Random Tech (or IT Work!) Fail

[Hellfury]

Been debating whether or not to share this one, security and all that, but.

So the VP of the company calls me up one day, tells me that one of the employees is really worried, because she's able to read her boss' e-mail. This puzzles me, but I know that in the past, before my time, a lot of accounts were shared, and a lot of mailboxes too, so I ask the user if it's one of the shared e-mailaccounts, no no, the boss' e-mail. Ok, I'll get on the exchange server and see if any of the users involved have been shared.
Nada.

Hmm, this is odd. Spend a couple of hours looking at logs, checking account priviledges, worshipping at the altar of Google, keep coming up blank. How is this user seeing her boss' e-mail? So I start asking people who were around "back in the day" before the company started getting more organized technically, no one has any clue.

So more than a little puzzled and frustrated, and a tad bit worried about what might be going on here, I walk down to my user and ask her to show me step by step what was happening.

So she walks into her boss' office. Sits down at her boss' computer. Logs on with her boss' username and password. Opens her boss' e-mail client and points at her boss' e-mails. "look here, I shouldn't see this.. should I..?"

He was on vacation and had left her his username and password so she could watch for any orders incoming by e-mail. I put on my best neutral face, and walked out of there before I had the chance to say something i would regret.

(he should've just had me help him set up forwarding instead, but.. details.)

[The Stig]

(snip)

In all seriousness, it's really cute of her hahaha! Triple bonus points if she's good looking.

Also, I think sharing IT stories is fine providing nothing can really be traced back to you, unless you make it obvious where you work etc

[killerx]

Didn't feel like making a separate thread for this seams pretty fail on my part to me. But on mine and my gfs phones we have screen mirroring we hardly use it except for every now and then for YouTube or stupid stuff. A random phone asks for permission so I accept it. I guess one of my neighbors is on my wifi? We sat here and watched them use there phone for a few mins. Not sure why it's on my tv. But it was good for a laugh.

[Cutriss]

Got a call from a friend asking me to look at some network issues. All the users seem to take forever to load roaming profiles, even with small profiles. Bring up documents takes forever, etc, etc. Turns how they configured the wrong subnets in Sites and services to the wrong location. Nothing like everyone getting their documents from the furthest location possible...... at all 4 sites...... Based on the look of their IT director, someone is getting fired today..... (Not my friend, he was the DB admin)

We just had a total department re-org so that we could finally restrict tasks/responsibilities to specific people rather than some people think (and act like) they're responsible for everything, even if they're generally not all that competent.

The guy that was put in charge of the help desk is also in charge of "networking", specifically telco and switches/VPN. He used to be the manager of basically the entire Ops team in the headquarters office.

The network they operate on is 192.6.0.0/24. Not a typo.

So yes, the guy put in charge of networking is responsible for co-opting a public IP range that we don't own. :slowclap:

[The Stig]

My self imposed SLA (service level agreement; this dictates how much attention your ticket receives) at work:

Regular (bros) > potential/fantasy waifu > attractive girl with cleavage > attractive girl > everyone else

[Buffy]

That's the default SLA for most techs. You never wondered why the contact person on the contract is an attractive female?

[Ratatapa]

Coworker deleted some AD accounts today trying to clean up unsued account

Result some services broke because their relied on some AD accounts

Go me for fixing stuff

[Ratatapa]

Coworker deleted some AD accounts today trying to clean up unsued account

Result some services broke because their relied on some AD accounts

Go me for fixing stuff

[Yabby]

I have an OU call " SERVICE ACCOUNTS DO NOT TOUCH".....

[Cutriss]

Coworker deleted some AD accounts today trying to clean up unsued account

Result some services broke because their relied on some AD accounts

Go me for fixing stuff

A few years ago, after we canned a temp doing Tier 1-level work, we had to change the Domain Admin password (don't ask me why he had it to begin with, that's another stupid question).

We couldn't change it right away because some idiotic developers (doesn't narrow it down, the whole dev team is fucking retarded) had used the Domain Admin account to run some service and couldn't just switch it without breaking some other things.

[The Stig]

That's the default SLA for most techs. You never wondered why the contact person on the contract is an attractive female?

Oh... that makes some sense, from our point of view. The lady that manages the contract for our client is rather attractive. But is technically a colleague so I don't really judge/interact with her (she's in the upper echelons of management)

[Yabby]

We just finished up created, testing, and deploying a new VPN system. I won't go into to many details, but after you have logged in, you press a button and creates the VPN without user interaction. I sent out a how to guide for people to setup the new two faction auth. In three different spots on this guide, i put in BIG BOLD RED LETTERS IN 40 FONT not start the VPN client in virtual if you are testing. You setup and enroll, and stop after you have finished, you don't have to start the VPN client.

Within an hour of sending out the guide, i've had over 100 people disconnect from virtual desktops. I ended up having to delete the pool and recreate it, because it was faster than logging into the virtuals one at a time to disable the VPN client...... the VPN uses a nation DNS system, which means the second they turned it on, the virtuals no longer talked to our servers....

[Hellfury]

I have come to the realisation that if there is a way for the users to mess things up badly that you can't stop, you shouldn't use that solution :/
At best, they read the first 2-3 sentences.
We're changing our VPN solution because hurr durr, it's hard to push more than two buttons even when you have been explained in detail, and given easy documentation, _with pictures and screenshots_ explaining it.
(Granted, switching to a non-java solution is something I wanted for years anyway but still...)

[Jamison]

I've almost given up on doing instructions because 98% of people are going to screw it up anyways. I'm not regularly on the IT side of things (been helping cover for 6 months while we were between people because of medical leave). Most amusing thing I've seen is one user who, every time they wanted to type a single capital letter, turned caps lock on and then back off. I mentioned it offhandedly, half as a joke, and they got defensive about "how they needed to type capital letters in emails" ...

[Yabby]

I have come to the realisation that if there is a way for the users to mess things up badly that you can't stop, you shouldn't use that solution :/

If we went this way... we would have to go back to paper and pencils...

[Hellfury]

If we went this way... we would have to go back to paper and pencils...

While there's no foolproof solution, there's a lot of restraints you can put in place to avoid a few of the "too badly" scenarios. I mean, there are plenty of companies out there that don't control access to websites, gives users full admin priviledges, dont' automate updates to client computers at all etc. but we're getting off topic!

[The Stig]

Walked into office with a malware infection across the whole estate.

Bitcoin/ransomware related.

Source: Someone's mobile phone! The culprit insisted he was only charging his phone and he charges it the same everyday lol

I'm innocent. I left home early to do some overnight work (though I look suspicious (for laughs) as it happened after I left).

[Niya]

Let me guess, Locky? That thing hit our customer networks like a truck, I think we had 5 infections in 2 days... <.<

[Hellfury]

We actually had an external tech consultant (unintentionally) install ransomware on a client computer about 1 3/4th year ago. Managed to get onto one of the fileservers before it ran out of permissions. Fortunately our system is pretty (not sure about the English here) segmented, and three levels of backups, two first levels running daily, so we just shut down everything, checked the other servers that client was allowed to talk to and restored backups. But it wasn't a fun 24 hours scouring the serverpark to check just incase.
The dude is both smart and nice, so it happens to the best I guess in an inattentive moment.

[Cutriss]

Fortunately our system is pretty (not sure about the English here) segmented

"Segregated" is the word we'd use I think.