The tag has no wiki summary.

learn more… | top users | synonyms

-1
votes
1answer
55 views

How do you “prevent powerful accounts from being used on unauthorized systems”? [closed]

I was browsing through Microsoft's Best Practices for Securing Active Directory and saw the chart linked which includes some of the best practices included in the document, rated by importance. At ...
-1
votes
0answers
35 views

Best practice to provide MySQL access to my users

My application collects data and stores it in a MySQL database. I want to provide read access to my users. I previously had a VPS with cPanel. I set up a read-only mysql user and distributed the ...
2
votes
2answers
48 views

The impact of Apache graceful restarts and user experience

Is it safe to perform a graceful restart of Apache on a production server? What effects will a graceful restart cause and what would be the impact (if any)? Will there be any detrimental impacts (e.g. ...
15
votes
4answers
1k views

Where do companies typically store SSL certificates for future use?

We recently bought a wildcard SSL cert for our domain. We converted all of the certs to a Java keystore, but now we are asking ourselves where we should store these for later use. Do people use ...
0
votes
0answers
33 views

Server 2012 LDAP signing - “Number of simple binds performed without SSL/TLS..”

Here is our log on event 8227: Number of simple binds performed without SSL/TLS: 88 Number of Negotiate/Kerberos/NTLM/Digest binds performed without signing: 0 I have set LDAP Interace Events ...
-1
votes
1answer
37 views

IP Network Best Practice [closed]

On my On Premise network we use IP Span 172.17.101.0-172.17.103.254 I should now connect our Windows Azure network to the On Premise network using VPN. Is it okay to use IP Span 172.16.1.0 in the ...
4
votes
2answers
244 views

Best practices for file layout in a Hyper-V server?

We've got a Hyper-V server set up, and the layout of the files is inconsistent because it was set up by several people. Here are the two different "templates" that were used: Template 1 ...
4
votes
2answers
95 views

Adding an Active Directory to a computer-local group - which scope to choose?

I am aware of the "AGDLP" rule of thumb when it comes to group nesting inside an AD strcture. But now I am wondering if there are any best practises when it comes to adding Active Directory groups to ...
3
votes
1answer
183 views

AD IT Helper Permissions

My apologies if this has been asked before. If I knew the proper search terms then google would be more effective. I would like to add a user that can join computers to the domain, Install software ...
5
votes
1answer
241 views

Managing puppet modules with git

I have a puppet/foreman server running on Debian 7 for managing my systems. I use the community version 3.7 of puppet and foreman 1.6.0. I use directory environments. At the moment I use a rather ...
5
votes
3answers
418 views

What is the name for sorting a directory with lots of files into subdirectories? [closed]

One way to make manageable a directory with a huge number of files into it is to sort the files into subdirectories named after progressive characters in the files' names. E.g.: - ...
0
votes
0answers
91 views

How to handle 802.1x authentication system with incompatible clients devices?

I would like to split my wired network into multiple VLANs. In order to do that, I think I will use dot1x authentication on my Cisco Switchs (2960S and 2960G) RADIUS will be handle through NPS on my ...
0
votes
0answers
33 views

Manage User Specific PowerShell Functions in Active Directory Domain

Given: Windows Server 2012 R2 / PowerShell 4 Do need: a way to manage user/role specific PowerShell functions in an Active Directory domain. Do NOT need: help with coding these scripts. This ...
2
votes
1answer
88 views

Performing root mysql operations in bash scripts

What is a good practice to execute root operations on mysql databases in bash scripts? For example, I want to create new database and grant privileges, I have to use: mysql -u $ROOT -p"$ROOTPASS" -e ...
-3
votes
2answers
41 views

Scheduled Task Naming Conventions? [closed]

I would like to hear of examples of a naming convention for Scheduled Tasks in Windows, along with rationale. Thanks.
0
votes
2answers
70 views

Apache2.2 vhosts - disadvantages of using one file with many vhosts

As i am working with Apache2.2 more and more lately this thought crossed my mind (apologies if this seems a 'silly' question, still learning alot) Are there any blatant disadvantages if you use just ...
0
votes
1answer
212 views

Regarding AD Domain controllers and remote branch offices

We have central HQ building and a lot of small branch offices connecting via VPN and want to implement AD (If you can believe we still haven't). We want everyone to log in using domain accounts and be ...
0
votes
1answer
203 views

HPC Cluster (SLURM): recommended ways to set up a secure and stable system

I'm working with a SLURM driven HPC Cluster, containing of 1 control node and 34 computation nodes and since the current system is not exactly very stable I'm looking for guidelines or best practices ...
3
votes
2answers
167 views

Importance of ha.cf file in a heartbeat/pacemaker environment?

I'm having a few issues trying to understand ha.cf and how the cluster picks up on updates. For example, when creating a new cluster, I usually: Set some default options in ha.cf on node 1 - node x ...
1
vote
1answer
93 views

Reusable piece of code in Chef to be used several times in recipe(s)

I need to reuse some scenario in my cookbooks - create several users on a single machine and install same software for each of them. Installing the software is a repeating operation which I'd like to ...
0
votes
0answers
19 views

Need advice on IIS (7.5/8) for web service for querying AD

In order to standardize how our internal web application talk to AD, we are creating a web service that applications can call. Our AD requires user authentication to query, so this also prevents ...
1
vote
2answers
188 views

How to go about rotating logs which are arbitrary named and placed in deeply nested directories?

I have a couple of hosts which are basically a playground for developers. On these hosts, each of them has a directory under /tmp where he is free to do all he wants - store files, write logs etc. Of ...
5
votes
4answers
242 views

powershell vs GPO for installation, configuration, maintenance

My question is about using powershell scripts to install, configure, update and maintain Windows 7 Pro/Ent workstations in a 2008R2 domain, versus using GPO/ADMX/msi. Here's the situation: Because ...
5
votes
1answer
119 views

BPA for AD Server 2008 and 2008 R2 DCs W32Time setting complaint

I have been going through some of the warnings raised by BPA against our DCs to make sure everything is as it should be. Everything has been going well until I got to the following warnings: The ...
1
vote
1answer
171 views

Video hosting: Host files on web server, storage server, NAS? [duplicate]

I inherited responsibility for the back-end of a growing distance education program. They have a Proliant DL160 Gen8 web server which serves video from a ReadyNAS Pro 6. We currently share the ...
2
votes
1answer
88 views

Structuring an OU to properly model an Organizational Hierarchy

I'm experimenting with using OUs in my network's Active Directory and group policy. However, I'm having a little trouble figuring out the right way to structure my OUs so that I can have individual ...
2
votes
0answers
20 views

Domain Controller's DNS NIC configuration [duplicate]

I've seen conflicting information on this online, but say you have an environment with two domain controllers: one Forest, one Site, one Domain; simple as it gets. How should each domain controller's ...
2
votes
1answer
117 views

Seeking alternative to storing binaries in git for devops

I'm not sure how to ask this best practices question since I know many StackExchange users evidently think best practices are a bad thing ... We've got Salt and Vagrant configured to stand up servers ...
3
votes
1answer
125 views

Synchronizing RODCs to NTP servers?

I've read this nice article from Gareth Hooper regarding Domain Controller syncing to external time sources. In essence, he wrote that although Microsoft don't actually condone the practice, it's a ...
0
votes
1answer
61 views

Best practice to migrate Server 2003 x64 to Server 2008 x64

We have 2 Domain Controllers running Windows Server 2003 R2 x64. DC1 has the FSMO roles and DC2 acts as a 'secondary' DC. Both are Global Catalog servers. DC1 has these roles installed: Domain ...
10
votes
2answers
5k views

What Are The Best Practices For Business Folder Structure?

We've tended in the past towards having departmental folders (Sales, Marketing, etc) on a single share and then adding folders below these ad-hoc as and when they're needed. It's gotten a bit messy - ...
5
votes
1answer
100 views

When should an org invest in a private infrastructure as opposed to a partially or fully hosted solution? [duplicate]

Not referring to militaries or governments, but for other organizations or shops that needs an IT infrastructure (who doesn't nowadays). Similar to this question, but purely in regard to hardware ...
27
votes
7answers
4k views

Is it best practices to have separate login for a domain for domain admins?

I typically like to set up separate logins for myself, one with regular user permissions, and a separate one for administrative tasks. For example, if the domain was XXXX, I'd set up a XXXX\bpeikes ...
3
votes
3answers
244 views

How much failover redundancy is enough? [closed]

I'm working on a client-server system where all clients currently submit their transactions to essentially a single west-coast IP address to reach what is called the "gateway" application. The ...
0
votes
0answers
23 views

Sensible approach for delegating mail delivery for a domain

Before I begin, I want to apologise for possible bending rules of this QA site, since this question does not fall under category of a specific problem that demands straight answer. It is rather a ...
29
votes
8answers
6k views

Should I expose my Active Directory to the public Internet for remote users?

I have a client whose workforce is comprised entirely of remote employees using a mix of Apple and Windows 7 PCs/laptops. The users don't authenticate against a domain at the moment, but the ...
1
vote
5answers
211 views

Windows network shares organization

I would like to have some feedback about the best practices you use to publish your network share. Now, we have on our file server : one named directory for each of our user, which is backed up ...
16
votes
3answers
3k views

Naming a new Active Directory forest - why is split-horizon DNS not recommended?

Hopefully, we all know what the recommendations for naming an Active Directory forest are, and they're pretty simple. Namely, it can be summed up in a single sentence. Use a subdomain of an ...
6
votes
5answers
1k views

Nagios server best practices?

I run a medium-sized Nagios server. It monitors roughly 40 servers with 180 services currently and is only growing by the day. I migrated from an old Nagios setup that was configured in a very ...
2
votes
3answers
95 views

Is a dashed hostname preferrable to creating subdomains for an application and its environments?

I am working to standardize our DNS names for our various applications, and I proposed the following scheme: webappname.environment.system.company.tld So, my application named BackOffice in my ...
0
votes
1answer
1k views

IIS 7.5 webfarm setup best practices

I am looking to rebuild the current webfarm setup where I work. Currently we have 4 regions. Each region has 3 WFE's on a ViP. Each of the three has a separate implementation of IIS 7.5 and ...
2
votes
1answer
51 views

Is it best practice to have mail sent from the root domain when the service is accessed via a subdomain name?

Running an outward facing server for contractors who's hostname is sub.example.com. The service needs to send mail to the contractors for various reasons (new projects, login details, etc). I have no ...
1
vote
1answer
255 views

Why is PHP open_basedir not considered a security model

On servers doing shared web hosting, or sharing the PHP environment between different PHP applications, I usually implement a security policy that uses PHP open_basedir to restrict each user to ...
1
vote
1answer
153 views

Pre-Staging Computer Accounts

I hear that you can create the computer account in AD before you join the computer to the domain so that the computer immediately gets the right groups and such. I created the account by running ...
3
votes
2answers
111 views

Should i put all my servers into my domain?

I am setting up a lab/mock-up network and i'm wondering if is considered bad practice to add all my servers to my Windows Domain. Of course the DC must be part of the domain, and any server that users ...
0
votes
2answers
53 views

where to put core services in two-node cluster

I'm currently configuring two-node HA cluster based on CentOS with DRBD. Most services are packed in virtual machines with migration available. I have not made decision where to put some core ...
1
vote
2answers
73 views

RAIDs with a lot of spindles - how to safely put to use the “wasted” space

I have a fairly large number of RAID arrays (server controllers as well as midrange SAN storage) that all suffer from the same problem: barely enough spindles to keep the peak I/O performance, and ...
-1
votes
1answer
71 views

Best practice for setting up a small fileserver for my group? [closed]

My R&D group are setting up our network and development environment. We have a dedicated 'kitchen sink' server machine, running Using Kubuntu 12.04 LTS as the distribution. which is going to run ...
2
votes
2answers
131 views

Can a Windows Server CA separate code-signing keys from keys for other purposes?

I am a software developer. My team encrypts the sensitive sections of our ASP.NET web.config files. aspnet_regiis.exe is used to manage the local key store, encrypt and decrypt. I want to build a ...
0
votes
1answer
362 views

AWS Elastic IP vs. VPC Usage Recommendations: Suggestions?

I'm working on creating a suite of self-training exercises and guides (perhaps eventually a collection of videos or Slideshare presentations) covering a range of systems administration and "ops" ...