Questions asking for best practices in a given field. Be aware, that sometimes there might be no generally accepted best practices, in which case the question is likely to be closed for being subjective.

learn more… | top users | synonyms

0
votes
2answers
2k views

Maintenance page on nginx, best practices

I want to configure the server to show a maintenance page when it exist. I tried this code and works: location / { try_files /maintenance.html $uri $uri/ @codeigniter; } But I noticed it would ...
1
vote
1answer
190 views

gpt partition for raid 6 that was 4.5TB, will i have any issues under server 2008 64bit r2?

has anyone had any issues with using one large gpt partition of 5TB on a raid 6 setup with a 3ware raid controller. i am using the partition as a basic file sharing backup repository, nothing fancy. ...
0
votes
1answer
46 views

Getting files onto Fresh Install of Server 2008 “The Right Way”?

I am still fairly new to windows server administration. I have a Server 2008 r2 ec2 instance running and will need to bring a new one up every so often. I like that it is locked down by default, but ...
1
vote
1answer
121 views

Importance of Segregating Backups?

We are in the midst of an infrastructure overhaul, and we're now looking at backup solutions for our new servers. We will have a relatively simplistic server infrastructure consisting of 5 servers, 3 ...
2
votes
2answers
69 views

Adding a new disk to shared machine, what do we do?

I hope this is the right 'exchange' to ask in. I work in a research group, we have no SA's etc. monitoring our servers. We have total access to them, and decide what happens or doesn't happen on ...
-3
votes
3answers
109 views

What should I install/do to “accelerate” my website? [closed]

I have deploy a website in the production enviroment, but it's going a bit slow, you know it takes too much time to load the pages.. What should I install to "accelerate" my website? I will install ...
1
vote
1answer
710 views

How to rename a mail-enabled security group?

I work in an organization that is prone to frequently renaming teams. What is the best way to manage name changes to mail-enabled security groups? So far, I have just been using the ADUC GUI on our ...
1
vote
1answer
211 views

Backup strategy for SMB

I'm supporting a small business with 4 XP desktops, 2 Windows 7 desktops and 1 Server 2008 (R1) which is the file/print server, domain controller and contains Active Directory. I've tested regular ...
2
votes
1answer
473 views

Actions to take during/after a power outage

We're in the process of replacing the shelving in our server room, and I found a piece of paper that had been covered over which lists various actions to take during/after a power outage: ADSL modem ...
3
votes
2answers
159 views

Best practices for managing a web-server

Hi I want to ask what are the best practices when installing new software on a web-server, I'm pretty much self-taught, I have on my home PC: Ubuntu 11.04 with LAMP installed, and a VPS that I manage ...
0
votes
1answer
151 views

Software RAID to hardware RAID, can it be done?

Can it be done ... well. (For the record, I did not set this server up.) In my server there are 4 disks. 3 of them are in a software RAID5, and 1 has the OS installed. I want to buy a RAID ...
10
votes
5answers
604 views

Tips to gracefully take over a (UNIX) production server

After months of neglect, e-mail flames and management battles our current sysadmin was fired and handed over "the server credentials" to me. Such credentials consist in a root password and nothing ...
4
votes
1answer
595 views

Merging two companies: Best practice?

Situation: Company A purchased Company B. Offices are 40 miles apart. There are about 10 employees in each office. We want to have everyone be able to access all network resources independent of ...
5
votes
2answers
2k views

best practice for fixing mysql slow query log error 13

CentOS 5.5 MySQL 5.5 installed via a yum repository [ERROR] Could not use /var/log/mysqld.slow.log for logging (error 13). Turning logging off for the whole duration of the MySQL server process. ...
0
votes
3answers
166 views

A service accessing an UNC path, Win 2008R2, best practices?

I have an Apache Webserver service running on Machine A. It serves some files from machine B, by having an Alias /foo \machineB\someshare MachineB\someshare is read-accessible to "Everyone". ...
0
votes
2answers
203 views

Where should python and rails-based web apps be placed in the Linux filesystem?

/etc? /srv? /home? Apps in these languages shouldn't be under document root (which, in my opinion, goes under /srv/www). But, otherwise, I can't think of a location/scheme that's best practice to ...
8
votes
1answer
830 views

How to manage Nagios dependencies on big clusters?

I'm using quite a big nagios configuration (about 4000 services), without any dependencies. This results in a huge mess of notifications when something goes wrong. I try to look for best practices ...
3
votes
2answers
3k views

How can I check access of a Group/User in AD before I delete it?

I'm cleaning up an inherited domain that is not well documented. How can I check that a particular group or user has no ACEs across the AD? Things like searching DACL/SACL for AD objects and file ...
4
votes
2answers
127 views

Making Changes to Our File Server

Currently we have one Windows 2008 R2 Server acting as a domain controller and fileserver. We're serving about 6 million jpgs to 4 IIS servers which are then served to web users. The problem is ...
1
vote
2answers
884 views

When is it not worth putting Apache in a chroot jail?

I don't mean to question the well established security precaution of putting apache in a chroot-jail in most scenarios but in my scenario I have doubts. We have a virtual server hosting a single ...
2
votes
1answer
525 views

SAN design: File & Block level access?

The short question: can I share file and block level traffic on the same SAN? Perhaps more importantly, should I? The gory details are below... I'm hopefully putting the finishing touches on a new ...
6
votes
3answers
304 views

Is there already a recommended IPv6 Firewall setup?

I'd like to switch from private-IPv4-subnet-behind-NAT to IPv6, but of course I have no intention of exposing my users' workstations "unprotected" to the net. Some obvious points up-front: Allow ...
2
votes
3answers
89 views

Where to start with Microsoft Exchange 2003

I am quite new to Exchange in general. I have done some server administration, but never with an Exchange box. Can someone point me in a direction that will give me a good overview and a set of best ...
0
votes
3answers
127 views

Best strategy to deploy distributed application on nodes

this is a general question about deploying and maintaining nodes. I am not a sysadmin. I am considering the following 'naive' strategy: Pick a linux flavor and stick to it. Create an image with my ...
3
votes
3answers
270 views

Disk-to-disk backup to same storage array?

We're looking to get a new SAN, and so we're re-examining our storage, network and backup issues. Our plan is to get an EMC VNXe 3100 with SAS drives for production data, then buy an expansion shelf ...
1
vote
1answer
656 views

What are the best practices or pitfalls when managing web app deployment using OS package management (deb, rpm)?

I heard about this at a talk over the weekend and it sounded like a great idea for a few reasons I can think of: ensures dependencies are met and not broken (e.g. web app requires specific version ...
0
votes
2answers
234 views

How often to upgrade PHP & MySQL

I run a couple of IIS + PHP + MySQL Web servers, that run a variety of web apps (Wordpress, Expression Engine, etc.) I know that I should always keep my web apps updated, but I wonder how often I ...
0
votes
2answers
1k views

Best Practice Analyzer for Windows Server 2008

I tried searching around for a bit but nothing came up. I know Microsoft makes BPA for Server 2008 R2 but was wondering if there is also a version for 2008?
0
votes
3answers
156 views

Top Infected Machines - Dealing with Threats?

I printed out a list of the top 25 infected machines (associate machines only) a bit of detail. Associate machines are only for sales associate. The domain login is the same for every machine, ...
6
votes
4answers
460 views

Is it better to map drives and printers to users or computers?

I've posted a few "best practices" questions like this. Question says it all. Current practice is to map the drives and install the printers on the computer for each user/computer combination. I'd ...
2
votes
2answers
1k views

How should I connect a redundant switch arrangement to the rest of the network?

My servers all have two NICs and I have two Ethernet switches (A and B) dedicated to the servers, in a redundant configuration. I have configured the NICs with bonding (Linux) or teaming (ESXi), and ...
0
votes
1answer
1k views

Registry entry missing for msexchangeDSAccess exchange 2010

After running exbpa i received a notification for PDC emulator is not excluded active directory access (ADAccess) topology with the value for minuserdc is missing after researching how to fix, I am ...
5
votes
7answers
3k views

Network Drive Letter Assignment Best Practices

We are working on migrating from Novell to Active Directory. During the transition, We are going to evaluate our drive mappings in light of current standards to see if what we have been doing still ...
4
votes
2answers
283 views

On Windows 2003 Server as File Server what it is better creating groups by directory or by profile?

I have a file server with 20 shared folders one for each department and their emploees have write permission through a AD group with same name of that folder. The thing is some people have to write ...
0
votes
4answers
695 views

Best pratice to implement free and affordable VPN between branch offices

I need to find a good software solution to implement VPN so a new branch office can use without security problems applications in our main office. I need it to be very reliable and almost transparent ...
3
votes
2answers
3k views

What are the best strategies for scaling up my web application to be able to cope with a large volume of users?

I want to get some advice / best practices for how to go about developing a strategy for scaling up my a web application. I waffle on a bit here and show my limited knowledge but want to fill in my ...
1
vote
2answers
434 views

What is preferred in VLAN environment, global spanning tree or per-vlan spanning tree?

Suppose you have a big switch with several VLANs. What is the recommend best practice with regards to spanning tree? I see you can configure global spanning tree, and there is per-VLAN spanning tree. ...
2
votes
2answers
541 views

Best Practice: bind, dhcpd, mysql, httpd, etc running on KVM Host?

With respect to "Best Practice" when it comes to virtualization, is it advisable to run services such as bind and / or dhcpd on a KVM host or should these services be run from a guest machine? How ...
6
votes
8answers
1k views

System administration standard [closed]

I have been given the responsibility to manage a team of 4 system admins. They are managing 70+ servers. They don't yet have written processes/procedures/practices. I don't much about system ...
7
votes
2answers
593 views

As an admin, what tools do you use to log what you do to your boxes? [closed]

I am more of a linux applications developer than an admin. Over time, I've built servers and maintained them, sometimes to offer services, mostly just to develop the applications I work on. Way back ...
0
votes
1answer
155 views

S3 backup: bucket vs. volume

I've inherited a project that has been pushing encrypted (GPG) DB backups via a backup script to an S3 bucket. That's all been well and good, but now that bootable EBS instances (where the project ...
0
votes
2answers
382 views

LAMP Best Practices

Does anybody know of a checklist for LAMP best practices? There is a lot of disparate advice on the 'net, but it would be nice to know if somebody has already published a best-practices guide or book ...
2
votes
1answer
455 views

Bandwidth Sharing & Accounting for large networks::Best Practices

I have a large network with more than 1500 PCs and 9000 user accounts in a university. We have classified users in 5 groups and are sharing bandwidth among them using MikrotiK's hotspot with NTTAC ...
0
votes
2answers
553 views

What are best practices writing parallel startup scripts in Unix shell (ksh,bash)?

I have a piece of software with different components running on the same Unix machine (web server, DBMS, middleware, different daemons). Startup of the few components depends on the success of the ...
2
votes
1answer
398 views

Best practices with managing log files on my server

My system is generating log files, e.g. for apache, nginx, tomcat, and other things and they grow pretty fast. I am looking for best practice recommendations because there are so many options to ...
0
votes
1answer
508 views

How should I setup an Ubuntu server on EC2 (MySQL, code location, etc..)?

I've started to fiddle around EC2, and I can't seem to understand the "AWS way" of setting up a server. I'm using Ubuntu server 10.10 64 bit, from an official AMI by Canonical. There is an EBD drive ...
0
votes
4answers
570 views

dead man's switch for remote networking interventions on Linux

As I'm going to change the network configuration of a remote server, I was thinking of some security mechanisms to protect me from accidentally losing control on the server. The level-0 protection ...
0
votes
4answers
2k views

Specify the next hop or the interface for static routes

I'm setting up a bunch of static routes (this is a security requirement so don't ask why I'm not using routing protocols). A static route can either be created by specifying the next hop ...
3
votes
1answer
1k views

Fibre Channel zoning best practices

I'm hoping that this will be useful for more people than just me. Right now I've got a fibre channel switch, a NetApp filer, and some servers running Oracle. All of the servers can see the same LUNs ...
19
votes
6answers
2k views

Bad to be logged in as admin all the time?

At the office where I work, three of the other members of the IT staff are logged into their computers all the time with accounts that are members of the domain administrators group. I have serious ...