LukeleyDuke

Powershell

BURN IT TO THE GROUND AND LEAVE.

Must be nice to have management protecting you. Mine absolutely fucked me after telling me to proceed with the same.

Always use VLAN one, it comes pre-installed on purpose.

This is straight up the reason im quiting. I wrote it all our here.[The Reason I Can't Work Corporate IT](https://www.reddit.com/r/sysadmin/s/uXBjD4eyLi)

I burned out and am now in the find out phase of FAFO.

I am planning on going back to my old Job.

You were right, man, I am next up on the chopping block, so I am thinking of going back to my old Job. They actually asked to take me back. I will be taking a 4000 a year pay cut, but it is going from civilian to Federal, and I love my old team and supervisor. It may be worth cutting my losses and backing out.

I use JBL Endurance Pros.

I do not maintain a home system either.

I just had a user text my personal cellphone about a printer not working. It was 840pm on a Saturday night the night after the Christmas party. We do not have an on call schedule set up. I am an hourly worker.

Im going to be the contrarian. Copilot is GPT5 and easy to manage through Purview. I quite like it. I can also control what leaves my tenant and allow users to drop proprietary documents into it. Not to mention i can give critical users licenses to use directly with our buisness data. I think Copilot is pretty nifty from a monitoring and security stand point.

I finished it, and theres also workshop questions that you could answer to adapt to your tenant. I can email you it if you DM me an email.

https://preview.redd.it/nhed8889lu2g1.jpeg?width=4320&format=pjpg&auto=webp&s=16dd5fa7102a69fedf70e16a382cb8cf7c284a6e

Ours is a very unique circumstance, out most critical documents are stored in an entirely different environment, but the api is only for on Prem environments and seems to be compatible with C# and powershell. There are ways to build custom APIs through graph, but Copilot is behind a pay wall. I have Copilot locked at the grounding stage, so none of our information can be sent back to external databases. It seems to be working, but i havent fully enable AI within the tenant. The plan is to just pay the 31.50 a month per each user we ant with full on prem tenant access through the Copilot center. Here are the instructions to create a connector agent to allow Copilot to only see specific sunflowers withing a tenants on prem file share. This works best in conjunction with Copilot admin center, but if every user has an E5 license it is possible to get away with just the API. I am still in the middle of full integration, but I am comfortable with my users dropping files into Copilot due to data protection from Microsoft and my Grounding. Labels are still being trained at the moment. Microsoft Graph connector agent Using on-premises connectors requires installing Microsoft Graph connector agent software. It allows for secure data transfer between on-premises data and the connector APIs. This article guides you through installing and configuring the agent.

Yes. At least in the 365 Copilot environment there is, but it involves also using MS Graph with an API or paying for the full Copilot to use the built in Copilot admin center.

All my degrees, certz, and my favorite soccer teams flag.

Baptism by fire.

AI bots

I made a whole post where I am running into the same thing. I have to justify enabling Microsoft Graph within our tenant to allow me to use DLP to control Copilot. They want a detailed plan for each step, and I am in the i have never done this before boat. I was hired as a sys admin 1. They fired me IT Director and now im the go to guy.

We are using HyperV with a built in failover. We have Veam and are going to use that to move the rest of our stuff of VM ware

Tell them its a certificate issue. Reset it from the domain with a temporary password. Have them change the password when they use the corrected temporary one. Everyone wins.

PDQ or Intune. Depends on environment.

https://youtu.be/biWymgItJ_I?si=xJfeGJyjRfTGNB41 This video describes specific uses for bots that I could see being super helpful.

How about a functioning, secure network?

I pointed a software installer at our ERP server through mapping a bad drive. If I had been paying attention, I wouldn't have overwrite part of a production drive.

Veeeeeeeeeeeeaaaaaaaammmmmmmmm bbaaaabby

I use audio books on my commute and listen to stories that have no bearing.

I have a 9 page proposal and I am halfway done. Maybe I can redacted the proprietary bits and post the rest here when im done. Its starting to look like a research paper at this point.

I have different versions of AutoPilot that bring my windows 11 into compliance, other than that I custom build other computers. I work for a 65 man company though, so. . .

Learn Kerberos or NTLM to a T. Unless you are taking a CompTIA test.

Do you have it as open source anywhere? Like github?

Use sharepoint?

Yes! My last CO is a saint. Honestly, the best leader i have ever met, and whats crazy is we were one of the top-rated flights in the entire air force for awhile. It was amazing.

They haven't earned my trust. I have been thrown under the bus for other people's mistakes 7 times now. Even after compiling logs and correcting the issues.

Yeah, I am generally pretty good at selling. I was a recruiter for the air force for awhile; but it is a hard sell. Particularly when new to an organization, and management doesn't want to play ball. I was counseled and told that my Limits of Authority have been restricted, by our COO. We do not have a lot written down and generally IT issues are not cookie cutter to SOPs. It's micromanagement at its finest.

Yeah, JAMF or INTUNE can be configured for what you need.

Typically, I would agree, but the company had no user or device onboarding process. Both of which i came up with from fragmented notes and am constantly improving. I have written down the entire process step by step, and some things are too technical for none IT individuals to understand. Its almost as if competence scares them. The problems I identified were something my boss was aware of and did nothing about. Sometimes change has to come fast. They also told me they wanted to meet specific industry standards by February the following year. This will not happen with our current timeline.

The claim made and understandably, so is that sensitive files stored off premises are more secure from ransomware. This would be true, if users did not save these files to their desktops while working on them. I ran a scan through purview and found over half the "sensitive files" on user desktops. Brought this up the DLP and sensitive data labels as an easy solution. The response was, we can worry about this later. The irony is that the same files they claim are protected by storing off site are already on our internal network. I brought this up and was told that's not how it works. I had concrete proof from the purview DLP scan I ran. I do understand why they are wary as they were hit 3 times in less than a decade, but the reason why is that they are not enacting reasonable data management and have told me to not do it. Everything i do has to go through a manager, a consultant, the COO, and the leadership team. Its heinous and ineffective. We are still a decade or more behind with even some of our business applications.

Yeah, I should put myself back out there. One of the meetings is about a powershell script I wrote to swapsites in SharePoint. Something I was asked to do, it has been hijacked by our director or QA who has some knowledge of power automate, even though i showed them the exact command and wrote out exactly how it works. Rip