« first day (1214 days earlier)      last day (3782 days later) » 

8:00 PM
@84104 Wow, what a great idea, then you can just point your public NS records directly to your DC's
 
We might be on to something, guys
 
@MDMarra 's/to//'
 
@MDMarra focus... are you done?
 
@84104 Just setup your VM template with Melissa, Nimda, and Sasser. Cut out the middle man.
 
@ewwhite Done with what
 
8:02 PM
Are we brainstorming for the next official AD DS Best Practices whitepaper guys? I think M$FT would love to hear more about these radical improvements to the way business use Active Directory
 
@MDMarra Check AD sites and services, see if replication was healthy, check to see if there's anything that would preclude establishing new DCs and demoting this old one... and if you think there is, what would it take for YOU to resolve it $-wise.
 
WEll, I have no idea what SQL Server is doing on here
 
(I'm just handing out billable hours, and @MDMarra isn't hungry enough!!)
 
So someone will have to explain what that's there for
 
@ewwhite Fuck it, I'll do the SQL Server shit
baby needs a new pair of rolexes
 
8:04 PM
@JoelESalas Golddigger.
 
@ewwhite but other than that, nothing stopping me from installing a new DC
That said, sites & Services only have one site setup
 
@ewwhite I'd totally go for a sugar momma
 
so if you want that configured, you'll have to tell me what physical sites exist and what subnets they use
 
@MDMarra I can build that out. That's fucked up that there's only one Site.
 
yup
so I have no idea where that 2nd DC actually is
 
8:05 PM
@MDMarra Down the street, in the cheese factory behind the homeless shelter.
I tried to put that in the SNMP Location field... but it was a bit long.
 
maybe in v4
 
Oh derp, I can't upgrade this box...
It's 32-bit 2003 SP2...and 2008 R2 is 64-bit
wheee
 
@MDMarra is replication working?
 
yes
 
OK @MichaelHampton - while I agree with Longneck's answer here:
0
Q: Which is the most recent version of Virtualbox guest additions work with WindowsPE (possibly needing a signed driver?)

Back2BasicsI'm making a windows (2012) deployment server with a capture boot image. I'm building a win7 client image to sysprep on virtualbox. I syspreped it changed the network to boot first and then I get a memory location type of error telling me "a" device couldn't load. It has to do with a driver be...

I have to wonder if it's really proper to simply redirect users to other software instead of answering the question. i.e. his answer should be a comment instead.
(and I called you out because of your disdain for vbox)
 
8:12 PM
Devs LOVE Virtualbox
I'm not sure why
 
Apparently they're having issues with KMS keys
 
but I have to set it up at a software company soon
 
for this laptop roll out.
 
@ewwhite Vagrant
 
@MDMarra yeah, that...
@MDMarra DC replication
 
8:13 PM
dude
do you read?
3 mins ago, by MDMarra
yes
 
@ewwhite because most have been using it for years since it is a decent enough free alternative to VM Workstation. They probably feel like Hyper-V is overkill for their need.
 
@cole Does dhcp server the appropriate suffix to the laptops?
 
I want to be able to tell client, "Here's what's wrong. Here are the reasons why you need to let me take care of this now... Now give me a blank check."
...and then let @MDMarra and @JoelESalas fight over the money...
 
Grrrr
 
What's wrong is that they have a critical piece of infrastructure running on a Pentium III on an operating system that's this close to end of support. What more do you need?
 
8:15 PM
@84104 that I don't know - using infoblox for DHCP
Symantec Ghost to image them
 
@MDMarra I have to be nice to them. They accused me of being an asshole once... So I take a gentle approach now.
 
Telling that that isn't not being nice
It's telling them that their shit is whack and it should be unwhacked
 
@JoelESalas A site in San Diego needs your help. Cisco Firewall and Aironet access point blew up during a utility power outage.
 
@ewwhite Oh wow
Where in San Diego?
 
Just logged into the KMS server......there's no product keys listed.
 
8:17 PM
@cole Sometimes it is the simple things.
 
@84104 so I'm like.......what.
I can use the KMS server for windows 8 though by doing slmgr.vbs -ipk <product key>
 
-ipk installs a local copy of the key
it doesn't use KMS
 
@MDMarra Interesting.
Then wtf are they doing!?
 
slmgr -ipk aaaa-bbbb-cccc-dddd-eeee is the same thing as typing that key into the activation wizard
 
Why in the fucking world would they do that?
When you can just add the key to the server and do slmgr.vbs /ato?
 
8:20 PM
What do you mean?
 
I'm not sure how it's supposed to work, honestly.
 
With KMS you don't have to do anything
 
@MDMarra just add the key to the KMS server, correct?
 
@JoelESalas Not exactly sure... but I've driven from LA to go there once or twice.
 
@MDMarra Must have network connect and properly configured DNS.
 
8:20 PM
You install the KMS key on the KMS server, activate it, and register an SRV record in DNS. Then, clients on your network will look for that SRV record and activate themselves against your KMS
 
@ewwhite When do they need someone out there
 
@MDMarra well shit - why do I work with idiots?
 
@cole nobody knows how MS licensing is supposed to work...except for 3 lawyers and a hyena on meth.
4
 
If you're locally using slmgr -ipk on a Windows 8 box, you're not using KMS for it
 
@MDMarra Interesting.
So pretty much everyone's retarded
 
8:21 PM
@TheCleaner The hyena on meth actually wrote the licensing agreement. The lawyers just had to be in the room for it to be all legal-like.
 
@cole This is at the new job?
 
lol, exactly
 
@JoelESalas I'm digging. I was debating whether to just send some preconfigured gear there.
 
Nobody knows how Oracle licensing is supposed to work...except for an accountant at Oracle who makes up the terms as needed.
 
@JoelESalas new old job
 
8:22 PM
@ewwhite I'm feeling rather shitty, let me know if/when
 
@JoelESalas why shitty?
 
@ewwhite I have the flu
 
@voretaq7 Not enough money you say? MORE $$$$$$$$$$$$!
 
Oh eww... I don't want you to be the cause of the next produce recall
 
@voretaq7 Oracle licensing is like getting into a ritzy nightclub. You know the right people or you're hot? OK, here's some licensing for 90% off. You are nobody and you want in with your 5 nerdy buddies? Sure...but you'll have to pay for drinks for everyone.
 
8:23 PM
"Everyone, bring your beets back to the grocery store. They've been sneezed on by a Mexican"
 
@NathanC I thought those were the only terms
 
@MDMarra every time that happens, I'm responsible for tens of thousands of faxes that need to go out to customers announcing the recall. It ain't no game.
 
NO HUMBLE BUNDLE, YOU CAN NOT HAS CASH
>:[
 
More like humbug bundle, amirite?
 
@cole nslookup -type=srv _vlmcs._tcp.nt4.cole.local
That's how the clients know who to contact
 
8:28 PM
@MathiasR.Jessen it's pointing all the DCs
I'm assuming I need that record to point to the actual KMS server?
 
exactly
 
all of your DCs are KMS servers?
 
@MDMarra I have no idea dude
 
lol
 
KMS isn't even installed on them
Like
wat
 
8:29 PM
KMS isn't a separate role though
It's just something that kinda starts working when you install a KMS key on a server and activate it
 
Oops...I accidentally the entire WSUS server
r-r-r-rollback
 
So someone could have used the KMS key to activate all of your DCs instead of using a MAK
which would be hilarious
 
So if I'm understanding this correctly. You add the Windows 7 Professional key to the KMS server > when the client joins the domain it reaches out to see if it can get a key from KMS via the _VLCMS SRV record > that record basically says "Hey I got ya key bitch, here" > and them it activates the client?
 
kinda but you don't use a Win 7 key
You use a Windows Server key and it can activate clients
 
Ahhhh
 
8:31 PM
KMS makes your activations entirely honor system
 
Because I have a "licensed" key
 
@cole Yes, but it does't have to join the domain. Proper dns suffix is sufficient.
 
Then what's this product keys thing for?
 
what product key thing?
 
 
8:32 PM
So...I think I'm stuck with spinning up a brand new WSUS server since I can't go 32->64
 
@cole That's how you can track how MAKs are used on your network and activate shit that isn't activated
It's not for KMS
 
ohhh
 
KMS is managed entirely from the commandline
 
So pretty much the issue is the SRV record's messed up/doesnt exist for the actual KMS server?
 
@cole Yes
 
8:33 PM
They could be, unless your DCs were installed with KMS keys
 
/sobs
 
In which case, the SRV records are fine, but your coworkers are fucking idiots
 
And I just need to add one for the actual KMS server?
 
Check the DCs first
 
@MDMarra how will I know?
 
8:34 PM
@cole just add the kms host key on the server you want to designate KMS host and change _vlmcs._tcp to point to that server
 
If they have KMS keys, they'll continue modifying that SRV record after you change it
@MathiasR.Jessen KMS servers will try and dynamically update that record though
 
Ugh Infoblox makes this a PITA
 
A DC will be able to flip it back
Oh shit wait
He's also using Infoblox
 
@cole You use Infoblox for DNS? o_O
 
dude your whole shit is weird
 
8:35 PM
@MathiasR.Jessen yeah.
I KNOW!
I told my boss i want to do integrated DNS for internal shit - they can use Infoblox for whatever the fuck else they want
 
An MS PFE once told me about AD zones with infoblox - it's a while a go, but it was a kind of horror story
 
@MathiasR.Jessen I have customers that do it
I tell them not to
but it works
 
I have to manual create all the AD zone records
 
wat
 
It's a fucking mess
 
8:37 PM
You don't have your DCs delegated the ability to dynamically register records on your Infoblox?
 
@MDMarra I don't control dat yo
But I'm going to push for it
 
that's insane. How do you know you're getting everything, like in the _msdcs zone, for example
 
because fuck that shit
 
@MDMarra trust me, it's rough
 
8:37 PM
lol
They live in a distant past
 
Ok so how does the KMS server know you have valid licenses for say Windows 7?
 
it doesnt
honor system
 
@cole There's a reason Microsoft conducts licensing audits
 
Ok so another question - these are field laptops. Safe to assume that these would be better off being MAK keys?
 
If they're disconnected with no VPN for extended periods, yes, Better off MAK
 
8:39 PM
ok cool
Now I have to try to explain this in the most non-technical way possible to the desktop support manager
 
I beleive the post-activation timer before needing to check back in in 6 months
 
Correct
 
6 months? that may work
 
license expiration is automatically set to now() + 180 days every time the client re-activates
it tries to do so once every 7 days
Win7 and up at least
 
Vista's the same
I think I'm the only one that rolled out Vista and KMS
 
8:41 PM
Naah, a colleague of mine did so too... for his client TS exam towards 70-647 :P
 
I did it for 500 computers in a university
 
So ok
 
:-|
 
do you enter the KMS key one the base image?
 
no
nonononono
 
8:42 PM
ok lol
 
the KMS key only ever gets installed on the KMS server(s)
You don't enter a key in the clients
 
Ok, I guess i'm just confused because there's a KMS key for Windows 7 in the licensing portal.
 
There's a key baked into the default windows image that tells the client "you're in OOB Grace until you can hit a KMS server or someone puts a new key in"
@cole You can have a Win 7 computer be a KMS "server"
 
@MDMarra OHHHHH ok
 
No one does it
 
8:44 PM
@cole The public ones are KMS Client Keys - those, you should include in the base image
 
If you want to use KMS, it's important that you don't change the key that's in the default Windows install
 
@MathiasR.Jessen public ones?
 
@MathiasR.Jessen client keys are installed by default
No need to enter them
 
@MDMarra they're using Ghost to image
 
doesn't matter
 
8:45 PM
@MDMarra they just need to use the KMS ISO to create the image, correct?
 
There's no special iso
 
Cause that's where I'm confused
 
I want this job, even though I can't speak German --

System- & Netzwerkadministrator (m/w) Schwerpunkt Linux

pizza.de GmbH

Sie sorgen in Teamarbeit für den reibungslosen Betrieb und die Weiterentwicklung unserer hochverfügbaren…

Posted on Careers 2.0 on January 7, 2014

because it sounds tasty
 
@cole I go download a copy of Windows 7 Enterprise. Install it. Don't enter a key during install. That copy can be activated by KMS. Microsoft pre-populates default Windows installs with the key the client needs to use KMS
 
@ewwhite How... what... you broke the onebox?
 
8:46 PM
Ahhhh
 
If you enter a MAK or something, then you can't activate with KMS
 
@MDMarra thank you
 
But if you just don't fuck with the key that MS ships pre-installed with the standard image, you'll work with KMS just fine
If you do fuck with it, Microsoft makes the client key public. It's on technet somewhere
That'll let you convert a MAK-activated copy of Windows to a KMS activated copy
 
I was gonna look at something this evening. I forgot what it was. So I played BF4 for two hours. Now I remembered what I was.
 
I don't have access to the Microsoft licensing portal
 
8:47 PM
it's not on the portal
The client key is public knowlege. All windows installs share it
 
@MDMarra ~ 180 days
 
Ooh fuck me, Licensing? nope nope nope.
 
@cole but, basically, unless you're doing it wrong, you don't need to enter any key on the clients for KMS to work
 
Ya thats them
 
8:49 PM
"Computers that are running volume licensing editions of Windows 8, Windows Server 2012 R2, Windows 8, Windows Server 2012, Windows 7, Windows Server 2008 R2, Windows Vista, and Windows Server 2008 are, by default, KMS clients with no additional configuration needed."
 
Thats what ships in a standard windows image that gives you the grace period
 
@MDMarra ok cool. I just learned how KMS works in a few minutes. ALL MAKES SENSE NOW.
Thanks @MDMarra and @MathiasR.Jessen
 
@cole You just need to ask the right questions among the right people :D
 
The other thing that will trip you up is that servers won't activate until 5 try and check in with KMS and clients wont activate until 20 (25?) try and activate with the KMS server
 
8:50 PM
So if shit doesn't activate immediately when you do get it set up right, don't sweat it, just let shit start checking in before you worry
There are all slmgr switches to see how many have checked in and all that
 
So there's no way to force activate?
 
you can run slmgr -ato from a client
that'll force it to check in
 
Ah ok cool
 
but the server won't actually activate it until 24 more check in for activation first
 
@voretaq7 I'm revising my opinion. What AT&T is doing is shady with a great amount of incumbent advantage.
 
8:52 PM
At $university I just fired up psexec and ran slmgr-ato on a lab and called it a day
But you get 30 days or whatever it is, so theres no rush
 
@MDMarra my worry is - these are going out to the field
immediately
 
Well, don't have those be the first 25 you try and use KMS on :)
 
@MDMarra they're the only ones
 
wat
 
@MDMarra yeah, I dont know dude
 
8:53 PM
Why aren't you using KMS for internal stuff?
 
I mean 1500 laptops are going out
IDK!
So if I force check the first 25 - it should work?
 
lol
yes
 
ok cool
 
@MDMarra Because they never set it up properly, so it didn't work? That's usually how it happens.
 
Should I schedule 70-414 tomorrow and see if I can finish off this MCSE in the same week that I started it?
 
8:56 PM
DO IT BITCH
 
I'm bummed that I never got a 2003 MCSE or earlier
 
@cole It will work (the KMS Host will start validating clients) but the remaining 1475 still need to get back on the network and "check in" before the 30 days grace period expires
@MDMarra I scheduled 70-297 for July 30th and slept in so I missed it :(
 
waaaat
what's 297?
 
2003: Designing AD Infrastructure
It retired on July 31st :S
 
That reminds me, need to schedule network+ exam before the 27th
or that ~$200 I spent goes to nothing
 
8:59 PM
Why did you want to pass a 2003 server exam?
 
@TheCleaner To not look too young and ignorant on my resume :D
 
@MathiasR.Jessen aww mann
Was that the last one you needed?
@MathiasR.Jessen Hilarious, but that's true for me as well
 
No, I had no 2003 certs in the first place, but it was a good refresher to read up on
reminds me
 
@MathiasR.Jessen Nice
 
I need to schedule 70-647 before the 16th
 
9:01 PM
@MathiasR.Jessen I gotcha...I never got my 2003 MCSE either
oh...I did take 70-290 apparently...
 
@MathiasR.Jessen Is that the MCITP 2008 capstone?
 
@MDMarra I got the client on the phone.
What do they need to buy?
 
@MDMarra yup - retires 31st and I suck at multiple choice exams
 
But I'm also old enough to have this bad boy....lol
 
@ewwhite Ideally 2012 R2 licensing
 
9:03 PM
@MDMarra I'll just call you
 
Need enough time for the second shot if necessary
@TheCleaner Haha, nice. I could never list that on my resume, I'd get discarded from the application stack for obvious fraud :P
 
I don't think I could pass MS Proxy Server 2.0 today...heck I would probably fail all of those NT era exams with half of my thought process being "WTF? why would anyone do it this way?" on the questions.
 
lol, NT4.0 was released the week I started preschool
 
Ok the KMS server does have an SRV record - but no idea why the DCs are except one
NT4!
 
@84104 Ayup
 
9:08 PM
@MathiasR.Jessen I was 6
 
@cole That makes 2 of us ;)
 
@cole and YOU.... just get out. We don't allow that kind of fucking language in this shithole :)
 
LOL
 
> We don't take kindly to your kind around here
 
@cole AHHHH QUICK SOMEONE POST A DICK PIC
 
9:17 PM
WISH. GRANTED!
 
What's this? @voretaq7 is granting wishes?
 
@MathiasR.Jessen Oh sure...make me feel really old...(I turn 39 this year!)
 
@ScottPack I am the Monkey's Paw.
 
@voretaq7 I'll take a pull on that.
 
9:19 PM
@ScottPack What is your wish?
 
Did @mossy ever explain the award on his desk?
 
(BRB, monkey's paw needs coffee)
 
@TheCleaner He did, but it sounded like a coverup.
@voretaq7 My heart's desire is between you and me, dearest.
 
{{Infobox settlement |name = Pittsburgh |official_name = City of Pittsburgh |nickname = City of Bridges, Steel City, City of Champions, The 'Burgh |settlement_type = City |motto = Benigno Numine |image_skyline = Montage Pittsburgh.jpg |imagesize = 250px |image_caption = From top to bottom, left to right: Pittsburgh skyline; Cathedral of Learning at the University of Pittsburgh; Carnegie Mellon University; PNC Park; Duquesne Incline |image_flag = Flag of Pittsburgh, Pennsylvania.svg |flag_size = 100px |flag_link = Flag of Pittsburgh |image_shield = Pittsburgh city coat of arms.svg |shiel...
WISH. GRANTED!
also, dear god the oneboxing destroyed that.
See? Monkey's Paw.
 
9:22 PM
@voretaq7 no need for a vpn youtube.com/watch?v=-AEtpjXRs0U
 
This has been an interesting day
 
Network+ exam scheduled for Friday :p
 
@Iain They use real swords? Dulled I guess? Still, looks like organized chaos.
 
@TheCleaner it's full contact - the edged weapons have to have 4mm round on them but people still get hurt
 
I can imagine. I'm guessing there's a rule about stabbing and probably something about calling "uncle" or when to quit bashing at someone?
 
9:34 PM
Yes no stabbing and chained weapons aren't used (flails etc). My friend who does it tells me that people were mostly beaten to death in those kind of battles.
 
Time to go! bbiab
 
I think you just need to drop to get people to quit - there are referees that intervene too
 
@Iain Yay! Violence!
 
lots
 
Did you guys catch director Michael Bay freezing up and walking off the stage during Samsung's presentation at CES?
 
9:38 PM
@TheCleaner Did he start signing?
 
Ok guys, what have I missed since I got on the phone with @ewwhite. Fill me in.
 
@MikeyB heh...no. Apparently the teleprompter stopped and he didn't know what the speech was or didn't recall it well enough...so he stood there for a minute hoping it would be fixed and then just walked off the stage.
 
Looks like something about weapons. That seems interesting.
@TheCleaner As much as I dislike his recent string of movies, I felt bad for him. A bunch of sources called it a "blow up" and said he "exploded" on stage, but he just looked like a scared dude with some serious stage fright
 
FUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUCK
Why the FUCK do HP make it so fucking hard just to call their support?
 
9:40 PM
@MarkHenderson A DUUUUUUUUUUUUUUUUUUUUUUUUUUUUCK
 
I've been searching for 10 fucking minutes to find a fucking phone number that can get me support for their SAN products
 
@MarkHenderson You see, if you bought IBM, you could just call or email me. HA HA.
 
Cos their fucking system doesn't recognise my fucking serial number
 
@MarkHenderson This isn't an angry place. This is a safe place. Let's breathe together.
 
@Wesley on that note:
Pretty sure I just wrote (and passed) a Cisco exam while unintentionally high on petrol fumes. Yay me? #thuglife
 
9:42 PM
@MDMarra yeah same here. I just was a little shocked that he couldn't wing it at least a little bit.
 
OK, hometime. Too tired to work.
 
@Wesley They won't even let me start a live fucking chat unless I have a valid serial number
And the only phone number I can find are for people dumbe nough to buy pavlilions
 
@MarkHenderson Call me.
 
@MarkHenderson Are you sure you got the part number right?
 
9:46 PM
@MDMarra NOW it's time to go to Ubuntu.
 
*Ring Ring*

ollǝH.

Why do you sound like you're upside down?

ǝʇɐɯ 'ɐᴉlɐɹʇsn∀ uᴉ ɯ,I
 
Peek: new @PuppetLabs Triage-a-Thon shirt! Join us this Saturday for bug squashin' http://triagepuppetjan2014.eventbrite.com #puppetize http://t.co/ajooehcW1F
 
@MDMarra Make sure to call him Bruce. They love that.
 
Why?
 
@freiheit Copy/pasting it from the ILO
 
9:49 PM
@ScottPack This is a racial stereotype that I'm not aware of, and I'm interested to know more.
 
@MarkHenderson do it from the host as well.
dmidecode or system info
 
@ewwhite Not even their suppor can find it :(
 
@MDMarra All male Australians are named Bruce and all females are named Sheila. Clearly.
 
This is good and actually hurt my brain after a bit
 
@ScottPack Still don't follow.
 
9:50 PM
The Bruces sketch is a famous sketch from the television show Monty Python's Flying Circus, and appears in episode 22, 'How to recognise different parts of the body'. It involves a group of stereotypical lounging Australians who are revealed to be the Philosophy Department at the fictitious University of Woolamaloo (a misspelling of the Sydney suburb of Woolloomooloo; this is how the suburb is actually pronounced with an Australian accent), and all named Bruce, with a common fondness for beer and a hatred of "." Terry Jones plays a "pommie" professor, Michael Baldwin, joining the departmen...
 
Ah
Never saw it
I did like Quest for the Holy Grail, though
 
@MDMarra woah!
awesome!
 
Ah they need the SN from the bundle, not the individual nodes
 
@ScottPack I did that for high school talent show, amazed we got away with it
 
I may favor other distros over Red Hat, but I like their attitude more and more
 
9:55 PM
Fuck it's out of warranty
I hate this shit
 

« first day (1214 days earlier)      last day (3782 days later) »