Agreed. It is a risk/reward consideration. If you cannot afford to get breached, then this is far less costly than a breach.
Often, people belatedly realize that they could have afforded to do something differently than they initially considered. Regards, *ASB* *http://XeeMe.com/AndrewBaker <http://xeeme.com/AndrewBaker>* *Providing Expert Technology Consulting Services for the SMB market…* * GPG: *860D 40A1 4DA5 3AE1 B052 8F9F 07A1 F9D6 A549 8842 On Sat, Jun 3, 2017 at 6:57 PM, Kurt Buff <[email protected]> wrote: > Until I implement, I can't say for sure just how practical it is or > isn't, but it seems to me that if your org is under any kind of > regulatory regime (HIPAA, SarbOx, JSOX, etc.) that at least the Domain > Admins should be doing this. > > Kurt > > On Sat, Jun 3, 2017 at 2:34 PM, Katherine M. Moss > <[email protected]> wrote: > > Seemingly only practical, though in the most high security situations. I > > can’t imagine that too many of us will bother with it since it’s more > > administrative overhead than most probably care to deal with. > > > > > > > > Sent from Mail for Windows 10 > > > > > > > > From: Michael B. Smith > > Sent: Saturday, June 3, 2017 17:33 > > To: [email protected] > > Subject: RE: [NTSysADM] What is the argument for Windows Server > > Core/NanoServer over Linux? > > > > > > > > Interesting read. Thanks. > > > > -----Original Message----- > > From: [email protected] [mailto:listsadmin@lists. > myitforum.com] > > On Behalf Of Kurt Buff > > Sent: Friday, June 2, 2017 9:49 PM > > To: ntsysadm > > Subject: Re: [NTSysADM] What is the argument for Windows Server > > Core/NanoServer over Linux? > > > > Sorry - my bad. They are Privileged Access Workstations: > > https://docs.microsoft.com/en-us/windows-server/identity/ > securing-privileged-access/privileged-access-workstations > > https://gallery.technet.microsoft.com/Privileged-Access-53a4673a > > > > Kurt > > > > On Fri, Jun 2, 2017 at 10:12 AM, Katherine M. Moss > > <[email protected]> wrote: > >> What are those again? > >> > >> -----Original Message----- > >> From: [email protected] > >> [mailto:[email protected]] On Behalf Of Kurt Buff > >> Sent: Friday, June 02, 2017 1:03 PM > >> To: ntsysadm <[email protected]> > >> Subject: Re: [NTSysADM] What is the argument for Windows Server > >> Core/NanoServer over Linux? > >> > >> It's also a push to start implementing PAWs - Protected Access > >> Workstations - which is how I'm going to configure my next machine. > >> > >> Kurt > >> > >> On Fri, Jun 2, 2017 at 9:34 AM, Katherine M. Moss > >> <[email protected]> wrote: > >>> I prefer remote management, actually. The insane thing is how easy it > is > >>> to build out Nano servers. That another reason; not having a local GUI > will > >>> prevent me from always using RDP; trying to move away from that as > much as > >>> possible. > >>> > >>> -----Original Message----- > >>> From: [email protected] > >>> [mailto:[email protected]] On Behalf Of Matt Stork > >>> Sent: Friday, June 02, 2017 11:38 AM > >>> To: [email protected] > >>> Subject: RE: [NTSysADM] What is the argument for Windows Server > >>> Core/NanoServer over Linux? > >>> > >>> Running Core and Nano does not mean running without a GUI, they mean > >>> running without a GUI locally. The majority of the server management > GUI > >>> tools can connect to a remote server (Core, Nano or Desktop), it is a > matter > >>> of having your firewall and authentication setup to allow this. The > >>> transition is difficult but unless we wish to fall like the mainframe > people > >>> who refused to adapt, this is technology we must learn. > >>> > >>> Nano is new but Core has been around since Server 2008. I would not > call > >>> that new. > >>> -Matt > >>> > >>> -----Original Message----- > >>> From: [email protected] > >>> [mailto:[email protected]] On Behalf Of Katherine M. > >>> Moss > >>> Sent: Friday, June 02, 2017 9:18 AM > >>> To: [email protected] > >>> Subject: RE: [NTSysADM] What is the argument for Windows Server > >>> Core/NanoServer over Linux? > >>> > >>> That’s the difficulty I’m having; currently, I’m the only one in my > group > >>> who sees any benefit to the ASP.net platform, for instance (I’m a > DNNizen, > >>> and trying to rise in prominence in that community, for example). Why > run > >>> ASP.NET when you can run Wordpress, they say. Why run IIS when PHP > was born > >>> on Apache, they say. The other issue I have is that when dealing with > >>> creatures of habbit, it’s hard to get people to look at current stats. > I > >>> tend to use what works, not what the market tells me I should, for the > most > >>> part. Does it have to do with what you were brought up with? Plus > because > >>> Core and Nano are new; so I think in my case the issue is getting > people who > >>> are used to one thing to get used to another. There’s that saying, use > the > >>> right tool for the job, so how to ensure that you choose the right one > when > >>> both can perform equally well? I’m an explorer, so it’s easy for me to > say, > >>> let’s try something new and fun. > >>> > >>> > >>> > >>> From: [email protected] > >>> [mailto:[email protected]] On Behalf Of Charles F > >>> Sullivan > >>> Sent: Friday, June 02, 2017 9:50 AM > >>> To: [email protected] > >>> Subject: RE: [NTSysADM] What is the argument for Windows Server > >>> Core/NanoServer over Linux? > >>> > >>> > >>> > >>> Yes, people usually do run Linux servers without a GUI. What I meant > was > >>> that you can use Windows Server Core or Nano to avoid the Windows GUI, > thus > >>> not having to use Linux to get those benefits. > >>> > >>> > >>> > >>> As someone else said, it depends on what the application is as to what > >>> platform is more appropriate. I think that’s the real answer. > >>> > >>> > >>> > >>> From: [email protected] > >>> <mailto:[email protected]> > >>> [mailto:[email protected] > >>> <mailto:[email protected]> ] On Behalf Of Rene de Haas > >>> Sent: Thursday, June 1, 2017 6:49 PM > >>> To: [email protected] > >>> <mailto:[email protected]> > >>> Subject: RE: [NTSysADM] What is the argument for Windows Server > >>> Core/NanoServer over Linux? > >>> > >>> > >>> > >>> You can run linux without a gui. > >>> > >>> > >>> > >>> Op 1 jun. 2017 11:54 p.m. schreef "Charles F Sullivan" > >>> <[email protected] <mailto:[email protected]> >: > >>> > >>> Or maybe you could say “Why use Linux when you can use Windows > >>> without the overhead and security vulnerabilities that go with a GUI?” > >>> > >>> > >>> > >>> From: [email protected] > >>> <mailto:[email protected]> > >>> [mailto:[email protected] > >>> <mailto:[email protected]> ] On Behalf Of Katherine M. > Moss > >>> Sent: Thursday, June 1, 2017 4:34 PM > >>> To: [email protected] > >>> <mailto:[email protected]> > >>> Subject: [NTSysADM] What is the argument for Windows Server > >>> Core/NanoServer over Linux? > >>> > >>> > >>> > >>> Hey all, > >>> > >>> Just had to ask this one. I’m really curious because I’ve heard > >>> the argument, well, if you’re going to run server Core, why not just > use > >>> linux? What can you say to make the conversation worthwhile and not > just > >>> arguing preferences? Or is that really what it’s all about these days? > Iv’e > >>> been wondering what the people who have been on both sides might say. > >>> > >> > >> > > > > > > >
