The tag has no wiki summary.

learn more… | top users | synonyms

40
votes
7answers
5k views

Cable Management Policy

We've all seen good and bad examples of cable management. What are objective, measurable requirements that can be used in a policy to maintain cabling order in the rack/server room/data center? ...
40
votes
5answers
2k views

Confidential Documentation and the role of the Sysadmin

I've got another interesting one. I'm about to backup and reinstall the HR Administrator's PC. I suspect that the fastest way to do this is to use the Windows 7 Transfer tool, and create a backup ...
34
votes
12answers
8k views

What do you do about staff and personal laptops?

Today, one of our developers had his laptop stolen from his house. Apparently, he had a full svn checkout of the company's source code, as well as a full copy of the SQL database. This is one ...
25
votes
9answers
2k views

What should I do about a “misbehaving” user?

What should I do about this user? The user is: Downloading pornography Attempting unauthorized access Running hacking software Sending unsolicited email Installing software / tampering with the ...
25
votes
8answers
1k views

Email hoarder intervention and education - (Exchange environment)

Throughout my career, I've encountered quite a few users who were email hoarders... I'm managing a 100-user environment where users previously had 100mb quotas and a basic Cyrus IMAP/Postfix ...
23
votes
9answers
2k views

A partner wants a copy of our written IT security policy and I'm not sure what to do

My company is working with another company and as part of the contract they are requesting a copy of my company's written IT Security Policy. I don't have a written IT security policy, and I'm not ...
22
votes
12answers
23k views

Active Directory: delete vs. disable departed employees

When an employee leaves your organization, do you delete or disable their Active Directory account? Our SOP is to disable, export/purge the Exchange mailbox, and then after "some time" has elapsed ...
17
votes
9answers
1k views

User password age/complexity policy

Has anyone got any resources for determining a reasonable password policy for my users? My personal leaning is to ratchet up password complexity and allow them to change them less often as a kind of ...
12
votes
5answers
3k views

How often do you change your administrator/root password?

I have a bad habit of rarely changing the administrator password in my domain. The passwords I do use are pretty good but I want to be more consistent on this. What do you think is a good frequency? ...
10
votes
17answers
1k views

What are the arguments for and against a network policy where the sys admin knows users passwords?

I'd like to know pros and cons.. reasons for and against the idea of sys admin’s maintaining user account lists with passwords.. and additionally not allowing those users to change their passwords. I ...
9
votes
3answers
329 views

“Template” for handing out user & passwords for employees

Within this relatively small company I work for, I have been handing out usernames and passwords written very simply in a word document. I wish for this process to be more professional now that we ...
8
votes
3answers
518 views

What are some best practices when taking over IT at a new company?

I thought this would make for a good topic with some interesting suggestions. What are the first things you would do when taking over IT at a new organization? What are some red flags you would look ...
8
votes
7answers
3k views

How do you limit the use of network storage in your company?

I think this is one area that is a pain for every sysadmin. Users don't really know how much storage space they are using, and don't take the time to manage what is stored there, or how long it stays ...
8
votes
2answers
4k views

How do large companies handle software updates for users without administrative rights?

I just started working for a small-medium size company doing IT support. Maybe 150 or less users. Right now every user has administrative rights to their own machine. This allows them to install ...
7
votes
6answers
829 views

How do you manage passwords for a large number of servers?

Given how important it is to have different passwords for different systems, how does a data centre with thousands of servers manage? I'm only managing a few dozen machines at the moment, but the ...
6
votes
2answers
2k views

Why can't a domain's root be a CNAME?

I've just read this question which essentially says that when I set up DNS for example.com, the root record can't be a CNAME, it has to be an A record. My question is, why? I'm sure the clever ...
6
votes
4answers
600 views

Backup is not Archiving - But what requirements does archiving have?

There's related thread on how to handle archiving. I'm asking on how to find the requirements in a company on the way archiving should be done, and also the requirements that need to be fullfilled so ...
5
votes
4answers
815 views

How do I audit changes made to our servers, routers, etc.?

We have a lot of servers (running Windows and Ubuntu) along with a mix of Cisco and Juniper routers with a side of HP Procurve switches. We have a few sysadmins who like to make changes to configs ...
4
votes
8answers
361 views

What should I be doing while I wait for a progress bar? [closed]

So I am sitting here waiting for a progress bar to run (20 mins or so), and was wondering how best to use my time as a SysAdmin. I debated not posting this question briefly, as this could get flagged ...
4
votes
3answers
197 views

Email going to a user at a similar domain name

I guess this is more of a best practice/policy question. I'm the postmaster for example.net. Another company has example.com. I get the catch-all emails, any email that doesn't have a user account on ...
4
votes
8answers
1k views

Is it legal to save user passwords in clear text? How can I convince my client to avoid it? [closed]

Is it legal (US and EU) to store user passwords in clear text (i.e. of a website)? Is there any law about how passwords should be stored? I have a client that wishes to have passwords stored in the ...
4
votes
1answer
153 views

Remembering Passwords

I stumbled across this question earlier and it got me thinking. Everyone's encountered systems that require you change your password every x days and not reuse any of your last y passwords. This ...
4
votes
3answers
6k views

How do you manage Windows Group Policy for XP, Vista, and Win 7 clients?

DOMAIN = w2k3 DC's only WORKSTATIONS = xp, vista, and now a few Win 7 Enterprise I have the RSAT tools installed on my Windows 7 computer. I can administer Group Policy Management "for the most ...
3
votes
2answers
411 views

Need opinions on an organizational computer replacement policy

Back story - I was hired by my current employer out of college as a web developer roughly 2 years ago. In that two years, I have taken on some of the roles of a system administrator as this position ...
3
votes
4answers
853 views

Web Site Anti-Defacement

what are the best practices, policies, tools/utilities for monitoring & barring website defacement
3
votes
2answers
501 views

Following the Joel Test for SysAdmin; For all the places don't meet the test, what needs to be done, and in what order? [closed]

Following The Joel Test for SysAdmin there have been some great suggestions; but imagine for a second that you're already working for someone who doesn't meet the test, or you're being asked to bring ...
3
votes
2answers
7k views

Tomcat 6: Access Control Exception?

I'm trying to setup a tomcat6 server, and I'm trying to match another setup someone else established. However, my deployment (default Ubuntu install) uses a policy.d/ directory structure, and the ...
3
votes
3answers
1k views

Tripwire policy suggestions

I've setup tripwire on a debian server, and default policy had some strange settings. # # Critical devices # ( rulename = "Devices & Kernel information", severity = $(SIG_HI), ) { /dev ...
3
votes
1answer
2k views

Force SSH public key authentication for specific users

Is it possible to force specific users to login with public key, while allowing other users to login with password? Since public key authentication (with passphrase) is stronger than password-only ...
3
votes
1answer
1k views

Cisco ASA 5510 Time of Day Based Policing

I have a Cisco ASA 5510 setup at a boarding school. I determined that many (most?) of the students were downloading files, watching movies, etc, during the day and this was causing the academic side ...
3
votes
3answers
148 views

Linux Server update / upgrade policy

I am running Debian Stable on all our servers. Debian Stable always gets security and other important updates time to time which includes Kernel Updates too. Do one have to immediately update all ...
3
votes
1answer
1k views

Limit concurrent logins to multiple desktops on LDAP Linux network?

How can I limit the number of desktop machines, within a private, all-Linux LDAP-authenticated network, that a single user account is logged in to at one time? Here is the scenario to prevent: A user ...
3
votes
2answers
764 views

Apple client OS support lifecycle

I have a simple question that I seem to be having a hard time getting a straight-up answer for. What is Apple's support policy for Mac OS X client versions? When do they drop support? For example, ...
3
votes
3answers
12k views

Using group policy preferences to push a file to C:\Windows on a restricted user

We have a really old Video learning program that we need to run from the network for our students. However it uses Director Player 6.0 and the students get the error: "Unable to copy the driver file ...
2
votes
5answers
411 views

Email policy / guidance documents

We have been using e-mail within the organisation for a number of years without an end-user policy (data retention, and backup polices are in place for UK FoI and DP requirements), up until now we ...
2
votes
3answers
479 views

What is the best way to install .NET 3.5 on all machines on the network?

I am a developer and I would like to upgrade a client's application to .NET 3.5. This means .NET 3.5 needs to be installed on every computer on the network that is going to use this application. The ...
2
votes
4answers
2k views

Email Retention Policy for terminated employees

We are going through a situation where we have a former employee who will continue to do contract work for us. The boss thinks it is normal to IMMEDIATELY suspend their accounts and delete their ...
2
votes
4answers
125 views

How can I revoke access for a user across different systems?

We are going to let one of our sysadmins go in a few weeks. He has access to our entire infrastructure, so we'll have to reset the passwords on everything. This is going to be really time consuming ...
2
votes
2answers
110 views

How do you separate emails for different roles an individual has?

I work at a university, where we have staff members who can also teach as an adjunct faculty member. We issue an account for the individual based on their name, so Joe Smith would get ...
2
votes
1answer
93 views

Windows 7 / 2008 connect to VPN at login with Group Policy

I am trying to find a way to have windows 7 VPN clients connect to the VPN server automatically via Group Policy. I tried using a login script but it looks like the scripts are shared from sysvol and ...
2
votes
1answer
2k views

Changing Windows Server 2008 password policy for a standalone server

How do you disable the password complexity requirements on a W2k8 server that is not part of an Active Directory? I'd like to find the method that requires the fewest clicks and if there is any way ...
2
votes
1answer
2k views

How to Disable the Password Policy for Local Users on Windows 2003

I have one Windows Server 2003 VM that I need to disable the Password Complexity policy for Local users on. I still want the Active Directory users to use the domain Password Complexity Policy. Is ...
2
votes
2answers
204 views

iptables rejects everything it should accept

Everybody, hello! I'm trying to setup my server firewall using iptables (I have to admit that last time I used iptables was a year ago), but iptables acts contrary to what I ask. Here is my test ...
2
votes
2answers
636 views

Firewall policies don't apply to ping/tracert attempts?

I know next to nothing about networking so apologies if this is a stupid or strange question. Our systems administration/IT support is outsourced to a consulting company. I was working with them to ...
2
votes
2answers
1k views

install msi using group policy

1) If we install/push msi using group policy can/will we see installation steps/Wizard/options which we can see if start installtaion using setup.exe by double clicking it. 2)Can some provide some ...
2
votes
1answer
4k views

Need to update primary email address in Exchange 2010 based on email address policy

An email address for one of my end users was incorrectly configured awhile back in Exchange 2010. When I go into the properties of the user in the Exchange Management Console I can only change the ...
2
votes
2answers
1k views

Deep Freeze Removing Group Policy?

I am having trouble applying group policies on computers with deep freeze installed on them. They are domain joined and pulling updates from our WSUS server before being frozen. When we freeze them ...
2
votes
4answers
15k views

How do I deny a user-based Group Policy for a specific computer?

So we have a GPO setup to redirect "My Documents" to a server location for all users in the domain (it's linked to the root "Users" OU). This works just fine, but we have 2 special workstations that ...
2
votes
4answers
224 views

sensible logs policy & tools

What is a sensible logs policy? On one hand I would like to keep everything forever. On the other hand I don't want to waste time in administrative tasks and must avoid disks getting full in ...
2
votes
1answer
114 views

Windows Bitlocker to go: How to make drive readonly for other users

I have encrypted a removable drive with Bitlocker to go. I will be giving this drive to another party and want to effectively prohibit this person's ability to write to this drive. This person ...