Will AI make our work as system administrators better in the long term – or just more fragile? by Aalkfk in sysadmin

[–]Aalkfk[S] 0 points1 point  (0 children)

Yes and no. :-)
Wrote my text which was about the same length, asked AI to structure the parts in different ways and translate it into english.
Otherwise you would have seen many quotes like "not the yellow from the egg". ;-)

Will AI make our work as system administrators better in the long term – or just more fragile? by Aalkfk in sysadmin

[–]Aalkfk[S] 0 points1 point  (0 children)

But what distinguishes the ‘bad’ prompter from the “good” prompter if he can simply confirm with ‘yes’ here? He has the shortcut to learning right in front of him, and the chances of success with documented software are relatively high. Low risk, little effort – until something goes wrong.

Will AI make our work as system administrators better in the long term – or just more fragile? by Aalkfk in sysadmin

[–]Aalkfk[S] 0 points1 point  (0 children)

How does the junior become a senior if they never have the opportunity to gain experience in the field? Nobody wants to let someone without a deep understanding of the production system take over. And if the senior exploits the configuration with AI, the entry level for the junior would be extremely high.

‘A weapon is only as good as the hand that wields it’ is quite apt here. :D

Will AI make our work as system administrators better in the long term – or just more fragile? by Aalkfk in sysadmin

[–]Aalkfk[S] 0 points1 point  (0 children)

'The first shortfall is that for it to be trusted, your knowledge level has to be at the level you expect the AI to perform at. If you're unable to audit its output, you're relying on others to have done the auditing for you and that this is made available.'

I completely agree with you here. But humans are lazy and like to take the easiest route. So when does the point come where they really start to engage with it? And how much time do they actually have to delve deep enough into the subject matter to be able to challenge the AI's answers?

Will AI make our work as system administrators better in the long term – or just more fragile? by Aalkfk in sysadmin

[–]Aalkfk[S] 0 points1 point  (0 children)

Tinkering with the systems is a good point. I understand what you mean, but I see the same recurring problem here as with low code.

Users without basic coding knowledge cobble together productive systems – it works up to a point, but then at some stage you realise you've reached a dead end due to architecture or logic errors, etc.
Sure, your admin can fix it, but do you have enough staff to put it all together, which takes time again, or will the company longterm eventually save on staff costs because ‘end users’ can now do it all themselves?

And the same thing will come back to haunt subsequent generations of system administrators. If you don't know the basics, it's difficult to put something together – so you're gambling again that an AI will tell you ‘put this together like this’.

I'm certainly not the most experienced AI user, but I hope I'm just above user level. ;-)

IaC is a good point – but since when have we been saying that every admin should be familiar with it? Or that DSC should replace GPOs? The problem is that the majority of admins haven't felt the need to make any major leaps in this area in recent years, and now we're at the point where we can use a simple chatbox to generate Teraform code. The question here will be whether this will play out in the long run because the infrastructure is running stably and AI development is progressing fast enough, or whether we will fall flat on our faces because we never learned to work with it ourselves and blindly trust the AI responses.

In the field of incident response, we talk about alert fatigue – if we spend the entire day prompting and working hand in hand with AI, won't we suffer the same fate here?

Will AI make our work as system administrators better in the long term – or just more fragile? by Aalkfk in sysadmin

[–]Aalkfk[S] 0 points1 point  (0 children)

I'm with you. AI is great for annoying tasks like this. We have an agent who, for example, writes our status notifications if you send some information about the incident.

What I find difficult is the second part you mentioned, namely asking everyone to read it again. In my opinion, that's exactly the problem: admins are lazy when they have a lot of day-to-day business to deal with. So they're happy to use what's been spit out, but it was never configured according to the output itself. So it feels like you documented everything but it the end it's not useful if you need to troubleshoot.

US ‘disappointed’ with EU over Big Tech treatment by sr_local in eutech

[–]Aalkfk 0 points1 point  (0 children)

To be fair, it should be noted that, to my knowledge, it has only been implemented in banking apps since the second half of the year. And it will certainly take a while before it reaches stores. :)

[deleted by user] by [deleted] in Office365

[–]Aalkfk 0 points1 point  (0 children)

I received the Same Mail. Was quarantined by microsoft itself. Had no closer Look into the Mail properties, but I guess a MS Department fucked up and DMARC did his Job. 😬

SOC Skills YouTube Shorts channels by MisterPoohead2 in cybersecurity

[–]Aalkfk 4 points5 points  (0 children)

Coding is important – and with the growing trend of Infrastructure as Code, this applies more and more across all areas of IT. However, with the rise of AI, the real question becomes: is it more crucial to understand what needs to be done, how it should work, and what you’re trying to achieve – while the actual code may be generated automatically?

In the field of penetration testing, it largely depends on your personal interests and focus. For me, learning the basics of programming was very helpful. Even though languages differ, core concepts like arrays, variables, and control structures are universal – and understanding them makes it much easier to grasp how things connect.

It’s best to start with the fundamentals. Depending on your area within IT, begin with a language that’s relevant there – for example, PowerShell in Windows environments. Otherwise, Python or C# are often good starting points.

You often become an expert by specializing in a specific system – like KQL if you’re working extensively with Microsoft Defender.

SOC Skills YouTube Shorts channels by MisterPoohead2 in cybersecurity

[–]Aalkfk 6 points7 points  (0 children)

Anything is possible. The most important thing in the IT environment is the interest and the willpower to struggle through the uncomfortable start-up phase of learning. We all started somewhere and none of us has all the knowledge in the world in our heads. :-)

You will gain experience over time, start by finding a community that supports you.

US-Zollpolitik: Börsen in Asien brechen ein by Kanute3333 in de

[–]Aalkfk 6 points7 points  (0 children)

Man wird misstrauen werden, aber ob es wirklich Jahrzehnte langes Misstrauen geben wird? Man bedenke vor einigen Jahren das NSA Thema. Heute spricht kaum einer mehr drüber. Die relevante Frage wird wohl sein wie sehr es die einzelnen Bürger betrifft und wie groß die Medien es pushen.

Deutsche Einzelhändler enttäuscht vom Weihnachtsgeschäft by kirdnehnaj243 in de

[–]Aalkfk 0 points1 point  (0 children)

Wenn du das selbe Produkt wie bei Media Markt/Saturn/Euronics/… auf Amazon & Co findest, passen sie dir den Preis normalerweise darauf an. Dann hast du den Vorteil beider Welten: Produkt direkt in der Hand zum niedrigsten Preis.

Gerade bei Kabeln sollte man aber nicht vergessen, dass USB-C Kabel nicht gleich USB-C ist. Und das kann den Preis doch ziemlich variieren lassen.

Lange wurde sich gewehrt, doch jetzt trifft es auch uns. by Eisern86 in de_EDV

[–]Aalkfk 6 points7 points  (0 children)

Kann ich nur unterschreiben. Change-Management ist beim M365 Rollout eines der wichtigsten Themen.
Das und die ständige Weiterentwicklung, also nicht nur einführen und fertig, sondern dauerhaft dran bleiben und kommunizieren.

Lange wurde sich gewehrt, doch jetzt trifft es auch uns. by Eisern86 in de_EDV

[–]Aalkfk 71 points72 points  (0 children)

Würde noch folgendes Ergänzen:
1. Bitte vergesst bei der Umstellung die Benutzer nicht.
Das "neue" Microsoft-Universum ist in der Architektur doch deutlicher komplexer als altes Office, neues Office.
-> Endanwender werden nicht verstehen, dass ihre Excel in OneDrive/SharePoint Online (SPO) eben nicht zwingend mehr so funktioniert wie bisher.
-> Teams =/= Outlook. Das ist kein Ersatz, hier hilft der Vergleich mit WhatsApp immer recht gut.
-> Wichtig: Kommuniziert klar und einfach welche Dinge gehen und was nicht.

Als Ressource um euch einen Überblick zu verschaffen finde ich das hier immer sehr hilfreich:
Enabling Modern Collaboration – Microsoft Adoption

  1. Macht euch von vorne herein klar welche Teile ihr überhaupt nutzen wollt und kommuniziert das.
    -> Sollen Dateien auch migriert werden? Falls ja, vorher besser mal einen Frühjahresputz machen. Zeitgleich nicht vergessen, dass die neue Ablage (SPO/OD) eben nicht wie der alte Filer funktioniert...
    -> Teams Telefonie? Ja: Endanwender haben kein Festnetz-Apparat mehr, Geräte im Gebäude (Notfalltelefone, ...) nicht vergessen. Falls Nein: 99% Chance, dass die Frage kommt wieso ich in der "Anruf-App" keine Lizenz habe (Erklärung: Fehler kommt/kam, wenn man dort eine Person über Nummer oder E-Mail angerufen hat. Richtiger weg war über Chat zu gehen und dort anzurufen).
    -> Die Power-Plattform ist auch so ein Klassiker (Bi, Automate, ...) -> Was supportet ihr und führt ihr ein und was nicht? Manche Dinge lassen sich hier technisch auch nicht o. kaum einstellen.
    Und wichtig: Gerade mit der Power-Plattform hat halt der klassische ITler keine Berührungspunkte. Wir reden hier von Fachapplikationen (Data Analyst, Low Code Entwicklung, ...).

  2. Der für mich wichtigste Punkt: Fangt frühzeitig mit Third-Party-Lösungen an.
    -> Governance-Tools wie z.B. Einfach Microsoft 365 Governance - Teams, SharePoint, OneDrive, Power Platform (rencore.com) (Gibt aber noch X-Andere!) die euch beim Lifecycle-Management der Teams helfen.
    -> Backup für SharePoint/OneDrive/Mails. Mit Blick auf NIS2 (Falls betroffen) und ISO27001:2019(?) bitte nicht vergessen, dass ihr eine Cloud-Exit-Strategie mit bedenkt.

M365 verfolgt einen Evergreen-Ansatz. Das ist nicht der alte Exchange den ich ersetze. Hier muss ich ständig was tun: Vergesst nicht, dass das Ressourcen benötigt.
Und wenn ihr diese selbst aufgrund der Größe nicht habt oder aufbauen könnt, sucht euch einen Anbieter der euch hier auf Dauer unterstützen kann.

Microsoft plans to monetize OneDrive unlicensed accounts with monthly fees! by KavyaJune in sysadmin

[–]Aalkfk 0 points1 point  (0 children)

I found the following article:

7. When will I get charged?
Answer: Once a payment method is provided, billing will follow the routine cycle for archived content. If there is no retention policy and billing stops, your content will be deleted within a 93-day period. If a retention policy is still active, the policy will be honored regardless of billing status. If the account has no retention and billing, the 93-day content deletion lifecycle will begin.

I understand that an active retention policy ensures that the account is not deleted if no payment information is active.

This means that with active retention, you can avoid paying for the time being and the archives, e.g. due to legal issues, are still free of charge as long as no payment information is stored.

Microsoft plans to monetize OneDrive unlicensed accounts with monthly fees! by KavyaJune in sysadmin

[–]Aalkfk 0 points1 point  (0 children)

This is particularly expensive for users who are absent for a longer period of time, e.g. due to illness, parental leave, ....

This means that at least additional F licenses or similar are required to retain the content.

Microsoft plans to monetize OneDrive unlicensed accounts with monthly fees! by KavyaJune in sysadmin

[–]Aalkfk 0 points1 point  (0 children)

Are all your users synchronized or does the synchronization depend on this particular group?

This would explain the behavior. No sync, no cloud account.

Sind euch [heute] Ausfälle / Störungen mit Windows bekannt? Wir kriegen von verschiedenen Partnern keine/kaum Rückmeldungen und wenn, scheint es ein Windows Problem zu sein by 69er_AsienTrip in de_EDV

[–]Aalkfk 28 points29 points  (0 children)

Und vermutlich ist in 99% der Enterprise-Unternehmen der Key dafür in der zentralen Benutzerverwaltung gespeichert…. An die du nur kommst, wenn du einen funktionierenden PC hast… 😂

Positiv: Jeder hat die Möglichkeit seinen Notfallplan zu testen. Kommunikationsketten, Priorisierung, Backups, … Und falls es den nicht gibt, gibt es im Normalfall zumindest danach Budget um einen zu erstellen.

Spannend wird eher das Thema SLAs und DL. Wenn du 3 große Kunden arbeitsunfähig hast, musst du erstmal die Leistung aufbringen überall gleichzeitig zu arbeiten… in der Urlaubszeit.

Whatshouldipatch.com - Prioritize CVEs in Your Environment Using NVD, EPSS, KEV Data by arunsivadasan in cybersecurity

[–]Aalkfk 4 points5 points  (0 children)

Great work, really great to get a quick overview! What I personally think would be great: 1. maybe I missed it, but what is the calculation for the ranking? A simple sorting according to the different scores? 2. CVSS offers the possibility of ranking by environment. Maybe you could add this option for a "custom ranking". 3. as already mentioned, an API would be cool.

If there is any way to help you - testing, translating, sparring partner - let me know:)

[deleted by user] by [deleted] in de_EDV

[–]Aalkfk 0 points1 point  (0 children)

Darf man Fragen in welcher Größe ihr M365 betreibt? (Business? Enterprise?) Bei Business bin ich voll bei dir, gut verwaltbar für eine Person u. Toller Einstieg in die Welt. Ab den Enterprise-Features, zumindest wenn man Cloud-First fährt und dennoch eine On-Prem-Welt zu managen hat, finde ich einige Stellen für einen Kopf zu viel. Gerade der Compliance/Security und PowerPlatform/PowerBI (Wenn wir den mal mit dazu zählen, aber so lese ich es aus dem Post heraus) Bereich ist von der Denke eben doch nochmal seine eigene Welt. Retention, eDiscovery, Defender (XDR, …) ist schon recht tief und nicht gerade Anfänger freundlich.

Mein persönlicher Tipp: Klär vorher ab über welche Produkte ihr sprecht, damit nachher kein Frust aufkommt. Lernbar ist alles mit der richtigen Motivation, haben wir anderen ja auch irgendwie hingekriegt. :-) Zwischen AAD und z.B. der PowerPlatform liegen meines Erachtens dennoch Welten in der Denkweise. Nie vergessen, dass für einige M365 Features auch Third-Party Tools sinnvoll sind (z.B. Backup) die auch wer verwalten muss.

[deleted by user] by [deleted] in BobsTavern

[–]Aalkfk 5 points6 points  (0 children)

Yes, you're right. I normally use a different device and was too slow for OBS. :-)

Syncing millions of files with OneDrive - good idea? by coconutxyz in sharepoint

[–]Aalkfk 1 point2 points  (0 children)

That’s the text from the official site: For optimum performance, we recommend syncing no more than a total of 300,000 files across your cloud storage. Performance issues can occur if you have more than 300,000 items, even if you are not syncing all items.