Diary of a Network Geek

So, I’ve been putting off making this announcement for about a week, but I’ve been laid off from my last job. My very kind Director, who I hadn’t worked with for very long, was good about reassuring me it had nothing to do with my performance and that it was 100% about cutting costs and trying to increase margins. He also volunteered to be a good reference for me. In fact, he said it while HR was still on the line with us. So, I’m in the market again, a little sooner than I’d hoped, but, well, job change rarely happens on our timetable, does it?

Of course, when I started this blog more than 20 years ago, before blogging software was a thing and, really before blogging was much of a thing, I did it because I was changing jobs. It was my attempt to “game” the search engines into ranking my website and, therefore, my resume, higher in the hopes that a recruiter would see me and reach out. Now, of course, we have sites like LinkedIn, and you can find my profile there. I’ve got no idea where I’ll land this time or how long it will take to find a new gig. I know the longest I was out of work was a year back at the end of the dot com bust, starting between when Compaq and HP merged and when Enron went under because they got caught cooking the books. It was rough because so many people in technology were out on the street all at the same time. From what I understand, things are better now, at least in Houston where I am. And, it’s easier since I’m more than willing to work either a hybrid schedule or go back to being in the office all the time. I don’t mind either way, as long as the commute isn’t too bad.

So, anyway, there we are. I’ll be making a similar plea for help on LinkedIn, too. If you know of anyone hiring experienced IT Managers or Directors, send them my way!

Do you know those horrible password rules about adding random characters and numbers and stuff?

IT professionals hate them, too. Honest. I can say that because I am, in fact, an IT professional and have been for just shy of thirty years. (You can read more about my qualifications to call myself an IT pro at my other website, which includes Jim Hoffman’s CNE Resume, because, yes, I’ve been doing this so long I’m certified in things that no one really uses anymore.) I remember when the standard for passwords changed, requiring normal people to do things like including special characters or numbers and a mix of upper case and lower case letters. We were told that it would make the resulting passwords exponentially harder to guess. At the time, that may have been true, though I doubt it. It turns out, those rules were written by a government bureaucrat who used an out-of-date white paper to make his recommendations. And, now, even that bureaucrat regrets making those rules that only make your password harder to remember. Also, all that advice about translating a famous quote into a password by changing out words for symbols or letters? Essentially useless. With the computing power of moderns machines, the randomness of a short password really doesn’t matter at all. Length is the real key. So, having a password like “P@SSw0rd” isn’t significantly more secure than “password”, except, of course, that hackers are likely to guess the simple words first and “password” is actually one of the ten most popular passwords. So don’t use that. What’s better is to use a longer password, like an entire sentence without punctuation. And, if you have to include numbers and special characters, just tack them at the end or beginning. In other words, something more like “MyPasswordIsVerySecure@9”, because the length of that password IS exponentially harder to guess than “password”. Don’t believe me? Then just look at this infographic that shows how the length of your password is really the determining factor in how hard it is for hackers to crack.

https://www.dailyinfographic.com/brute-force-your-password

Of course, some systems limit the length of a password, unfortunately, but, until everyone else catches up to us, you have to work with what you’re given.
Come back next week to see what uncomfortable truths I have to share with you!

This post first appeared on Use Your Words!

Advice from your Uncle Jim:
"Whatever the majority of people is doing, under any given circumstances, if you do the exact opposite, you will probably never make another mistake as long as you live."
   --Earl Nightingale

This might be helpful if you let people come over for the holidays this year.

Back in 2014, I wrote a little post about sharing your wifi with holiday guests via something called a QR code. Back then, the technology was exotic and strange and, sadly, pretty limited. But, now, more people are using their cell phones or have picked up a tablet for on-the-go internet access and most of those devices can read a QR code natively. And, with Thanksgiving and Christmas right around the corner, we might finally feel brave enough to invite people over for a socially distant, but in-person, holiday celebration and they’ll be asking for access to your wifi network. But, this year, too, with so many people working from home and all the potential security risks, you may not want to put your sensitive security access information into a strange website. So, I thought it was a great time to share another tool for creating those QR codes that guests can scan to get that access while using more secure programming standards. That site is QiFi. It’s super simple and makes a function QR code that you can either export as a PNG to add to a nicer display or simply print out so that your guests can scan it with their device. The QR code doesn’t show any information in a human-readable format, so the casual user isn’t going to just copy it down. And, of course, this is free. There’s actually not even any advertising on the site as far as I can see. The wifi information you put it isn’t stored on the site and is gone as soon as you close the page. So, for the less computer geeky, that means it’s about as safe as these things get.

No matter what else you do this holiday season, stay safe, try to stay healthy, and let’s all be as kind to one another as we can be.

This post originally appeared at Use Your Words!

Not quite DIY DevOps for Office 365, but a good start.

So, it’s been a while since I posted professional geek content on any of my blogs, so I figure I’m overdue. I’ve had a lot of titles over the years, but, at heart, I’ll always be a system administrator. Back in the olden days before any marketing genius came up with the idea of calling hosted services “the cloud” or calling system administration automated with scripts “DevOps”, guys like me were automating routine tasks. I’ve used everything from batch files to bash scripts to Perl, but, on Windows servers, I’ve learned to use PowerShell. It’s powerful and there are a lot of resources for the neophyte to learn, so I’ve applied myself to it to make my life easier.
For instance, I wrote a script that removes users that are disabled and haven’t logged on in more than 90 days, which I shared in a comment on r/PowerShell. Naturally, I started with someone else’s script and modified it for my own purposes, and added in the email feature from another script. Then, I added that to the scheduled processes to run once a month, just to keep Active Directory cleaner. The other day, I was on r/sysadmin and read about someone having a problem on Office 365 with stolen credentials. I hate to say it, but it’s becoming a more and more frequent issue with everyone working from home. The only way to fix it, really, is to get some kind of multi-factor authentication. But, in that thread, someone referenced a script from Microsoft’s GitHub repository for Office 365 scripts meant to quickly help remediate the breach and close the hole left by the compromised credentials. It’s pretty slick, though I think I’d modify it to accept a command-line variable with the username instead of coding that in, but it’s a pretty slick script that can mean the difference between a few spam emails and hundreds. Also, it automates a lot of the standard stuff we do by hand when a breach occurs.
If you’re a sysadmin, it’s definitely worth a look and the rest of that GitHub repository has scripts to do all kinds of things with Office 365 by way of PowerShell. It’s a great place to start building your own scripts and automating your workflow.

So, that’s my geeky PSA for the professional geeks among us.
Enjoy!

“Managing up” has to be one of my least favorite business buzzword phrases, and the most condescending.

I’m grateful I don’t hear this phrase as much as I used to earlier in my career. The last time I heard someone use it, they were commenting on how little they thought about their direct supervisor’s ability. When you think about it, the phrase, and the idea behind it, is pretty insulting. The implication is that I know better than the person above me in the company organization chart and, essentially, have to do their job for them because they’re incapable of managing me. For one thing, it starts from a false premise, though one that a lot of technical people seem to buy into, namely that my work requires knowledge and abilities beyond the management layer above me. I’ve never found that to be actually true.
I prefer the term “managing expectations”. It’s more accurate and applicable to all levels of the org chart. It’s also something I do regularly. For instance, if I’m working on a project for someone, I want to make sure they know what’s involved and the kind of time that might take so they have some idea why I’ve set a delivery date. Or, more importantly, why the delivery date the stakeholder might expect is unreasonable. There are times, of course, that I find myself able to deliver well within the expected time, but, unfortunately, that’s much more unusual.
The other way I manage expectations is in what can be delivered at all. I will grant that to many the computer systems I work with on a regular basis are a bit like magic. Black boxes of mysterious abilities that miraculously produce information and reports when working correctly. Or, evil, possessed infernal machines that are blamed for keeping some other department from producing results when they aren’t working well. Obviously, my goal is to make sure the technology in my care is always working well, but that’s not always possible. And, when I’m asked by someone to produce something new, I want to give them an accurate idea of what precisely I’ll be able to deliver to them on whatever timetable is likely. Of course, like most technical people, I follow the lead of Montgomery Scott, Chief Engineer of the starship Enterprise and do my best to set expectations low so that when I am able to exceed them I seem like a miracle worker. Like the time I told someone I’d “do my best” to recover some of the more than three terabytes of engineering drawings that the previous IT person had lost to a cryptolocker virus, then found a decryption tool after everyone else had left early for a long holiday weekend that restored all the lost data.
Yes, I worked what seemed like a miracle, but before I did, I set the expectation that the data was going to be lost because the last tech hadn’t tested the backups. So, rather than “managing up”, manage expectations of what kind of results, and when those results, can be delivered. Everyone, not just your managers, will appreciate it more.

This post originally appeared on my LinkedIn profile.

Clear goals make for more successful projects.

There is no way to guarantee a successful project, but I can sure tell you the best way to make one fail; don’t set a clear goal.
When I was in Boy Scouts, I earned my Eagle Scout award. That was a long time ago, and I know some things have changed since then, but one requirement that hasn’t changed is running a successful service project. At the time, the bar for success was set pretty low, and, of course, I had lots of help from Scoutmasters and advisers on how to set up and run my service project. What I learned in Scouting, I carried forward into my working life and still use to this day. The single best way to stack the odds in your favor of success is having clearly defined goals that include a deadline. My goals, whether personal or professional, need to be so crystal clear that I can express them to someone not involved in the project in thirty seconds or less. If I can’t do that, I need to rethink whatever project I’m gearing up.
For instance, as a technical specialist focused on IT infrastructure, when I’m getting ready to refresh datacenter hardware, I should be able to tell my CIO or CFO what servers and drive arrays are being replaced, how the data will transfer from the old hardware to the new equipment, what the time involved will be and what my fall-back plan is in case of catastrophic failure at some level. Simple, clear and direct. And, I should be able to state that in a non-technical way for non-technical staff who might need to know. If I’m upgrading a wide-area network from a series of point-to-point connections in the old-fashioned spoke-and-star configuration with a software-defined WAN configured with a mesh of redundant connections, I need to be able to clearly describe that end result, with the advantages and disadvantages and any potential risks, to non-technical executive staff.
I need to be able to do all that not only so they can hold me and my department accountable for our success or failure, but also so that I can keep everyone on the project focused in the right direction. This is the lesson I learned so many years ago working on my Eagle Scout service project. A clear, concise goal is easier to explain and share with outsiders, but it’s also essential for project participants, to keep everyone focused on the same goal and headed the same direction. No one can lead a team, whether on a short project or on a larger team, without clear, shared goals and deadlines. A project without a clear, shared goal is doomed to failure because no one will be working together on the same shared goal, except by accident.
Success should never be an accident. It should always be a plan.

This post originally appeared on my LinkedIn profile.

I work in IT because I didn’t want to do sales.

The only problem is, everything is sales.
Even though my degree is in Marketing and my very early career included a commission sales job that was so profitable for me I was able to write a check for my first used car, I prefer to work with technology. In college, I actually took classes in sales and salesmanship. My father, who was an inveterate salesman by both nature and trade, always used to tell me that everyone sells and everything is sales. I decided to follow a different career path, though, when I saw what a good salesperson had to do on a daily basis. I’m pretty self-directed, but even the best salesperson deals with more rejection in a day than I probably handle in more than a month. But, that doesn’t mean that I haven’t, ultimately, embraced the reality that everything is sales and I’m selling, one way or another, every day of my life. The thing is, so is everyone reading this, whether they realize it or not.
Don’t believe me? I’ll prove it.
Any time in the past month, have you had to convince anyone that your plan for whatever you’re working on at the office is better than someone else’s? Maybe you’ve tried to convince someone that your restaurant choice is better than theirs? Those are both selling. The thing that people who haven’t done it don’t understand about sales is that you don’t sell products. You sell the idea that your product is the right product for the customer. Or, in my line of work, I sell the whatever idea I have about how things should work in an IT Department, or how IT can solve a business problem and how I’m the right person to implement that idea. Am I successful every time? Of course not, but I am selling every time I step up to pitch a project or procedure to my direct supervisor, my peers or other stakeholders in my company. And, the better I am at selling my ideas, the more work I get to do and the more interesting that work is to me. After all, given the choice, I’d much rather work on things that I think matter, are important or that teach me something new. Before I can do that, though, I have to sell my manager on the idea.
The other thing to keep in mind about selling, though, is that high-pressure sales doesn’t really work. There are still dedicated salespeople who will try those techniques, but that time, thankfully, has passed. All my training and experience has taught me that the single best way to sell, whether insurance or technology or patio furniture, is to sell the customer, or manager, on how I can solve their problem, whatever that may be. That, of course, means I have to talk to the person I’m selling to and find out what their needs are so I can show them how whatever I have will help. And, on the rare occasion that I don’t have something to sell them to fix their problem, I have to be smart and honest enough to acknowledge that and move on, or point them toward someone who can solve their problem, if I can.
Selling is one of the most challenging activities in my work day. In retrospect, even though I work in IT Infrastructure, I’m glad I have the experience and training of a salesperson. It turns out that my Dad was right after all; everything is sales!

This post originally appeared on my LinkedIn profile.

Sometimes, the raw numbers don’t really tell us how expensive something is.

One of the regular struggles we have in IT is that we are an expense. The bottom line is that, for most businesses, we don’t generate revenue and are strictly a cost center. And, unfortunately, in my experience, because we’re a cost center, spending on technology is resented almost as much as paying the electric bill or paying taxes; a necessary evil. What gets lost, I think, is the value provided by technology. To start with, much like electricity, business generally doesn’t work at all without IT. Technology runs the point-of-sale systems and the Accounting systems that even make it possible to collect and track money. Without it, business would simply halt. But, beyond that, the cost of the actual technology often overshadows the value provided.
Not too long ago, I had this same argument with a fellow IT professional who was mired in the numbers. To their credit, they were examining a potential equipment purchase from a strictly financial point of view. Since the Accounting Department or CFO are often the final decision-makers on technology purchases, seeing this process through their eyes can be beneficial. The problem is that the full potential value of upgraded equipment can easily be forgotten in the drive to spend the absolute least dollar amount possible. Don’t get me wrong! Technology costs absolutely have to be kept under control or IT people will focus only on getting the newest toys to play without considering the cost to the organization. But, the actual spending has to be appropriately balanced with the value provided by the purchase. As technology professionals, it’s part of our job to present not only the minimum and best options available, but what advantages there may be to making a particular purchase. Sometimes, the value of upgraded technology goes well beyond the dollar value.
Take, for instance, the opportunity to upgrade from a standard two server, one storage area network system, that was new technology fifteen years ago, to a hyperconverged system that spreads computing and storage capacity across four servers or hosts. It’s absolutely valid to look at the raw cost of the two solutions. And, you will absolutely see that buying two classic servers is less expensive than buying four modern hyperconverged nodes. But, if you stop there, you don’t see the added value of less downtime due to a hardware outage that can be avoided by upgrading to a newer, redundant technology. Or, the increased speed and efficiency gained by upgrading to a modern system purpose-built to run in a cutting-edge datacenter. Maybe there will be more opportunity to add capacity to the new system as the company grows. Or maybe there are business continuity advantages to a hyperconverged system beyond additional, redundant hardware. Though, to be honest, I think that’s reason enough!
Regardless, my point is that as technology professionals, we need to clearly communicate all the risks and benefits, expenses and added values, of our purchases. As subject matter experts, it’s in everyone’s best interests for us to educate decision-makers beyond the dollars-and-cents bottom line, to give them a true understanding of the value to be gained beyond the simple expense of a purchase.

This post originally appeared on my LinkedIn profile.

It never stops being important.

I think of myself as lucky in many ways. I trained in sales, but fell into IT work early in my career and found that I was good at it. I also was lucky enough to win a free training course and series of tests that got me my first big IT certification. But, I think the luckiest thing that happened to me in my early career is getting trained in customer service by Hyatt Hotels, known the world over for their excellence in service and training.
Of course, I’d worked retail jobs before working for Hyatt so I had at least some idea what it was like to work directly with the public, but Hyatt’s training really drilled us to be always thinking about the customer. I was taught to be thinking about the guest, or customer, as soon as I was visible in public areas, which in the hospitality industry is called “front of the house”. The last part of my uniform I put on was my smile, because, regardless of how I felt, I was there to do a job; make the customer feel welcome and important. But, there were the little things, too, like how we’re all part of a team serving the customer and if we saw trash in the guest areas, we should pick it up and not wait for cleaning crews to get to it. We were taught to work as a team, all the time, to make our customers feel as though we cared. And, the funny thing is, the simple act of pretending that we cared eventually meant we did.
As an IT professional, I am still in a customer service role. Even if I’m working with department heads or C-Suite executives, in the end, I’m still providing a service and need to pay attention to my customer, internal or external. But, don’t think that Accountants or Sales Managers or Truck Drivers or any other person delivering a good or service doesn’t have a customer and that those customers deserve good service! It’s something I think is forgotten or ignored. As an employee, I always have someone who is benefiting from my work; my internal customers, if you will. And, those people are entitled to me helping them to the best of my ability with as much friendliness and cheer as I can manage.
I know the idea is old-fashioned and falling out of vogue, but I still believe that good customer service, regardless of who my customer may be, is just the final layer of professionalism that can set us apart, as individuals and organizations.

This post originally appeared on my LinkedIn profile.

The metaphor of “internal customers” is unfortunately falling out of favor.

Lately, I’ve seen articles criticizing the idea of having internal customers. It’s a shame, really, because the people who are so willing to abandon that idea seem to be doing so because they don’t understand why it’s so powerful. The criticisms I’ve heard fall under two basic categories; accounting-focused people who don’t want to “charge” departments for internal services and people who seem to think the need for collaboration with other business units removes the need to provide customer service to end users. They’re both coming from some incorrect assumptions and, I’d argue, a misunderstanding of what services IT provides in an organization.
As technical people, in most organizations, we provide support functions. Any service-based group absolutely must pay attention to the service provided to those who use that service; their customers. People who incorrectly think that the old practice of charging the cost of internal IT services back to the departments who use them is a reason to abandon the entire idea of internal customers are losing sight of the goal behind the metaphor. The goal is not, as they seem to think, to make sure everyone pays equally to support the IT department. The goal is to remind technical personnel that the systems and networks we manage aren’t defined by the hardware and software, but rather the end-users who actually use the technology we provide as tools to do their jobs. When we forget that, we forget that our goal is to serve those end-users, not the systems. That sad, mistaken idea is clearly expressed in the old system admin joke, “My network would run perfectly if not for the users!” I cannot tell you how many times I’ve heard technical experts grumble about what a waste of time user requests are instead of seeing how it’s our only reason to exist. As a technical expert, my only reason to be employed is to solve other people’s problems, to provide service to my customers, the end users.
And, that leads directly to the second misunderstanding I see used as an objection to the end user as customer metaphor; technical experts cannot collaborate to provide solutions AND be mindful of customer service at the same time. We would do well to remember what the genius R. Buckminster Fuller said about solving problems, “When I am working on a problem, I never think about beauty but when I have finished, if the solution is not beautiful, I know it is wrong.” If I “solve” a technical problem for a user, but they wrestle with my solution so much that they never use it, then I haven’t actually solved their problem at all (ie. It’s not a “beautiful” solution to the problem.). A perfectly workable procedure that the user doesn’t understand or finds too difficult to use regularly is as good as useless and I’ve failed my customer. I can’t make my internal customers happy every single time, but I ought to be trying because the only reason I’m employed is to solve their problems well and in a timely fashion.
I could go on a great length about all the ways I’ve seen technical people abuse their internal customer, the end user. In the old days of “big iron” mainframes, it was unfortunately all too common. Today, we should know better and embrace our roles as service providers making business run more smoothly, efficiently and well. Let’s stop making customer service a joke and help our users be better.

This post originally appeared on my LinkedIn profile.