We started off patrolling on this range, went down a small wadi, ran into an obstacle sea wire and we proceeded to clear three trenches with mortars and machine guns in support. For them to do exercise like this and turn it on so quick and pay attention to detail and everybody knew the order of movement, it worked really good. They did a fantastic job, they executed this range as well, if not better than I would expect any active duty platoon to conduct it. I direct my squad leaders to pay attention to the junior Marines, make sure they're drinking water, eating chow. I just joined this unit four months ago, so they're not really familiar with me as a squad leader, but I try to kick as much knowledge and go over to small things and I'm always telling them to ask me questions, I have no problem with that at all. They did a really good job out there, the best training the Marine Corps has. I mean a lot of people don't get trained like this, do stuff like this, get you prepared to go overseas. Every day is a new range, a new set of maneuver that we couldn't do back on the east coast and all the Marines love it and they're very grateful to be here and happy to get this training done. I like it, it's nice and hot, gets people out of their comfort zone and makes them focused and it's really good training. I really like it, I love coming out here.


first time chat, im lumbo, im lumbo, hey chi chou, first time chatting you live, I'm interested in what family is currently invested in. I am still more put, puts than calls, indeed, okay. Im lumbo, family right now is, I forget what the percentage is, there's been a lot of trading going on. As far as equities is concerned, family is probably holding 40% of the portfolio in equities, maybe, let's say 50% of portfolio in equities, majority of those are cannabis stocks, because I think they've had a bottom, the family thinks they've had a bottom, okay. So cannabis stocks are the majority of holdings in the family's equity position, the other 50% is options and from that 45% is puts, okay. So about, not the 45%, from that 95% is put, so basically 45% of the portfolio isn't puts right now, which is a huge bet, huge gamble with a possibility of substantial losses, but if it goes the right way, a possibility of gigantic returns, okay. That's approximately what the family's position is right now and the puts are encompassing some high-end fang stocks, tech stocks, as well as some industrials as well, okay. As well as some consumers, consumer goods, textiles, if you want to call it, right.


This is Anna. Anna is interested in traveling and learning about other cultures. That's why she decided to live abroad and teach English. After doing lots of research, Anna found that she can secure much better and higher-paying teaching jobs when she is Tefl or Tesla certified. But which course is right for her? She may feel that she only wants a 60-hour online course giving an introduction to Tefl. She may prefer to attend a 120-hour in-class course in one of many exciting destinations around the globe or take a 120-hour course online with or without tutor support. Anna might want to follow up with a specialized 50-hour course in teaching young learners or teaching business English or if she's already Tefl or Tesla certified she might choose a 250-hour online diploma course or a 30-hour or 50-hour observed teaching practice course. Anna decides to go for the 120-hour online course with tutor support. It offers her flexibility as she can study from anywhere at her own pace and she is up to six months to complete all the course units. She can work on the course units on her laptop, tablet or even smartphone. Plus, the tutor is available to provide clarification and helpful ideas throughout the course. If Anna doesn't like the course in the first three days she can simply take advantage of the money back guarantee offered and this is how Anna can now work through the units. Anna's course control panel is filled with course materials, video resources and of course the course units. Anna can now start to work on her first course unit by reading it online or downloading it onto her computer. This first unit introduces the course and explains its aims and focuses. After each unit, Anna's understanding of the content will be assessed in a short multiple-choice quiz. She then needs to submit all the unit tests and the final lesson planning task. Congratulations to Anna! She has successfully completed her 120-hour course and is now Tefl or Tesla certified. Anna now holds her internationally recognized certificate in hand. Now the only thing Anna needs to worry about is where she should teach abroad. Asia, South America, Europe, the options are endless. Good luck Anna!


What's up everybody? Ricky Caruth here. Look, I just want to share this incredible moment with you. This is the single largest payday of my career. It's $114,500. It's two deals, one's 90 grand and the other's $24,500. Here's the checks from the title company. So thank goodness these actually did go through both of them. Both of these deals almost backed out because of the coronavirus and the entire economic market meltdown that we're in the middle of.  I got a call from a buyer today that we're going to close Wednesday and he told me that he can't do it. He cannot go through with it. This is going to be a second condo. People are canceling trips to come down to his other condo. They're canceling vacations to come and rent the current condo he has. And he said, Ricky, I got to figure out how I'm going to pay the mortgage on that condo. There's no way that I could purchase a second condo right now. So I totally expected this. This is really extremely normal. The market was bound to do this at some point. This is what I've been talking about. This is what I've been telling you guys for years now, everything that I learned in the 2008 crash. This is pretty similar, very similar to the 2008 crash. And the real estate market is, is responding the same way. It's a slow reaction. Okay. Prices aren't just dropping today. This is going to be a slow process of a real estate crash. We're in the middle of an economic start market crash recession, but we are going to fill the effects in the real estate market as well. So what I want you to do is just continue to follow me and all of you that have been following me for so long, you know exactly what to do and you're in perfect position. You know the mentality, you know the mindset going in. Closings are going to continue to happen every day. There's going to be a temporary downturn in your business. The market is going to adjust. We're going to be in this new market and then we're going to keep moving forward. So this week I have a really big treat for you tomorrow. I'm going to go into depth about your business suffering temporarily and what we need to do during this transition, this market transition that we're going through. This is what I've been talking about for years. And let me tell you right now, as far as real estate in your business is concerned, it's about to be payday. This is about to be one of the best times in your career. You're going to make so much money and your database is going to absolutely explode. So this is what I want you to do. Tune in tomorrow to my video on your business temporarily suffering.  We're going to make live cold calls. So definitely tune in for that. Hit the like button, shoot me a comment. Let me know what you think and I'll see you guys tomorrow. Let's go.


My story of change is five years ago when I was doing my PhD, none of the data was available. The story of change has been the ease with which researchers can then access data for research. My story of change has been the improvement of technical capabilities to inform tax policy which betters the social welfare of the ordinary Zambians. Being able to produce recommendations and outcomes that help with the whole being of the country. My story of change is having to apply the skills that I gained during the winter school to be able to impact in the research that I do at the Kenya Revenue Authority. My story of change has been basically improving my own techniques and level of understanding of micro simulation but also the ability to generate cost effective data and evidence that has been very critical in informing and changing our policies in Zambia. When I started the PhD program I didn't know anything about the micro simulation model. I'm now giving support and providing capacity building trainings to experts in sub-Saharan countries. On living wider I since joined the African Darwin Bank but I've also been a fellow at Cornell University. I think wider really gave me an incredible basis for achieving all of these things. My story of change has been to make my research and policy analysis quite simpler and quicker. My story of change is about the ability to communicate my research, share it with a much broader audience, policy makers in the Global South especially. The work that we have done will make significant input into the current policy debate. The ultimate objective is to build up this in-country community of people who are interested in and capable of doing kind of rigorous tax policy analysis, rigorous thinking about the effects of possible reforms. And we come to a point now where we can present our work from multiple countries at international conferences and there's really something to be proud of.


When did Richard never start playing football? I came out the wound playing football my parents. They saw me come out the wound I had muscles. I was ripped up. I went to sleep with my helmet on with my football on the side of me So I was built to play this game What is Richard Evans favorite ice cream flavor? Oreo flavor, that's my favorite one. What is Richard Evans favorite color? black Can Richard never seen? Shoot, I'ma try to Twinkle twinkle little star how I wonder what you are Is Richard Evans faster than a wild horse?


Hi, my name is Dimitri Letkov. I'm from Canonical and I work on Ubuntu full-time. I'm also a Debian developer and I work on all sorts of packages in Debian as well. And I'm here to talk about the new Ubuntu port for the IBM Z systems or some call them system Z or Z system also known as S39GX depending on which point in time you look at things. It is a new port for Ubuntu. However, it is an existing Debian architecture for a few years now. So there was S39GX bootstrap recently and there was S390 before that, which was the 31-bit port instead of 64-bit. In general for quite a few dev cons, we always had the presentations about people bootstrapping a new architecture and this time there's no new brand new architectures in Debian. However, there is S390 export in Ubuntu and it had to be bootstrapped from scratch again, which is a lot of fun and a lot of people enjoy it. The way we did it is we bootstrapped of Debian, so we took Debian installs of Debian's testing, worst table I can't remember, and then we built the Ubuntu tool chain first. Then we rebuilt the minimal-based packages of Ubuntu using the Ubuntu tool chain still on Debian. And then eventually once we had enough things built, we actually cross-graded from Debian to Ubuntu. And then we were finally running on top of Ubuntu, we built all the packages again, upload to Launchpad, we built the packages again, then we've decided to change the tool chain. We had to rebuild everything again and after a few times of rebuilding everything, we finally had a working port inside Launchpad with all the packages built inside Launchpad and everything published on ports.ubuntu.com. So it was fairly uneventful, so there was no lack of hardware because hardware is available, it is fast and stable and in general it was quite easy to do, right? The people who were involved it's the usual people who do a lot of base work in Ubuntu and Debian as well, so Adam Conrad, Mathias Cosay, Steve Langesheck, myself, Colin Watson, and many other people. And you've probably heard of those people being involved in cross-building and the bootstrapping and bootstrapping Debian architectures over the past years. So there's like big kudos to them. It was very uneventful, so usually when we bootstrapped like ARM64 or PowerPC64 EL or etc, you would work with demo hardware or beta-alpha boards and then you would see that the hardware fails during builds or that it overheats and then you have miss compiles and things like that. This was not the case with the mainframe because the mainframe is very stable, so I did not manage to crash it myself. It just keeps on going and essentially you plug in electricity and then three days later you get all of the archive built, all the whatever, 30,000 packages. It was quite nice. Obviously you have build dependency cycles which you need to break from time to time, but once those were resolved everything else would build really fast. There was no need to update config gas and config sub and all of those things because S390X is in existence for a while now. In that sense, and we didn't use cross-building per se, we did cross-build the kernels and the tool chain, but in general we used native compilation throughout. However, if you compare it with the S390X port in Debian, there is quite a few changes and things that we did from scratch or slightly differently or in your ways. So we have a single Debian installer build and we use it throughout on all the different platforms, such that it doesn't matter if you're trying to boot and install an LPAR or a ZVM, or if you're installing inside KVM you still use the same DI kernel, the same DI with the same preset values such that you don't need to change anything or use any different installation media. We do publish Ubuntu server ISO images and they have Alta Rita enabled booting for KVM. They are also a valid installation mirror, so you just grab the ISO and if you can export it on your local network you can do remote installation of that ISO directly without ever hitting archive.ubuntu.com or ports.ubuntu.com. That's new in Xenio, it is architecture independent because the code doesn't rely on anything architecture specific, but it was needed to be done on the mainframe because usually you typically net boot the mainframe and then you have no internet access apart from local network. So to enable that we have signed packages on the ISO image such that it's trusted installation throughout and GPG validated installation. And we do use live build SquashFS instead of running the bootstrap to bootstrap the base system. And we have GPG signed that it's validated and trusted even though it's fetched over a remote network essentially, which can't be FTP or HTTP untrusted protocol. In that sense it's quite an improvement because hopefully maybe in the future I can make Ubuntu desktop images to be installable with DI from the desktop images without ever hitting the network because loads of people still prefer to use DI to install things. We also publish cloud images for KVM and we have legsd images as well. So all of your typical container and cloud workloads they just work on S390X with Ubuntu such that you can have open stack, you can launch instances and you can run containers. That doesn't sound that impressive in the more mature architectures or more mature Ubuntu ports. However on S390X that's quite new so because open stack and KVM support was published upstream not that long time ago. So it's one of the first distributions with long term support which have open stack support built in. I am an EU immigrant and I do live in Britain and I do hope we will stay in the EU. But that's kind of a side note. In terms of the installer we do have a full DI pre-seed support. On the mainframe all of your devices they have to be brought up online manually and you have to configure them manually. It is automated with the help of UDEV but there is still a lot of installer support that needs to be in place which hasn't been there before. I've talked to the port maintainers of Debian just before this talk at the buff and hopefully we can merge all of this work and do it properly in Debian as well. Such that you can do a fully automated unattended pre-seed installations of Debian as well as Ubuntu. In practice that means that you need to activate DASD drives, you need to have support for ZFCP drives and usually part-man auto is nice to automatically partition things if you have enough disk space. All of those things have been enabled and because our DI is generic across all platforms you can use the same pre-seed files irrespective of which virtualization mode you use. I've also added VLAN support after two SRUs to fix it up. Such that you can now finally install Ubuntu with VLAN over the VLAN network only. Which is also nice and also was required for my usage of our mainframe because it's all on VLAN networks only. What's different versus the Debian port? Ubuntu only supports ZEC12 and up so that means you need to have latest or the one previous to that generation of mainframe. So Debian supports much lower conflicts I think it supports Z9 and Z196 and etc. So you do need slightly more recent mainframe. We do have right now an FPI enabled by default inside the tool chain such that majority of the packages unless they explicitly try to disable that. They're built with FPI enabled by default and it brings security features to the whole operating systems. We do not use the legacy FW up and down scripts. They're racy, they're a bit cumbersome to maintain. Instead we use ZDEV tooling only and that means that we generate Udev rules to bring up all of your devices up in race-free manner. We have KBM support and hands-off and stack support and also we build our DI with all the languages enabled such that you have localized DI experience if you don't speak English. In terms of software stacks, I mentioned that previously but we do have up-and-stack available, CloudIn and Golang, GCCGo, LXD, Docker, MongoDB, etc. So all of the typical web-scale things are available and traditional server databases are also available. There is currently lack or less availability of proprietary software or third-party vendor software. However, that's in progress to be enabled and essentially to become available on Ubuntu soon. That's a picture of a Z13 mainframe under the Linux 1 branding. It has orange borders on the side. I have no idea why IBM did that but it's a different type of orange but at least it's nice. Do you have any questions about S390X or what IBM mainframe is or how to boot it or anything? Yes, it does work. So do you intend to contribute the changes that you did to Ubuntu back to Debian and spend time on that? Right. Some changes are in. Other changes, a lot of other changes are still to be ported to Debian. And yes, I plan to work on that in a timely manner, hopefully for the upcoming release before we freeze. Any other questions? Out of curiosity, I'm not sure if you're able to share that but what are Canonica's intentions? Why they're bringing Ubuntu to Z systems? Usually the machines cost a lot of money so it's not... Correct. There is a partnership between IBM Linux 1 and Canonica to bring Ubuntu available. Ubuntu is available on Linux 1 mainframes and it is an engagement with IBM because it has to be otherwise it would not happen. So it is a partnership, there is a joint collaboration, joint support contracts, joint support for people if they want to buy that and all of that. So it is an engagement between IBM and Canonica. And you can see that a lot of Linux 1 developers from IBM teams from Linux Labs do participate in Ubuntu development and you can see it on public bug tracker and etc. And they are starting to contribute to Debian as well so they've contributed DI components and bug fixes here and there. It's not a lot yet but it's more than it used to be in the past. Yeah, I've seen a lot of stuff. Yes, yes. So in practice there is currently quite a few different teams which you can see public contributions to various projects like to MongoDB, to Nova, to OpenStack, to QMU, etc. All over the place. Because for them Linux 1 mainframes is quite important because by default option is to run only Linux and you don't even get options to run ZOS on it for example. So they're trying to push Linux more aggressively on the mainframe and there is benefits to that in terms of IO performance and CPU performance and people migrating from other Z operating systems on to Linux. We still have lots of time for questions. Well, I guess that's it then. Thank you very much Dmitri. Yeah, thank you.


Getting started. In this video, we will be reviewing a couple of the online platforms on which you can make your very own digital portfolio. The three websites we will be reviewing are Adobe Spark, Wix, and Google Sites. Before you jump into the creation of your portfolio, the first step to success is choosing the right platform to host it on. There are a wide variety of websites that allow for the construction of a simple custom page without needing any prior coding or web design knowledge. We will be learning the similarities and the differences between three of these platforms in order to help you decide which option would be ideal for you to make the best portfolio possible. Firstly, we will talk about Adobe Spark. This web platform is included with any Adobe Creative Cloud subscription. You may be able to get a free subscription from your college, check your college's website, or contact their IT department to find out if this is applicable to you. If this isn't an option for you, the regular plan is $12.99 a month. There is also a free version available with limited features, great if you are on a budget. Adobe Spark has 13 pre-made themes to choose from and a wide variety of formatting options for you to display all your information and accomplishments in a visually appealing way. This option may be best for you if you already have an Adobe subscription or want a simple scrollable portfolio. The next platform we will be discussing is Wix. Wix is free by default, but if you require more features, there are a variety of paid plans from as little as $5 a month. Wix provides cloud-based web development services. It allows users to create HTML5 websites and mobile sites using online drag-and-drop tools. Wix has hundreds of templates to choose from that will allow you to create a beautiful custom site. If aesthetics is very important to you, Wix might be the best option of the three, it is probably the most complicated process. If you have a Google account, you already have Google Sites. Google Sites is a structured wiki and web page creation tool, included as part of the free web-based Google Docs Editor Suite offered by Google. There are six customizable themes and six page layout options. Everything is editable and interchangeable, so you can easily make your vision come to life. This option might be best for you if you want to integrate other Google Doc files into your portfolio, or want to make your portfolio very quickly. In conclusion, there are many options out there to create your online portfolio. Whichever you end up choosing, remember that the platform is just that, a platform. It's only the vehicle to show off your skills and personality. The content is what makes a portfolio great and truly unique to you. In the next video, we will begin the digital portfolio process by creating an introduction section.


Hello, Windows Server hybrid administrators. Welcome to this Microsoft Learn Training module, Manage Domain Controllers and FSMO Roles. This module provides an introduction to how to manage Active Directory domain controllers, as well as how to understand and manage the flexible single master operations or FSMO roles in an ADDS environment. In addition to learning about these technical topics, this module also functions as preparation for objective Domain 1. Deploy and manage ADDS in on-premises and cloud environments of the first Windows Server. Hybrid Administrator Associate Exam AZ800. This module is adapted from a module that you can take on Microsoft Learn. The module itself provides more detail and includes knowledge checks to test your understanding. You can follow along with the contents of this module on Microsoft Learn at the address shown on the screen or listed in the video description. The Windows Server Hybrid Administrator Associate Certification is Microsoft's successor to the Windows Server MCSE. Certification has always been important for Windows Server administrators, and the Windows Server Hybrid Administrator Associate brings many of the skills required to obtain the MCSE into the 2020s. To earn the new certification, you need to pass two exams, AZ800 and AZ801. Being successful on the exams requires that you not only understand how to do common administrative tasks such as manage active directory storage, networking, security disaster recovery, monitoring and virtualization on-premises, just like you would have had to for the last few years of Windows Server, but also know how you can integrate and extend Windows Server with relevant services available in Azure. In this module, you're going to learn about the following topics, deploying ADDS domain controllers, maintaining ADDS domain controllers, understanding the ADDS global catalog role and its placement considerations, understanding ADDS operations, master roles, their placement considerations, and related management tasks. And describe ADDS schema, how to manage the schema and its role in an ADDS environment. Domain controllers authenticate all users and computers in a domain. Therefore, it's critical to ensure the optimal number and placement of domain controllers in any ADDS environment, especially in larger distributed environments. The domain controller deployment process has two steps. First, you install the binaries necessary to implement the domain controller role. For this purpose, you can use Windows Admin Center, PowerShell, or Server Manager. At the end of the initial installation process, you have installed the ADDS files, but not yet configured ADDS on the server. The second step is to configure ADDS role. The simplest way to perform this configuration is by using the Active Directory Domain Services Configuration Wizard. You start the wizard by selecting the ADDS link in Server Manager. You can also configure ADDS for a domain controller using PowerShell, but most people just use the wizard because it's easier than getting all the PowerShell right. As part of ADDS role configuration, you need to provide answers to the following questions. Are you installing a new forest, a new tree, or an additional domain controller for an existing domain? What is the domain name system? DNS name for the ADDS domain. Which level will you choose for the forest functional level? Which level will you choose for the domain functional level? Will the domain controller be a DNS server? Will the domain controller host the global catalog? Will the domain controller be a read-only domain controller, RODC? What will be the Directory Services Restore Mode, DSRM password? What is the NetBioS name for the ADDS domain? Where will the database, log files, and sysvol folders be created? You should know the answer to all these questions before deploying a domain controller. Especially important is the DSRM password, which should be unique for each domain controller and stored somewhere safe. For the most part, the default settings are fine, though make sure you get the domain names correct from the beginning. Also note that the highest forest and domain functional level available is Windows Server 2016, even though you should be deploying domain controllers running Windows Server 2022. Domain controllers should always run the most recent version of the Windows Server operating system. A Windows Server computer that is running a server core installation doesn't have the server manager graphical user interface, GUI. Therefore you must use alternative methods to install the files for the domain controller role and to install the domain controller role itself. You can use Windows Admin Center, server manager, Windows PowerShell, or remote server administration tools, RSAT, installed on any supported version of Windows Server that has the desktop experience feature or any supported Windows client, such as Windows 11. You manage a server core DC remotely using PowerShell, the RSAT tools, or Windows Admin Center. Microsoft recommends deploying all domain controllers using server core as this reduces the server's attack surface. You should not install other roles on a domain controller such as the file server role or internet information services, as this would increase the attack surface. In later modules, you'll learn about how to harden a domain controller by limiting administrative access, limiting which software can run on the domain controller, and using technologies such as Windows Defender. If you have a network connection between sites that is slow, unreliable, or costly, you might find it beneficial to add another domain controller at a remote location or branch office. In this scenario, to significantly reduce the amount of traffic moving over the wide area network link, you can create an ADDS backup, perhaps to a USB drive, and take this backup to the remote location. When you're at the remote location and run server manager to install ADDS, you can select the install from media option. Most of the copying occurs locally. In this scenario, the DYN link transfers only security related traffic and ADDS changes following the backup. The WAN link also helps ensure that the new domain controller receives any changes made to the central ADDS after you created the install from media backup. If you see an exam question about installing a domain controller in Antarctica and someone being concerned about replicating the entire Active Directory database over satellite link, then you should think about the install from media option. When you deploy a domain controller in a branch office that can't guarantee physical security, you can use additional measures to reduce the impact of a security breach. One option is to deploy an RODC. The RODC contains a read-only copy of the ADDS database, and by default, it doesn't cache any user passwords. However, you can configure the RODC to cache the passwords for users in the branch office. If an RODC is compromised, the potential loss of information risk is much lower than with a full read-write domain controller. In the real world, you wouldn't deploy a server in an insecure location. If you come across an exam question suggesting that you have no choice but to deploy a domain controller in an insecure location, such as on top of the refrigerator in the staff break room, your least bad option is to deploy that server as an RODC. The process for upgrading a domain controller is the same for any version of Windows Server starting with Windows Server. 2012 R2 through Windows Server 2022. You can upgrade to a Windows Server 2022 domain controller using either the following methods. Upgrade the OS on existing domain controllers that are running Windows Server 2012 R2 or later. Add servers running Windows Server 2022. She has domain controllers in a domain that already has domain controllers running earlier Windows Server versions. We recommend the latter method because when you finish, you'll have a clean installation of both the Windows Server 2022 OS and the AD-DS database. Whenever you add a new domain controller, Windows Server automatically updates the domain DNS records so clients will be able to locate and use this domain controller. When thinking about in-place upgrades, remember which versions you can upgrade to. For example, your in-place upgrade options are different for Windows Server 2012 as opposed to Windows Server 2016. Also, if you are adding new domain controllers and then demoting and removing existing ones, remember that whilst new domain controllers might have DNS installed on them, clients might be getting the old domain controller's IP address from DHCP when looking for their DNS server. You will learn more about FSMO roles and domain controllers later in this module and domain controller migration is an entire section of the OZ801 exam. Azure provides infrastructure as a service, which is a cloud-based virtualization platform. When deploying AD-DS on Azure infrastructure as a service, you're installing the domain controller on a virtual machine. So all the rules that apply to virtualizing a domain controller apply to deploying AD-DS in Azure. When you implement AD-DS in Azure, consider the following, network topology. To meet AD-DS requirements, you must create an Azure virtual network and attach your VMs to it. If you intend to join an existing on-premises AD-DS infrastructure, you can extend network connectivity to your on-premises environment. You can achieve this through hybrid connectivity methods, such as a virtual private network connection or an Azure Express Route Circuit, depending on the speed, reliability, and security that your organization requires. Site topology. As with a physical site, you should define and configure an AD-DS site that corresponds to the IP address space of your Azure virtual network, IP addressing. All Azure VMs receive dynamic host configuration protocol addresses by default, but you can configure static addresses that will persist across restarts and shutdowns. DNS. Azure's built-in DNS does not meet the requirements of AD-DS, such as dynamic DNS and service resource records. To provide DNS functionality for an AD-DS environment in Azure, you can use the Windows Server DNS server role or other DNS solutions available in Azure, such as Azure Private DNS Zones. Most organizations just deploy a Windows Server DNS server virtual machine. Discs. You have control of caching Azure VM disk configurations. When you install AD-DS to an Azure virtual machine, you should place the ntds.dit and sysvol files on one of its data disks and set the host cache preference setting of that disk to none. There are operational aspects applicable to every AD-DS environment that focus on maintaining business continuity of the authentication services. This includes backup and recovery of domain controllers and the AD-DS objects they host. Domain controllers use a multi-master replication process to copy data from one domain controller to another. As a best practice, an AD-DS domain should have at least two domain controllers per AD-DS site. This makes the AD-DS database more available and spreads the authentication load during peak sign-in times. For most enterprises, consider two domain controllers per geographical region as the absolute minimum to help ensure high availability and performance. Maintaining the reliability of the Active Directory data is important. Performing regular backups can play a part in this process, but knowing how to restore or recover data after a failure is vital. To backup AD-DS on a domain controller, ensure that you backup the server system state data. To restore AD-DS, a backup must explicitly include system state data. System state is a collection of critical OS and server role files that include the AD-DS database and the registry. To perform an AD-DS restore, you must have full access to the files on the domain controller. This requires restarting the domain controller in DSRM. If you're restarting a domain controller locally, open the advanced startup options and choose the DSRM from the menu. When you start a domain controller in DSRM, you will sign in as administrator with the DSRM password. You then can use Windows Server backup to restore the directory database. After completing the restore process, you must restart the server you are recovering. The domain controller will ensure that its database is consistent with the rest of the domain by pulling from its replication partners the changes to the directory that have occurred since the date of the backup. There are two types of restoration of AD-DS data, authoritative and non-authoritative restores. An authoritative restore allows you to restore a known good copy of AD-DS objects which replaces the current version of these objects in the AD-DS database. In an authoritative restore, you start with the same sequence of steps as the non-authoritative restore. However, before you restart the domain controller, you mark the restored objects that you want to persist as authoritative, so they will replicate from the restored domain controller outbound to its replication partners. A non-authoritative restore rolls the domain controller back in time. When AD-DS restarts on the domain controller, the domain controller contacts its replication partners and requests all subsequent updates. In other words, the domain controller catches up with the rest of the domain by using standard replication mechanisms. Non-authoritative restore is useful when the directory on a domain controller has been damaged or corrupted, but the problem has not spread to other domain controllers. However, in some scenarios, this approach is not suitable, and for example, this will not enable you to recover an object you deleted after the backup took place if that deletion has replicated to other domain controllers. If you restore a known good version of AD-DS and restart the domain controller, the deletion that happened after the backup took place will simply replicate back to the domain controller. Restoring a deleted item requires an authoritative restore or using the active directory recycle bin. Because restoring objects deleted from AD-DS by using traditional backup methods involves temporary OS downtime, Windows Server offers the active directory recycle bin feature, which provides a straightforward method to restore deleted objects with no AD-DS downtime. After you enable active directory recycle bin, the deleted objects container displays an active directory administrative center. Deleted objects persist in this container until their deleted object lifetime expires. For new AD-DS deployments, that lifetime is set to 180 days, but you have the option to change it. You can choose to restore the objects either to their original location or to an alternate location within AD-DS. As part of planning for domain controller deployments, it's important to identify the optimal number and placement of the global catalog role. This becomes relevant when expanding AD-DS environment to other locations. The global catalog is a partial, red-only searchable copy of all the objects in a forest. The global catalog can help speed up searches for objects that might be stored on domain controllers in a different domain in the forest. Within a single domain, the AD-DS database on each domain controller contains all the information about every object in that domain. However, only a subset of this information replicates to the global catalog servers and other domains in the forest. Within a domain, a query for an object is directed to one of the domain controllers in that domain. However, that query does not return results about objects in other domains within the forest. For a query to include results from other forest domains, you must query a domain controller that is also a global catalog server. The global catalog doesn't contain all the attributes for each object. Instead, it maintains the subset of attributes that are most likely to be useful in cross-domain searches. These attributes include, for example, given name, display name, and mail. You can change the set of attributes replicated to the global catalog by modifying the AD-DS schema. In a multiple-domain forest, searching the global catalog can be useful in many situations. For example, when a server that's running Microsoft Exchange server receives an incoming email, it must search for the recipient's account so it can decide how to route the message. By automatically querying the global catalog, the server can find the recipient in a multiple domain environment. Additionally, when users sign into their Active Directory accounts, the domain controller that performs the authentication must contact the global catalog to check for universal group memberships before authenticating the users. In a single domain, you should configure all the domain controllers to have a copy of the global catalog. In multiple domain and multiple site forest, it might sometimes make sense to limit the number of domain controllers hosting the global catalog role to reduce the volume of replication traffic, although this is an uncommon scenario. Note, however, that this will introduce dependency on connectivity to other sites when performing global catalog queries. ADDS uses a multiple master process to copy data between domain controllers and automatically implements a conflict resolution algorithm that remediates simultaneous conflicting updates. These provisions allow for a distributed management model where multiple users and applications can concurrently apply changes to ADDS objects on different domain controllers. ADDS operation master roles are responsible for performing operations that are not suitable for a multiple master model. A domain controller that has one of these roles is an operations master. An operations master role is also known as a flexible single master operation, FSMO role.  By default, the first domain controller installed in a forest hosts all five roles. However, you can transfer these roles after deploying additional domain controllers. When performing operations master specific changes, you must connect to the domain controller with the role. The five operations master roles have the following distribution. Each forest has one schema master and one domain naming master. Each ADDS domain has one relative ID rid master one infrastructure master and one primary domain controller PDC emulator. These roles have the following functionality domain naming master. This is the domain controller that you must contact when you add or remove a domain or make domain name changes. If the domain naming master is unavailable, you will not be able to add domains to the forest schema master. This is the domain controller in which you make all schema changes. If the schema master is unavailable, you will not be able to make changes to the schema or rid master whenever you create a security principle such as a user computer or group in ADDS. The domain controller where you created the object assigns the object a unique identifying number known as a security SID. To ensure that no two domain controllers assign the same SID to two different objects, the RID master allocates blocks of RIDs to each domain controller within the domain to use when building SIDs. If the RID master is unavailable, you might experience difficulties adding security principles to the domain. Also, as domain controllers use their existing RIDs, they eventually run out of them and are unable to create new objects. Infrastructure master, this role maintains inner domain object references such as when a group in one domain has a member from another domain. In this situation, the infrastructure master manages maintaining the integrity of this reference. For example, when you review an object's security tab, the system references the listed SIDs and translates them into names. In a multiple domain forest, the infrastructure master updates references to SIDs from other domains with the corresponding security principle names. If the infrastructure master is unavailable, domain controllers that are not global catalogs will not be able to perform translation of SIDs security principle names. The infrastructure master role should not reside on the domain controller that's hosting the global catalog role unless every domain controller in the forest is configured to serve as a global catalog. In this case, the infrastructure master role is not necessary because every domain controller knows about every object in the forest, PDC emulator master. The domain controller that is the PDC emulator master serves as the time source for the domain. The PDC emulator master in each domain in a forest synchronizes their time with the PDC emulator master in the forest root domain. You set the PDC emulator master in the forest root domain to synchronize with a reliable external time source. Additionally, by default, changes to group policy objects are by default written to the PDC emulator master. The PDC emulator master is also the domain controller that receives urgent password changes. If a user's password changes, the domain controller with the PDC emulator master role receives this information immediately. This means that if the user tries to sign in, the domain controller and the user's current location will contact the domain controller with the PDC emulator master role to check for recent changes. This will occur even if a domain controller in a different location that had not yet received the new password information authenticated the user. If the PDC emulator master is unavailable, users might have trouble signing in until their password changes have replicated to all the domain controllers. You can place all five on a single domain controller or distribute them across several domain controllers. Best practice is to separate them across domain controllers rather than having them all placed on a single domain controller. In an ADDS environment where you distribute operations master roles among domain controllers, you might need to move a role from one domain controller to another. When you perform a move in a planned manner between two online domain controllers, the move is known as transferring the role. You use the following consoles or PowerShell to manage FSMO roles. The schema master is managed by the active directory schema console. The domain naming master is managed by active directory domains and trusts. The infrastructure master is managed by active directory users and computers. The RID master is managed by active directory users and computers. The PDC emulator master is managed by active directory users and computers. When thinking about exam questions, make sure you remember which consoles can be used to transfer FSMO roles and what the symptoms of an unavailable FSMO role are. Also review which PowerShell commands are used to manage roles. You can learn more about those commands by reviewing the learn module that this video is based upon. In emergencies, if the current role holder is not available, the move is known as seizing the role. When you transfer a role, the latest data from the domain controller in that role replicates to the target server. You should seize a role only as a last resort when there is no chance for recovering the current role holder. An ADDS schema is the component that defines all of the object classes and attributes that ADDS uses to store data. All domains in a forest contain a copy of the schema that applies to that forest. Any change in the schema replicates to every domain controller in the forest via their replication partners. However, changes originate at the schema master. ADDS uses objects as units of storage. The schema defines all object types. Each time the directory manages data, the directory queries the schema for an appropriate object definition. Based on the object definition in the schema, the directory creates the object and stores the data. Object definitions specify both the types of data that the objects can store and the data syntax. You can only create objects that the schema defines because objects store data in a rigidly defined format, ADDS can store, retrieve, and validate the data that it manages, regardless of which application supplies it. ADDS schema objects consist of attributes which are grouped together into classes. Each class has rules that define which attributes are mandatory and which are optional. For example, the user class consists of more than 400 possible attributes, including CN, the common name attribute, given name, display name, objects ID, and manager. Of these attributes, the CN and objects ID attributes are mandatory. You can modify the schema only if you are a member of the schema admins group in the root domain of the ADDS forest. You should change the schema only when necessary because the schema controls the storage of information. Additionally, any changes made to the schema affect every domain controller. Before you change the schema, you should review the changes and implement them only after you've performed testing. This will help ensure that the changes won't adversely affect the rest of the forest or any applications that use ADDS. You use the Active Directory Schema Snap-in to edit the schema. This add-in is not available to the Microsoft Management Console unless you run the command Regisvr32. Once you have registered the appropriate DLL, open the Microsoft Management Console and on the file menu, click Add, Remove Snap-in. In the available Snap-ins list, click Active Directory Schema and then click Add. In the Console Tree, right-click Active Directory Schema and then click Load the schema. To modify the schema, do the following. In the Console Tree, click the attribute or class that you want to modify. On the Action Menu, click Properties, modify the attributes or class information as necessary. Click OK. In this module, you learned about the following topics. Deploying ADDS domain controllers, maintaining ADDS domain controllers, understanding the ADDS global catalog role and its placement considerations, understanding ADDS operations master roles, their placement considerations and related management tasks, and describe ADDS schema, how to manage the schema and its role in an ADDS environment. If you want to learn more, you can take this module on Microsoft Learn or read the official AZ800 exam prep guide from Microsoft Press. Links available at aka.ms-az-800-study-guide. We publish new content regularly on this channel on topics related to Windows Server, Hybrid Cloud and Azure Infrastructure and the certifications related to these topics. Look forward to seeing you in future videos.


What's the toughest? What's the strongest? Hey, dude? I just want to play in the game. I Don't give it who's the biggest the toughest the strongest. I know for me and my family I want to be the one that gets remembered.  I want to look in the mirror and be proud of who I am And I think internally that's called value. Am I right? So I want to tell some of you guys in here The reason why a lot of you can't even get on the journey to get with like what you want is because You don't believe that you can even have it. Hey guys, what's going on? It's Andy a lot of you leave comments telling me that you need help do me a favor I'm gonna tell you the best way to get a hold of me shoot me a text message right now 918 210 254 918 210 254 I'll help you with whatever you need.    No one can make you quit. Am I correct? No one can make you quit only you can quit So number one if you want to win you better believe that you're worth it So one of the things that I believe is that I'm worth it And there was a time in my life that I didn't believe that This entire building if you guys go walk upstairs if you walk in through each room, right?  Listen to me all that was a dream all that was things that weren't supposed to happen for people like me You know what happened?  I'm a cult for winning. You're right I'm a cult to believe that underdogs are powerful and they're dangerous And those that have the deepest scars and the biggest wounds and have been burned and even burned other People and they were bad at some point in the life. They are great people They just didn't have a good leader man. Those people were led wrong I was led wrong by some bad people when I was younger, so I did bad things But one day someone sat and talked to me during a seminar Shared some perspective and light about how I could have a good life and dude I cut the leash and went all in and everybody around me raised their hand got fired up screamed The atmosphere was full of energy, but don't they walk back out those doors. They all went back to the same old self. I didn't Okay, there is a certain person that can get everything they want and it's a simple thing It's those that don't stop believing.  I'll see you soon


Hi, I am Sam Kern and I'm here to talk to you about the importance of digital trust and decentralized identity. Hopefully this will be an informative session and you'll learn a little bit about identity, trust, decentralization and how they all come together in some great open source projects. I'm glad you're here today. Decentralized identity is a term that's fairly unfamiliar and I want to describe it this way. In the real world, we have relationships with other people and other companies and they are generally direct and there are private and there's nothing in between two people or two organizations or people in an organization that lets you have that relationship with them. Decentralized identity strives to have the same thing, but in a digital way. And I'll describe a little bit about why what we have today and about what we would like to exist and about the tools to get us there. Before we do, let me talk a little bit about identity itself. There's a long discussion that could be had here and we're not talking about how we identify necessarily there's lots of social discussions about this. What I'd like to highlight here is specifically the types of data about us that that relate to how we interact with with other parties online and in person and how that actually works. So a good example here might be my name and my birthday, my address, things like that. Things you might consider to be on my driver's license or on a job application or something of that nature. And again, this is a brief understanding or a brief discussion about this and so I won't get too far into details. There is some good discussions to be had. But for now, let's work with this. That's often you'll notice in the little icon here that there's a person holding up a like a persona. And that's an image that we chose on purpose for this to talk about the types of things that we present to other people online. And this is a lot of it. We also see verifiable credential indicated on the slide here. This information is used within decentralized identity as a verifiable credential and to be able to pass that around. And again, we'll talk a little bit more about that in a minute. So, here's how online or data trust actually works today. Right. We generally present some unferified data to a service, and then they verify that data with some other authority. And then the service can then trust the answers or the response of that data authority. And that's how that works. It's really common. And you have scenarios now where the service and the data authority are talking about me. They're not talking to me. They're talking about me. And that's a pretty big difference. The involvement of the data authority directly in this interaction means that there are there's the interaction leaks what we call digital dust or or information that can about the types of interactions that I have. The data authority, for example, becomes aware of what type of services that I'm interacting with. And that's not great from a privacy perspective. And it certainly isn't the type of interactions that we have in person where we generally go and we can communicate or transact directly with another person or another business without that in the way. So trust is highlighted here in orange. We're going to talk a little bit about trust and what that actually means. Trusted data has three requirements. It's authentic, which means that you know where it came from. It has integrity, which means it has not been tampered with or altered in any way. And the data has to be useful, which means that when I receive the data, I understand the context of the data and how it was arranged so that that that is an actionable thing. Going back to our diagram here, you can see that this data is authentic in the sense that the service is receiving authentic data from the data authority.  It has integrity, because they can tell it came directly from the data authority. And so it has not been tampered with. And then it's useful because of typically a direct relationship between the service and the data authority. And so this does satisfy the requirements for trust the data, but with some pretty significant privacy downsides in ways that are very much less than ideal. So here's an alternative picture on how we can satisfy these requirements for trust. In this case, there's still a data authority, and they provide that that data in the form of a verifiable credential to the person, typically the subject, typically the person that the data is about. They can hold that information and then present it to a service. So we still have the three requirements here. The data needs to be authentic, meaning that the service knows where the data came from. That is solved by the the use of cryptographic keys. Then the data authority signs the data in the preparation of the verifiable credential and before they presented or before they issued that data to the to the individual. And so the service can check to see who that data is actually from and in the same same time they can verify the integrity of that data. They can make sure that the data has not been tampered with or modified in any way since it left the data authority. And third, the governance surrounding the use of that verifiable credential can help them understand the context of it. They can make sure that they understand what the different fields mean and what the processes were behind the issuance of the credential, for example. So this flow here is important because it places people as individuals in the center of this interaction instead of off to the side. And that's a significant advantage over over most of the interactions that we have online or even in person today, but using digital services. Trust still exists here because of the understanding, both contractual and the conceptual understanding between the data authority and the service. But we've changed the picture in a really important way to put people at the center of the of the use of their data, rather than standing off to the side as typically happens. So this is a really quick overview. And there's more to learn on this topic if you're interested, but I want to talk about practical applications of this and and what what really matters here. The main message here is that we do this now and it works. I'll talk a little bit about the tools as well about how it works in the open source projects that are involved. But this is something that we can do today. So what does this look like from your perspective. This is likely going to look like a mobile app where you can collect and receive verifiable credentials from various sources and into the app and you'll be able to interact with that in that useful way. We've got some examples here with maybe a birth certificate a diploma driver's license, and those can be collected into your into the application that you have and then you'll be able to present those to others. So what's it like to get one. Well, so let's look at an example of getting a physical credential and compare that to a verifiable credential. So let's say you need a new copy of your birth certificate for some reason, looking at the bottom of the slide here, you need to contact the authority for your birth certificate which is typically here in the United States, the county where you were born. You need to prove your identity to them, typically with other paper documents as well to prove your identity, and then they'll issue you a paper document they may hand it to you it may come in the mail. And there's lots of paper involved in this process and being physically present often in the in the in the method of doing that sometimes it's possible through the mail, sometimes for some credentials or some records it's a little bit more difficult than that. With verifiable credentials, the same flow exists, but it's substantially easier. When you request a copy of your birth certificate, you can use verifiable credentials that you have to prove your identity. And this is a really useful way for them even in a distance to verify that it is in fact you and that and that they're allowed to issue that credential to you of course they, you can also receive the credential in a digital form, which means it happens fast. There's something to happen in the mail. And then of course because it's in a digital form, you can use it in all of the manners that we've talked about in order to to provide that information elsewhere into other streamlined processes. So there's several different players in this interaction we're talking about. And so this diagram shows a little bit about how this works. There is an issuer of the credential. There is the holder of the credential and there is a verifier of the credential. Now, in reality, each organization or person ends up playing at times all three of these roles. But in a single interaction, these are the labels that we apply to the parties that are involved in the combination of credential issuers credential holders and credential verifiers turns it into a trusted digital ecosystem that can enable these these things to occur in a really streamlined and an efficient manner. So in reality, like what's this look like we have that diagram but let's apply this to real life here. You can receive credentials from authorities. Often these are governments, not always, but the governments have a lot of records about us like our birth certificate or or marriage licenses for example, that that they record. And so they're often the source of some of these digital certificates, we can receive those, and then we can present them to other institutions or people that they need to verify some of the information on there. You might, for example, use a credential that you receive from the government to qualify for a student loan going to college or or to register for some particular health benefit or maybe on a job application. And that's a way of providing that information into the real world. The neat part about the data that's actually passes through us now instead of directly between other parties is that data can be really useful and valuable. And because we hold that data, it places us in a position of control as it relates to where that data goes and what it's used for. And so there's there's all sorts of things that we can do with that. So in this example, there's a there's a verifiable credential containing a digital travel credential. Think of it like a passport, right? And it's obviously really useful when you travel, you can present that to to border control agencies who can verify the information instead of having a physical passport that could be lost or stolen. And it's also useful to other participants in the ecosystem, and often in a more limited way verifiable credentials often contain the privacy features that allow you to selectively disclose different pieces of the information to other parties. For example, some of that information can be made available to the airline, the hotel or car rental agency in order to streamline the process of checking in or or enjoying your vacation. And then in the neat part about this is that there's a substantially reduced cost of integration because the rental car agency, the hotel and the airline and the border patrol agency don't have to create direct database integrations between to the source of the data in order to gain this information, and they can still have all of the necessary elements of trust that they need in order to to to act on that data and use it in effective ways. So this is not a hypothetical scenario. We have seen examples of digital travel, digital travel credentials being used in real life in order to streamline access through the through a travel process. There's a couple of components here that I'd like to call out that makes it really, really helpful. One is the airline airlines are responsible if they deliver a passenger to a country that they cannot be accepted in. For a reason that should have been known to the airline they're responsible to actually transport you back away from that. So this is a good place if you're not able to enter a place that you that you that you arrive, which means that they really want to know that you're going to be able to check in or to arrive at a country. And there's a using credentials like this removes that risk that they would be subject to additional expense for returning you to the place that you're coming from. It's really useful for for both Border Patrol and travelers when they arrive at a destination, the process of digging out your documents making sure you have them, and that you can efficiently, you know, place them on a scanner or, you know, some other sort of paper process you passing them to someone for review. And that can takes a lot of time and can be tedious with with privacy preserving features. It's possible to pass through checkpoints in a secure manner that solves the needs of Border Patrol. But in a way that that is more streamlined and faster for you. You're interested typically at the end of travel at either getting some food or going to dress somewhere or to travel to someplace that is the purpose for your visit and spending time waiting in Border Patrol lines is something that no one really enjoys, not even the Border Patrol agents so speeding this up and making it keeping it secure will improve the experience for absolutely everyone. Now, here we are we're at an open source conference, I would be remiss to not talk about the open source projects behind the technology that allows for for these. So I'd like to talk about three of the of the many open source projects that are involved in decentralized identity. These are projects that we have experience with hyper ledger is an organization within the Linux foundation. That is focused on on ledger based technologies. And these fit into that role because of the role of a ledger and decentralized identity. So hyper ledger areas is a project focused on the on the agents that enable the interactions to happen. So agents for for credential issuers and verifiers, as well as credential holders a typically in the form of a mobile app are all projects within hyper ledger areas. And there's code bases there that already contain, you know, the features necessary to to make these interactions happen. And so that's the sort of the forefront project that makes all this work. Hyper ledger indie is a identity focused ledger that doesn't have some of the downsides of different ledgers that you can use to to support things or anchor dids which is another technology that's used. And so it's very focused on that, and has been successful as an underpinnings for the credential technologies that we're using hyper ledger ursa is a cryptography focused library that's used by both Indian areas. In order to serve the cryptographic needs of those projects. And so these three can enable this stuff to happen. And they're usable now they've been used in all sorts of different scenarios including the travel ones that I mentioned. And there's lots of, there's lots of deployments and different examples, not just here in the United States but by foreign governments in Europe, and Canada, and, and all sorts of participants in these projects that make it work. There's, there's other projects of course, but these are the ones that we're familiar with all open source projects of course you can get involved in. If you're interested in being involved in the in the technologies and the projects form a usage perspective, or from getting involved in possibly contributing perspective these projects are open and available and highly recommend getting involved with these with these excellent communities to to build the solutions that you need for your business. This was a really quick path through all of the things that we're talking about today. But I want to highlight the fact that this is technology that we can use now it's not something something that we're waiting for, or ideas that we have, but you can use these technologies now to make stuff happen. And we encourage you to do so and to get involved in DCO is a company. I work for DCO and we as a company are experienced in helping people adopt open source technologies. And if we can be of assistance, we'd be happy to to talk with you or guide you or even just help you get involved in the open source communities that exist. Thank you for coming today.


Okay, so first victim, first model for breakfast. Sorry, my dog's eating in the background. Now you decide to eat, really? Kendall Jenner, we're gonna be eating her breakfast and this is what the internet says she eats. So avocado toast with egg and oatmeal on the side. Okay, so I just went grocery shopping as you guys saw. So I got bread, avocado, and then I got eggs in my fridge already and then I have oatmeal here. Let's get cracking Kendall Jenner's breakfast. Honestly, that does sound like a good feeling breakfast because usually you'd think that they would eat like nothing but that does sound like a hearty breakfast, especially with the oatmeal on the side. That kind of surprises me because that's very filling, which is good because I obviously don't wanna be starving the whole day and breakfast is also the most important meal of the day. So it's good. Also, I got a matcha latte here. I just picked this up from Starbucks. I don't know what they drink but I'm assuming matcha is healthier than coffee. So that's a step forward in the right direction. Yes, this is like the drink that was all over TikTok, by the way. It was the one with two pumps of chai. My review on it is that I think I can probably make the exact same drink at home for free. So would I buy it again? Probably not, but is it good? Yes, it's good, but it's just not sweet enough for me because I just like my things like really, really sweet. It's good, but it was just over heights. Anyways, let's get cooking. Let's get crackle acting. Okay, so I just made the oatmeal. It's really hot. Here's the oatmeal and then we have the avocado toast which smells literally delicious. So I'm gonna eat that and then I'll give you guys an update on how full I get afterwards because this will definitely hit the spot and I think it will be like perfect. So yeah, I'll update you guys afterwards. Actually, let me take a bite for you guys right now and see how good this avocado toast came out to be. 10 out of 10. Okay, so I just ate and I feel really full. Like really full. Thank God I'm only having a salad for lunch because that really filled me up. I feel like this, having this whole drink also had something to do with it because this definitely helped fill me up. You know what I'm saying? Cause usually that would just be like a perfect size but with this I'm just like super full which is good because I thought that I would honestly be under eating on this diet. So starting off on a good foot.  Also Tik Tok like keeps banning my account. I posted a video in shorts and a shirt and it got deleted because it was inappropriate.  All right you guys, so it is currently lunch time and for lunch time we are gonna be following Gigi Hadid's lunch. Okay, so apparently she likes an arugula salad with tofu, red pepper, cucumber, feta cheese and almonds. And to me that sounds like a literal chef's kiss. This sounds so good. It sounds like a deluxe salad. Nothing like I really ever make myself. This is gonna be a treat for myself. She said she either has it with chicken or tofu but I bought tofu because I just honestly love tofu. So we're gonna have that and I really like arugula you guys. Like arugula is one of my favorite greens I'd say. So this is perfect, thank you Gigi. So yeah, that's what I'm gonna whip up right now and then I'm also gonna make some fruit juice with that. So I think I'm gonna make like a carrot apple combination. I'm not like a hundred percent sure yet. If you ask me that is pretty healthy and health is wealth. So we're wealthy and healthy. Let's make the deluxe salad that I would never make for myself because it sounds too expensive. I did ask like never make myself anything like this. Like this is gonna take a long time and a lot to clean up. I wish I had someone just to clean my dishes. Like I don't mind cooking but it's just like the cleaning after is like, you know maybe they'll invent robots in the future that do that. I should have opened the tofu in this sink. I did not know that stuff was gonna just go word out of there. So it's officially a juice in time. This just feels so healthy. I used to be this healthy. I used to juice and I haven't done it for so long now. So maybe this will get me back on track. Who knows, we'll see. I mean hopefully here are all of the juice bandits for today. That's actually really good. Kinda tastes like pure carrots but at the same time I really like it. I like the relief just feel so healthy. Too healthy, it's kind of concerning. Also this took me a really long time to make and it's gonna take me a really long time to clean up. So I understand now why people get chefs. Okay, let's see. This actually looks fire. Like I look like a health blog or something like that. Wow. Okay, so it's time for the official rugola, tofu, red pepper, cucumber, feta, almond, salad.  I really have high hopes for this. This is a vibe. This kind of tastes like restaurant quality stuff, you know, nothing that I would ever make at home. This tastes really bougie. Like I feel like expensive eating this. I don't know, every time I get an intricate salad or see an intricate salad, the first thought that pops in my head is expensive. But it's really good. It's just healthy, wealthy, and shelfy. Tofu adds a really nice to it. Got the carrot juice. Wow, you're welcome. She's getting nourished today. My body's gonna love me for this. It's probably a little confused, but this is good. I'll see when I'm done eating. All right, you guys. So I'm currently doing the dishes and I just wanted to update you guys on how the salad was. It was actually really filling. I thought that it was gonna be something light, but it's really filling. So I don't think I'm gonna be eating dinner until like later later because I'm just not gonna be hungry. This is filling, yep, more than I thought it would. I honestly thought that I would just be eating nuts and crumbs all day, but that's not the case, which is good. Because this girl needs substance. I know I don't look like I eat a lot, but I do. We should normalize cleaning dishes, okay? No one talks about it. No one talks how much time it takes, but let's normalize cleaning dishes. 2021 ladies, okay? I feel like so many people just don't talk about it. How much time it takes to clean up a cooking area. Like it probably takes me just as much time to clean as it does to cook. Okay, you guys, so it is currently dinner time and for dinner, we're gonna be doing Cabri Shorter's Dinner. She's a Victoria's Secret model, if you guys didn't know, cause I didn't know her prior to this video, but like I did some research, which she likes to have taco, but lettuce wraps, if that makes sense. So kind of like a healthier version of a taco. So I'm gonna put ground pork with avocado, tomato, salsa, all in the lettuce wrap. So it's pretty healthy. She said she's just like chicken as well. I just got pork because I felt like pork. So yeah, this is the last meal. Let's get cooking. Guys, so the makeshift taco lettuce wrap thingy-ma-jing is done and now we're gonna taste test it. I've never really had anything like this before. To be honest, I never really make lettuce wraps. I usually just go for the bread. So this is something that I wouldn't usually go for, to be honest, because I go, like I said, more for the bread. Let's see how this is. I've just been feeling too healthy today. Just been feeling a little weird. My body's confused. And this puts the cherry on the cake because it's a lettuce wrap. If you get lettuce instead of bread, it's like, you know you're healthy. Okay, anyways, let's taste her. I think that's good. It tastes very healthy because obviously it's healthy. I'm just drinking water, by the way. But yeah, it's honestly good. Maybe something I will eat again when I'm feeling like going on a healthy cleanse or something. I'd rate this probably like a seven, not a 10, to be honest. All right, you guys, so that was the end of today's video. I hope you guys enjoyed. It was actually kind of cool doing some new recipes, being a little bougie, being a little healthier for today. My body feels fully nourished. It feels excited and it wants more nutrients, just like I gave it today. So I think lesson learned, I should be eating healthier. I should be eating more like a Victoria's Secret supermodel.  I will indulge and I will indulge a little deeper than I should usually. It's all about balance, okay?  You need some balance. So yeah, let me know if you guys wanna see another video. I was thinking about doing a workout in this video, but then I was thinking maybe I can make that whole separate video, doing like just like their workouts and stuff for a week or something. So let me know if you guys wanna see a video like that or let me know any other videos you guys wanna see. Let me know in the comments down below. And yeah, I love you guys so much. Thank you so much for watching this video. Peace out.


As far as the entheogens go, most people would agree, don't try the Torah, it's masculine energy, it's the opposite of salveo divinorum, salveo divinorum is 100% feminine, the Torah is supposed to be masculine, and it is masculine, I agree, it's masculine, and I had a lot of warnings about the Torah, don't try to root, wash your hands after you touch the Torah, fear, fear, fear, blah, blah, blah, blah, blah, right? Don't drink the leaf, don't make tea from the leaves, the flowers, stuff like this, but one thing I did do the Torah is I consumed the nectar of the flowers, holy shite, I tried harvesting it, the nectar from the flower of the Torah, I wasn't successful at it, one day I hoped I'd have a vial of the Torah and nectar, and have that with me when I go to festivals and what not, powerful, this is not a recommendation, this is just telling you what I did, I'm taking the label off, it was so sweet, it was one of the sweetest things I ever tried, and it was a rush of energy, so powerful, so powerful, haha, the Torah, supposedly it really could fuck with you, and it sends you into nightmares and dreams, like really, all the warnings I read, don't do it, because it could have lasting effects, but the nectar, brilliant, I never had problems handling it, yeah I haven't either, I have the Torah plant here, I'm just looking at it right now, I need to trim this down, I see some bugs on there, I need to cut it back, I need to give it some food as well, I think it's been hot, I need to give it some love, Chico does not endorse drug use, I do not endorse drug use, I don't endorse anything really, use of anything, I don't endorse the use of anything, end of story, Jameson's known, Sigar's known, I do not endorse eating Maulberries, I don't endorse reading comic books, I don't endorse doing live streams, right, Mr. Hezekiah is an hallucinogenic, 100%, 100%, some people consider to be an ally, most don't, okay.


Hello everyone today. I'm gonna be talking about your stimulus check and why it could be delayed So if you did file your return with hr block Jackson Hewitt or turbo tax You could be experiencing some delays with your stimulus check. So let me talk about this Let's assume you did file the return with those firms hr block Jackson Hewitt and turbo tax and and listen to me carefully This is important and you received your refund through some sort of an anticipation loan Simply put what happened is these companies they gave you a prepaid card when you walk out of the office with the money First of all, you should not be doing so. I'm gonna explain why in a moment But here's what happened when they gave you this debit card simply put these firms Would receive your refund. So the IRS will not have your information The IRS simply put send the money to hr block Jackson Hewitt and turbo tax and those companies They lend in a sense. They lend you the money upfront. Now, that's good. You walked away with the money But that's costly. First of all, you should not you should not be doing that That's one two under those circumstances The IRS don't have your bank information because that information was not provided to them So i'm gonna tell you what you need to do in order to solve this problem But let me talk about this debit card. First of all, this debit card They would have charged you a fee for it because technically what they did is they gave you a loan And usually it's it's a fee that's a little bit high and they already charge you a fee for your tax preparation So what should you do in future years use Vita? Or IRS website to file your return for free This way you don't have to pay them and even if you don't qualify for Vita or for IRS website Buy your own software. It's usually cheaper to do so, especially if you only have a w2 So sometime it's worth it. So what should you do under those circumstances if you did? File your return with these companies and received your anticipation loan This is what the treasury department is saying. They're saying if you did so in 2018 or 2019 You should go to get my payment app on the IRS website and enter your deposit information Which I will show you how to do so in a moment or where you need to go And you need your social security number Obviously your date of birth your address your bank account information and the amount of your refund Now you may not know the amount of your refund or you may not remember your amount of your refund Most of the time these companies hr blog jackson and huwitt on turbo tax They do have this information online. You can go in there create your account And access this information If I remember properly for hr blog, they usually charge you a fee for that when I was in practice I used to you know, we used to get some new clients hr blog clients and we needed their prior return year return They did not have it. We would go to the website and they will charge us a fee for that I'm not sure if jackson huwitt or or or if an hr blog still charge a fee But you can get your refund amount So you need that information and this is what you need to do you need to go to the irs.gov So I'm gonna I cannot emphasize enough Go to irs.gov Not dot com not net because there's a lot of fishing sites that looks like the irs website And they're trying to get your social security and your date of birth for identity theft Just make sure it's dot gov The best way to do this is google irs.gov and it should come up as the first As the first website and it usually it says here an official website of the us government Under those circumstances you will need to go under get my payment Once you click under get my payment you'll get to the site So irs.gov slash corona virus get my payment you click on get my payment Don't type those just go through the irs irs irs.gov And after you get your payment you'll need to input your social security information Your date of birth and this is what the fraudists are trying to get those two pieces of information Your social security and date of birth your street address your zip code you go to the wrong site You're fried basically because you're giving them everything that they need to do that they need to have Now I I try to walk you through the whole form but This site under a tremendous pressure So I waited 10 15 minutes and I kept refreshing and it's still it was busy So basically after the site i'm assuming they're going to ask you about your refund about to input your bank information And that's the other thing if you went to the wrong site you're giving them your social security your date of birth Your street address your zip code, which is your complete street address Plus your bank and information So you're totally fried if you go to the wrong site.  Now if you like this if you like this Video, please like it share it subscribe to the channel I'm going to be here and keep updating you about those stimulus checks and any any related information Stay safe if you're an accounting student or planning to go for your cpa study hard check out my youtube check out my website And good luck


I just realised I need my phone. My hair's nice and short and I love it. Did I clap? I'm gonna use them on microphones connected to my camera. My hair's nice and short and I love it. Did I clap? I'm gonna use them on microphones connected to my camera. Hey what's up you guys, welcome back to my channel. If you're new here, hi, hello, my name's Lydia and I make mental health videos pretty much every day. I do other subject videos but my primary focus on this channel is mental health. Today I'm doing a tag and it was a tag sent to me by the wonderful Louise, LuluBee before if you don't know. Her channel is linked in the description down below. She made my end card for me. She's an amazing YouTuber. She's Scottish. So today we are doing the BPD tag. And anyone doesn't know, I have BPD, I do tag videos. So let's jump into this. When did you first learn what BPD was? Right. So here's a fun fact. The first thing by polar disorder was BPD. I thought that's what the abbreviation was for. I didn't know it was a separate condition when I was younger. I was like 12 or 13 when that so please don't... And no one in the character makes my family don't talk about mental health. What BPD was? Around the time I was diagnosed, I knew of it before then because I studied health and social care now for a long time. Currently doing a level 3 counselling course as well which I'm excited about. I'm starting that in January, which is exciting. So I found out in what? 2014? 2015? When did you get diagnosed? I got diagnosed when I was 17. Just about to turn 18. I got diagnosed the year before I went to uni. So that was interesting because I have so many stories that I could tell about college. It's unbelievable. I'm going to start telling them slowly and stepping back into the story time world because it was when I was around 18. So it's been nearly 5 years now. Did you have any other mental health issues? Yes. Which is one symptom you struggle with the most. A symptom I struggle with the most has to be the self-destructive patterns. When I say that I mean self-harm and suicide. Are you in therapy or on medication? I take medication and I'm not currently in therapy. But I have tried therapy. I have done DBT. How do your loved ones react to your BPD? Not great. They don't understand it very well and they don't listen to me when I try to explain it. The best example would be two years ago. I tried to kill myself and I didn't reach out for help.   BPD or EUPD? BPD. Please don't use EUPD with me. Oh my God. I don't like being called emotionally unstable. No, I prefer being called DBT. Describe yourself slash your identity in three words. Tragic, dysfunctional, random. What emotion is the most difficult to handle for you? Happiness. That sounds really backwards. I can manage my depression a lot better than I can manage when I am frigging running around doing everything that I just can't keep up with myself sometimes. Do you know anyone else that has been in real life with this disorder? Our best advice is to just be yourself. Here's a tag video for you. The BPD tag. Let's get it moving and break the stigma. That's the worst and weirdest outro I've ever done. I'm never doing that again. Oh my God. I don't know how to. Wait, actually. Ow, that's hot. Don't hold lava lamps.


So Alex Diminal has been his name has been thrown up at about falsified documentation regarding COVID vaccinations. He just came up with a statement literally like 10 minutes ago. So let's go over read of his statement. I wanted to write a quick message here to avoid any misunderstanding regarding a report that is in the Spanish media about my vaccination certificate. I received my first dose of the vaccine in London last summer, second one at the hospital in Madrid. News came out today that the hospital is under investigation for providing falsified COVID certificates to some of its patients. I want to make it 100% clear that I received my second shot that I have a completely valid, accurate and true vaccination record. Let me know down in the comments or let me know in the chat. What do you think about this? Do you think there's anything to this? Do you just think it's maybe he's just being mixed up because his name is a big name?


us to talk about ESL Goal for a long time, Glenn. And I'm glad you're in town and able to give us some time. Could you give us a little bit of background on kind of who you are, where you've come from, what your educational background is, and how you tie into ESL Goal? I've been teaching English as a second language for more than ten years, mostly at the university level. I've taught in several different countries in America, Asia, and I have developed a lot of materials along the way, and one day I got to thinking I ought to put some of these materials that I've organized on the Internet. And so I started little by little putting a few of the exercises that I've made and a few of the materials up online, and gradually it became bigger and bigger and turned into this great website called eslgoal.com. So when did you begin that? It was 2002. I was working in Salt Lake City, and I was working at the University of Utah at the time, and I asked my brother to help me with the computer design because he was good at that, and it took us a little bit of time to get all the materials up because I had hundreds of pages of material, and gradually it blossomed into what it is today. I've been through several different revisions of the site. Each time it gets better and better. It's incredible. As I've looked throughout the industry, I haven't been able to find another site anywhere that comes anywhere close to the content and the ease of use. Oh, thank you. It's really been an awesome tool for people who want to learn English. So what is your mission with the site at this point after about 13 years now? Well, I'd like to have a lot of materials out there for free for people to use, just whenever they'd like to come online to study English. I'd like to make everything available to the world because there are a lot of international students out there who could benefit from these materials, and I'd like to have some cutting-edge technology as well, putting video on different types of things on the site. Sure. Great. Have you had any feedback from people who've used the site? Yeah, the feedback has been very positive, and in a lot of cases they've given me suggestions on how I can improve it. So it's been a really good process all the way through, and I'm just learning as I go along. That's cool. So what countries, from which countries do you find most of the visitors are coming? Oh, all over the world. I think we have visitors from every country in the world. We get a lot from Asia, Latin America, Europe, and surprisingly many, many students from the United States and Canada and places where they already speak English. So we have immigrants and people like that who are here to learn English as a second language. So it's kind of, as I've gone through the site, I've noticed that it's kind of broken down into resources for students, as well as for teachers. Can you give us some idea of how you, as an ESL teacher at the university level, are recommending that students access the site and take advantage of it? Well, I'd like to give them some direction. There are several different subsections within the site, so let's say I'm teaching a grammar class, I will introduce them to the grammar section, and within that there are several different subsections which explain different grammatical points and things like that. If I'm teaching a business English class, I will focus a little bit more on the useful expressions for business and things like that. That's a great page. Yeah, and it's designed so that there's a little bit for everybody from the very lowest levels up to some advanced levels of language learners. I've been impressed at the quality of the audio and video on the site. Oh, thanks. It really seems like it's a wonderful tool for people who have never spoken English to be able to go in there and identify examples of what needs to be said and how it needs to be said. Yeah, I had some professional voice recorders do that, and some of the people that I've met throughout my life have been in that industry, and so they helped me with the voice recordings and things like that. Well, they've really done a fine job. Have you any suggestions for teachers in terms of the way they might be able to take advantage of the course in the classroom? I would say introduce it to your students. Look at the many materials that they have on the site and say, well, let me focus on this particular item for today, and just search the site, find out the information that you need for your particular class, and give them the website page and let them learn as they go along. I've been really interested to observe how my children and grandchildren are accessing education these days with iPads and laptops and whatnot, and I was noticing last week I've got a 10-year-old grandson who is required now to do his homework interacting with the web and submit his answers on Google Drive, and it's pretty incredible what you can do by just giving simple assignments on ESL Gold to the students and allowing them to kind of interact independently of this teacher. It kind of takes a lot of burden off of the teacher, it would seem to me. Yeah, I've used it in my classes, and for example, where I'm teaching now, sometimes they have bad weather and they have snow days, and so I just send an email to my students and say your assignment is eslgold.com slash business slash class dot html, for example. Go to it, and I'll be asking you to report on what you learned tomorrow in class. They don't get a day off, and they've got eslgold.com. They can go there anytime 24-7.


Turn this guy on I figured I should maybe get a selfie or the the new office space that I have so Here goes something now. We just wait for it so for those of you who have been watching the daily vlog you know that we moved and I have a new space to do editing photo video and gaming vlogging the whole bit and this is kind of a mini tour of Said office space, so let's get into it. So first we're gonna start out here. Okay. I bought these two desks That's not one desk. It's two desks put together will not really put together But just kind of place together side by side and I bought those on Amazon. I think they were like a hundred bucks each Really nice desks. I thought I was just going off right now and starting on this How do we have like a little mini dock for your devices? Put it on here and it charges Sarah got it for me. I think you can get it at Target I think it's like six to your 70 bucks pretty great over here. We have the iMac self-explanatory I love this keyboard. This is an amazing keyboard. It's called the Logitech keyboard so good and In here we have the MacBook Pro fully souped up fully capable of doing anything that I want and I'm editing right now for a client and on this side. We have This iMac edit since 2005. Well, I bought it from someone. I think actually correction I think it's from 2009 and so I'm trying to offload a bunch of crap And it hasn't been loading for like a long long time So I don't know if it's actually gonna turn on and finally we have this when I bought this thing on Amazon I was looking for the 32 inch and they sent me a 34 inch I'm not sure if that was a mistake on their end or if they don't make a 32 inch and they just kind of you know priced it Or they put the title incorrectly on Amazon, but got a 34 inch LG ultra fine monitor Hey, I'm not complaining. I'm not sure that I'll keep it only because of editing photo and video Isn't the same as it would be on you know a MacBook screen or an iMac screen So I'm still debating. So I don't I don't really know you can see we have the lights, right? I just did a one-side hoping that it would look good. I do like it and I think I'm gonna get More actually I have a lot more and I might get the entire room set up for For these LED lights and let me show you what I'm gonna try to do or I have I have to endeavor in Okay, come over here to this side of the room on this side of the room We have a mini gaming station. It's mini because it's small not a lot of stuff goes on here yet right now I'm playing Halo 5. I Just got this Xbox from my birthday when my wife got it for me and my plan is to start a twitch stream and start Streaming video games. I don't know what that looks like or what it's what's gonna happen But I do think I have the personality and I can get crazy playing video games. So why not, right? If you think I should start streaming video games and gaming let me know down below in the comments I think I should and I'm moving over to this side of the room. We have a We have it. We have a light. This is this is a light the a Godot or it's g o d o x Godox Godot I think it's Godot Godot SL 60 W More than enough light for any studio setting any shoot This is like on low low low settings It's not even outputting what it can do which is pure daylight, which it's just crazy and then obviously got my man photo stand here So this right here is Obviously it's for photo shoots, right? It's for anything to do with backdrops I ordered this because I'm gonna use this entire wall So this I've always wanted my own kind of like photo shoot setup And this is kind of me making that dream happen this space and utilize it for a photo slash video shoot area This is the remote that controls all the lights if I go to white Goes to white actually really cool if I go to green Goes to green like a light blue Nice and there it is that's of the room This is my new space in the new house or pumped We're excited to be here and now I just get to go do fun stuff and Bring you guys along in the daily vlog Also, let me know what you guys want to see more of in the Johnny Q daily vlog once again My goal is 10,000 by the end of this year and my goal is to daily vlog every single day For one year. Oh boy. I don't know if it's gonna be possible, but I'm trying my best So thanks so much for watching this vlog and I'll catch you in the next one. Peace