Reputation
395
Top tag
Next privilege 500 Rep.
Access review queues
Badges
5 15
Impact
~32k people reached

  • 0 posts edited
  • 0 helpful flags
  • 67 votes cast
Jul
3
awarded  Notable Question
Mar
26
awarded  Notable Question
Mar
15
awarded  Necromancer
Dec
31
comment Building a LAN on in the woods
I actually also read it as "that causes water to boil" for just a moment and raised an eyebrow, because the width of comments on desktop wrap at "that causes water to " and my brain finished the phrase for me.
Dec
25
awarded  Tumbleweed
Dec
18
asked How does Xen Server share iSCSI?
Oct
23
awarded  Notable Question
Aug
5
awarded  Popular Question
Jul
2
awarded  Curious
Jun
19
comment Active Directory Folder Effective Permissions of all users
@EvanAnderson The feeling is mutual. There is no hostility intended there, it's simply a fact of how you approached the conversation as if I had said things I did not say, and it comes together to form a situation that is unproductive. When people don't exercise reading comprehension, then the argument goes around in circles, and when you demonstrated such, I chose to bow out.
Jun
19
comment Active Directory Folder Effective Permissions of all users
@EvanAnderson "some have custom tools that randomly select resource+user to review select permissions, which avoids enumerating the entire system" since you glazed completely over that. And I'm done now.
Jun
19
comment Active Directory Folder Effective Permissions of all users
@EvanAnderson "I've never seen or produced a report describing all resources and effective permissions for all users" You clearly didn't read even my first comment clearly, because I gave a very specific example of exactly how you would audit permissions without having to list every single resource and user. We can't continue this conversation effectively if you aren't going to exercise even the most basic of reading comprehension skills.
Jun
19
comment Active Directory Folder Effective Permissions of all users
@mfinni Many audits will include a spot checking of actual permissions to be within the scope of the audit. If they are doing their job right, then they won't interested in acl's, because that makes alot of possibly invalid assumptions about people only being in the groups they should be(which is often not the case) and thus should be looking at actual effective permissions.
Jun
19
comment Active Directory Folder Effective Permissions of all users
@EvanAnderson Good points, but consider the strict auditing policies of outside agencies coming in and demanding a report. Even if you have centralized control and well designed permission hierarchies, to audit the permissions one must connect the dots of user->group->permissions * # resources * # users. Auditors often do not go for the let-me-explain-how-I'm-doing-things-the-right-way-and-you-take-my-word-that-no-o‌​ne-has-permissions-they-shouldn't. I know some have custom tools that randomly select resource+user to review select permissions, which avoids enumerating the entire system.
Jun
3
awarded  Self-Learner
May
28
awarded  Popular Question
Feb
25
awarded  Popular Question
Sep
2
comment nginx serves broken characters (nginx on linux as guest system in vbox)
Note for some reason I had a nginx.config-dist also and had to edit it and set sendfile off.
Sep
1
answered How to delete all but last [n] ZFS snapshots?
Jul
3
awarded  Quorum