Aww, I misplaced my incriminating photos.

@ewwhite Unless that's for there mail servers it hardly matters. It would be nice, but it breaks nothing.

Sloppy... for internal DNS

@84104 Even so, you'd need reverse lookup for your external zone, not for your AD

We've discussed them!

@ewwhite Singular DC is bad

In white, above the barracuda... that's the DC that takes 22 minutes to boot.

Pentium III

I took Microsoft exam 70-413 today and there was a question about Active Directory naming and there was no correct answer in the choices. I hit the character limit for comments that you can leave at the end of the exam.

cc: @RyanRies @MathiasR.Jessen

@MDMarra Reverse dns is used in anti-spam and non-AD kerberos. Also by people, sometimes. Nothing else that I know about cares.

@MDMarra Assuming you passed?

ya, 900

Damn son, congrats

@MDMarra Back to fixing this thing!

What about it

Can you look now?

Stand up two new DCs, decom the old one

Sure, what do you want me to look at?

@MDMarra all answers ended in .local?

@DennisKaarsemaker .local or creating split DNS

Need you to look at the DC to make sure there's nothing ridic.

sure

It looks like it's split DNS :(

with only 1 DC, it'll either work or it wont

I'll take a peek, send me VPN creds and domain admin creds

Administrator:ChicagoSnowblower

@ewwhite 68F on the backside of the rack? That room must be dang cold...

@TheCleaner above a freezer (produce)

@TheCleaner I LOVE IT.

@ewwhite isn't it usually HOTTER up there with the condenser exhaust?

@voretaq7 Not in a produce market stall...

maybe in a warehouse...

This doesn't look right @MDMarra

Ghetto content filtering

:(

There's a Barracuda there!

@ewwhite that's pretty dang cold though. I just remember some efficiency projects where I worked through datacenter issues where we were able to raise the ambient temps to around 73F and save hundreds of dollars a month in cooling (plus life of the units)

@TheCleaner there's a portable AC unit and a few window ACs in the room :)

:)

:) windows ...I love it. That's why I love small shops or "non-IT" shops. The place next door to us has a server room that's carpeted with a window that let's in the afternoon sun.

@TheCleaner 68 degrees, 50% RH. Everywhere. Flood cooling FTW :-)

La Salle's server room had windows

no carpet though

@TheCleaner they painted the glass in the windows in the server room black.

It was shit

(unless I have to pay the electric bill - then fuck that shit, let it get up to 90 for all the servers care!)

(trying to think of a password for Mark...)

50% RH probably doesn't feel that bad at 68. At 73 it would feel musty at times. I recall a datacenter I worked in once that had a broken humidifier and was around 15% RH....(hint: DON'T TOUCH ANYTHING lol)

@TheCleaner the standard ranges at the facility I quote that gospel from were 65-75 degrees, 40-55% RH

@MDMarra Yeah the MS tests are far from perfect. Which is why I signed up to help write/review exam questions. :)

As did I

but the setpoints were 68F and 50%

@voretaq7 yeah that's about right. Seems like everyone shoots for 68F. We just found at a couple of places where they could crank it up 5 degrees and still be fine on the equipment and efficiency/cost returns. Half the time people wouldn't have setup proper hot/cold aisles or they'd have cold air blowing on the outlet side, etc.

@MDMarra I sent the credentials to your SnapChat!!

@TheCleaner if you have hot aisle/cold aisle (and if you don't you're a bad, bad man) you can crank it to 75 in the cold aisle as long as you keep the hot aisle below 90. Your cold-side RH still shouldn't get below 30 though

@ewwhite liar

and the "keep the hot aisle below 90" bit is only because of the meatbags that may have to work back there :P

$job[-1] used 70 as the setpoint (kept most cold aisles below 73ish) and 40% RH as the target (but we'd get into the 28-29% range more often than I'd like)

@ewwhite ...that password

@StackExchange REPENT!!!

@voretaq7 agreed. I wish Sun would update this book....it was about the best I've ever read on data center design:

amazon.com/Enterprise-Data-Center-Design-Methodology/dp/…

@ewwhite what's the AD domain name? I need it to log in

@MDMarra Windows 2003, dude... Drop-down menu.

Just tell me what it is

I need to name the VPN connection

ChicagoSnowMan.local

@MDMarra Well, this is San Francisco, so it's: KinkyCarrot.local

<spews drink> Nice!

Or...

the one that's not being ghetto-filtered.

Why do they have authoritative zones for google domains?

@TheCleaner This.

@MDMarra That's hilarious

@TheCleaner My guess is ghetto content filtering

Let me guess...to prevent them from getting there.

lol (great minds Mark)

@MDMarra did you get in?

Ya, dude their whole shit is fucked

I found another domain controller, but I think it's at another building.

jk, still logging in

netdom query dc

will list all DCs in the environment

@TheCleaner Yeah, that's an excellent book. and my copy has post-its and margin notes all over it now :-/

@TheCleaner Because they're SATAN?

@MDMarra yeah, it's at another building, but isn't doing much, it seems.

this thing is slow as fuck

@MDMarra Pentium III

why the fuck is SQL Server installed here?

that works for you too @MDMarra ^ :)

@ewwhite yeah dude, this thing's gotta go

Do you need a more in-depth analysis or will that do?

They're also running an unsupported version of 2003

Only 2003 R2 is still supported. They're on 2003 SP2

@MDMarra I need to know what to do. Understand that this Pentium III DC is sitting next to my Linux servers with Fusion-io, my new VMware hosts and an AS400...

so it's all sorts of unbalanced.

I can spin up a W2008 R2 DC in a few minutes... but I need to know how deeply they're screwed by having the 2003 thing.

@MDMarra My WSUS box is on 2003 SP2...

@ewwhite not screwed

Why are you still deploying 2008 R2 though?

Don't be that guy get them on 2012 R2

@NathanC Put R2 on it and you'll be supported until 7/2014

@MDMarra because the software that will be running on the 2008 boxes I installed overnight requires Windows 2008.

But why 2008 DCs? Slap 2012 R2 on those bitches

Produce... remember, these people have applications that aren't updated as often as your Hyper-V voodoo.

And software that doesn't support 2012 yet is shitty software

I hope we can go to 2012 R2 for our AD.

Yes, shitty software, but it's stuff that controls their fuel pumps for their truck fleet, or the laser-powered tomato-sorter.

laser powered tomato sorter!

@ewwhite That last things sounds so awesome!

Right, not saying to upgrade those. But for AD and DNS - there's no reason not to use 2012 R2

@MDMarra I had a 1-Megabit internet connection to work with. I downloaded what made the most sense.

@ewwhite but yeah, they need to get off of 2003

@MDMarra I'm probably going to stuff WSUS on a 2008 R2 box

and if you saw yesterday, Iw as trying to get W2012 R2.

@ewwhite Don't run weird applications on your DCs. That's what members servers are for.

or 2012 R2 depending...

@NathanC 2012 R2! HAVE YOU NOT BEEN LISTENING

@84104 these are member servers.

@MDMarra Licensing. Don't forget: poor SMB

lol

Jesus, get SA you poor people!

:(

My 2012 R2 boxes are on eval versions :p

@NathanC dude we're a multinational corporation and they're like: such expense. much no. very old. wow.

@ewwhite Oh, then legacy issue is legacy issues. Go as high as you can.

@cole waters.com/waters/home.htm?locale=en_US ? :p

I think server DFL2012R2 doesn't play nice with 2000 members, but that's about it.

I mean, laser-powered tomato-sorter. Why should it support Windows 2012?

@ewwhite SkyNet.

@NathanC ya

@MDMarra SA was a waste until recently...

THE SCIENCE OF WHAT'S POSSIBLE - as long as it's not our IT Infrastructure

So @MDMarra Tell me what's wrong with the setup... and what it would take to make it MOAR modern.

@cole I saw an IT engineer posting for there haha

@ewwhite It's running on a 900MHz PIII for starters

@NathanC wat?

With 2012 R2, they'll get failover DHCP between the two DCs

Plus the shit dies for good in a year

do you need more?

@MDMarra VMware is sitting right there... ready to be used-and-abused.

@cole uscareers-waters.icims.com/jobs/1253/2013-1253/…

@NathanC ya - been open for a year

@MDMarra note how the data and phone networks are on the same subnet...

Networking group - all you do is networking. No touching our servers :P

@cole The obscure techs noted are probably the reason

@ewwhite Ok, so throw some 2012 R2 on there, let me know their IPs and I'll upgrade

@NathanC yeah avaya/nortal switches

I don't know what all of the bullshit on these boxes are, though

like SQL

@MDMarra SQL there, SQL here, SQL for everyone!

But really, that's the only obscure tech on there really.

@MDMarra I don't have access to 2012 R2

Fatpipe, NetScout, Sonicwall, etc are all pretty common.

only 2012 R2 essentials, I think

It's a good position for someone who wants to get into networking.

@cole Fair enough...just didn't recognize since I'm not a network engineer =p

@ewwhite Your customer doesn't have access either?

(Fatpipe, NetScout)

Never heard of those either

@NathanC I am sorry to admit but i used to hack on Waters software for HPLC while in Russia, also Watson LIMS.

ok

I've been a mix of SysAdmin/Networking for years - I did a lot with networking at NetApp so I've dealt with a lot of those things

@ewwhite so stand up whatever you have and let me know when it's OK to reboot shit

I wonder if I can just do an in-place upgrade from 2003 to 2008r2 without breaking WSUS horribly

but you really should be deploying 2012 R2 to places now

150 GB of update shit is a lot on a 8mbit connection >_>

@MDMarra I have a nice 2008 R2 template that I can spin up.

Going to earlier versions without a legacy constraint is doing them a disservice

@MDMarra I need a copy to play with.

@MDMarra tomato-sorter

@ewwhite Evals, bro

As for an actual copy... coughtorrentcough

no, i want it to appear magically in my Microsoft License portal

So get SA

@NathanC just remember on the eval copy that it can't be upgraded to full if it's on a DC for some reason.

New CLANG/LLVM release.... <sniff curiously>

I'm reluctant to deploy 2012 R2 in production so far...probably waiting until we make the swap to Hyper-V

There's little reason software won't work on the newer platforms

It's just dev shops dragging their feet with QA

Go. Read. Be outraged.

I'm out of rageohol

@voretaq7 Did you miss where the MPAA was admitted to the W3C today?

Because most people are all outraged-out because of that

Jesus

@MDMarra . . . yes. Point me a link so I can drop another point of "Faith in Humanity" from my character sheet.

@voretaq7 Mobile has always been weird. The new FCC guys has made some even more dubious remarks.

@84104 The new FCC guys are douchebungalows.

spineless, ballless, brainless soulless..... just fucking shut down the FCC. Wild West rules - he who has the biggest transmitter wins.

@MDMarra So you just need me to spin up a VM to replicate to?

Two preferably. The 2nd DC is 2003 as well, right?

@MDMarra it's in another building...

So it's not being replaced?

@voretaq7 Okay. I read it. I am not outraged. I actually think it's kind of nifty.

one that has no VM infra.

each DC seems to only serve its location

ok

can you check sites and services?

well then just spin one up I suppose

@ewwhite If it ever opens, sure

@voretaq7 sounds like someone on ATT's data side had dinner at Texas Roadhouse with someone on their voice side. The voice guy starts explaining the Telco Act of 1996 and the next thing you know the data guy comes up with this brilliant idea.

Did I miss something here?

thenubbyadmin.com/2014/01/07/…

@MDMarra No surprise, but thanks for the heads up :) What was the question about

@ewwhite Link didn't work from me either, but i think it's related to meta.serverfault.com/questions/6056/…

@84104 it's a backdoor way of getting pay-for-speed

it starts out as all the nice things AT&T says it is

So, .local, or three choices with split horizon DNS

then the data caps go down to 50MB/month, and only people who are paying for the "bypass" can get data to consumers

@MDMarra Who puts these questions together? :P

right?

Microsoft may actually have proven the infinite monkey theorem

@MathiasR.Jessen is that a corollary to the Ballmer peak? :)

@MDMarra Run IIS on all your DCs and expose them to the internet!

lolol

@voretaq7 I'll be out raged when that happens. In the mean time I'll be annoyed at their high prices for poor service.

@voretaq7 The road to the proof is at least conditional on the latter

@84104 Be sure it's unpatched IIS6 for compatibility reasons

@84104 I'm already annoyed at the cost of crappy cell service - I'm a couple of hates ahead of you in this round :)