I need some help finding a good solution to this problem. I know AD just fine, but admittedly, I'm not an expert. And I know I don't want to expose it to the internet...  I inherited a workforce at my new company (~100 employees, all Mac) that often work remote. Every laptop authenticates to the Active Directory. Works great(ish).  However, when users go remote, they sometimes need to leave their laptop with another employee that doesn't have a laptop (for reasons). The problem is that employee 2 can't login to employee 1's laptop because the computer cannot contact the AD. There are no cached creds for employee 2 because its the first time he's logged in to this particular machine.  Normally VPN is the solution, but without being able to login to the computer first, you can't login to the VPN. Are there any solutions that I should look into not involving persistent VPN to help with this? I don't want to expose AD or LDAP to the wider internet, but the bottom line is that I need to be able to authenticate from there without VPN.  Also, just to add a layer of complexity on top of this...the domain I inherited is a "domain.local" Not too big of an issue (I can work around some of the normal mac problems), however I see this causing an issue when trying to contact dc.domain.local from the internet.  Can anyone smarter than me point me in the right direction for a solution (without a lecture on bad practice, etc)?
I have a client whose workforce is comprised entirely of remote employees using a mix of Apple and Windows 7 PCs/laptops.   The users don't authenticate against a domain at the moment, but the organization would like to move in that direction for several reasons. These are company-owned machines, and the firm seeks to have some control over account deactivation, group policy and some light data-loss prevention (disable remote media, USB, etc.) They are concerned that requiring VPN authentication in order to access AD would be cumbersome, especially at the intersection of a terminated employee and cached credentials on a remote machine.  Most services in the organization are Google-based (mail, file, chat, etc.) so the only domain services are DNS and the auth for their Cisco ASA VPN.  The customer would like to understand why it is not acceptable to expose their domain controllers to the public. In addition, what is a more acceptable domain structure for a distributed remote workforce?  Edit:   is in use for a handful of Mac clients.
Java reflection: how to get field value from an object, not knowing its class Probability of a 2 pair in poker Strange characters when the output of `ls` is redirected to a file I want to list the components of the current working directory in a text file  ls -1 &gt; textfile   Output looks fine with more.   1010661085645 1010729039145 1010747080245 1010849051345 1010859053445 1011046075845   However when I view this textfile with emacs, several strange characters appear  [0m[01;34m1010661085645[0m [01;34m1010729039145[0m [01;34m1010747080245[0m [01;34m1010849051345[0m [01;34m1010859053445[0m [01;34m1011046075845[0m   Can anyone explain what is going on here? There are a variety of characters that are not legally encodeable in XML 1.0, e.g. U+0007 ('bell') and U+001B ('escape'). Most of the interesting ones are non-whitespace 'control' characters.    It's clear from (e.g.)  and others that it's  -- but can anyone illuminate me as to why the XML spec forbids these characters?   It seems like it could have been required that they be encoded in escapes, e.g. as &amp;#x0007; and &amp;#x001B; respectively, but perhaps there's a practical reason that the characters were forbidden rather than required to be escaped?  Answerers have suggested that there is some motivation towards avoiding transmission control characters, but Unicode includes many other control-like characters (consider U+200C "zero width non joiner"). I recognize there may be no good reason for this behavior, but I would still like to understand it better.  It's particularly frustrating because when those character values appear in other encodings data formats, I end up "double-escaping" new XML documents that need to encode this. How to encrypt individual folders? Let's say that I have a folder, within my Documents folder, that has files I want no one to access without a password.  Is there a way to lock down that folder so that it's password protected / encrypted?  In fact, is it possible to password-protect any individual folder? When should I use double or single quotes in JavaScript? console.log(&quot;double&quot;); vs. console.log('single'); I see more and more JavaScript libraries out there using single quotes when handling strings. What are the reasons to use one over the other? I thought they're pretty much interchangeable. How soon can I re-enter the USA having stayed for 90 days under the Visa Waiver Program? I am currently visiting the USA from the UK (I am a UK citizen) and am intending on staying here for the full 90 days under the Visa Waiver Program.     How long would I have to stay out of the US at the end of this period before returning again?    Would I have to return to the UK, or could I stay with friends in another country (such as Canada) for a while? How to determine the maximum number to pass to make -j option? My Applications are not showing after upgrading from Ubuntu 18.04 to 20.04 Ever since upgrading to Windows 10 1903 the other day, my CPUs have all been pegged at 100%.  "Antimalware Service Executable" is using 60%, and "Microsoft OneDrive (32 bit)" is using 35% (with the other 5% being spread amongst everything else running).  After running like this for a day or so my computer case (Surface Tablet) is smoking hot.  How can I find out what's causing this problem?  Is there logging I can review for those services?  Known issues with 1903 that I just can't find on Google? In Chamber of Secrets, in the first Duelling Club class, Snape suggests Malfoy use the Serpensortia spell against Harry. This of course reveals that Harry is a Parselmouth, but how could Snape anticipate this? Was there any reason for Snape to suspect Harry is a Parselmouth? Or was it just a way to laugh at how Harry would get frightened? How can I make a script run automatically after gdm login and logout? I have a setup where my users log on using ldap and it works just fine.  I want to run a script after my users login (its a script that will detect which groups they are in and map network shares accordingly), and after they logout (umounting their shares).  Both scripts are done and they work.  I want that when the user logs in the box a script runs downloading the mounting script from my server (wget i guess?) and runs it, same thing for logout.  Can it be done? I've been searching the net and had no luck so far. I've managed to make that work on shell login/logout, but my users dont even know what shell is and have no use for it :) Visiting Iran as a dual EU-American citizen Pass shell variable as a /pattern/ to awk Having the following in one of my shell functions:  function _process () {   awk -v l="$line" '   BEGIN {p=0}   /'"$1"'/ {p=1}   END{ if(p) print l &gt;&gt; "outfile.txt" }   ' }   , so when called as _process $arg, $arg gets passed as $1, and used as a search pattern. It works this way, because shell expands $1 in place of awk pattern! Also l can be used inside awk program, being declared with -v l="$line". All fine.  Is it possible in same manner give pattern to search as a variable?  Following will not work,  awk -v l="$line" -v search="$pattern" '   BEGIN {p=0}   /search/ {p=1}   END{ if(p) print l &gt;&gt; "outfile.txt" }   '   ,as awk will not interpret /search/ as a variable, but instead literally. Can I use PCA (or should I use regression) for testing the effect of multiple variables on one dependent variable? I have 2000 soil property measures and 14 different variables like rainfall, temperature, slope, etc. I want to check the effect of those 14 variables on soil property measures, including which variable affects my soil property the most. Is PCA a suitable solution to this? Or should I try multiple regression instead? Do new wire runs in an existing ceiling need to be stapled down? I've heard some people say that code requires wiring in the wall to be stapled to framing every so often (how often?), but when you are doing a remodel, is that necessary?  I have a two story house, and would like to remove one standard dome light on the first floor ceiling and replace it with 6 recessed lights.  There is about 12" of empty space between the floors, and it seems easy enough to run the wire from light to light without cutting any drywall except for the 4-5" holes required for the lights. However, there's no way I'd be able to staple the wiring down.  It's just going to be loose in the ceiling, running through a small hole in the I joists every once in a while.  They sell "remodel" light cans that are made specifically so you only have to cut a hole big enough for them to fit in, so this seems like a common job.  What am I missing and how can I do this job in the most correct way?  This is in Dallas, TX, single family residence. For symmetric stable distributions, why is $\alpha \le 2$? How to retrieve the content/file in JSP? How did Jaqen H'ghar get caught? Following a recent 9gag post:    Did Jaqen H'ghar end up in that cage because he knew that he would meet and "recruit" Arya, or was it some strange coincidence? Is it described somewhere in the books, or left unexplained? I watch a lot of old movies, and I've noticed that American actors of the 1930s and 1940s often spoke in a quasi-generic-posh-British accent.  Katherine Hepburn's accent would be the perfect example. It seems exaggerated, and I imagine it was not common off the stage and screen. What was that? Was it just an accent or was it a dialect? Did real people actually speak that way?