PDQ Live! : Using your VPN to manage your remote computers with PDQ

------

Brief overview about connecting to service manager, copying files then returning files all over SMB.

Basics of Deploy. :56

Scavenging. 4:03
This may be a time that you can decrease those intervals.
Record
Zone
Server

DHCP Relay 5:04
Configure DHCP server to perform authoritative DNS updates for leases that it maintains. This can be done on both the scope and server level.

Question: What's the best way to handle DNS for VPN clients? That seems to be the biggest issues we are facing. DNS is out of date. 6:44
PDQ Inventory Settings

Ping before scan/deploy. 7:40
PDQ only sends a single ICMP packet, if null response the device is considered “offline” in a VPN setting this can be too aggressive.

Reduce scanning. 8:35
Consider reducing the amount of concurrent scans / deployments in order to not disrupt productivity of daily operations.

Question: Our clients create a DNS record automatically, but we need to manually flush DNS on the PDQ PC frequently. To have the clients register their DNS, we enabled on TCP/IP Properties the “Register this connection's addresses in DNS” option. 9:48

Question: Our company currently uses Microsoft Direct Access which utilizes IPv6 to PDQ. Are there special considerations I need to make or change in Group Policy to allow PDQ to push updates to those clients? 11:24

Question: We are starting down the road of eliminating VPN as a need for our company. Do you have any plans to allow for PDQ to work via cloud deployments? 12:30

Question: How can VPN clients register IPs on a DNS server configured for secure dynamic updates if DHCP owns all the DNS records? 13:08

Question: Will PDQ work over a Sophos VPN? 15:19

Question: Is there a way to deploy to computers with a NAT setup between them and the PDQ server? 17:06

Question: The subnet of our VPN is 172.27.224.0/20, and our main subnet is 192.168.100.0/24. How can I deploy from the 192 sub to 172? 17:46

Question: We have started the "Work from Home" initiative and need to make a change to the AT&T VPN client. I have worked with AT&T and received a registry file that I need to deploy, but every time I use PDQ Deploy it fails. What is the best way to apply a registry file to PC's? 18:47

Question: DNS lookups fail for VPN connected computers. So I am constantly finding users / computers in RAS to find their current IP. Is there a way for PDQ Inventory to find computers on our VPN subnet and translate the hostnames / IP addresses to PDQ Deploy? 20:05

Question: Recently changed AD DHCP to use "DNS dynamic update registration credentials", but some DNS records are owned by the machine instead of the user. Fix? 21:11

Question: Is there a way to schedule a task via PDQ Deploy to help refresh DNS on remote laptops? 24:34

Question: ​DHCP addresses are issued by the vpn. How do I get that into inventory? 25:25

[falkirk]

Thank you guys for this nice introduction, but please go forward for a cloud based or server/client based software deployment!! Your PDQdeploy client was the right way.

[strikesbac]

@7:42 audio for the questions segment is screwed up. You also have about 20 of blank screen at the start of the video. Appreciate that you really rushed to get this one out due to Vimeo being flakey. :)

[butchford]

What if you firewall I’d providing DHCP for the SSLVPN connected computers?

[green]

Inexperienced question: if I have users with VPNs on a 192.168.94.x but the 3rd octet differs from our main DHCP scope do we need to add that .94.0 scope into the DHCP? Are there any risks in doing this? We can ping the VPN user IPs and they are updating in the DNS, but scanning/deploying is not working in PDQ. Computer unreachable or offline.

[leerit]

FYI, for our Meraki MX client firewall, we found a tweak on the client VPN settings (something you can actually script as an update to the rasphone.pbk file) fixed it so that our clients register with our DNS server when they connect:

[johnhartsell]

Any instructions for using Microsoft Direct Access?

[FREAKING_HORRIBLE]

this is such a good tool! also thanks for the damage control from yesterday, shame that livestreaming was a bit of a hassle. but this is super helpful as of now!