Technology Get the latest on technology, electronics and software…

The Enterprise/SMB IT News and Discussion Thread

Thread Tools
 
Old 06-03-2016, 09:20 AM
  #1  
Sanest Florida Man
Thread Starter
 
#1 STUNNA's Avatar
 
Join Date: Aug 2007
Location: Florida
Posts: 43,380
Received 10,119 Likes on 6,108 Posts
The Enterprise/SMB IT News and Discussion Thread

Alright let me start this off. We're an Intermedia Exchange reseller and they use McAfee Spam filter currently. Intel announced a while back that they're discontinuing development on it and it's closing down at the beginning of next year.

My boss has looked at alternatives and everything he's found so far sucks. Any suggestions for cloud based replacement SPAM filters?

McAfee was good but now it's getting worse because they're not maintaining it, emails are getting delayed like they're grey mail and I've had to go and whitelist a bunch domains for my clients and that seems to fix it. Supposedly Intel isn't gong to bother to fix this issue and it's probably going to get worse before it's finally shutoff at the end of the year.
Old 06-04-2016, 12:30 PM
  #2  
Team Owner
 
doopstr's Avatar
 
Join Date: Jan 2001
Location: Jersey
Age: 52
Posts: 25,330
Received 2,049 Likes on 1,135 Posts
Great idea for a thread. Over the past few months I've unexpectedly found myself managing my employer's LAN/WAN.

Have you taken a look at Sophos spam filter? https://www.sophos.com/en-us/products/puremessage.aspx

I've been really happy with the Sophos UTM product (used to be Astaro), but I don't have any experience with their spam product.

I'm interested to hear what others are using. For email we are using office365, for VOIP we are using RingCentral.

I've recently started using Cisco Meraki switches/firewall/WAP. I'm mostly happy with Meraki. I love that I can manage 6 sites all from a single portal. We use the Sophos UTM at or corporate headquarters because it offers some features that the Meraki firewall doesn't. Most notably it can hook up redundant VPN connections to AWS very easily, and the Meraki doesn't support SSL VPN.
Old 06-08-2016, 12:04 PM
  #3  
Sanest Florida Man
Thread Starter
 
#1 STUNNA's Avatar
 
Join Date: Aug 2007
Location: Florida
Posts: 43,380
Received 10,119 Likes on 6,108 Posts
We use Intermedia hosted Exchange, and VoIP. We used to use Allworx phones but now we just have our business number forward to our mobile phones. One of our clients uses ring central, quite a few are on Allworx, and some are on Intermedia VoIP. Most of them are on Intermedia hosted exchange now
Old 06-08-2016, 12:05 PM
  #4  
Sanest Florida Man
Thread Starter
 
#1 STUNNA's Avatar
 
Join Date: Aug 2007
Location: Florida
Posts: 43,380
Received 10,119 Likes on 6,108 Posts
What's the easiest way to see the last time someone logged into a PC (Windows 7 VM)? I'm looking in the security log in event viewer but it's got a bunch of nonsense, my boss said to check temp file activity
Old 06-08-2016, 05:38 PM
  #5  
Team Owner
 
doopstr's Avatar
 
Join Date: Jan 2001
Location: Jersey
Age: 52
Posts: 25,330
Received 2,049 Likes on 1,135 Posts
net user username | findstr /B /C:"Last logon"

If its a domain user it may tell you last time user logged into the domain, not just that machine. Not sure.
Old 06-08-2016, 07:00 PM
  #6  
Needs more Lemon Pledge
 
stogie1020's Avatar
 
Join Date: Mar 2005
Location: Phoenix, AZ
Age: 51
Posts: 52,768
Received 2,000 Likes on 1,173 Posts
Just check the last written date on that users NTUSER.DAT file.

If you are looking for the Security Event Log entry, it will only be there on a Professional license of Windows. Event ID 4624

SEE: http://www.howtogeek.com/124313/how-...uter-and-when/

Last edited by stogie1020; 06-08-2016 at 07:02 PM.
Old 06-08-2016, 07:07 PM
  #7  
Sanest Florida Man
Thread Starter
 
#1 STUNNA's Avatar
 
Join Date: Aug 2007
Location: Florida
Posts: 43,380
Received 10,119 Likes on 6,108 Posts
Thanks, I ended up checking temp file activity. It didn't need to be exact
Old 06-08-2016, 07:11 PM
  #8  
Needs more Lemon Pledge
 
stogie1020's Avatar
 
Join Date: Mar 2005
Location: Phoenix, AZ
Age: 51
Posts: 52,768
Received 2,000 Likes on 1,173 Posts
That works, too.

I usually rely on the NTUSER.DAT since it's directly attributable to the actual user and it's easier to explain to people that the user profile "file" was updated rather than temporary files (which have a bad rap for culpability and direct linkage).
The following users liked this post:
#1 STUNNA (06-08-2016)
Old 06-09-2016, 06:19 PM
  #9  
Sanest Florida Man
Thread Starter
 
#1 STUNNA's Avatar
 
Join Date: Aug 2007
Location: Florida
Posts: 43,380
Received 10,119 Likes on 6,108 Posts
We've been using Thycotic Secret Server for storing our clients various passwords. It works pretty good and there's a free version. The UI's better than what in this video but it's a better solution than password protected excel files or whatever. The mobile app sucks though


Intermedia uses it internally that's how we heard about it. The free version doesn't have most of those features, though they're really cool we wouldn't use them so the free version meets our needs well.

Last edited by #1 STUNNA; 06-09-2016 at 06:25 PM.
Old 06-10-2016, 09:19 PM
  #10  
Sanest Florida Man
Thread Starter
 
#1 STUNNA's Avatar
 
Join Date: Aug 2007
Location: Florida
Posts: 43,380
Received 10,119 Likes on 6,108 Posts
@stogie1020 you might know this. I'm having an issue with BitLocker encrypted drives. At one of my clients we rotate 3x2TB USB drives that are used as backup drives. These drives are set to auto unlock when connected to the backup VM, however it seems like Windows will only remember 2 Bitlocker passwords so everytime we swap it now it doesn't autounlock and the backups will fail until I login and re-enter the password. So every Friday night at 9:32 I'm getting an email saying it failed. We used to only use two backup drives and rotate between them and it worked just fine but we added two more (one that's permanently attached and not rotated) and this started happening. Ever seen this before?

Next week I'm going to try changing drive letters so that the three rotating drives don't all use the same letter since Veeam is able to still work even if the drive letter changes.
Old 06-10-2016, 09:24 PM
  #11  
Sanest Florida Man
Thread Starter
 
#1 STUNNA's Avatar
 
Join Date: Aug 2007
Location: Florida
Posts: 43,380
Received 10,119 Likes on 6,108 Posts
Speaking of which any of you guys use Veeam backup? Usually IT software has a confusing UI and cryptic error messages but Veeam is relatively very easy to use and log files are in plain english and not cryptic. I actually enjoy using it.
Old 06-12-2016, 12:14 PM
  #12  
Needs more Lemon Pledge
 
stogie1020's Avatar
 
Join Date: Mar 2005
Location: Phoenix, AZ
Age: 51
Posts: 52,768
Received 2,000 Likes on 1,173 Posts
Originally Posted by #1 STUNNA
@stogie1020 you might know this. I'm having an issue with BitLocker encrypted drives. At one of my clients we rotate 3x2TB USB drives that are used as backup drives. These drives are set to auto unlock when connected to the backup VM, however it seems like Windows will only remember 2 Bitlocker passwords so everytime we swap it now it doesn't autounlock and the backups will fail until I login and re-enter the password. So every Friday night at 9:32 I'm getting an email saying it failed. We used to only use two backup drives and rotate between them and it worked just fine but we added two more (one that's permanently attached and not rotated) and this started happening. Ever seen this before?

Next week I'm going to try changing drive letters so that the three rotating drives don't all use the same letter since Veeam is able to still work even if the drive letter changes.
Originally Posted by #1 STUNNA
Speaking of which any of you guys use Veeam backup? Usually IT software has a confusing UI and cryptic error messages but Veeam is relatively very easy to use and log files are in plain english and not cryptic. I actually enjoy using it.
No clue, sorry. I use Cobian.
Old 06-13-2016, 03:14 PM
  #13  
Sanest Florida Man
Thread Starter
 
#1 STUNNA's Avatar
 
Join Date: Aug 2007
Location: Florida
Posts: 43,380
Received 10,119 Likes on 6,108 Posts
I think I fixed that bitlocker autounlock issue by changing the drive letters of the external drives. It seems like Windows will only remember two bitlocker PWs per drive letter
The following users liked this post:
stogie1020 (06-13-2016)
Old 06-13-2016, 03:15 PM
  #14  
Sanest Florida Man
Thread Starter
 
#1 STUNNA's Avatar
 
Join Date: Aug 2007
Location: Florida
Posts: 43,380
Received 10,119 Likes on 6,108 Posts
I'm thinking about rolling out LastPass Enterprise for one of our clients, anyone have any experience with it or another enterprise password manager?
Old 06-13-2016, 03:37 PM
  #15  
Senior Moderator
 
thoiboi's Avatar
 
Join Date: Apr 2010
Location: SoCal, CA
Posts: 46,887
Received 8,584 Likes on 6,630 Posts
I use 1Password for personal password management, i THINK they have a enterprise solution but not sure..

Very intuitive and great mobile applications to boot. They were OSX/iOS primarily but their Windows application is not bad.
Old 06-24-2016, 10:38 AM
  #16  
Sanest Florida Man
Thread Starter
 
#1 STUNNA's Avatar
 
Join Date: Aug 2007
Location: Florida
Posts: 43,380
Received 10,119 Likes on 6,108 Posts
Originally Posted by #1 STUNNA
I think I fixed that bitlocker autounlock issue by changing the drive letters of the external drives. It seems like Windows will only remember two bitlocker PWs per drive letter
Spoke too soon. Still not auto unlocking drives even though auto unlock is on. Now I think it's because the Bitlocker service is set to Manual (Triggered) and for some reason it isn't triggering until I manually type in the password, after that it works for a while. I've changed it to automatic and we'll see...
Old 08-22-2016, 03:57 PM
  #17  
Sanest Florida Man
Thread Starter
 
#1 STUNNA's Avatar
 
Join Date: Aug 2007
Location: Florida
Posts: 43,380
Received 10,119 Likes on 6,108 Posts
We're testing out some Cisco Merakis at work. They're pretty cool, now we know who's streaming porn on their iPhones in the bathroom
Old 08-22-2016, 09:36 PM
  #18  
Team Owner
 
doopstr's Avatar
 
Join Date: Jan 2001
Location: Jersey
Age: 52
Posts: 25,330
Received 2,049 Likes on 1,135 Posts
I've been happy with our Meraki stuff. I just wish that they would support SSL VPN in addition to L2TP. The other negative is that we need to keep the support contract going forever, otherwise we lose the ability to manage the gear and then we have paperweights. Smart business plan on their part.
Old 08-22-2016, 11:14 PM
  #19  
Sanest Florida Man
Thread Starter
 
#1 STUNNA's Avatar
 
Join Date: Aug 2007
Location: Florida
Posts: 43,380
Received 10,119 Likes on 6,108 Posts
^good point

Yeah one of the reasons we're trying it out because PPTP support is dropped in the next ios/macOS

though split tunneling on it is poop, you have to add a static route ti the vpn which you can make persistent in Windows but yo to run a script every time in macOS.

Have you found another way on macOS without sending all data through the vpn?

Old 08-23-2016, 10:20 AM
  #20  
Team Owner
 
doopstr's Avatar
 
Join Date: Jan 2001
Location: Jersey
Age: 52
Posts: 25,330
Received 2,049 Likes on 1,135 Posts
Originally Posted by #1 STUNNA
Have you found another way on macOS without sending all data through the vpn?
Nope. If you are evaluating different devices check out a Sophos UTM. The SSL VPN is based on OpenVPN and the split tunneling is very good. It also supports google authenticator for multi-factor. The only downside to the UTM is that I think Sophos is trying to kill the product and replace it with the XG platform.

The Sophos also makes it easy to configure who is and isn't allowed to use the VPN and groups can be used to restrict users to certain networks.

Last edited by doopstr; 08-23-2016 at 10:22 AM.
Old 08-23-2016, 03:07 PM
  #21  
Sanest Florida Man
Thread Starter
 
#1 STUNNA's Avatar
 
Join Date: Aug 2007
Location: Florida
Posts: 43,380
Received 10,119 Likes on 6,108 Posts
Originally Posted by #1 STUNNA
Spoke too soon. Still not auto unlocking drives even though auto unlock is on. Now I think it's because the Bitlocker service is set to Manual (Triggered) and for some reason it isn't triggering until I manually type in the password, after that it works for a while. I've changed it to automatic and we'll see...
Fuck this bullshit. Never figured it out. I even set a scheduled task to restart the VM every Friday just before the backups ran hoping the restart would cause the drives to auto-unlock. Still didn't work. I gave up, took off BitLocker and encrypted the Veeam backup files using Veeam. No problems since
Old 08-23-2016, 03:17 PM
  #22  
Sanest Florida Man
Thread Starter
 
#1 STUNNA's Avatar
 
Join Date: Aug 2007
Location: Florida
Posts: 43,380
Received 10,119 Likes on 6,108 Posts
Originally Posted by doopstr
Nope. If you are evaluating different devices check out a Sophos UTM. The SSL VPN is based on OpenVPN and the split tunneling is very good. It also supports google authenticator for multi-factor. The only downside to the UTM is that I think Sophos is trying to kill the product and replace it with the XG platform.

The Sophos also makes it easy to configure who is and isn't allowed to use the VPN and groups can be used to restrict users to certain networks.
Don't think we want to try out an EOL platform.

We setup our VPN to use AD authentication, I would've liked to have limited it to VPN Users Group in AD but it doesn't seem to support that. Oh well, not a big deal.

Have you used the IDS on the Meraki, it seems like it's got a lot of false positives, every day it's catching something. Which we've gone years without one and it's very rare for someone to get an infection here.
Old 08-23-2016, 05:12 PM
  #23  
Team Owner
 
doopstr's Avatar
 
Join Date: Jan 2001
Location: Jersey
Age: 52
Posts: 25,330
Received 2,049 Likes on 1,135 Posts
Yeah I think it does get a lot of false positives. I leave it on though and don't get any complaints from users that their browsing is getting jacked up. I think it's mostly blocking ads so the user don't notice.
The following users liked this post:
#1 STUNNA (10-07-2016)
Old 08-23-2016, 06:55 PM
  #24  
Sanest Florida Man
Thread Starter
 
#1 STUNNA's Avatar
 
Join Date: Aug 2007
Location: Florida
Posts: 43,380
Received 10,119 Likes on 6,108 Posts
Yeah that's what I was thinking
Old 08-30-2016, 01:20 PM
  #25  
Sanest Florida Man
Thread Starter
 
#1 STUNNA's Avatar
 
Join Date: Aug 2007
Location: Florida
Posts: 43,380
Received 10,119 Likes on 6,108 Posts
Originally Posted by stogie1020
That works, too.

I usually rely on the NTUSER.DAT since it's directly attributable to the actual user and it's easier to explain to people that the user profile "file" was updated rather than temporary files (which have a bad rap for culpability and direct linkage).
Had to do this again today



The following users liked this post:
stogie1020 (08-30-2016)
Old 10-07-2016, 03:53 PM
  #26  
Sanest Florida Man
Thread Starter
 
#1 STUNNA's Avatar
 
Join Date: Aug 2007
Location: Florida
Posts: 43,380
Received 10,119 Likes on 6,108 Posts
Server 2016 Evals are available, gonna try it out
Old 10-07-2016, 04:42 PM
  #27  
Team Owner
 
doopstr's Avatar
 
Join Date: Jan 2001
Location: Jersey
Age: 52
Posts: 25,330
Received 2,049 Likes on 1,135 Posts
Looking forward to the native docker support that is supposed to be in that.
Old 10-10-2016, 01:05 PM
  #28  
Sanest Florida Man
Thread Starter
 
#1 STUNNA's Avatar
 
Join Date: Aug 2007
Location: Florida
Posts: 43,380
Received 10,119 Likes on 6,108 Posts
Ok what is Docker and why should I care? I've been hearing the term the past few months and a little bit of research shows that it allows you to take apps put them in a container and move them between servers. Which sounds like it'd be good for old custom apps some of our clients have. We're currently keeping some old instances of server 2003 up and running because some old custom one-off website requires it. We've been doing P2V conversions of them which is what my next post is about.
Old 10-10-2016, 01:11 PM
  #29  
Sanest Florida Man
Thread Starter
 
#1 STUNNA's Avatar
 
Join Date: Aug 2007
Location: Florida
Posts: 43,380
Received 10,119 Likes on 6,108 Posts
Holy fuck! Just setup a nested hyper-v VM for the first time. We're still using ESXi 5.5 because fuck 6.0 and it's web client bullshit. It was our first time needing to do it so there were multiple hurdles for us to figure out and cross. But yeah we did that because we had a client who's 2k3 server couldn't be converted to VMware for what ever reason it failed all conversion attempts so I converted it to VHD a while ago using Disk2VHD and it was easy. Got that up and running on hyper v2012 but then we had issues getting VEEAM to connect to that hyper-v install, seemed like crazy permission errors and my attempt to fix it only made it worse. It was a trial eval anyways to fuck it, was able to reinstall hyper-v in VMware 5.5 move over the VHD and get it running. now to get nested hyper-v talking to Veeam and to get host ESXi talking to Veeam

OH and we had to use server 2012 because I couldn't get 2016 working as a nested hyper-v. I did everything identical on both 2012 and 2016 but 2016 wouldn't start the VM because it was saying that the hypervisor wasn't running but the same VM fired up right away under 2012. No clue

Last edited by #1 STUNNA; 10-10-2016 at 01:16 PM.
Old 10-10-2016, 01:48 PM
  #30  
Sanest Florida Man
Thread Starter
 
#1 STUNNA's Avatar
 
Join Date: Aug 2007
Location: Florida
Posts: 43,380
Received 10,119 Likes on 6,108 Posts
Is there anyway to convert an old database to work in containers?
Old 10-10-2016, 05:43 PM
  #31  
Team Owner
 
doopstr's Avatar
 
Join Date: Jan 2001
Location: Jersey
Age: 52
Posts: 25,330
Received 2,049 Likes on 1,135 Posts
It's easiest if I just let them explain it https://www.docker.com/what-docker

Where I work we are just starting to scrape the surface of it on Linux. We don't have anything running in production.
The following users liked this post:
#1 STUNNA (10-10-2016)
Old 10-10-2016, 06:35 PM
  #32  
Sanest Florida Man
Thread Starter
 
#1 STUNNA's Avatar
 
Join Date: Aug 2007
Location: Florida
Posts: 43,380
Received 10,119 Likes on 6,108 Posts
That looks cool but not that useful for us currently. I guess I can see software being deployed this way from big companies. You want our software then we require server 2016 or whatever version of linux then download this file and everything else is handled for you.

I'm sure we'll be dealing with it in a few years but the app developer is going to have to learn it and force it on us first
Old 11-10-2016, 11:33 AM
  #33  
Needs more Lemon Pledge
 
stogie1020's Avatar
 
Join Date: Mar 2005
Location: Phoenix, AZ
Age: 51
Posts: 52,768
Received 2,000 Likes on 1,173 Posts
Anyone have any nuances to a KVM I should look out for?

Looking to potentially get:
IOGEAR GCS1104 KVM-Newegg.com

4 machine, DVI, hotkey switching
Old 11-11-2016, 01:27 PM
  #34  
Sanest Florida Man
Thread Starter
 
#1 STUNNA's Avatar
 
Join Date: Aug 2007
Location: Florida
Posts: 43,380
Received 10,119 Likes on 6,108 Posts
I haven't played with KVMs that much since most of our clients have gone virtual if they had multiple servers, so no real need for a KVM anymore. I've used a Startech display port KVM for a few years and never really had any issues, it didn't have hot key switching that I'm aware of.
The following users liked this post:
stogie1020 (11-11-2016)
Old 11-11-2016, 05:50 PM
  #35  
Team Owner
 
doopstr's Avatar
 
Join Date: Jan 2001
Location: Jersey
Age: 52
Posts: 25,330
Received 2,049 Likes on 1,135 Posts
I don't normally use KVM switches, but when I do, I use Avocent.
The following users liked this post:
stogie1020 (11-11-2016)
Old 11-11-2016, 06:11 PM
  #36  
Needs more Lemon Pledge
 
stogie1020's Avatar
 
Join Date: Mar 2005
Location: Phoenix, AZ
Age: 51
Posts: 52,768
Received 2,000 Likes on 1,173 Posts
Yikes Doopstr, that's twice the price

http://www.newegg.com/Product/Produc...82E16817791221
Old 11-23-2016, 03:39 PM
  #37  
Sanest Florida Man
Thread Starter
 
#1 STUNNA's Avatar
 
Join Date: Aug 2007
Location: Florida
Posts: 43,380
Received 10,119 Likes on 6,108 Posts
I need something similar to this hot swappable RAID 1 capable preferably internal with eSata. This is pretty much exactly what we want but we can't find this for sale in the US and I've never heard of this company before.

RAIDON:InTANK-iR2622






We want to use this for hot swapping our Veeam backups, taking drives offsite and putting them in fireproof safes and whatnot. Haven't seen anything similar unfortunately.
Old 11-23-2016, 04:17 PM
  #38  
Needs more Lemon Pledge
 
stogie1020's Avatar
 
Join Date: Mar 2005
Location: Phoenix, AZ
Age: 51
Posts: 52,768
Received 2,000 Likes on 1,173 Posts
If you can deal with 2.5" hdds there is this:

DataPort DP25 RAID Dock 3JR - CRU
Old 11-23-2016, 04:21 PM
  #39  
Needs more Lemon Pledge
 
stogie1020's Avatar
 
Join Date: Mar 2005
Location: Phoenix, AZ
Age: 51
Posts: 52,768
Received 2,000 Likes on 1,173 Posts
For 3.5"

https://www.bhphotovideo.com/c/produ...l_storage.html


https://www.bhphotovideo.com/c/produ...underbolt.html


https://www.bhphotovideo.com/c/produ...underbolt.html


https://www.bhphotovideo.com/c/produ...2tb_2_bay.html


There are lots...

Am I missing something? That was really easy to find. :chartsandgraphs:
The following 2 users liked this post by stogie1020:
#1 STUNNA (11-28-2016), Mizouse (11-27-2016)
Old 11-23-2016, 04:21 PM
  #40  
Needs more Lemon Pledge
 
stogie1020's Avatar
 
Join Date: Mar 2005
Location: Phoenix, AZ
Age: 51
Posts: 52,768
Received 2,000 Likes on 1,173 Posts
I missed the internal/eSata part...

Does this matter so much?


Quick Reply: The Enterprise/SMB IT News and Discussion Thread



All times are GMT -5. The time now is 01:21 PM.