The subject of a young sysadmin in a small business?

Question

System administration

Good day to all, there is a small company with ~ 30 PCs, they are spaced into 3-4 offices, there is a person who was appointed responsible for all this good, that is me))
I seem to be not with crooked hands, I know a lot but up to the system administrator I’m very far away, I’m rather enikey ..
And I had a lot of questions that hadn’t occurred to me before because I didn’t come across, but I want everyone to work well and pleasantly, and questions, for example:
* Windows completely died, what is the best thing to do, just install from scratch or can you prepare an hdd with a ready installation and just change it to a new computer and install firewood or can you make some kind of backup with Acronis and deploy it on a dead PC? Everyone has a piece of computers and I don’t want to interrupt for a long time, and after work I don’t feel like messing around ...
* how to help everyone remotely if I’m in another office, teamweaver is expensive, there are many analogues, just which one to choose, ordinary RDP does not really save
* how to make backups for all users, and store them in one place on a corporate server?
* What are useful bootable flash drives for prompt repair, treatment of viruses and other things?
what will give advice concerning service and in general administration of all computers? Thanks

Answer 1

just install from scratch or can prepare hddE

If the system has crashed, there must be an image of the system disk. Deployed from the image along with all installed programs and user settings in five minutes.

how to help everyone remotely if I'm in another office

Since this is your organization, then RDP. If you need to interact with the user - the same teamviewer works quite well with occasional use.

how to make backups for all users, and store them in one place on a corporate server

Backups are made for all important information, as well as configured systems are backed up so as not to reinstall if something happens.
A backup of important information is stored not in one, but at least in two places.
But system backups - one storage location is enough.

what kind of flash drives are useful bootable for quick repair, treatment of viruses and other things?

Regular installer. If you need something else, it's easy to add.

Answer 2

There must be a replacement computer with pre-installed Windows and a basic set of software. When a workstation crashes, it simply changes, and then a separate disassembly is carried out with a broken one.
From here, in particular, it follows that there should be no documents on the workstations. None. No way. All working information - only on servers. And only servers are backed up. Workstations are consumables, broke down - threw it away and installed a new one. Then, from three broken workstations, you can assemble one in your free time, for example, but there should not be valuable data there. Whoever stores the documents on a local disk - take him out into an open field, put him face to the wall and put a bullet in the forehead, so that he remembers the director on the carpet for life , with an explanatory note on the topic "why puts the company's data at risk."
Yes, and ideally, workstations should not see each other over the network at all. Gateway and server segment only. Well, printers, for example. Achieved using PVLAN, for example. Or at least the firewall settings on the workstations to prohibit traffic between them.
I don't really understand why RDP doesn't help you much. Maybe you're cooking it wrong?
As correctly noted above, antiviruses should not be on flash drives, but should work on all workstations, and be continuously updated.
Internet access - ideally only with a passport through a proxy. With mandatory logging - who, where and why. Squid knows how to use domain authentication, so you don't even have to enter a password when accessing through a proxy. Well, you have to set it up, of course, first.

Answer 3

* Windows completely died, what is the best thing to do, just install from scratch or can you prepare an hdd with a ready installation and just change it to a new computer and install firewood or can you make some kind of backup with Acronis and deploy it on a dead PC? Everyone has a piece of computers and I don’t want to interrupt for a long time, and after work I don’t feel like messing around ...

Well, if there is a la Ulya, it’s completely already for him, then of course it’s easier and faster to reinstall.
Well, when I worked for a long time in our office, everything was the same computers and I already had a flash drive with all the necessary firewood, etc., etc., and I just deployed it to one or another computer if necessary.
But right now, I don’t see the point in this, it used to be hdd, old Windows that were installed for an hour, etc., etc., but now what?
I stuck a flash drive, everything was put on ssd in 5, well, 7 minutes maximum with all the firewood, etc., etc.
Hmm... Well, I use mine and reinstalled everything a couple of times, as he bugged me that, like, buy a face. And right now, it's probably been a year and I calmly go to whoever I need. Didn't pay anything. Or what are you talking about?
Yes on the server. Backups can be configured once / 2/3/4/5 per day or as long as you need through the Windows task scheduler. You can also set up synchronization.
In most cases, Malwarebytes and hitman pro help. Well, and so on kraynyak you can if you download dr.web as for example. In general, we had Casper antivirus at that time for everyone (I don’t remember how much they paid).
Well, I always had 3 flash drives for 2 Windows, there was one and the same for all computers. and on the 3rd I always had up-to-date programs from viruses and all sorts of the most necessary ones, the same everest is acceptable. And I also remember that I always had a set (the director bought it for me) in it there were screwdrivers and all sorts of small bolts for fastening the screed, etc. office for a minute on the screed in the case cracked). Printers / faxes / scanners the dir himself served here I won’t tell you (well, I think there’s nothing complicated in the internet of information).
All the same, as you work for a couple of months, everything that you need and how you need will be formed.

Answer 4

1. A clean install is always better, although there are Acronis fans out there. (On the SSD is really 10-15 minutes).
2. The one that is more convenient and cheaper must be chosen (at least Chrome Remote).
3. I liked Veeam (because there is a free client), but you can use standard OS tools.
4. Learn how to make your own multiboot or keep antiviruses, memtests, hardtests, etc. on a bunch of different flash drives, the main thing is not to get lost.
All computers in the domain so it will be easier with software and settings at least.
On the server, google and read Rand Morimoto.

Answer 5

Didn't start right. Windows .., network between offices ... mb, domain ..., what kind of software do people have ..
My approximate fantasies:
1. OS image using microsoft utilities - configured and updated (drivers and others can also be integrated into the image as and the necessary software, you can install scripts or a domain in the "silent installation" mode). Usually in 30 minutes we get a finished PC.
2. ultravnc
3. Everything depends on what we will backup. It is possible both by means of the OS and by third-party tools
4. Flash drives and so on, choose what to store there. It all depends on the direction of the organization - usually the Internet is distributed through a proxy and it is controlled who is allowed where. Flash drives are locked to those who do not need them at work. Antivirus is better for organizations, which will allow you to control all workstations without getting up from your chair.
ZY Learn scripting languages, it helps a lot in your work, especially if the domain.

Answer 6

Reinstallation of the server OS - from an image that is made constantly, the frequency depends on the importance.
Reinstalling custom OSes - from scratch or from a clean system image + mandatory software. Images of clean systems should be updated at least once every six months.
Remote access software depends on network availability: on the same network: rdp, remote assistant, radmin, if there is no availability, organize vpn between offices.
Backup - google robocopy, clonezilla, veeam, acronis. You can also buy / assemble a good distributed storage and store all the data there, or purchase a place from cloud providers

Answer 7

Make a network storage, let the employees throw important information there themselves
. It will be necessary to backup only it and not the entire fleet of machines
. Still, raise the domain on Windows and all software and firewood and network printers with policies
.