Jaan

Do you have any more info on this please?We're looking at doing our edge and core next year. Would be great if Sophos have a range the can cover both. We already have site wide apx530s Cheers

Hi all, we've already managed to fill our DMS 10 months into having bromcom. We have a lot of reports that "expire" after 14 days. I thought Bromcom deleted stale reports. I can't seem to seem any settings in the DMS section. We have 10gb of storage. managed to get it down to 8gb. Anybody got any pointers. (apart from buying more storage space ) cheers

what info do you have on the upcoming core switching if you're able to share? Thanks

My understanding is that the ubiquiti switches are layer 2+ with layer 3 coming in a future update....... but layer3 was also coming to gen 1 in a future update also.

I Missed this one. Was considering unifi this year. We already use Sophos XG and WIFI, so this is a good thing for use. Hopefully Sophos will also release a core switch with MLACP at some point. Unifi also don't have a core solution just yet. https://www.sophos.com/en-us/products/sophos-switch

No, i have never cashed anything out. I just hodl. My shib is in the green, but the rest of my portfolio drags it down I have over 100billion of one type of crypto, if it became as popular as shiba...... that would be nice......

i've "invested" (lol) approx $1500 over 5years in crypto. it's worth about $700 now after the crash...... was almost $4k before that. I got into shiba too late...... by 7 days i now tend to put small amounts on coins that look promising that have yet to become popular. It's not a risk, everything i put into cyrto i expect to lose. its money i would normally spent on Cigs and beer.... I wouldn't dream of getting a loan to put on crypto, thats crazy. My shiba is still up %50 after the crash, its more like a hobby and something i like to track...... could have used a virtual wallet i guess, but where's the fun in that. Only spend what you can afford to lose.

Other one is camera shy!

My Fur babies

Thanks for that. How would i "view" which machines are upto date and ones that aren't. Normally i'd view this in wsus. We're a google school here so use Google workspace not o365. we don't use azure. Cheers

Can you still have a central (wsus) server for WuFB?

This please mods. ANybody had any issues with this months updates....... the reddit isn't looking great https://www.reddit.com/r/sysadmin/comments/um9qur/patch_tuesday_megathread_20220510/?sort=new

This has made an appearance again. We have the CC desktop set not to load at boot (GPO). This works fine, however the apps aren't updating. When we manually start the CC desktop app it updates the programs and alls a good one. However, the app still doesn't seem to be reading the deployed xml file. Students can still see and add apps outside on the deployed set.

This poor barge doesn't look very shipshape, maybe it should go see a dock.

I agree with Norphy. I think it would be best to clarify why it is you wanted to use a RAID setup. I would never use raid instead of a proper backup setup, if it why you wanted a raid 1 setup? (i'm assuming here) If it's for performance reasons, a modern day desktop, with a motherboard that supports an NVMe SSD would be best bet. If you really wanted to, you could even RAID the Nvme drives assuming the Motherboard supports it. My recommendation would be get a Desktop with NVMe support, and back it up using the free version of Veeam desktop. Without knowing what the workstation would be doing, all of the above are assumptions. and you might even be better of just getting server hardware. cheers

I can confirm this has worked for me. It has assigned licenses based on AD Group membership. I have two Groups, All Students & All Staff. each group has a different license now assigned to them via GCDS. Not sure how it will handle the removal on said license. However, i have checked it to remove the license when the user fall out of scope. EDIT: yeah you can't have a different query for a same license

I've just added the below for applying our staff license. (&(objectCategory=person)(objectClass=user)(memberOf:1.2.840.113556.1.4.1941:=CN=ALL Staff,OU=Email Distribution,OU=School Users & Computers,DC=domain,DC=net)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) This adds the license to anybody that is in the "all staff" email distribution group in the define location (also supports nested groups and ignores disabled accounts) After simulating that sync, it seems to be working....... just need to apply it now.......... i'll have a brew first! i'll not forget to tick the "Remove this license from the google domain users that don't match this rules" setion!

I've just found this article that suggests usings groups also syncs (adds/removes) licences. So i might as well use that as i already have groups with the memberships created. https://amplifiedlabs.zendesk.com/hc/en-us/articles/1500011643062-Licensing-with-GCDS-GADS- The below LDAP query pulls any users that are members of the defined group (and also ignores suspended accounts) (&(objectCategory=person)(objectClass=user)(memberOf:1.2.840.113556.1.4.1941:=CN=GLS-GAFE-AllStaff,OU=Security Groups,OU=GAFETest,DC=testlab,DC=amplifiedit,DC=com)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) i'll give this a try

My base DN: OU=Users,OU=School Users & Computers,DC=domain,DC=net each of my LDAP OU queries would be OU specific and fallen within the BASE DN

Here's the example page. https://support.google.com/a/answer/6126589#zippy=%2Ccommon-ldap-queries%2Coptimizing-your-search-rules

Our Ad structure matches that of our Google OU. I aware i can assign them via the Google admin panel onto the OUs. However from what i understand, i have to manually maintain the removal of licenses in the admin panel. I'd prefer to just sync them via GDCS/GADS so that it can be assigned and removed automatically based on user OU location. It a bit more seamless..... however, it seems to have snowballed I have contacted Google support who have said it's possible. However they only give Group sync LDAP example and not OUs ones. They said LDAP queries fall outside of their support. You can use Google Cloud Directory Sync (GCDS) to automatically synchronize users, groups, and contacts so that the data in your Google Account matches the data in your LDAP server, such as Microsoft Active Directory. You can also use GCDS to sync licenses by user, OU, or group. [shared] Provisioning Google Workspace for Education Paid Licenses - Updated Source: https://docs.google.com/document/d/19kL60cDnsIyZ-sPzck37oEHIRZVYgdn1-yxm28wL2jw/edit#

Google support have said they can't support me with this query. Their support pages say you can assign licenses via a group or SYNC them via OU. The support page gives LDAP query examples to do this via Group but not OU. Anybody out there using the SYNC to OU via Google Active Directory Sync method? What LDAP query are you using? Thanks!

That makes sense, IIRC it was about Chrome 100 it started so makes sense. Can i regenerate the cert from Papercut which includes the SAN?

thanks

cheers