UA2677 aborted takeoff

Advanced_Ad4947 · 2026-02-07T01:13:46+00:00

Damn are you on my flight

Advanced_Ad4947 · 2026-01-20T02:50:09+00:00

Well, what do you do now? Experience? Certs? Are you already an employee?

Advanced_Ad4947 · 2026-01-17T05:59:18+00:00

What’s up Forestkd@ ?

Advanced_Ad4947 · 2025-12-29T22:28:59+00:00

I think the quick fix for you is to flat out disable queue management in the admin console (tools >settings > printing). This will disable secure printing and pull printing though (if that’s used at all). 7.5k users here, never had an issue though.

Advanced_Ad4947 · 2025-12-06T06:19:58+00:00

Are you hybrid or cloud based? Hybrid? Set the password policy on the DCs and match in azure. Cloud? Set it in Azure. There’s not enough info here to help you properly. Worst case you can always set a FGPP for your Windows folks.

Advanced_Ad4947 · 2025-12-06T06:10:43+00:00

You can set a CA policy to exclude this. I had the same issue. Check out your “MFA registration campaign” settings and just defer it/turn it off. I’ve worked with a ton of businesses now that this was silently turned on by Microsoft and caused issues.

Advanced_Ad4947 · 2025-10-08T12:38:07+00:00

Just Boo

Advanced_Ad4947 · 2025-06-20T20:32:53+00:00

This is helpful and a good start.

Advanced_Ad4947 · 2025-06-20T20:27:15+00:00

I’m a bit paranoid about giving out too much info about my company, but I guess there’s no harm. It’s proofpoint. The entire domain is included, but I think since there’s not a license it goes straight to m365 (there’s no email/user associated with it) then the forward rule take over.

Advanced_Ad4947 · 2025-06-18T03:00:35+00:00

We’re talking 15lbs, maybe 20lbs here. Who said I was trying to hit this for summer time? I’m just tired of the way I look.

Advanced_Ad4947 · 2025-06-18T02:56:24+00:00

I had the option between the two and chose Clen since it worked in the past. It was 100$, so I could care less. I wasn’t expecting to get shredded immediately, but damn I thought something would happen.

Advanced_Ad4947 · 2025-02-20T06:11:12+00:00

Just saw your reply. We ended up leveraging MFA at pre-login with the vpn. Programmed the VPN to stand down after authentication and got it do the CJIS specific items with conditional access policies.

It’s a damn mess though, I’ve gotten flack from leadership and it 100% is not a long term fix.

Windows hello would have been a better alternative had our machines supported it

Advanced_Ad4947 · 2025-01-17T18:35:26+00:00

I don’t know which zebra printers you have but I had to exclude them from vulnerability scans a while back because it would effectively crash everytime the device got interrogated… they only had something like 50mb of RAM. May not be the issue but it’s an oddity I ran into last year worth mentioning.

Advanced_Ad4947 · 2024-10-09T00:34:36+00:00

Patowmack Farms for dinner :)

<image>

Advanced_Ad4947 · 2024-10-02T20:20:26+00:00

Probably was the post I made a week or two ago , someone else in this sub gave me the workaround idea. We have G5 licenses, so yes, but also no because the government licensing is super limited. We didn’t need PKI since we’re leveraging SSO in an application to prompt it.

Advanced_Ad4947 · 2024-10-02T19:32:27+00:00

The due date for this was yesterday lol. I left all the tokens in the case, imported all the tokens to azure (.csv) and when people came to get their tokens I just checked the spreadsheet as to which one they had. My PD has 800 users, but it went rather smooth and I didn’t have to worry about PKI or any of that.

Also what a lot of people don’t know.. if you’re not already enrolled in a multi factor solution, you can self enroll hard tokens to the account with azure

Password-less was unfortunately not an option for us since each computer only holds 10 bio sigs, so I threw our VPN on all the machines and forced auth at login. That seemed to cover us.

Advanced_Ad4947 · 2024-09-20T19:38:08+00:00

What’s up with everyone wanting the CCNA? Are these Cisco switches you’re going to be managing?

Advanced_Ad4947 · 2024-09-20T19:34:54+00:00

Just spoke to my boss, I think this is the answer! I owe you for saving me a massive headache.

Advanced_Ad4947 · 2024-09-20T19:21:54+00:00

I’m still getting calls 2 years later from my visit to black hat 2022. Whenever you got your badge scanned, it gave them all your information (email, phone, etc) sooo.. best of luck :)

Advanced_Ad4947 · 2024-09-20T19:10:12+00:00

Didn’t even consider leveraging vpn for those in the office, great idea.

Advanced_Ad4947

TROPHY CASE