Good video, as someone who also works in IT security I would strongly recommended that you leave password complexity turned on and refrain using the built-in domain Administrator account for anything. Lock that account down and create separate dedicated administrative accounts for yourself and fellow IT staff.
Great video. Im currently in my first IT job and have been for 3 years. Im looking at moving to a bigger company and learning the ropes of networking. I currently repair mainly domestic users computers. Interesting video :)
I know this probably won't be seen, but when selecting the area to map for students, add "\Students" so they don't even see the Staff folder in the shared area. I know they can't access because of permissions but it's better practice.
I used to work at a college in the US and did some of this but not all. Love your videos. Is there a reason you can't or haven't done videos at the other sites that you have now been assigned to?
Hi Jake, surprised you are using WD blacks for Raid 10, or have you been limited by budget? I believe you can get away with using blacks in raid 0 or 1 however should use RE drives for anything else.
Great video Jake. I'm currently looking at doing a IT Technician Apprenticeship so these video are helpful. Is impero the only management software you use in terms of changing users passwords, adding new users etc?
+nathan lawson Impero has the ability to deploy programs, change user passwords as well as many other admin tools within the program. It is not just for remote control.
"D:\Shared\Staff" has a Everyone group with (Read & Execute, List Folder Contents, and Read) permission enabled. Shouldn't you have removed the "Everyone" group in the NTFS permission settings for the "D:\Shared\Staff" folder if you do not want any students to browse it?
+AKYJedi deny permissions have a higher priority over allow so if he added a student group and set deny access then they wouldnt be able to access anyway... but if there is a visitor group that maybe shouldnt have access to this share then by leaving the everyone permission there then they might be able to have access. i suppose how it is set up depends on the needs of the school. he did test a student account and it wasn't able to access the share so i guess that how it was set up does the job just fine. good point though
+Jake Billing When you said the network was being taken over by a larger IT company, is the name of this company RM?? Just wondering, since i know ALL of the schools near me, including mine, are managed by RM.
No buddy not RM, an academy took it over as it was a failing school and then subsequently I was TUPE'd to the central team. I still supported this school but felt I needed a change and left. I now work for a private IT company :)
+Jake Billing Ah, okay. Sorry about that. What company do you work for now? (I'm only 14 but trying to get as much info about companies as I can, as this is something I would be looking into for a career, and work experience!)
is this use of all physical servers still a common practice ? only asking as the school i have started work at as an apprentice uses virtual hosts with all of individual servers running on them
+Jake Billing wouldn't that mean that potentially a guest (student) could connect to the network and read the contents of the staff folder, ya know worst case scenario
Why don't you add server 2012 r2 into mdt and use a task sequence to deploy the server os? I would think that would be a little better then creating a usb thumb drive.
I might be getting a small server, I see that you have custom user groups that do not come with Windows, can you do this in any Windows or does it have to be server?
+Callum Corrigan Hey! :) You create your Domain users and user group(s) on the server and then like Jake is you select these groups when setting file permissions and can use Group policy and other stuff like he does :) . Hope that kinda answers your question? :) .
+wheresjames thanks! When he goes into group policy, he has lots of options, such as the folder mapping one he uses, when j go into mine, I simply have the standard group policy settings (computer and user Config). Is there something I need to do to enable these?
+Callum Corrigan Anytime :) . Instead of typing it all out this should answer your question > technet.microsoft.com/en-gb/library/cc770902.aspx . Hope that helps :) .
+wheresjames thanks again, but when I go into Windows setting under user Config, drive maps and all of the other options are missing. If you need, I will try to provide screenshot tommorow when j can use my virtual machine again
+Callum Corrigan I'm not 100% sure. Try watch back the section of the video again 14:00 now . Are you on the Group Policy Management Editor window and are you running server 2012 r2. Hopefully someone may be able to answer your question in more detail if you can't figure it out.
I have a question, when you need to activate windows or office in a computer : do you buy the number of keys that you need or you have a kind of key that can be activate several times ? sorry for my english i'm french...
GameCentral You're welcome buddy :) HyperV is included since Windows 8 in the professional editions but sometimes you may still want to use VirtualBox for example because HyperV lacks in some features (imo)
As a guy that mainly deals with linux servers this is horrific to watch. Soooo many windows and configurators O_o . Mabe I am weird but terminal and config files are easier for me ;D
Your server task videos are my favourite. Keep em coming ;)
Good video, as someone who also works in IT security I would strongly recommended that you leave password complexity turned on and refrain using the built-in domain Administrator account for anything. Lock that account down and create separate dedicated administrative accounts for yourself and fellow IT staff.
That's exactly what I did, it's best practise :)
Great videos, I can learn a lot from watching them.
Good shit. Got promoted from service Desk Analyst to system engineer.
Cramming in what I dont know so I dont like a fool lol
This helped thanks bro
awesome video thanks for the real life type of videos
No problem buddy
Great video. Im currently in my first IT job and have been for 3 years. Im looking at moving to a bigger company and learning the ropes of networking. I currently repair mainly domestic users computers.
Interesting video :)
So glad to see another video from you - Awesome as always :D
Jake yet again you've shown us the way of the jedi :P ahahah great video and such dedication for 2am
I know this probably won't be seen, but when selecting the area to map for students, add "\Students" so they don't even see the Staff folder in the shared area. I know they can't access because of permissions but it's better practice.
Your windows server video's are Awesome!
I used to work at a college in the US and did some of this but not all. Love your videos.
Is there a reason you can't or haven't done videos at the other sites that you have now been assigned to?
thats amazing man, i wish and hope to be able to do such a amazing work ... i am really impressed
Hi Jake, surprised you are using WD blacks for Raid 10, or have you been limited by budget? I believe you can get away with using blacks in raid 0 or 1 however should use RE drives for anything else.
Great video Jake. I'm currently looking at doing a IT Technician Apprenticeship so these video are helpful. Is impero the only management software you use in terms of changing users passwords, adding new users etc?
+Oliver McWilliam Impero is just for remote control, they will still use AD to add users etc...
+nathan lawson Impero has the ability to deploy programs, change user passwords as well as many other admin tools within the program. It is not just for remote control.
"D:\Shared\Staff" has a Everyone group with (Read & Execute, List Folder Contents, and Read) permission enabled. Shouldn't you have removed the "Everyone" group in the NTFS permission settings for the "D:\Shared\Staff" folder if you do not want any students to browse it?
+AKYJedi deny permissions have a higher priority over allow so if he added a student group and set deny access then they wouldnt be able to access anyway... but if there is a visitor group that maybe shouldnt have access to this share then by leaving the everyone permission there then they might be able to have access. i suppose how it is set up depends on the needs of the school. he did test a student account and it wasn't able to access the share so i guess that how it was set up does the job just fine.
good point though
Hey jake are you going to film some of the thing you do at the other places that you have to work on
+Jake Billing When you said the network was being taken over by a larger IT company, is the name of this company RM??
Just wondering, since i know ALL of the schools near me, including mine, are managed by RM.
No buddy not RM, an academy took it over as it was a failing school and then subsequently I was TUPE'd to the central team. I still supported this school but felt I needed a change and left. I now work for a private IT company :)
+Jake Billing Ah, okay. Sorry about that.
What company do you work for now?
(I'm only 14 but trying to get as much info about companies as I can, as this is something I would be looking into for a career, and work experience!)
Let me guess, you cant video that?
+Jasper van Keulen I don't work there anymore :)
+Jake Billing what do you do for a job now then?
Hey Jake, great Video! :-)
Which firewall would you recommend for business with 20 employees? We need VPN, intrusion detection and so on..
is this use of all physical servers still a common practice ? only asking as the school i have started work at as an apprentice uses virtual hosts with all of individual servers running on them
this is brilliant ,like videos
why arent you using virtualization?
2021 where are you jake now?? is still you server admin
Have you considered Refs over NTFS? Its in 2012 and newer.
Amazing work bro
On your shared folders you had the everyone permission group on your student and staff folder with read/execute permissions....
Yes but no modify
+Jake Billing wouldn't that mean that potentially a guest (student) could connect to the network and read the contents of the staff folder, ya know worst case scenario
+Elliot only if they authenticate with domain credentials first and know the share name
Do you install Impero on all the servers?
Impero has been installed on all of these servers
Why don't you add server 2012 r2 into mdt and use a task sequence to deploy the server os? I would think that would be a little better then creating a usb thumb drive.
Hi JB , I like your work and I learned from you . Thanks :)
+Jake billing Did you setup shadow copy? could u do a vid on it?
Great Server videos, Is it ok if I embed your videos for my courses ?. I also make training videos just like you :) Thanks Danish
I Notice you use computers for you cctv, Any chance of a look and explanation on it ?
I might be getting a small server,
I see that you have custom user groups that do not come with Windows, can you do this in any Windows or does it have to be server?
+Callum Corrigan Hey! :) You create your Domain users and user group(s) on the server and then like Jake is you select these groups when setting file permissions and can use Group policy and other stuff like he does :) . Hope that kinda answers your question? :) .
+wheresjames thanks! When he goes into group policy, he has lots of options, such as the folder mapping one he uses, when j go into mine, I simply have the standard group policy settings (computer and user Config). Is there something I need to do to enable these?
+Callum Corrigan Anytime :) . Instead of typing it all out this should answer your question > technet.microsoft.com/en-gb/library/cc770902.aspx . Hope that helps :) .
+wheresjames thanks again, but when I go into Windows setting under user Config, drive maps and all of the other options are missing. If you need, I will try to provide screenshot tommorow when j can use my virtual machine again
+Callum Corrigan I'm not 100% sure. Try watch back the section of the video again 14:00 now . Are you on the Group Policy Management Editor window and are you running server 2012 r2. Hopefully someone may be able to answer your question in more detail if you can't figure it out.
What's the green toolbar showing graphics, network bandwidth something like this ? I use something like this one but on Ubuntu. thanks
I have a question, when you need to activate windows or office in a computer : do you buy the number of keys that you need or you have a kind of key that can be activate several times ? sorry for my english i'm french...
Good question ! (je parle français t'inquiète). Les entreprises ont des clés pour plusieurs machines genre x serveurs + x desktop (clients )
ah ok merci bcp
What do you use to create a VM?
+GameCentral It's HyperV built into Windows.
Ohhhh thank you, needed to know that so that I didn't have to set up a client in my office just for testing :)
GameCentral
You're welcome buddy :) HyperV is included since Windows 8 in the professional editions but sometimes you may still want to use VirtualBox for example because HyperV lacks in some features (imo)
+Georg Pf Tried installing Virtual Box and got this... gyazo.com/8cb6e8642f0ffcec084e3d0b30f75315
+Georg Pf you can use it in Win7 as well, but a few downloads are required.
Very Nice!!!
How sexy am I on camera?
Extremely 😛 x
+Jake Billing the sexiest ive ever seen :P
Jake Billing are you still in IT?
You do not look like all the IT techs that i know!
Good vid dude👍
Do u still work there
What model Xserves are those?
As a guy that mainly deals with linux servers this is horrific to watch. Soooo many windows and configurators O_o . Mabe I am weird but terminal and config files are easier for me ;D
You forgot to use access based enumeration
HOW R U ALLOWED TO DO DIS AR SCHOOOL
+DaGingi & Co Hes the IT tech for the school... not a student.
Ik but like coz its a school how he do?
+DaGingi & Co he applied to the school district or what ever its called in the UK, and got the job as an IT Tech