u/NewDOTuser

Troubleshoot a live network for a day, running around the whole day, only to find out a half-unplugged cable right in front of the rack where you started is the fault.

I believe that's Occam's razor.

All the time.

It was the best I could do on short notice.

classic fartist.

Ghost in the Wire. This was a great read: https://www.amazon.com/Ghost-Wires-Adventures-Worlds-Wanted/dp/0316037729

you bastard lol

However, part of this could also be "hey look, I found this software that can do what we want for $XXXX.XX" and they might come back and say that it costs too much and we should re-visit the AD/GP approach.

Fair enough. I don't know of a software to do that. I'm sure they exist, I just haven't had the need to find/use one yet. Best of luck!

So why are you avoiding AD again? I'm not seeing a real reason for not using it.

Install VPN

Connect the computer to domain

User logs in and launches VPN

Voila, magic.

Quality /r/sysadmin post. ಠ_ಠ

Right back at ya.

At least we're not talking about what monitoring software to use.

Personally, I think the .com is best due to it being most recognizable and easiest to remember.

Always. If you can get .com do it.

Agreed 100%. OP, fully adopt the domain. Your name is your brand.

My current(last day WOO CELEBRATE BITCHES) company does not but should. Communication is horrid here. Hell, if they started communicating by sticky note it would be an improvement.

There is also /r/cscareerquestions

Hell yea! You're killing it!

People like me have to go into SharePoint just to get away from printers.

LOL, how the turn tables!

DO THE NEEDFUL.

your resume to going to get annihilated if you're moving all around like that

Seriously. Maybe it's just me, but if I was hiring someone, I would not want to pick up someone who has a different job every year.

I'm on the opposite side. I see the unrelated and poor-performing workers they try and throw at us as "great candidates" when looking to replace a SysAdmin.

"Oh, Senior SA role? Yea I got just the tier 1 Helpdesk guy for you! He's had 7 different T1 HD positions in his 1 1/2 year experience. YOU'LL LOVE HIM!"

Utilize GoPhish or something similar. Find the people who will fall for it, educate them. No solution you implement will be 100%. Someone who isn't educated about this stuff will still fall for it.

For attachment scanning and filtering, we're using GFI MailEssentials. It's alright. It can be a hassle at times.

If there's documentation, and everyone knows where it is, maybe it's not that bad?

We have a whitelist that if you cry and whine enough you can be exempt from.

This list of exempt people also includes people who have infected their computer at the least or the entire network with junk and even ransomware.

This should be determined by the size of the company relying on it and the needs of that company. If it's a company of 20 people, you can probably get away with it.

The idea of separating them is so when you have an issue or upgrade and have to bring one down, you don't take down everything.

Not at all. Any management who cries gets full access. We implemented a whitelist and then gave tons of people unrestricted access LOL.

Ah, nope. Not Canadian.

My boss does this ALL the time. I know you're not my coworker though because you said everything else is great.

Just an observation. :)