deadnerd51

Intune is not fit for purpose.

Posted by Hobbit_Hardcase@reddit | sysadmin | View on Reddit | 439 comments

deadnerd51@reddit

I genuinely cannot understand why they didn’t just lift and shift features from normal AD, like making files, shortcuts, reg keys, and all the group policies. Boggles my mind when something that used to be simply now requires a days work.

Did I Do Something Wrong?

Posted by notRea11ySure@reddit | sysadmin | View on Reddit | 189 comments

deadnerd51@reddit

Your boss being an dick is the only issue here. You poking around and being inquisitive is literally exactly what you want to see in IT. Your boss seems like a guy who failed upwards and is insecure about himself and so is trying to shut you down. Not a good place to work, and your growth will be stunted here dude. You should have been rewarded or acknowledged at least for finding out DKIM and dns records weren’t lining up, not reprimanded.

How to prevent users from printing from their phones?

Posted by walks-beneath-treees@reddit | sysadmin | View on Reddit | 130 comments

deadnerd51@reddit

This seems very much like a network issue. Personal devices should not be on the corporate network. Separate Corporate + Staff / Guest networks would fix this.

Best practise for staff requesting a second laptop for WFH

Posted by psgda@reddit | sysadmin | View on Reddit | 625 comments

deadnerd51@reddit

We were forced to provide a second laptop for a partner in the firm. Let’s just say it basically only gets turned on once a month, and is always way out of date and so it is then always an urgent ticket, because everything this person does is always urgent….

How many IT support needed for 200 user org?

Posted by imjustacuteguyuwu@reddit | sysadmin | View on Reddit | 412 comments

deadnerd51@reddit

It really depends on how technical the staff are, what kind of level of service they expect, how much can be done remotely through ticket system and calls vs in person support. For example, we serve a law firm of 150 staff, with about 30 or so partners. Lawyers are some of the least patient and most demanding, and are also absolutely not technical in any way. We have our IT director, a network and infrastructure guy who is also tier 3, and then 2 tier 1 technicians (although one is really a tier 2), and we are currently looking to hire another tier 1.

EU companies on AWS... how are you actually handling the CLOUD Act exposure? Our legal team just flagged this and I'm trying to understand what others are doing

Posted by Proud_Boot6703@reddit | sysadmin | View on Reddit | 145 comments

deadnerd51@reddit

I think it mainly stems from the US tech giants being the largest and most documented competitors in that space. Sure there are many EU alternatives, but non at any scale similar to that of US tech giants. And, outside of government or heavily regulated industries, it isn’t really a concern for most companies. GDPR has many clauses and sections that take this into account. So long as you meet the requirements and do your due diligence, you are covered.

If you're running OpenClaw, you probably got hacked in the last week

Posted by NotFunnyVipul@reddit | sysadmin | View on Reddit | 119 comments

deadnerd51@reddit

But that’s why we are there. To configure things so that those that have no idea what they are doing can’t just try things like this willy nilly. Our firewall blocks most unapproved, unauthorised AI providers, blocks random outbound SSH, blocks most random outbound connections outside of authorised applications, and where possible we use ports different to the typical standard ports. Users are gonna do what users do best, it’s our responsibility to stop them or at least make it very difficult for them to screw things up.

If you're running OpenClaw, you probably got hacked in the last week

Posted by NotFunnyVipul@reddit | sysadmin | View on Reddit | 119 comments

deadnerd51@reddit

Doesn’t this still rely on a poorly configured environment that is publicly exposed? As in, only people too lazy or too uneducated to lock down their environments would be exposed? Sysadmin 101 is don’t trust anything and don’t leave things publicly exposed.

AI ticketing systems promised to save us all and delivered chatgpt level hallucinations instead

Posted by Such_Rhubarb8095@reddit | sysadmin | View on Reddit | 59 comments

Bring Your Own Device still relevant?

Posted by FastFredNL@reddit | sysadmin | View on Reddit | 126 comments

deadnerd51@reddit

Yeah, thats a big one. People always forget that not everyone cares to have the most modern, most powerful hardware. In fact, some of the people who you would expect to have the nicer things (high earners), are often the most stingy when it comes to investing in tech. The amount of times I have had to recommend a user update their phone because their current one isn’t supported or no longer getting security updates is just silly.

Bring Your Own Device still relevant?

Posted by FastFredNL@reddit | sysadmin | View on Reddit | 126 comments

Windows Hello for Business is great… until users forget their actual password

Posted by heartgoldt20@reddit | sysadmin | View on Reddit | 106 comments

deadnerd51@reddit

For many things, you can use conditional access and MFA to simply forgo the password. If you use Entra, you can also provide use TAPs to help with SSPR or other things. In some scenarios, you can be entirely password-less, just relying on MFA and other methods of authentication. We also stopped doing password changes as that let to people locking out their passwords or forgetting them more often, and instead switched to just very long passwords with MFA and biometrics.

Dream job not exactly a dream. Managing unrealistic expectations.

Posted by WhiskyEchoTango@reddit | sysadmin | View on Reddit | 33 comments

deadnerd51@reddit

I think people here are being too pedantic. Sure, replacing the PC is a quick fix, but you can always continue to work on that PC in the background, confirm that it works fine, and get it back in circulation, or use it as spare parts for another PC if required. More often than not, once you start switching people to laptops, those desktops just end up collecting dust and not being used. To me it sounds more like you need to speak with the owner about what is actually expected and how they like things to be resolved, and then make a standard procedure for this kind of issue going forward. End user support is always a balance of downtime to costs. If the downtime costs less than replacing hardware, then just investigate. If downtime costs the company lots of money, then get the user back up and running and fix the issue in the background. The switch issue, that was just a bit irresponsible. Anything that can affect the network should be done out of hours, where some downtime would have very little repercusions.

Built my first pc with mid range parts and i dont get why everyone acts like you need to spend $2000 minimum

Posted by Thin-Implement9273@reddit | buildapc | View on Reddit | 209 comments

deadnerd51@reddit

A lot of people want to play at 1440p. A lot of people want to play games like Borderlands 4 without upscaling. A lot of modern games are extremely CPU unoptimised. I high end rig can manage those things. In the past (at least during raster final stages), mid tier rigs gave you current games at 1080p native between 90-120 fps. Now anything mid tier is basically 1080p with upscaling.

We finally have a replacement for the Microsoft MiraCast devices

Posted by ADynes@reddit | sysadmin | View on Reddit | 80 comments

How to roll out the new Remote Desktop client, er, I mean Windows App

Posted by pkokkinis@reddit | sysadmin | View on Reddit | 20 comments

deadnerd51@reddit

Yeah, i somehow convinced my manager to let me spend the time to reqlly get it online and working, and its saved us a huge amount of work since. Definitely worth the time investment.

How to roll out the new Remote Desktop client, er, I mean Windows App

Posted by pkokkinis@reddit | sysadmin | View on Reddit | 20 comments

deadnerd51@reddit

We use Intune for this, all machines are enrolled, and the we just deploy a microsoft store app no problem. Super easy to see which devices get it and rarely any failures.

How to roll out the new Remote Desktop client, er, I mean Windows App

Posted by pkokkinis@reddit | sysadmin | View on Reddit | 20 comments

Outlook web - user cannot select Add online meeting to all meetings

Posted by Just_Curious_Dude@reddit | sysadmin | View on Reddit | 21 comments

deadnerd51@reddit

I know it is an old thread, but I am having this issue myself now for one random user. Looking into the back end, I ran **Get-MailboxCalendarConfiguration**, and for the user I noticed that the **AllowedOnlineMeetingProviders** is empty, where as for working users, it is an array with {TeamsForBuiness, Zoom, BlueJeans, GoToMeeting...}. Now I can't figure out how to populate this or why this is the case in the first place.

aaannnnd the Amazon layoffs are now incoming

Posted by AV1978@reddit | sysadmin | View on Reddit | 631 comments

deadnerd51@reddit

Well the first wave of A.I. Layoffs where in low level techs and support staff, and low/mid tier programmers. No it’s middle management and financial, since a lot of those roles essentially just process data and provide a pretty simplified output for positions above. So buy buy all middle management roles.

24H2 UAC Issues

Posted by ArchangelFuhkEsarhes@reddit | sysadmin | View on Reddit | 12 comments

deadnerd51@reddit

For me the issue has been that if I lock my screen and I have an elevated terminal window running, my lock screen crashes and I get stuck on a black screen with my mouse. Mouse moves and you can see the loading icon, but you cannot interact with anything and ctrl alt delete does nothing. Only way out is a hard reboot. I will try doing the colour thing and see if that fixes the issue.

Laptop Retrieval? Good luck getting it back

Posted by JohnnyIsNearDiabetic@reddit | sysadmin | View on Reddit | 429 comments

deadnerd51@reddit

Well you get plenty of employee protection in the uk, if you also get responsibilities with that. Its a fair deal. We provide the equipment, the agree to use it, take care of it and return it. They can choose not to agree and not sign the contract, no one is forcing them to. And again, we provide the prepaid label, we offer to ship boxes to their address if they need and everything. If they then choose not to return it, it’s just them being difficult. Ultimately, they can easily just return their items and not be deducted any wages.

Laptop Retrieval? Good luck getting it back

Posted by JohnnyIsNearDiabetic@reddit | sysadmin | View on Reddit | 429 comments

deadnerd51@reddit

It is not wage theft. The employee signed a legally binding agreement, they agreed to return any equipment provided in similar condition to how it was provided at the end of their employment, if the employee wished to be malicious and damage the item before returning it, , or not return it at all. We deduct the fair market value for the item after depreciation. For some users, they have high value laptops and mobile phones, so it can still be a lot of money. Plain and simple. The onus is on the employee and they have all the options provided to them to ensure that it is easy to do so. We only ever had one employee not return his laptop, and he was deducted 300 as it was already 2 years old and one of our more entry level devices. Because of the clauses in the employeement contract, this is perfectly legal in the uk. We also give plenty of time and opportunity for them to comply.

Laptop Retrieval? Good luck getting it back

Posted by JohnnyIsNearDiabetic@reddit | sysadmin | View on Reddit | 429 comments

deadnerd51@reddit

Yeah, employed by a law firm, so all the stuff has been thoroughly reviewed before it’s put in place. Plus, generally the people hired want good references when they leave. We just want the device back and aren’t going to say we haven’t received an item if it has actually been returned. Things lost in transit, just blocked and written off, devices are paperweights anyways as our windows machines are locked down to the bios, and the Apple devices are marked as lost and blocked for activation.

Laptop Retrieval? Good luck getting it back

Posted by JohnnyIsNearDiabetic@reddit | sysadmin | View on Reddit | 429 comments

deadnerd51@reddit

It does indeed state the condition. We document the condition of the devices before they are sent to the user and expect them to be returned in the same condition. So yeah, if it’s damaged by them, still gets deducted from their final pay.

Laptop Retrieval? Good luck getting it back

Posted by JohnnyIsNearDiabetic@reddit | sysadmin | View on Reddit | 429 comments

deadnerd51@reddit

We have our employees sign a contract via Docusign that’s states they confirm receipt of their equipment and agree to return it at the end of their employment or face salary deduction in the amount equal to the items value. Have never had issues with people not returning their equipment. This is also in their employment contract, so we are well covered. This is not an IT issue, this is a legal issue and an HR issue. We simply notify HR of the equipment they were assigned and what hasn’t been returned, and that get deducted from final payment.

$500 to upgrade your work setup what are you buying?

Posted by Overall-Country-5014@reddit | sysadmin | View on Reddit | 391 comments

Are ASUS products really as bad as people make them out to be?

Posted by Trawzor@reddit | buildapc | View on Reddit | 216 comments

deadnerd51@reddit

I mean, with the 9070 xt or non xt, it seems like people have ignored them mostly because they are significantly higher priced than all the other AIB cards. Like Both Saphire and Powercolor top end cards top out at 720-750, yet the asus prime and tuf ones are more expensive. Like its not even the ROG model, so just Asus being greedy.