The Comms Room

Bob

2:07 PM

...turns out a Hyper-V Win10 guest doesn't try to make you create a MS account. Interesting.

In fact, I don't think it lets you

HopelessN00b

@BigHomie Indeed. Today, more than most days, I'm regretting having my job.

Journeyman Geek

@Bob 0_0

Thats an interesting feature

Sysadmin1138 Expounds

SysAdmin1138 Expounds: Go for the 2nd phone, not the data-stipiend

posted on October 07, 2014 by SysAdmin1138

There is something that not many people seem to realize about how your personal email can get sucked into a lawsuit filed against your company. It all comes down to ediscovery......

Chris S

@Bob Did you have networking working at that point in setup? That's what it does if it can't call home.

Bob

@ChrisS Hm. That's probably it -_-

I feel dumb now :P

Created the virtual switch after setup

Chris S

2:15 PM

I wish that was the default. I hate having to do the "I don't have an account, sign me up" followed by "Nah, faked you out" ever time I do a manual setup.

Bob

Ah well, now I can play with Hyper-V :D

Hm. Second bsod so far. This is a very not supported system :D

Nathan C

@Bob Heh, a Win10 guest behaved okay in a VMware Player session for me

A friend of mine installed it on his laptop as the main OS...

Bob

@NathanC Oh, that's not the not-supported part

Nathan C

@Bob I don't think VM-within-a-VM is supported period

lol

Chris S

@Bob Is that 3 or 4 VMs deep?

HopelessN00b

2:22 PM

Hmmm.... less than a day to figure out, and write a script for, deploying BitLocker FDE to all the laptops in the enterprise. Doable, or should I just give up now and get a jump-start on the weekend's drinking?

Bob

@ChrisS Just two :(

Chris S

@HopelessN00b GPO and forget it?

Bob

Briefly considered sticking VirtualBox and Qemu in there, but I'd rather not actually melt something

Chris S

lol

Bob

It'd also be doing full software emulation, since I don't think Hyper-V can do VT-x passthrough

HopelessN00b

2:25 PM

@ChrisS Enh, except that you can't use a GPO to actually encrypt drives with BitLocker. Something of a major oversight, if you ask me.

Dennis Nolte

@NathanC for a whole year or per month? if first: nice, i need a lot more of that, if for a month: wtf are you mining dogecoins?

Nathan C

@DennisNolte 556 KWh was for 29 days of use

Apartment with 6 people

It was over 700 KWh over the summer because of AC

Oh hey...my A+ certification was supposed to expire next year (took it in 2012), but it was extended to 2017 because of my Network+

pauska

@HopelessN00b Correct, you can only manage the settings for bitlocker with GPO (and you should)

triggering the actual encryption.. dunno, we do it on reinstalls with MDT

Chris S

@HopelessN00b I think they just didn't want to hand you a gun already pointed at your foot.... But it's pretty easy to enable the BitLocker recovery key and TPM backups to AD, then

If ((Get-BitLockerVolume -MountPoint C:).ProtectionSttaus -eq 'Off') {Enable-BitLocker -MountPoint "C:" -EncryptionMethod Aes256 -TpmProtector}

(I think that only works on Win8, I think you have to use VBScript in Win7) in a startup script.

HopelessN00b

@pauska Looks like it's gonna be Manage-BDE for me... and sadly, not all that difficult, so I can't give up and go drink. :(

Nathan C

2:36 PM

CompTIA's renewal stuff is confusing...

HopelessN00b

@ChrisS You can do it on Win7 if you have WMF/PS 4 installed, which I don't think we do on all our laptops... so it's Manage-BDE, which does work with WMF/PS 3.0.

Dennis Nolte

@NathanC remembers me that i need to take another LPIC soon..

Chris S

Yeah, manage-bde works pretty well. Was my goto tool until the powershell stuff.

HopelessN00b

I still wanna not do it on principle. CIO/CTO/head IT dude wanting all laptops encrypted with about 2 days notice. That's got "success" and "totally reasonable" written all over it. :/

Chris S

Depends on how well managed and accessible your laptops are.... If they're connected to the network and all, you can get the GPO to configure key backup out right away. Then you need to warn people that they're getting encrypted, during encryption they'll only have 5GB of free space on their HD. Then actually doing it, again if well connected shouldn't be all that bad. Of course, if these laptops are rarely connected to the network I'd tell you're boss "not gonna happen".

I suppose it sounds less daunting when you've been running BitLocker for years already...

HopelessN00b

2:48 PM

@ChrisS Sounds like a list of all the things no one bothered to think about before deciding this has to be done now. It's cool though, as a not-insignificant part of me is kinda rooting for failure here.

Chris S

It's not a long list of "requirements", but it's mandatorily sequential.. Skipping the backup policy, for example, will F-CK YOU HARD down the road.

pauska

I agree with ChrisS

make sure your bitlocker settings are set, tested and working before you enable anything at all

Ry Jones

we lost hundreds of laptops to full disk encryption being pushed out willy nilly

HopelessN00b

@pauska Yeah, not an option I'm being given. So... like I said, it's got "success" written all over it.

Ry Jones

better yet, lots of engineers had dual-booted so they had linux and windows partitions. all those linux partitions were nuked

Journeyman Geek

2:55 PM

ow

pauska

Legacy BIOS update packages do not support specifying a BIOS password when a BIOS password is already set on a system. Instead the BIOS password must be cleared using the Dell Client Configuration Toolkit (CCTK).

hnnnnnnnnnnnnnnnnnnnnnnnnnnnnngh

TheCleaner

Yo, I have a client that is currently on register.com that wants a website. Anyone here able to recommend a decent website builder tool that a non-web guy can figure out that makes a semi-decent site/

?

Ry Jones

@thecleaner squarespace.com/#smallbusiness

HopelessN00b

Is there such a thing?

tombull89

@TheCleaner wordpress

Dennis Nolte

3:02 PM

Anyone by chance got a alternate part for this:
Cooljag Everflow 60mm x 15mm Blower Fan - (B126015BU)
i seem to not find it somewhere in .de buyspace.

tombull89

ducks

ewwhite

@DennisKaarsemaker You like HP... what's your thought on this?

1

Q: Drive faults not logged in HP IML on RHEL-based ProLiant server

Today I have had disks on two separate HP ProLiant servers go into Predictive Failure. One of these servers runs Windows Server 2008 R2 and one runs Oracle Enterprise Linux 5 (a RHEL5-based distro). If I look in the Integrated Management Logs for these servers, the Windows server has a 'Caution...

pauska

@DennisNolte frozencpu.com/products/6292/fan-350/…

that was the second hit on google..

Dennis Nolte

@pauska ye, the issue is with location not in germany. I dislike the idea of having that server not working for ~2+ weeks.

TheCleaner

@RyJones It's just a basic presence page needed. Maybe 3 or 4 pages with links (about us, contact us, etc.). Register.com offers their "basic hosting" for $5.95/month. You think squarespace is worth the $8/month instead?

Dennis Nolte

3:07 PM

but paying 100$ for express is kinda not my thing either.

Ry Jones

@TheCleaner I apologize for answering your question.

TheCleaner

Basil

3:27 PM

morning

pauska

@TheCleaner two more dollars per month? is that a real question?

Nathan C

3:55 PM

I've been debating with whether to continue to get a master's degree or not...the university near me offers a computer science master's

Basil

4:08 PM

1

Q: iscsi with multiple lun, how linux to connect only selected lun

my 10.1.1.100 have 10 Targets. I'm initially connected to single Target by running iscsiadm --mode node --targetname iqn.2005-06.com.drobo:b800i.1112.id5 --portal 10.1.1.100:3260 --login it did only show one drive connected, when i type fdisk -l (example /dev/sdb ). but the problem is, if i...

linux storage iscsi

Someone who knows Linux multipathing should be able to help this guy

faker

I got my 4th yearling badge. Time flies when you are cynically chatting with other sysadmins!

5

Ry Jones

ok @Wesley I found a non-BS answer of yours to put you over 20k. You're welcome.

2

Wesley

@RyJones You really had to go on an expedition, eh? :P

Ry Jones

the funny thing about that answer is I was just having the same discussion with a developer yesterday. it was apache, not iis, but the spirit is the same

@Wesley I was going to expand that idea on how many pages back I had to go, but then I got bored

Wesley

4:24 PM

Sometimes I go on trawling expeditions and sort by accepted answers with zero up votes. Quick sanity check to make sure it's not "I just chmod -R 777 and it worked" and upboat.

Huh, I thought there was a 30,000 point privilege / milestone too: serverfault.com/help/privileges?tab=all

Guess not.

Ry Jones

I thought chmod -R 777 was the solution to all problems

Wesley

Welp, I'm done with ServerFault. Been nice! leaves

@RyJones Fortunately some daemons bonk hard if files are 777.

If you really want to fix all the things, chmod -R 4777 /

Ry Jones

@Wesley I just put a wrapper on some stuff and it caught someone trying to sneak by last night. I'm pretty happy

Wesley

@RyJones Oh wow, cool.

Ry Jones

@Wesley It was gratifying. Now, I must shower and head off to work

Wesley

4:29 PM

I made an ugly one liner last night that searches the most recent apache logs for 404s, and sorts them by the most common ones so I can see which pages on my side-client's site should be there but aren't.

@RyJones Cleanse thyself.

Nathan C

4:43 PM

Heh, according to Credit Karma, if I make a $1000 payment on a card, my credit score will go down 15 points

As does having an on-time payment history for 2 more years...hmm...something's a bit wonky.

tombull89

Oh, I'm sorry, I didn't realize I had Elizabeth I's Domain Controller...