378 reputation
417
bio website douglastechnology.co.uk
location Maidenhead, United Kingdom
age 39
visits member for 2 years, 10 months
seen 20 hours ago

I'm an Oracle certified Database Administrator

I've worked extensively with both Oracle and Postgres, in various roles from DBA to developer. I have a basic working experience with SQL Server and MySQL.

I'm happy to consider offers of part-time or short-term work either in the London/M4 area or working remotely.

You can view my CV online


Jan
25
comment What is the best way of restricting user profile size in a Terminal Server environment?
I'm not sure I understand using Roaming Profiles in the context of Terminal Server - does it make a difference that we are talking about a pure TS environment?
Jan
25
asked What is the best way of restricting user profile size in a Terminal Server environment?
Oct
29
awarded  Scholar
Oct
29
accepted How to take periodic snapshots of VMs and efficiently transport them off-site
Oct
16
comment How to take periodic snapshots of VMs and efficiently transport them off-site
thanks, yes I'm using rsnaphot for files and rsync for the VMs themselves. I hadn't thought of just freezing them for the duration - that may well be possible.
Oct
12
asked How to take periodic snapshots of VMs and efficiently transport them off-site
Oct
12
awarded  Citizen Patrol
Sep
7
awarded  Autobiographer
Aug
3
awarded  Quorum
Jul
5
awarded  Critic
Jun
6
comment 24TB RAID 6 configuration
What are your MTTR requirements? 24TB of LTO4 tape would work out a lot less than $2500 if you can afford to recover over a day or two.
Jun
6
comment Should I phase out our Windows Domain entirely?
@Jim: If the admins have physical access to the servers than I think it if fair to say they can do what they like. The first step around all your auditing and monitoring could be to clone your server - in some environments as simple as faking a disk failure and swiping half a mirror. As to password complexity, you are limited in practice by what your users will accept - I am fairly sure no user would accept the passwords I generate if they ever had to type them in :) Our concern is primarily about security from outside threats rather than internal - that may be different is your environment.
Jun
6
comment Should I phase out our Windows Domain entirely?
@uSlackr - Yes I generate passwords for each user/service. Then I set up access on the PC/device. That way I can force far more secure passwords on my users than you can. If my boss does not trust me then changing our password policy is hardly the answer, he needs to fire me quick - is there anyone in your IT department who cannot access sensitive information if they want to? It sounds to me that your boss has a false sense of security if he thinks his password policy is any protection from malicious server admins.
Jun
6
comment Should I phase out our Windows Domain entirely?
@syncbean - the SSO thing was a side issue after this comment: "GPO in AD allows you to centralize passwords, so users only have to remember one" - my question was not about SSO specifically. Nevertheless, thanks for the link to GoSA which is interesting.
Jun
6
comment Should I phase out our Windows Domain entirely?
@MarkM - I can of course expire/change the passwords, and I'll consider doing that - certainly if there is any suspicious activity. The users typically don't even know their passwords.
Jun
6
comment Should I phase out our Windows Domain entirely?
@Robert - no more than they can prove I logged in and impersonated them. My point is that 'proof' is not the main issue, trust is.
Jun
6
awarded  Commentator
Jun
6
comment Should I phase out our Windows Domain entirely?
@Chris - The point is simple: if a computer is hacked and a password is compromised, access and therefore damage may be limited to that one service. Here's the same argument. Note that I'm not saying SSO is bad for you, just that there are valid arguments against it that may apply to any given environment.
Jun
6
comment Should I phase out our Windows Domain entirely?
@Robert - If I was a criminal IT admin I would be able to install a keylogger on my users PCs to discover their passwords. No-one can prove I didn't do that. Trust always comes into the equation, in court or otherwise. No doubt there are many other ways too...
Jun
6
comment Should I phase out our Windows Domain entirely?
@Chris - I have nothing against MS or AD - and you can also achieve SSO in a Unix environment if you try hard enough. I am not the only one who thinks a single password is less secure however: it is an old argument.