SysAdmin

SysAdmin related posts

Unlock Nonprofit Cloud Benefits: How Microsoft Azure Grants Can Save You Thousands & Transform Your Organization

Recently I had the pleasure of assisting a nonprofit investigate the benefits of Microsoft Azure for their organization. And boy, oh boy, was I surprised at what I found. It turns out, nonprofits can migrate to the cloud pretty easily and even with significant discounts!

Free & Discounts

While I was already aware of MIcrosoft”s ~80% discounted pricing on M365 licenses, including the following SKUs:

  • M365 Business Basic – Free
  • M365 Business Standard/Premium – $3.00 / $5.50
  • M365 E3/E5 – $9.00 / $22.80
  • M365 F1/F3 – $0.90 / $2.00

What I wasn’t aware of was Microsoft’s Azure Infrastructure Grant program that awards nonprofits with up to $2,000 a year in annual savings. This is great news for nonprofits looking to explore the advantages of a cloud hosted infrastructure environment. Additional offers include free or discounted access to Microsoft’s ancillary product lines including PowerBI Desktop, PowerApps and Dynamics. Microsoft’s Non-Profit Offers

Use Cases for Nonprofits

Working with a handful of clients I’ve seen a few use cases that work well for testing out this $2,000 Azure credit.

Remote Work

With the current trends in the workforce, companies everywhere are recognizing the benefit of enabling remote work for their employees. Similarly, remote work presents a great opportunity for nonprofit companies to attract talent from across the globe and enabling volunteers from anywhere to assist in the cause. Below are a few areas where remote work could be enabled.

  1. Azure Virtual Desktops (AVD)
    Virtual Desktops allow anyone with an internet connection to instantly connect to internal resources as if they were in the office. Using AVD, a nonprofit could quickly scale-up or down their operation to meet their need for immediate assistance. To give an idea of the costs associated, and how the Azure Grant can assist.

    A typical 20 person AVD deployment would cost around $3,600 a year. Negating the $2,000 grant and you’re looking at $1,600 for a 24/7, highly available environment ready to connect and scale.
  2. Intune – Endpoint Management
    Nonprofits often need to protect their data just like any other institution. Intune, endpoint management can assist your employees and volunteers by quickly enabling their access to resources from their mobile devices.

    Even better, if your nonprofit has company owned laptops, Intune can help manage these resources, so that if one goes missing, we can quickly remove all access and ensure your data is safe. On top of that, Intune can be paired with other native services to allow for the quick re-deployment of a used device. Just think how beneficial this could be if you happen to have high turnover in your nonprofit.
  3. Teams / SharePoint – Collaboration & Sharing
    Collaboration and Sharing are at the heart of any institution, non more so than with nonprofit work. Microsoft Teams and Sharepoint combine to create an amazing platform that enables people to work together from anywhere.

    Team’s Teams, Channels and Groups make it easy to simultaneously update documents and communicate all from your mobile device.

Security

One thing that can’t be overlooked is every company’s need for security. Microsoft has a long record of supporting the security community and the advancement of many of the sectors standards.

Microsoft’s cloud services all come with default levels of security that can be enhanced with their best-practice guidelines. These grants provide Non-Profits with the opportunity to modernize and secure their environments to the latest standards. The following features are but a few that are unlocked with M365 more advanced offerings.

  1. Multi-Factor Authentication (MFA) & Conditional Access
    MFA has become a must-have for companies accessing any data remotely. On top of this, Microsoft provides a complete Conditional Access system that allows organizations to selectively lock-down any combination of Users, Applications or Locations.
  2. Intune – Endpoint Configuration
    Does your non-profit need to control the devices that have access to company data? How about enabling a quick system setup for new users of your organization? Intune is just the tool and can be used to streamline your employee’s experience.
  3. Azure Information Protection (AIP) – Data Loss Prevention
    Only available with certain licenses, AIP helps companies contain sensitive information to where it should be. In it’s simplest form, AIP allows the use of data labels to recognize sensitive data types (i.e. credit card information, social security numbers, etc.) and secures them with App-level encryption. Implementing this feature enables organization to sleep easy knowing their data is safe, secure and less susceptible to data ex-filtration.

Curious how to Unlock Nonprofit Cloud Benefit for your business?

Free Lock Padlock illustration and picture

IT Benchmarq can help! We’d be happy to assist you in exploring your cloud options.

Contact us today for a consultation.

Unlock Nonprofit Cloud Benefits: How Microsoft Azure Grants Can Save You Thousands & Transform Your Organization Read More »

New Tool: CrowdStrike Maintenance Token Lookup Tool

New Tool: CrowdStrike Maintenance Token Lookup Tool 2

For those that have used CrowdStrike Falcon, you have inevitably come to an issue where you have needed a Maintenance Token.  Getting access to this Maintenance Token isn’t always easy, especially if the host itself has fallen out of contact for some time.  

So for this reason I’m happy to announce, IT Benchmarq’s 2nd tool aimed at making SysAdmins’ jobs easier.  The CrowdStrike Maintenance Tool.  

Setup and Configuration guidance can be found on our GitHub here.

To review IT Benchmarq’s other useful tools click here.

New Tool: CrowdStrike Maintenance Token Lookup Tool Read More »

Unveiling of MassCat (Citrix Patching Made Easy)

Hi everyone! Today I’m super excited to announce the first release of our in-house developed solution for making Citrix Admin’s lives/jobs a little easier. Introducing…(dramatic pause)…MassCat, the Mass Catalog update utility for updating numerous Machine Catalogs to their latest Base Image’s snapshot

To understand the usefulness of this solution consider a Citrix Admin tasked with patching multiples Machine Catalogs for say your standard monthly Windows Updates. Normally this process would include the following process.
1. Powering On each Base Image
2. Running Windows Updates on each Base Image
3. Powering Off each Base Image.
4. Capturing a Snapshot of each Base Image.
5. Logging into Citrix Studio
6. Navigating thru each Machine Catalog’s wizard to find the correct Base Image.
7. Drilling thru the snapshots to find the latest one.
8. Selecting the appropriate Deployment Schedule
9. Rinse & Repeat

MassCat eliminates steps 5-9, which are repetitive and potentially error prone tasks as Admins click through countless dropdowns/options.

Masscat turns patching 10 machine catalogs into what once was a 30 minute job to a 30 second job. To get an idea of the time savings look at the estimated chart below.

Number of Machine CatalogsStandard TimeTime w/ MassCat
515 minutes30 seconds
1030 minutes30 seconds
2060 minutes30 seconds

The video below really highlights the time savings and I hope you find it helpful!

**MassCat comes in two editions, Engineer and Enterprise. The Engineer edition requires a license and is allowed installation on up to 5 instances.
The Enterprise version is not limited on the number of installs.

Unveiling of MassCat (Citrix Patching Made Easy) Read More »

Citrix Virtual Apps and Desktops 1912 LTSR Highlights

Anytime a new product release is unveiled I like to take a look at the features and improvements that may be important to the masses. With roughly two years between LTSR releases, the drop of the new Citrix Virtual Apps and Desktops 1912 LTSR <h2 surely has some features that were previously debuted in the CR track. Below is a chart outlining a few features newly added to the LTSR chain that is sure to impress! And man oh man, is it a list of goodies. Enjoy!

ProductFeatureDescription
Delivery ControllerApp/Desktop Probing & ReportingFinally! With this addition Citrix Admins now
have a Citrix provided tool for proactive monitoring of resources.
https://www.citrix.com/blogs/2018/06/18/application-probing-your-proactive-application-monitoring-solution-from-citrix-director/
Windows 2019 CompatibilityPretty straight forward here…but important none-the-less.
MCS for Linux Apps & Desktops7.15 LTSR allowed Linux VDAs, but now we can mass create the with MCS.

MCS Write-back Cache v2
If you ever used MCSIO to save the IOPS hit on your storage, you know it had it’s problems. The v2 iteration now uses the tried-n-tested PVS drivers for Write-cache and yeah…it’s vast improvement in stability.
http://blogs.ultima.com/citrix-update-highlights
Multi-Reboot Schedules for Delivery Groups in the StudioTired of typing Set-BrokerRebootSchedulev2…wait what’s v2? Well no need to worry with that anymore. Now numerous machine reboot schedules can be set via Studio…making Admin’s lives easier.
User ExperienceUser Personalization LayerWorth upgrading alone for this feature! Think Personal vDisk’s are back, but better and supported! If you haven’t heard about this one, stop what you’re doing now and read up on Daniel Lazar’s post.
https://www.citrix.com/blogs/2019/12/18/user-personalization-layers-for-citrix-virtual-apps-and-desktops/
Office 365 User LayersSimilar to FSLogix’s approach, but allows a user to store their O365 related data in a “roaming” VHD.
https://www.jgspiers.com/app-layering-office-365-user-layers/
Microsoft Teams OptimizationsNumerous advancements in AV codecs and general settings have created a much better experience for Teams. If your organization relies on Teams for daily operations, you’ll want to see these enhancements.
Client SideVarying DPI Settings for Multi-MonitorsEver noticed when you extend to multiple monitor with a VDI or Published Desktop, odd things seem to happen. If you’ve got two different sized monitors this feature is now available in the new LTSR.
Copy-Paste from Client-Side to VDA SessionMiss that Copy-Paste function from your desktop to RDP sessions? Great news! Citrix now lets you do it with their App and Desktop sessions. Security folks take note, as this could pose a possible security risk.
Battery Status on VDIEver been working on a VDI only to have your laptop or mobile thin-client’s battery die on you? Worry no more! Citrix now relays a Battery Status Indicator to your VDIs system tray.
SecurityWindows LSA ProtectionOnce you realize how easy it is to extract cached Windows password from memory via Mimikatz, you’ll be glad Microsoft finally got on this longtime threat.
https://isc.sans.edu/forums/diary/Mitigations+against+Mimikatz+Style+Attacks/24612/
Session WatermarkingWorried about data loss? Session watermarking will provide you with the source of the leak by stamping a watermark on any screen captures.
SSL encrypted Print Jobs b/n VDA & CUPSIt’s always good to know that communication channels are encrypted. This one just so happens to focus on print jobs relayed to the Citrix Universal Print Server.
DirectorApplication Analytics DashboardProvides detailed insights into Applications faults, errors, and real-time probing status.
https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/director/troubleshoot-deployments/applications.html#application-analytics

Whew! Now with all that covered, you’re likely thinking, so “what’s my upgrade path?” The good news is you can upgrade from the 7.6 LTSR or 7.15 LTSR assuming you’re on the current CU (CU8 and CU5, respectively). If you’re on the CR track, you’ll need to be at a minimum of 7.16.

Should you need assistance upgrading your environmet, feel free to contact us here at IT Benchmarq.

https://www.citrix.com/content/dam/citrix/en_us/documents/data-sheet/citrix-virtual-apps-and-desktops-current-release.pdf

Citrix Virtual Apps and Desktops 1912 LTSR Highlights Read More »

October 2019’s Tip of the Month | Ninite

Welcome to IT Benchmarq’s October 2019’s Tip of the Month! How many hours do you think are wasted navigating from one website to another in search of the download link?  Now days I’d guess less and less considering today’s focus on automation and centralized management, but early in my career…whew…I would’ve loved to have this tool handy in my arsenal.

October 2019's Tip of the Month | Ninite 4
Installation Automation for 3rd-Party Apps

In the spirit of Halloween let me introduce Ninite, a point-n-click installation automation tool that’ll have you bypassing all the Next, Next, Finish prompts your heart desires. Think of Ninite as a bucket for your accumulated 3rd-party apps, that spits out a single executable for installing all the candy in that bucket!

For a quick briefing on how it works and what is expected follow this little tutorial.
https://www.youtube.com/watch?v=oGTzTAfKIAk

If you’re enjoying Ninite in your daily use, you might want to give Ninite Pro a look.  Ninite Pro takes it to the next-level with the same easy to use point-n-click based GUI that allows administrators to quickly and easily patch third-party software, get reports on update statuses, stop annoying notifications, and integrate with many popular RMM tools.  More information on Ninite Pro can be found here.
https://ninite.com/pro

October 2019’s Tip of the Month | Ninite Read More »