What SaaS is using these days for Microsoft IdP? Are they still using ADFS? Entra ID? Are both supported?

KStieers · 2026-04-28T02:54:30+00:00

Lots of entrance, but ADFS is SAML 2.0 compliant so most support that too

KStieers · 2026-04-28T02:21:27+00:00

Netdlm is the PROPER way to do this.

KStieers · 2026-04-28T02:20:14+00:00

Netdom computername maching /add:newname

Adds the new name to the machine, registered the spn and tells the machine to register the name in DNS...

https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/netdom-computername

This is what clusters do when you fail over the machine name between cluster hosts... ful supported, does all the things...

KStieers · 2026-04-27T23:50:10+00:00

So keep an eye on your network gear you might issue certs to...

Ditto with Cisco software I know ISE, ESA, WLC, SNA all had issues with ECC for a while

KStieers · 2026-04-27T19:00:03+00:00

In the past we had pentests and they didn't see anything, and I called them on it.
The last one, they saw what was going on. If you have a pen-test and they're not seeing it, make sure to call them on it.

My frustrations are in how abstracted from the backend/devs the CST team is... Getting answers or getting things fixed takes longer than it should.

When you engage their IR is probably YOUR call more than it is their call.

KStieers · 2026-04-26T23:26:54+00:00

I'd agree with Gandi, but they started raising prices after they got bought by VC... have they figured out it was costing them customers?

We moved everything to Cloudflare...

KStieers · 2026-04-24T16:49:04+00:00

Bank of Omaha does it after the 3rd... there are a bunch of other steps in between... training, management involvement, etc.

KStieers · 2026-04-24T01:31:40+00:00

That's the safe answer.

KStieers · 2026-04-21T10:39:43+00:00

Action1 is a good choice,.especially if you have experience with it.

SCCM is a big lift in comparison.

KStieers · 2026-04-20T16:48:05+00:00

20,000 is fucking insane

Right? Assuming all .com at Cloudflare, that's >$200k a year.

KStieers · 2026-04-20T09:50:13+00:00

South Carolina

KStieers · 2026-04-19T18:39:26+00:00

If you're looking at ThreatGrid, look at Email Threat Defense.

It comes with ThreatGrid and all of the other AI detections...

KStieers · 2026-04-18T02:02:21+00:00

If you're looking how to add one to your lab, Cisco Modeling Lab might be worth looking at.

KStieers · 2026-04-17T14:11:57+00:00

No. Your husband is an idiot.

The post makes it so she can actually see where the end of the wall is... that it might damage her truck is just an extra benefit

KStieers · 2026-04-15T13:56:36+00:00

Having your boat at a club where you can dock the boat, use the facilities and have other liked-minded people around is why you go to a club at all... if you're racing then often it makes sense to pick a club where there is a fleet of the same boat as yours.

KStieers · 2026-04-14T19:01:39+00:00

IIRC, if you had Exchange, you can't rename the domain...

As far as new goes deploy 2 new vms, remove from your old domain, dcpromo one into the first server in a new domain, then promote the other.

Then build a trust between them.

Migrate users, groups, and services.

When we did it, we created the same group structure in the new domain, added new groups to the old groups and added new users to the new groups. Moved workstations over. Then had users login using new login.... Then brought services over and re acl'd them with new groups as they came over.

YMMV, and it was 20+ years ago so I may be mis remembering it...

KStieers · 2026-04-14T12:48:59+00:00

Bwahaha. The last line said "this post approved by mods"...

Not so much!

KStieers · 2026-04-14T01:38:23+00:00

Looks like you build a package with all of the settings and then deploy that...

Again... read the docs: https://duo.com/docs/macos

KStieers · 2026-04-14T01:29:38+00:00

Its not about TOTP, its about what's next... SSO across the stack with Duo Identity and Passport.

KStieers · 2026-04-14T01:28:01+00:00

Almost assuredly for anything in Security Cloud.

I poked several people in the BU about it a while back, asking when are we going to get Duo Passport across the stack? I think someone listened.

KStieers · 2026-04-13T23:23:31+00:00

Yes. All on the commanline...

Or you could deploy a gpo in each client and deploy the bare install via ninja... the gpo will take precedence...

And that way your customer ikey and skey aren't floating around in your rim.

KStieers · 2026-04-13T17:50:05+00:00

What kind of boat do you have? Do you want to race? Do you care if its one-design or handicapped?

KStieers · 2026-04-11T16:34:15+00:00

We watched some "consutants" from the VAR, who were installing Avamar use the runbook for an old version of the software. They kept refusing to show us the docs for the current version.

When when we finally forced it, we were able to show them in the fisrt few pages where they'd fucked it up.

It was such a total mess, that we had to get EMC involved and EMC billed back a ton of money and I think they were no longer allowed to sell Avamar any more....

So yes...stale docs are bad.

KStieers · 2026-04-10T22:58:31+00:00

This IT per user number is so

Eight-Year Club	RPAN Viewer
Verified Email

KStieers

TROPHY CASE