the hiring process. A 2014 study from Aberdeen found that only 14% of companies have data to prove the positive impact of personality tests. I won't disagree with the plethora of evidence showing how personality may affect health and educational outcomes, but as a first step in the hiring process they give the impression that your culture is elitist and highly selective for very little tangible reason. This was also not part of the process a few years ago, telling me that you now put more emphasis on personality. As a neuroatypical I am quick to be defensive about that.

The amount of effort I have put into this response tells you more about my work and work ethic than a personality test would. I implore you to take the step to make a personal connection with your employees before you label them with a test. If I came off as painting in a negative light it is because I believe those tests are, at that point, actively harmful specifically to neuroatypicals.

I appreciate that you don't want to add any more stress to the world. The MSP business model often runs a fine line on profitability, and mitigating that stress successfully is an achievement for sure.

Perhaps we can talk again at a future date, but for now I respectfully decline.

Thank you,

Oyster

He responded with a "thank you for the thoughtful response, enjoy your day!" so basically tl;dr, but I thought with the consideration he had shown with the first response I might actually get somewhere. Regardless, I'm in total agreement that a bullet was dodged there. I probably shouldn'tve outed myself as neuroatypical, but at that point I wasn't taking it anyway so figured whats the harm.

Oyster fucked around with this message at 16:01 on Mar 24, 2022

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam

n0tqu1tesane posted:

In the US, a disability cannot be legally factored into a hiring decision, so unless you have an obvious physical disability it's generally not a good idea to disclose until the offer stage or whenever you'd be requesting any accommodations.

Now, whether a person's neuroatypicality rises to the level of a disability is another question.

As far as I'm concerned, if they can't legally consider it as part of their hiring decision, they don't need to know about it.

This is basically where I was with it. I've also not disclosed before, so there was a certain anxiety around typing those words at all.

Bob Morales posted:

They sound desperate see if they will offer you like 2x what you make now.

The offer from the Job Fair thread (that is unbelievably patiently waiting for my full recovery from the concussion) is an 80% raise. I'll be okay.

I told a coworker about the whole ordeal. He had also interviewed with them about a year ago and has a friend there now. He validated that I dodged a bullet, and that's coming from someone working at the dumpster fire I'm at now.

Adbot
ADBOT LOVES YOU

Oyster
Nov 11, 2005

I GOT FLAT FEET JUST LIKE MY HERO MEGAMAN
Total Clam
I have been given the all clear from my speech therapist. I do still have one followup with my concussion specialist this coming Friday, but with my occupational, vision, and speech therapists all signing off on my recovery I am confident there will not be any concerns. Signed the offer that's been waiting and putting in my notice tomorrow.

:yotj:

  • 1
  • 2
  • 3
  • 4
  • 5