I know the DMV's in Delaware have a *huge*, and i mean huge, focus on customer service. Its been pretty descent since i moved here 10 years ago, and its only gotten better. Delaware is based quite a bit on who you know, so its easy to step on the wrong toes in this state. My car was due in for inspections (state provied) and renewal within 6 monthes after the new director of dmv was appointed. The morning i took it in, i got a call from her asking me be a reviewer of the lanes for her. she wanted to gage the process for an average (ie unconnected) looking citizen.
Getting a real fake ID isnt that hard if you know the process. If you bring falsified documents to the the DMV, assuming your forgeries ar half descent, you'll get your ID issued to you. The process is pretty easy to game today. Real ID is more about having the process to issue a licence authenicate the documents and ther person.
One of the issues that Real ID adresses is to cut down on issuing DL's to those that have had them revoked. Its a common occurance for John Doe to loose his license in state X so he drives across the state lines, and gets an license from state Y. States do have reciprocity. but it takes years for the records to catch up to you.
Like it or not, theres a lot of stock put in to that little peice of goverenment issued plastic. Real ID helps to make sure the plastic card s being issued to the person it say it is. Document Authenticity is a big problem, and not just with licences, but plates/tag, car titles, vehicle registrations. You get quite a different perspective when talking to a state's DMV director.
I don't know about this silently fail thing. BBWC fails, Dell Openmanage kicks off an snmp alert to AppManager, and my berry goes off at the most inconvenient of times. Mission critical storage sends the alert to my berry ad to dell, who tends wake my happy ass up in the wee hours.
There's a lot of Difference between a highpoint card a Dell Perc5i or HP e200
Quality alerting and monitoring is the key. Knowing when stuff goes sideways is an art.
thats why i like using an RSA keyfob. your pin become your 4 digit pin + the 6 digit rsa number. the result is a one time pin with out having to beef up all the hardware to talk to a new atm card.
ever try using a rsa dongle? you have to be looking at said dongle to use it. I'd rather keep it on my keys for that reason, *plus* your rsa key is seperate from the card. so you have to have two things and your pin to access the account.
yes, i have one of these dongles hanging off my keys, and its used quite frequently.
Long uptimes are a bad thing! How do you know a configuration change hasn't rendered one of your startup scripts ineffective? If you have to reboot for some unexpected reason, you could be stuck debugging unrelated problems at very inopportune moments.
You need to schedule regular reboots so that you can test that your servers can start up fine at a moment's notice. Long uptimes are a sign a sysadmin hasn't been doing his job.
You're right. While you're on the phone with hazmat explaining that you have a issue with green goo, how about i test the reboots of my PBX before you give your address?
yeah, I run mission critical systems. yes, i have proper redundancy and resiliency systems. Think I'm going to disrupt operations to test my reboots? Hell no. When it comes to public safety, 5 nines is the *only* option.
If you're going to make an attempt, I'll work with ya. I wont wet nurse asshats. Trying to tell me you know better and the proceed to tell me how to do my job isnt happening.
Many an end user try to bully me into getting what they want. They are also the ones who think a state of the art network is there for their own amusement.
"Clustered file servers are not there for mp3's." "No, you're not getting around the mandatory SMS software install."
"No, You had plenty of notice about this maintenance window, and I'm not moving it because you its an inconvenience. You want me to do that stuff when?"
"No, I wont let you disable Windows update."
"Yeah, I'll see about changing a 22,000+ user Active Directory from last name first to first name first, right after the Yellow pages does the same thing."
"Tell me again why you need a login to the core routers"
"I understand you dont like the Acceptable use policy, but refusal to sign means I disable your account."
Spend some time as a network admin, and your outlook will change. After a while, theres only some much stupidity you can take
that is the default behavior for users with admin privileges. When the user that's being prompted isnt an admin, then UAC prompts for admin privileges. its actully RunAs 2.0. WithGPO you can turn off UAC, set it to silently elevate for admins, Allow/Deny, or require credentials. But then again, I've just been labbing all this before i certify vista on my network.
you can try this you self with an standard user, or read the docs http://technet2.microsoft.com/WindowsVista/en/library/00d04415-2b2f-422c-b70e-b18ff918c2811033.mspx?mfr=true
UAC really shines in low rights mode. under XP if something needed elevated privileges, the app would just bomb. Under vista, if you need to elevate, you get a prompt for admin level credentials.
Piracy has nothing to do with the fondness of IT departments for locking down user computers. Really, it's a response to nitwits who fancy themselves experts and know just enough to get them into trouble. Of course, it's pretty frustrating for those of us who really do know what they're doing, but face it, we're a tiny minority. Bingo. We had wide open machines and self supporting users at my shop. Cluster fuck. Now its locked down and automated and problem free. We publish out a lot of apps for the users to install at will, and that helps keep them happy
Automation my friend. Three minutes in my SCCM console and the problem is solved over three hours with any human involvement. I'm of the school if you cause a problem, you can deal with the consequence. Think thats harsh... try a hanging up on 911 after accentually calling them.
Lets try an excersize. Take one of those $40 dollar mp3 players and throw it at a concrete wall at a speed in excess of 140 miles per hour. What do you think the results will be?
SP1 isnt available till March. the only way you're going to get machines auto-updating with SP1 is aome jack ass admin imported the beta SP into WSUS/SMS/Whatever. A legit SP1 RTM build isnt publicly available. I'm just gonna sit back and laugh at the poor bastards.
[quote]especially in order to get the same functionality as XP PRO, or Leopard (both of which sold for ~$130)you have to buy the $400 version.[/quote]
Thats wrong. Vista Business == XP Pro. Ultimate is Business + Media center + Bitlocker. Retail for Vista Business is 300. Retail for XP Pro is 300.
are there some suck ass bugs in vista? You bet! I haven't seen many show stoppers. theres the change in group policy processing sucks monkey balls, but now i know what to look for, its easy to fix. the dhcp client continuing to request its old IP after its been nak'ed is another. Only one that sucks is all legacy control panel applets require elevation. The SMS applets were rewritten for low rights, but because they are "legacy".
Is the product as a whole, a piece of steaming shit? nope. OS deployment and management tools are outstanding. a single, hardware agnostic image rocks! Right along side of that is the new ADMX templates. Once SP1 is rtm and it passes our certification process, we're going.
your point of view on MS changes when you have a nice budget, and a few thousand machines to tend to.
Methinks one reason IPv6 hasn't been adopted is because those who have chunks of the IPv4 space are quite happy having what is essentially an artificially precious resource.
Its a litle more that once of the bing things is it requires a lot of code changed to support IPv6. I'd like to mopve to v6, comma but no one i talk to (i.e. my provider) uses it yet. Now before I get the standard "get a new provider" spiel, I'm a state agency, and my provider is another state agency.
the same holds true for all my edge devices. A wholesale updates of them would be needed as well. And i'm not talking just desktops. I also got IP phones and lab instruments just to name a few.
Its alot to start to consider from a network dude's point of vew
Slashdot Mirror
I know the DMV's in Delaware have a *huge*, and i mean huge, focus on customer service. Its been pretty descent since i moved here 10 years ago, and its only gotten better. Delaware is based quite a bit on who you know, so its easy to step on the wrong toes in this state. My car was due in for inspections (state provied) and renewal within 6 monthes after the new director of dmv was appointed. The morning i took it in, i got a call from her asking me be a reviewer of the lanes for her. she wanted to gage the process for an average (ie unconnected) looking citizen.
Getting a real fake ID isnt that hard if you know the process. If you bring falsified documents to the the DMV, assuming your forgeries ar half descent, you'll get your ID issued to you. The process is pretty easy to game today. Real ID is more about having the process to issue a licence authenicate the documents and ther person.
One of the issues that Real ID adresses is to cut down on issuing DL's to those that have had them revoked. Its a common occurance for John Doe to loose his license in state X so he drives across the state lines, and gets an license from state Y. States do have reciprocity. but it takes years for the records to catch up to you.
Like it or not, theres a lot of stock put in to that little peice of goverenment issued plastic. Real ID helps to make sure the plastic card s being issued to the person it say it is. Document Authenticity is a big problem, and not just with licences, but plates/tag, car titles, vehicle registrations. You get quite a different perspective when talking to a state's DMV director.
Wow, mines a baby, I only have 55K pages on it. Runs like a champ
try leaving a bootable cd in a bitlockered system. vista wont boot with it in the drive. bitlocker is pretty tough
I thought that was part of the bitlocker boot process, that the unencrypted boot files have their checksums stored in the tpm
I don't know about this silently fail thing. BBWC fails, Dell Openmanage kicks off an snmp alert to AppManager, and my berry goes off at the most inconvenient of times. Mission critical storage sends the alert to my berry ad to dell, who tends wake my happy ass up in the wee hours.
There's a lot of Difference between a highpoint card a Dell Perc5i or HP e200
Quality alerting and monitoring is the key. Knowing when stuff goes sideways is an art.
thats why i like using an RSA keyfob. your pin become your 4 digit pin + the 6 digit rsa number. the result is a one time pin with out having to beef up all the hardware to talk to a new atm card.
ever try using a rsa dongle? you have to be looking at said dongle to use it. I'd rather keep it on my keys for that reason, *plus* your rsa key is seperate from the card. so you have to have two things and your pin to access the account.
yes, i have one of these dongles hanging off my keys, and its used quite frequently.
You're right. While you're on the phone with hazmat explaining that you have a issue with green goo, how about i test the reboots of my PBX before you give your address?You need to schedule regular reboots so that you can test that your servers can start up fine at a moment's notice. Long uptimes are a sign a sysadmin hasn't been doing his job.
yeah, I run mission critical systems. yes, i have proper redundancy and resiliency systems. Think I'm going to disrupt operations to test my reboots? Hell no. When it comes to public safety, 5 nines is the *only* option.
you're under the assumption that the updates in SP3 are not available anywhere else. Thanks for playing
If you're going to make an attempt, I'll work with ya. I wont wet nurse asshats. Trying to tell me you know better and the proceed to tell me how to do my job isnt happening.
Many an end user try to bully me into getting what they want. They are also the ones who think a state of the art network is there for their own amusement.
"Clustered file servers are not there for mp3's." "No, you're not getting around the mandatory SMS software install."
"No, You had plenty of notice about this maintenance window, and I'm not moving it because you its an inconvenience. You want me to do that stuff when?"
"No, I wont let you disable Windows update."
"Yeah, I'll see about changing a 22,000+ user Active Directory from last name first to first name first, right after the Yellow pages does the same thing."
"Tell me again why you need a login to the core routers"
"I understand you dont like the Acceptable use policy, but refusal to sign means I disable your account."
Spend some time as a network admin, and your outlook will change. After a while, theres only some much stupidity you can take
that is the default behavior for users with admin privileges. When the user that's being prompted isnt an admin, then UAC prompts for admin privileges. its actully RunAs 2.0. WithGPO you can turn off UAC, set it to silently elevate for admins, Allow/Deny, or require credentials. But then again, I've just been labbing all this before i certify vista on my network. you can try this you self with an standard user, or read the docs http://technet2.microsoft.com/WindowsVista/en/library/00d04415-2b2f-422c-b70e-b18ff918c2811033.mspx?mfr=true
UAC really shines in low rights mode. under XP if something needed elevated privileges, the app would just bomb. Under vista, if you need to elevate, you get a prompt for admin level credentials.
Automation my friend. Three minutes in my SCCM console and the problem is solved over three hours with any human involvement. I'm of the school if you cause a problem, you can deal with the consequence. Think thats harsh... try a hanging up on 911 after accentually calling them.
Lets try an excersize. Take one of those $40 dollar mp3 players and throw it at a concrete wall at a speed in excess of 140 miles per hour. What do you think the results will be?
I thought fixing as a busted system was east. I press 'F12 for network services boot' and viola my machine has a clean install of windows pushed down!
Its amazing how a properly configured (and locked down) environment can be pretty effective.
SP1 isnt available till March. the only way you're going to get machines auto-updating with SP1 is aome jack ass admin imported the beta SP into WSUS/SMS/Whatever. A legit SP1 RTM build isnt publicly available. I'm just gonna sit back and laugh at the poor bastards.
[quote]especially in order to get the same functionality as XP PRO, or Leopard (both of which sold for ~$130)you have to buy the $400 version.[/quote]
Thats wrong. Vista Business == XP Pro. Ultimate is Business + Media center + Bitlocker. Retail for Vista Business is 300. Retail for XP Pro is 300.
are there some suck ass bugs in vista? You bet! I haven't seen many show stoppers. theres the change in group policy processing sucks monkey balls, but now i know what to look for, its easy to fix. the dhcp client continuing to request its old IP after its been nak'ed is another. Only one that sucks is all legacy control panel applets require elevation. The SMS applets were rewritten for low rights, but because they are "legacy".
Is the product as a whole, a piece of steaming shit? nope. OS deployment and management tools are outstanding. a single, hardware agnostic image rocks! Right along side of that is the new ADMX templates. Once SP1 is rtm and it passes our certification process, we're going.
your point of view on MS changes when you have a nice budget, and a few thousand machines to tend to.
Its a litle more that once of the bing things is it requires a lot of code changed to support IPv6. I'd like to mopve to v6, comma but no one i talk to (i.e. my provider) uses it yet. Now before I get the standard "get a new provider" spiel, I'm a state agency, and my provider is another state agency.
the same holds true for all my edge devices. A wholesale updates of them would be needed as well. And i'm not talking just desktops. I also got IP phones and lab instruments just to name a few.
Its alot to start to consider from a network dude's point of vew
In this scenario Cable Company == ISP. The only thing keeping me on Comcast is the strangle hold they have on my local sports (Philly Region).
simple... the only way you're getting me away from SMS is to pry it from my cold dead hands.
you got me there, you know i voted for Kronos
here's the best part... you talk to Veritas and their stuff's the shit. this isnt too far off froma sales pitch i got from one of their sales drones
sales drone: with our storage management product, you can add more storage on demand...
me: but my claiiron does that today, and its included
drone: yeah, but our stuff takes minutes to do
me: so does my clarii..
drone: emc sucks! emc is evil!
my local drug dealer isnt as much of a pushy, pompous ass!