The tag has no wiki summary.

learn more… | top users | synonyms

40
votes
7answers
4k views

Cable Management Policy

We've all seen good and bad examples of cable management. What are objective, measurable requirements that can be used in a policy to maintain cabling order in the rack/server room/data center? ...
25
votes
8answers
1k views

Email hoarder intervention and education - (Exchange environment)

Throughout my career, I've encountered quite a few users who were email hoarders... I'm managing a 100-user environment where users previously had 100mb quotas and a basic Cyrus IMAP/Postfix ...
17
votes
9answers
1k views

User password age/complexity policy

Has anyone got any resources for determining a reasonable password policy for my users? My personal leaning is to ratchet up password complexity and allow them to change them less often as a kind of ...
25
votes
9answers
2k views

What should I do about a “misbehaving” user?

What should I do about this user? The user is: Downloading pornography Attempting unauthorized access Running hacking software Sending unsolicited email Installing software / tampering with the ...
6
votes
2answers
2k views

Why can't a domain's root be a CNAME?

I've just read this question which essentially says that when I set up DNS for example.com, the root record can't be a CNAME, it has to be an A record. My question is, why? I'm sure the clever ...
1
vote
1answer
728 views

Cross Region S3 bucket policy

I would like to allow EC2 servers based in us-east-1 to read content from a bucket in us-west-2. Every time I try I get a "The Bucket you are attempting to access must be addressed using the ...
1
vote
1answer
569 views

group policy in Windows Server 2008

One of the employee in the Enterprise changed the users setting in group policy which effects the login permissions for Administrators users. Each time I tried to log in locally this message shown: ...
22
votes
12answers
22k views

Active Directory: delete vs. disable departed employees

When an employee leaves your organization, do you delete or disable their Active Directory account? Our SOP is to disable, export/purge the Exchange mailbox, and then after "some time" has elapsed ...
34
votes
12answers
8k views

What do you do about staff and personal laptops?

Today, one of our developers had his laptop stolen from his house. Apparently, he had a full svn checkout of the company's source code, as well as a full copy of the SQL database. This is one ...
8
votes
3answers
516 views

What are some best practices when taking over IT at a new company?

I thought this would make for a good topic with some interesting suggestions. What are the first things you would do when taking over IT at a new organization? What are some red flags you would look ...
8
votes
7answers
3k views

How do you limit the use of network storage in your company?

I think this is one area that is a pain for every sysadmin. Users don't really know how much storage space they are using, and don't take the time to manage what is stored there, or how long it stays ...
8
votes
2answers
4k views

How do large companies handle software updates for users without administrative rights?

I just started working for a small-medium size company doing IT support. Maybe 150 or less users. Right now every user has administrative rights to their own machine. This allows them to install ...
6
votes
4answers
599 views

Backup is not Archiving - But what requirements does archiving have?

There's related thread on how to handle archiving. I'm asking on how to find the requirements in a company on the way archiving should be done, and also the requirements that need to be fullfilled so ...
3
votes
1answer
1k views

Cisco ASA 5510 Time of Day Based Policing

I have a Cisco ASA 5510 setup at a boarding school. I determined that many (most?) of the students were downloading files, watching movies, etc, during the day and this was causing the academic side ...
2
votes
2answers
202 views

iptables rejects everything it should accept

Everybody, hello! I'm trying to setup my server firewall using iptables (I have to admit that last time I used iptables was a year ago), but iptables acts contrary to what I ask. Here is my test ...