netadmin

I have recently used Mover.io to move all user data from Google Drive to OneDrive and our school leadership has asked that we disable all prior file sharing (via public links) from Google. I have blocked Google Drive access and external sharing, but it seems like that is only blocking future access to Google Drive - files shared previously are still available to anyone with the link. Does anyone know of a way to globally delete all previous file sharing permissions within Google Apps?

I don't run Veeam, but I send an encrypted backup from a Synology NAS to Backblaze B2 and it's worked well so far. Their pricing seems to be the best by far.

I would strongly recommend a separate VLAN as well, for increased security. I blocked my security camera VLAN from being able to access the internet - this avoids any risk from potential security vulnerabilities on the cameras themselves. Separate switches would be optimal from bandwidth perspective, but it may be more cost effective to upgrade your backbone to a higher speed and re-use your current switches. For cameras, try to select models that use H.265 encoding rather than the H.264 encoding when possible - this uses a fraction of the bandwidth that H.264 cameras did, and also reduces storage needs on the NVR as well.

I have several new Server 2016 VMs running on SSD flash storage. It seems that they startup so quickly that the network has not fully connected by the time they try to start Remote Desktop Services, which causes the following error to be logged on each boot. TerminalServices-RemoteConnectionManager, error 1064: The RD Session Host cannot install a new template-based certificate to be used for Transport Layer Security (TLS 1.0\Secure Sockets Layer (SSL) authentication and encryption. The following error occurred: The specified domain either does not exist or could not be contacted. I have a GPO that pushes a remote desktop certificate out and I have adjusted group policy to "always wait for network" but continue to encounter this error. Does anyone know of a way of delaying Remote Desktop startup or otherwise resolving this error? The remote desktop services are all set to manual/trigger start and changing them to automatic (delayed) startup did not help.

We're a fairly small campus - we used Juniper EX3300 switches in our edge closets and an EX4300 as our core switch. We're looking at some building additions in the near future, so I'm thinking I'll add a Juniper EX4600 fiber switch when that time comes, as it can connect to the EX4300 as a single virtual chassis. The Juniper switches have been very reliable for us, and Juniper support has been top notch when issues came up with firmware upgrades a couple of times.

I have setup a new Server 2016 Hyper-V Failover Cluster on a Dell VRTX. Both hosts are running Server 2016, passed all cluster validation tests, and seem to be working properly. However, on each boot of either host, they log a Kernel-EventTracing error, event id 2: Session "{598c599e-80ee-4b3a-81fc-59f151341b28}" failed to start with the following error: 0xc0000035. This error also occurs if I manually restart the Cluster Service service. From my initial research, it seems this error code sometimes indicates some type of name collision in the performance monitor event trace sessions. I located an event trace session called {598c599e-80ee-4b3a-81fc-59f151341b28}. If I delete this event trace session and restart the Cluster Service, the error does not get logged, but it does recreate the event trace session which will cause the error to occur next time. Any ideas on how to resolve this? It logs as an error, which clutters up the event logs. Thanks!

We used to use the free version of Meraki, but after Cisco started limiting feature updates on the free version, we migrated to Miradore. Miradore is simple, but very reliable and a great price point given we only have a small number of iPads.

Yes, I disable off-campus network access on all of my servers except for WSUS and DNS servers. It does make the server a bit slower when using Internet Explorer, but has created no major issues that I've noticed in the last few years.

I am currently looking into implementing Alertus Desktop Notification - have not started the install process yet though. https://www.alertus.com/alertusproducts/desktop

Thanks Arthur, this is exactly what I was needing.

I have several Macs that have Garageband, iPhoto, and iMovie installed from the App Store on OS X Sierra. I have discovered that when updates come out, the App Store cannot automatically update because it is prompting for the App Store account password. What approaches are your using to keep your Macs updated without having to go to each Mac desktop individually to sign in to the App Store each time an update comes out? I use Munki for app deployment, but that does not look like it could help in this case. I also tried the command line interface to App Store (MAS) but it fails to authenticate successfully and looks like support is ending. I use Meraki for management of our iPads and would be open to adding our Mac desktops to Meraki if it could assist with this challenge somehow. Thanks for any recommendations!

We are looking at purchasing a "site" license for Adobe Creative Cloud (which really amounts to 100 device licenses). Does anyone currently use Adobe CC device licenses on machines that run Deep Freeze? It sounds like Adobe CC activates the first time it is launched and then again must reactivate every 99 days. I can script launching one of the Adobe apps after machine imaging to force the initial activation while Deep Freeze is in thawed mode but was unsure if issues would occur if the reactivation occurs when the machine is in Frozen mode. For machines that use device licenses, if they get reimaged, will they automatically use the same license or will it consume a second license and require manual action to delete the initial license? Thanks for any input you may have!

I purchased a Juniper EX3300-24P earlier this year and it's been working great so far.

I have had a few isolated Windows 7 machines that have started freezing after April 2016 Windows Updates when Word 2013 or PowerPoint 2013 are launched. Has anyone else seen this issue (and hopefully have identified which patch may be causing the issue)? I have tried uninstalling a few of the patches from this month from an affected machine but this has not helped yet. This is similar to an issue that occurred in February after KB3114717 was installed, but I have verified that the affected machines do not have this older KB currently installed. Thanks for any guidance you may be able to provide!

Another option would be to create a collection for the machines you want to have the scheduled reimage for and deploy the mandatory TS to this collection as "always rerun". Then run a scheduled task every 6 weeks to run a PowerShell script to add the necessary PCs to the collection (such as How to add computers listed in a text file to a collection | Mike's Tech Blog). Add a final step in your task sequence to remove the PCs from the collection and it should not keep reimaging at that point (such as Remove computer association from collection after SCCM task sequence | - danovich.com.au).