Hobbit_Hardcase

23H2 ends **next week**. Please tell me you meant 24H2; that ends in October 2026.

Depends on the hardware too.

https://preview.redd.it/7y5qw1mbb0zf1.png?width=243&format=png&auto=webp&s=92ccf2b8c137b3dc5ef9326df9ae96da2a83d6f7 We have a Team OneNote, as well as personals.

I’m transferring from one ISA provider to a different one. I filled out the online form. The last step is “Print this document, sign it and then post it to us”.

I can't wait for the inevitable BOFH episode on this....

CTO was formerly the IM, and one of the Engineers can do it too.

Well done. I’ve got 5/2780 to go…

Because some of us have on-prem and there needs to be someone who can tell a SAN backplane from a SATA riser.

We each have our specialities, but we all have the same job title.

There are 6 of us in my Infra team. We have * CTO (who is in charge, duh!) * Infrastructure Manager (who manages the physical switches, firewalls, backbone et al) * 4x Infra Engineers (who deal with everything else; O365, SANs, VMs, VPN, IDP, MDMs, backups, File & Print, whether on-prem or cloud as we have both) We service 3K Win & 1K Mac users in the GB as part of a global org.

We have 5/2170 that aren't on W11 23H2+. They will need to be replaced as they don't have a TPM.

I tend to consider anyone who has spent a serious amount of time on a big (500cc+) motorcycle as probably a fairly good driver. Simply because a bad one doesn't usually last very long.

Wasn't there a survey where 80% of respondents described their driving skills as "above average"?

Definitely a book, not laptop. If possible, have something about it that is out of the ordinary, so a hardback, special edition, or just sodding huge. People will ask what you are reading. Stay there for a couple of drinks and repeat the next week. After a few visits, you'll get conversations.

Doesn’t need a reboot; still terrifyingly accurate.

If you're the sysadmin, you should have access to Intune. It's literally the primary tool to administer Pcs.

Win 10 goes EoL on 14th Oct. Time to move to Win11.

If you have Entra, go Windows Hello for Business. Implement MFA, SSO, Conditional Access and Passwordless as much as possible. I barely ever type my password now.

They are different meals. Supper is the last in the 7 meals of the day, so it’s often skipped after Dinner once people have eaten too much in the evening.

Summer and winter I'll wear a hat. Summer is either a bucket or Fedora. Winter is usually a waxed flat cap or woollen beanie.

This is a people issue, not a tech issue. Get management buy-in and enforce the policy. HR need to go after people who are flouting the policy.

I live on the north Kent coast. It takes me 90 mins to get to St Pancras. I only do this twice a week though. I did do it daily for a while, and I found it tiring.

We had this convo a while back. The result was a lot of official comms to tell users to use MS Copilot & Adobe, as we have licences. From the tech side, we have firewall rules blocking access to [Open.ai](http://Open.ai) and Grok, etc. Desktop apps are blocked by MDM. This is not so great, because it's whack-a-mole; we have to keep on top of what's available.

I have a cooked breakfast at least once a week. Sausage, bacon, beans, mushroom, hash brown. If I ate that plate, I wouldn’t be able to eat anything else for a week.

I used to run Kerio 20-odd years ago. It was a nice little system, for a small scale.

Oracle used to do exactly the same thing with Java, and so did VMWare. Notice how that turned out? If they can make Grammerly a de-facto standard, then that allows them to tighten the screws in the future. We have specifically banned Grammerly, and it's well-publicised to be on the shit-list. We provide other AI writing tools, specifically MS CoPilot, for those who need them.

>We aren't a poor country but we've been run very (possibly deliberately) badly for the last 15 years or so. 30 years.

Being scorned for being White-British.

We have regular daily driver accounts and \_adm accounts. Infrastructure Team \_adm accounts might have access to ServerOPs, StorageOps or NetworkOps groups, depending on their specific roles. Helldesk can see and change groups in on-prem AD, but they can't get into the file shares themselves, as that's StorageOps. All groups in AD have the specific folder they unlock listed in the Description for the group.

The kids' pots have been quite productive the last 3 weeks. They taste good too!

* Going to the local was the main form of socialising in a community, particularly rural ones. * When the "working man" was paid in cash at the end of the week, he's go home, give it to his wife and then she'd pass him back his beer money for the week. He'd then go to the pub. This doesn't happen any more. * There was little other entertainment. TVs were expensive and of debateable quality up until the 80s. There were only 3 channels until 1982 and Sky launched in 1989, adding 4 more. Pubs were pretty much the only places that could afford Sky to begin with and they usually got it for the football. If you wanted the watch the match with your mates, the pub was the place for it. * Supermarkets didn't sell booze, and Off-Licenses were expensive. Councils wanted drinking to be in regulated places where the hours could be controlled. * Booze was comparatively cheaper. Successive Governments have raised Duty faster than wages. * Councils have raised rates faster than inflation, putting up business costs. * Breweries and Pub-Cos have squeezed landlords and tenants in the name of "line go up". * Drinking is less socially acceptable. This started in the 70s as a result of drink-driving stats. As local pubs went out of business, there were less of them within walking distance. * House planning, creating new housing estates, seldom allowed for the creation of community locii like a pub. I've pretty much stopped drinking at home. I have a local, independent micropub that I really like. So when I fancy a pint, I go there, sometimes taking a book, and go and have a chat and a pint with the other chaps who sit in there. I'm healthier, drinking less, and ironically have spent less. Try it.

The *average* price of a pint, over the whole of the UK, is now >£5.

Need help with my computer.

Blooming heck, I’d forgotten all about this. I’ve been married /three times/, not two! First one was age six (circa 1980) to a lass called Charlotte.

Blooming heck, I’d forgotten all about this. I’ve been married /three times/, not two! First one was age six (circa 1980) to a lass called Charlotte.

The Government. I pay thousands in tax every year. I'm fairly sure it's not value for money.

I am constantly amazed why our agencies hire people who would be far better off with a box of crayons than a computer. Still , at least they don't try to eat the computer.

For Windows, we use Intune and TeamViewer. We ran POCs with Defender, Crowdstrike, and ThreatLocker last year, but decided to stick with SentinelOne. I think that came down to a financial decision.

This is why I got out of Helldesk and into Infra.

Same, but we try to keep it to Ubuntu for simplicity.

Implement passphrases, MFA & SSO and insist that all IT service account passwords are stored in an encrypted vault like Bitwarden or PasswordState.

Today is better than yesterday was.

Sounds like a Tuesday.

Peanut butter. Make sure they are properly hot so it goes all gooey.

I use this one too. A quick format just throws out the index cards. All the data is still there. If you want it to be properly erased, you have to go and put the book in a shredder.

Yeah, I'm doing the MDM for 1K Macs and 3K Windows. The Helldesk is 2 Mac specialists and 8 Windows guys.

I originally set up a DeployStudio/Munki system that worked brilliantly. Then we bought Jamf. I was gutted that it was a downgrade in app management. Now using the Jamf App catalogue and Installomater for what they don't cover, it's mostly automated and we don't really need to manually upload packages. I agree that Intune is miles behind, and I wish we had a better way for the Windows apps.

The reason Apple migrated away from PowerPC was because Motorola & IBM couldn't give them a reasonable roadmap to move past the G5. Or make a G5 that could be put in a laptop. It wasn't a instruction set or speed issue, it was a thermal issue.

Corporate sysadmin here; 1K Macs and 3K Win in the UK under my direct supervision. I'm also a part of the Global Devices team. I use Jamf Pro and Intune, coupled with Entra and AD every single day. Windows management is changing. Pure Azure Bound, Autopilot and Intune is where the MS management stack for devices is headed. GPOs are on the way out, kiss them goodbye. Everything they do can, and will, be replicated in the cloud. On-prem AD is now only needed for access to on-prem servers, and they will be the exception rather than the rule soon enough. MDM and Apple Automated Device Enrolment are the way Macs get managed. Zero touch, managed from the cloud, is the future. Start planning your migration. From a policy enforcement, auditability and reporting perspective, Intune sucks, sorry. You need a new setting, certificate or app pushed? Jamf Pro will have it on every active Mac inside an hour. I'll let you know about Intune's results tomorrow. You need to check the non-Store app catalogue to make sure all packages are the current version? Yeah, Jamf does most of them automatically, I'll do the rest this afternoon. I should have the Windows library done by next week, as that's a manual process in Intune. The decision as to whether a user gets a Mac or Windows laptop is down to the software they need and personal preference. If they have to have a specific app like MS Project or the Win-only accountancy software, they're getting Windows. If they don't, they get to choose. People who like their equipment are more productive. We *prefer* it when someone picks a Mac. They last longer; at least 5 years before refresh. Generally, they have less issues (I believe this is mostly due to not having to worry about drivers).

How do you make sure that you come back to it in the same state you left it?