this post was submitted on
83 points (93% like it)
89 up votes 6 down votes

reddit is a source for what's new and popular online. vote on links that you like or dislike and help decide what's popular, or submit your own!

all 72 comments

[–]len69 53 points54 points ago

Be truthful and state your case to your bosses.

If they don't give you the budget you need to guarantee a minimum amount of security and backup procedures, there is just so much that can be expected of a sysadmin.

Sometimes it takes a disaster for non techs to understand the importance of spending the correct amount on building in safety measures.

[–]snowsunWindows Admin 27 points28 points ago

This. Also try to have all the requests/denials documented - i.e. do not discuss these issues only in person. Always try to address these issues via mail - with detailed description of problems at hand, possible solution that you recommend and possible consequences in case the solution is denied. Then archive these e-mail conversations in a safe place.

[–]brodel2Network Admin 9 points10 points ago

I try to do this with all of my recommendations where I work where I know they are taking a risk like this. I keep them for legal reasons mostly now since the last time I brought them up after an issue I was told not to "confuse the issue with facts".

Now our mission critical windows 2000 servers with no backup software installed on them is just another ticking time bomb as far as I'm concerned.

[–]rdinsb 10 points11 points ago

No Server 2000 should still be in production at this stage in MHO.

[–]brodel2Network Admin 2 points3 points ago

I couldn't agree more. Unfortunately my push to get the business to move off of it has been seen as unnecessary and would cause too much work for other parts of the business. Also a lot of the apps that we have either will not run or are simply not supported by windows 2000 so going to a higher version would mean an upgrade cost.

The servers that front end our payment processing and claims as well as run the nightly cycles that get the claims generated are all windows 2000. For these there is no support at all since the company we got the software from went out of business years ago.

[–]commandar 8 points9 points ago

At the very least, I'd be doing everything I could to get those boxes virtualized.

[–]cerettalaF*ck hyper-v, seriously. 2 points3 points ago

This.

At the very least, virtualizing them would make backing them up 10x easier.

[–]brodel2Network Admin 1 point2 points ago

I guess one good thing is that our environment is about 98% virtualized. None of these are physical anymore. The last one was P2Vd about two weeks ago. That said, one of them is in another state running on one isolated ESX host on old hardware that we acquired from a company we recently bought. No backups on this one..

[–]sm4kWindows Admin 6 points7 points ago

The real benefit of this level of CYA is that you'll wind up making the "you're an absolute idiot for not going with this recommendation" point without even really trying. Setting a laundry list of risks/side effects and having it all in writing is both scarier and harder to ignore.

[–][deleted] 2 points3 points ago

Exactly, OP needs to tie risks to spending levels for management. "Current level of spending implies these risks. My plan to mitigate these risks will cost this much. A middle ground spending plan would leave Y risks but mitigate X risks." Preferably as a powerpoint ;)

[–]nedrubwerd[S] 7 points8 points ago

I've already sort of done this dance before. After it happened the first time I pointed out the fact that I have all the responsibility but none of the perks of having the responsibility, like a set budget or real decision-making authority or the trust of my recommendations.

I was told that those things would come for the umpteenth time in the two-plus years I've been here. I'm starting to get sick of putting up with it.

[–]ISO3103 0 points1 point ago

Unfortunately it seems like this is the case in alot of SME's,

I feel your pain.

[–]SEA-SysadminIT Manager, Analyst 31 points32 points ago

Get out. Fast. Nothing will be more detrimental to your resume than having been fired. This company will never pay you a decent salary, give you a raise, or offer you an opportunity. You have already reaped any benefit of working there. Stop thinking about this and asking people- you know exactly what you have to do.

[–]mscmanHPC Systems Engineer 10 points11 points ago

Nothing will be more detrimental to your resume than having been fired.

Not entirely true... First of all, you don't have to put on your resume you were fired, just that you aren't working there anymore. In the interview, you then explain why you were let go. If your resume is good enough and you can show your skills in the interview, it's usually pretty obvious that your previous employer was too frugal and tried to pin the blame on you.

[–]sm4kWindows Admin 3 points4 points ago

It's really all about how you control yourself in that situation. Acknowledge you were let go, talk about it briefly, and move on. Do not speak poorly of your old employer if you can avoid it.

[–]SEA-SysadminIT Manager, Analyst 1 point2 points ago

Disparaging your employer to make yourself look better is not really beneficial to you in almost any situation. It's advisable to get out BEFORE it comes to that. In an interview, I'd much prefer to leave on good terms and explain that I "found their philosophy of IT limiting and I am looking for an opportunity to grow" than explain "they fired me, but they're stupid. Let me tell you the ways.". Because seriously, the person who gets fired probably always says that!

[–]iamadogforreal 1 point2 points ago

THIS. Just state the case in the future using all the facts at your disposal. If I was hiring you and you told me about them in a professional manner I'd sympathize, if you went on a rant about how they sucked and everyone is stupid there, I'd worry that the problem might be you or at the very least you're just unable to remove your emotions from your job.

[–]spifSr. Systems Engineer / Ninja / Lyrical Genius 1 point2 points ago

I've been involved in hiring for about 11 years now. Being out of work is never a plus, unless we know there was a big layoff somewhere. But far, far worse is badmouthing a previous employer.

I've fallen victim to the temptation in the past, myself, especially when directly asked questions like what I didn't like about an employer or why I left. Particularly if the usual "I got an offer I couldn't refuse" answer doesn't satisfy. Frankly I don't know why some interviewers insist on going that route.

Bottom line, if OP does get fired as a result of this, they need to try to smooth over why they left. Sometimes people get let go for stupid reasons, but in my experience there's rarely a good way to explain what happened.

[–]catherinecc -1 points0 points ago

In this economy, it's unlikely that you'll even get an interview.

[–]ogrefJack of All Trades 0 points1 point ago

Truth

[–]MonsieurOblongSenior Systems Engineer - Unix 0 points1 point ago

I don't know where you live, but the valley is hiring like mad.

[–]robot_stevemod_probe sanity 2 points3 points ago

I agree, I used to work for a private college that was like this, they were worried more about the immediate amount of money they had to spend then the amount of money they would lose if something happened. Invariably they ended up losing tons of money and management never accepts blame for refusing to approve the purchases/training, etc that would have prevented it. The blame always came back to IT and "why weren't we doing more", even though more was always shot down for budgetary reasons. Eventually I was let go in restructuring, thankfully not for something disastrous, but in the end I realized it wasn't worth it and went back to school and found that other shops don't operate like that. I realized, they deserve to sink if they don't deem their own business data important enough to secure it. It will look bad on you and you don't want to be the guy manning the engine room when the whole thing blows.

[–]MonsieurOblongSenior Systems Engineer - Unix 0 points1 point ago

Yep. Get out. You don't have to be anywhere near an environment this miserable.

[–]whateverradar 20 points21 points ago

Let me give you the best piece of advice:

Stop bringing them problems and start bringing them solutions.

give them options:

For X cost I can have us back up in x time For y cost I can have us back up in Y time.

I would prefer x, even though it costs more because it will prevent situations like this from happening again.

[–]nedrubwerd[S] 13 points14 points ago

Did this too. The last time this happened (first drive failure) I sent it off to a data recovery center and once the quote came back there was "no way in hell" we were paying that (edit: about 1400 bucks) to get the 100% recoverable data off the drive. So we went with an old copy of the data I had laying around on this old drive and ran with it. I don't know how many more times I can handle it.

[–]Hexodamis a sysadmin 5 points6 points ago

You have it bad, can you afford to buy an external USB disk?

If you can then you can just script xcopy to make a copy of the files daily. At least it beats hd recovery.

[–]nedrubwerd[S] 3 points4 points ago

That solves the problem of backing up one of the servers... we have three others, and even then none of the backups will be offsite. Management wants stuff done right but doesn't want to cough up the cost to do it right.

[–]hogiewanConsultant/Tech 3 points4 points ago

don't worry about offsite right now if you have to stay up late recovering data off a borked drive. Get a backup in place now, then worry about offsite

[–][deleted] 2 points3 points ago

Heh, back when I was in OP's shoes, "off-site" meant taking the USB drive home with me after the backups were done :-p

[–][deleted] ago

[deleted]

[–]lordmycal 1 point2 points ago

Then they have to wait a day for their restores, which is leagues better than not being able to restore anything. Just take a daily/weekly backup home with you every night and encrypt the drives with truecrypt or bitlocker to go.

[–]anaxx 0 points1 point ago

I used to keep dailies onsite and weeklies across the street in a safe-deposit box at the local bank branch. I'd walk my weeklies across the street on Monday and bring back the oldest tape in the weekly rotation.

[–]Hexodamis a sysadmin 0 points1 point ago

The best you can do is to give them a few options, cost and benefits. Then whatever they choose is fine, if something happens that is not covered then you can just point to that decision and carry on

[–]irth944 0 points1 point ago

Get 2 external HD and rotate them and take one home with you. I'm sure management won't like you taking their data. But what else can you do if they don't want to invest in their IT infrastructures and the companies best interest.

[–]catherinecc 1 point2 points ago

A 2tb external is like $150-$200. Just fucking get one, set it up as a network share and use ntbackup daily / whatever.

Email to management today "data was offline for x hours as a result of a drive failure. This could have been avoided by having backups and following industry best practices. If there is no money invested, this hardware failure will occur again, likely within the next year, data lost may be irretreivable and it may happen during business hours"

Personally, I'd just buy a new drive and the backup drive outside of business hours and submit the expense for reimbursement. Sorry, had to get the company up last night, no, it wasn't optional.

Also go to the bean counters and ask for an estimate of your company's hourly salary costs. With 45 employees and 5 partners (lawyers I presume?), an hour will probably be in the thousands of dollars of lost productivity. Include that number in an email to the 5 partners. Make them see that a few bucks on IT will save them thousands or tens of thousands of dollars. Document prior downtime figures.

Virtualize those servers and store the VM for when those decade+ old servers die.

Finally, THERE ARE NO MORE OLD DRIVES YOU CAN USE. I don't care if there is a closet full of them, they don't exist anymore.

[–]Qurtys_Lyn 1 point2 points ago

There is merely a closet full of target practice.

[–]catherinecc 0 points1 point ago

:)

[–]Infra-red 0 points1 point ago

Did you ask them about using that money for a investment in redundancy? A second server to mirror the first one or some similar thing?

Spending 1400 on a data recovery centre isn't bringing them a solution to the underlying problem. If you have have not proposed how to improve the reliability and redundancy of your systems then you aren't bringing solutions.

[–]whateverradar 0 points1 point ago

Do you have ALL that shit on one server?

www.crashplan.com

[–]nedrubwerd[S] 0 points1 point ago

No, all our other machines are running just fine, aside from the no automatic backup issue. This machine just stores data for one of the programs we use.

[–]ajdaneWindows Admin 0 points1 point ago

backblaze.com is another option.

Running without backup in production is just silly...

[–]XdesHobbyist Admin 0 points1 point ago

$50/year/server

[–]UnoriginalGuyKVM: like typing through treacle 0 points1 point ago

Crashplan for several hundred gig of data doesn't work very well. Fine if you want to backup your "My Documents" however...

[–]whateverradar 0 points1 point ago

I personally use backblaze; however it won't install on servers.

My backblaze is just a tiny bit over 2 tb...

[–]iamadogforreal 7 points8 points ago*

Sorry, but I worked in a similar environment for a short while and chose to get a new job. If you make the case for RAID (hardware or software) and they won't go for it, then they're too rotten to fix. A server without RAID isn't a server, its a desktop pretending to be a server.

Just the idea of putting a used disk in a server sends shivers up my spine. Disks are constantly failing. The fail rate for a disk jumps up pretty high at the 3 year mark and then gets pretty bad every year going forward. I find most of my fails are early on (within 6 months) or at the year 3 mark. I can't imagine putting in a 2 or 3 year old disk into a server without RAID, or even with RAID! You bosses should really understand that if this was a major fail, say multiple disks all going out, they've more or less cost themselves 10x the cost and time of preventative maintenance.

[–]phrstbrn 6 points7 points ago

It's highly unlikely you're going to change your boss's mind. Basically, there are two outcomes:

1) Your boss's boss will take the heat, be the fall guy, and then you might see some changes. This only works if your boss isn't the head honcho, and your boss isn't chummy with the head honcho

2) You'll be the fall guy

It doesn't sound like your boss is taking you seriously, so either he's going to fail or you're going to fail. You probably know better than I which scenario is the more likely outcome.

It's possible things will turn for the better for you, but if it's been more than a year and they don't take you seriously yet, it's likely not going to change anytime soon, if ever.

All that said and done, do you really want to be there when shit hits the fan hard enough that they have to make some changes? Of course assuming you don't take the fall for it first.

[–]nedrubwerd[S] 2 points3 points ago

I report directly to one of the five partners in the company, one in particular who claims to know my job because he did some IT work in the air force in the mid-late 90's. All my attempts to bring anything to any of the other four are met with deaf ears.

I think I know how things will likely go down.

[–]togetherwem0m0 7 points8 points ago

Just get out. I worked for a company 5 years ago with the "5 partners" thing. It was an endless "pass the buck" operation where each had their own fiefdom/responsibility area.

No one is there to head the ship or set the tone. Just leave, find a new job. Nothing will ever get better.

[–]l4than-d3versJack of All Trades 1 point2 points ago

This should be the top comment.

[–]NatasReficul 3 points4 points ago

Ya gotta speak they language. Throw down some figures for down time, lost data, man hours, etc. Ask them, how much their data is worth to them? With 45 employees, a couple hours of downtime can be a sobering figure.

[–]Qurtys_Lyn 0 points1 point ago

Always have the money figures. Nothing speaks louder than old Benjamin.

[–]beedogs̅̅̃̄̅̂̂̈̄̀̀̀̀̆̄̂́́̀̄̀̂̂̂̈̈̃́̂̆̂̀̆̀̃́̆̀̂̀̀̈̆́̀̀̂̄̃́̂̂̀̋̀̂̃̂̇̃̌̊̆̃ 4 points5 points ago

ugh, get out ASAP.

[–]g-me 3 points4 points ago

Very similar situtation to me.... Even today I am rebuilding from a failed drive and restoring.

Try and get users to nudge management. Say to them that when X was down for X hours Y amount of workers couldnt work.

get the users frustration onto managmenet to make them more aware of the issues

[–]TheGraycatChief Geek 3 points4 points ago

Have you done a full DR or risk review for them? Basically break down all the risks, what they are, where they are and what the cost to the business would be if something happened. Make sure you spell out down time in cost per hour to the company (not just your time but lost time, project delays, other staff sitting around doing nothing etc etc). Then outline some solutions and their costs.

Once you've given that to them it's a business decision and not yours any more so you're off the hook.

In the mean time you can start looking at low cost / free solutions yourself :)

[–]gjaulwes 1 point2 points ago

Not that I disagree with your assessment, but given that he has to work on a shoestring budget, he's probably spending a large part of his time fighting fires that could be handled more effectively/efficiently if he had any available resources.

[–]nedrubwerd[S] 0 points1 point ago

This. Sorry I'm not responding more, tons to do...

[–]gjaulwes 0 points1 point ago

Been in your position, completely understand. It would be great to have time to do a full risk review so that you can scare the crap out of the skinflints, but often there isn't enough time in the day.

[–]TheGraycatChief Geek 0 points1 point ago

Sorry to be harsh but there's always time for the important stuff.

I understand where the OP is coming from as I was in the same position previously. It took a few good outages and me waving the very basic risk report at the bosses before they realised what they were actually doing.

It takes more time from an already busy day to get done but it makes life a lot easier in the long run. Doing nothing but fire fighting is not going to change anything by itself.

[–]gjaulwes 0 points1 point ago

I don't disagree with that sentiment either. However, when you're dealing with skinflints that feel you're little more than computer maintenance, they aren't likely to be okay with sitting at your desk going doing paperwork while the fires burn. He's between the rock and hard place, and probably better off elsewhere, but depending on his situation, staying employed short term may be more important for him personally.

[–]sylver_dragonDigital Janitor 2 points3 points ago

Definitely feel your pain. One man shops have a bad tendency to rely heavily on bubblegum and bailing wire to hold everything together. At my last job, I felt such a sense of relief and joy as I turned off my last Win2k box for the last time (In 2008). This box had been a used HP server bought on EBay and was originally running damn near everything.

As for "solving" your issue. If you have a few spare hard-drives hanging about and enough parts to boot something, you might consider putting together a very basic backup server, toss a bunch of disks in it and setup a software RAID. Grab an OpenSource backup solution (Here is one which jumped to the top in Google). And just get something for the business critical stuff. Given the lack of resources, you are probably going to have to slice and dice the data very thin. Just get the stuff to allow bare minimum operation. Your users may have to supply you this information; to which they will reply, "it's all critical!" You'll just have to work them down to the basics.

Best of luck to you, and keep telling yourself "this is a great learning experience." Once you hit the 30-odd hour mark, you should be too tired to realize it's bullshit and it'll make you feel better.

[–]Skyline969Windows Admin 0 points1 point ago

When it comes to an open source backup solution, I've been using Areca for a few months and I'm quite impressed with it. I'd recommend it.

[–]castufariIT Manager 2 points3 points ago

Document, document, document. When I have problems like this I email the director and financial people and let them know what has happened and what the solutions are. I end it with a "let's meet about this asap", then follow it up with an email, one that I send to myself. I try and use return rcpts.

In my old job we had a server that was failing. The box was 7 years old when I took the job, they wouldn't buy a new server nor would they buy new hard drives. They would - in 2001 - buy flat panel monitors for the "police" because they had an application that "wouldn't run on CRTs" (the vendor said it didn't matter, the "chief" had the sales rep put this on the quote and told the guy that if he didn't mention the monitors, they'd get no sale). The tape drive failed so I was manually copying everything to another box at night. A few weeks before I left the server bought the farm and they were trying to fire me. I told them that they'd be welcome to but, before they flamed me to staff, to look at my emails and notes about what was failing and what needed to be replaced. I got a new server out of it. :\ Then I quit.

Also, work on your own documentation - your resume.

[–]NorthStarTX 3 points4 points ago

The only problem with "document document document" is that it requires that you have someone to present that documentation to. If your management is too technically incompetent to understand your documentation or too stubborn to spend money to fix the problems it outlines, it doesn't matter if you've got more documentation than the library of congress.

[–]castufariIT Manager 1 point2 points ago

If they want him out, he's gone but if there is failure at least he'll have something to throw at them before he leaves.

One of my friends worked IT for a place in GA, they'd spend money on nothing. He felt that it was his job to make sure everything ran, he ended up buying replacement parts out of pocket. Drives, memory, etc, all came out of his crappy salary.

[–]erkuritaLinux Admin 0 points1 point ago

Yep, pretty much like this.

Right now I'm working (for a few more days, about to be laid off) as a programmer. Big mistake, I know, but I too have bought things to improve my production and efficiency: a bigger monitor, a video card (to connect my old and new monitor), better keyboard, among other things.

The difference is that I'm taking them with me when I leave, but when I start working as a sysadmin, I may do it again. Because I'll be damned if my (I hope) soon-to-be babies cannot perform as they should.

And it'd be the day I'd quit my job.

[–]castufariIT Manager 1 point2 points ago

Buying stuff to make my life easier isn't a problem. I bought memory for my PC and laptop, and some software I purchased too. I let them know about it, the rcpts of which (copies) are in my HR file so when I leave they'll know what's mine. They don't have a problem with it.

Sorry to hear about the layoff, I hope you find something else quickly.

[–]xenu99 2 points3 points ago

You need to speak in terms they understand, dollars and time, not technical.

$500 drive vs 45 employees.

$500drive/45employees =11.11 each. Assuming they are on $12/hr, the down time for 1 hour would equal the cost of the drive.

How much down time is going to be caused by the lost backups? How much business is that going to cost them. Heck, tape drives are dirt cheap now days. A decent back up system with offsite storage will cost under $10k/yr, which is probably a pittance compare to what lost data will cost them, that is, unless of course, they want the data to be lost for, um, accounting reasons.....

[–]dtfinch 1 point2 points ago

They're gambling the company to save $50 on a hard drive, $500 on a backup server.

Though it's good to document these things (management has very bad memory when the time comes to point blame), it doesn't help much if the company goes under anyway.

At an early low point at my job, I had servers backing up the most important data to each other, and spare backups on my own desktop. No redundancy. No air conditioning. One domain controller. It got better though. Fear set in, and now everything's on raid 1, with multiple backups, onsite and offsite, keeping multiple past revisions. I don't have identical spares of our Windows servers for test recovery though.

[–]spifSr. Systems Engineer / Ninja / Lyrical Genius 0 points1 point ago

I hope you've been putting all this in writing, including requests for resources to do backups, and detailed explanations of why you need it and what the potential consequences of not having it are.

The most important thing most admins forget when dealing with limitations imposed by management is to GET IT IN WRITING. Sometimes even that isn't enough, but it's better to do it than not.

[–]HachyaJack of All Trades 0 points1 point ago*

For those that are in our IRC chan: And this isn't even ME!!

Step 1 DOCUMENT ALL THINGS!

Now, furthermore:

rant/

Eh, I have had to deal with this too many times, as IRC knows.

I had to buy used shit, 5 year old machines, for my monitoring boxes...

And, even after that, they wanted me to then cannibalize one of those and put it into a production environment, thus ruining my plans for one of them.

I ended up having to purchase a $99 rackmount server (see unixsurplus.com). Worst part is, again, it's a live DB that runs the heart and soul of one of the companies, their online sales DB for the store.

My new SQL and TS servers are underpowered CybertronPCs which I haven't even bothered to set up yet, time being a factor. I get those and also need to get rails, and am having a bit of a problem with that. I'm like, yeah you kind of need rails. They've even asked me to use an old Optiplex tower with 512 RAM at one point. (I said "fuck you")

My desktop is one of the oldest ones here. The newer ones they got they gave to people who only need to run Remote Desktop Connection, Mail, and Word, all the while I sit here with a 5 year old machine, grinding away when I'm running, well, anything.

It goes on and on and on.

All I can say is that I have had success when planning things out a year in advance and mentioning them with such a window. If you cam tell them that you absolutely NEED something and give probable cause displaying such a thing, it can help. (I'm not saying it will work all the time.) Another thing you may notice is money being spent in other areas that don't need it. DO NOT GET INVOLVED IN THIS POLITICAL BULLSHIT.

Explain it like this "if I don't get this, this goes down, and this and this" "And if THAT goes down we make nothing" or, "you cannot email clients, period"

I have made the mistake of buying/getting underpowered shit and have paid the price. Find out the bare minimal specs, and then make sure you got a couple levels up from there, you will thank yourself later.

Your liver will also thank you.

Also explain that without proper redundancy or another backup machine available, it may be a week (or whatever time you think it may take) to recover everything. And, when you say this make sure they understand that means THERE'S LITERALLY NO FUCKING REASON TO COME IN TO THE OFFICE.

And, if they even START to point to the cloud, they deserve a slow painful death.

/rant

[–]diachi 0 points1 point ago

Sound exactly like my work ... number of offices and everything. As suggested elsewhere and be truthful with management. Other employees might get your back too - in my work the lack of money spent on infrastructure drives employees up the wall.

[–]molandsprings 0 points1 point ago

One of the biggest struggles IT people have, of any size department or company, is to communicate in business terms the value of IT expenditures. If you do this correctly you have no blame. Far too often, however, IT people are either silent or aggressive. Neither works well. Not saying this is you, but it's food for thought.

[–]atlanticblueSysadmin 0 points1 point ago

As long as you get paid well I don't see the problem. If you have alerted them to the problems and they don't want to spend any money, 'be it on their own head'. Do what you can to save the data, but this isn't your fault if management declined the use of the required equipment.