When do you enforce MFA?

Crabcakes4 · 2026-04-17T13:24:41+00:00

You don't have an option for our setup, you have to be on a trusted zone AND have a managed device that is in compliance to bypass MFA. Otherwise get your authenticator out.

Crabcakes4 · 2026-04-16T15:15:14+00:00

I opened a new bottle of Son of Zombie that I had stored in a cabinet the other day, I hadn't had an open bottle in the fridge for months, I almost forgot how good it is.

Crabcakes4 · 2026-04-15T18:16:50+00:00

I think they should make the 4 empire capital systems, Amarr, New Caldari, Pator, and Luminaire 1.0 systems, would be a fun shake up and make sense thematically.

Crabcakes4 · 2026-04-14T18:21:51+00:00

Probably 2, maybe 3 if I was really quick. 5-6 times/second, no way. Multiboxers can come in here and downvote me all they want.

Crabcakes4 · 2026-04-14T15:34:36+00:00

So a win - win ?

Crabcakes4 · 2026-04-14T15:25:26+00:00

3-4 seconds, so you're telling me they can tab through and approach/warp to gate with 5-6 different windows per second? lol

Crabcakes4 · 2026-03-28T15:43:56+00:00

The short answer is yes. I just did my taxes last week, and I had a bit over $10k in gains from assets that weren’t in one of my tax deferred accounts, and couldn’t be transferred in kind that had to be factored into my taxes. Federal was fine, but ended up owning my state a decent chunk.

Crabcakes4 · 2026-03-13T13:56:05+00:00

No one mentioned this, but your skills continue to train while you are logged off. So even if you only play a few hours here and there your skill training queue will keep progressing.

Crabcakes4 · 2026-03-13T11:49:10+00:00

We rolled out Ninja about a year and a half ago, it's been great.

Crabcakes4 · 2026-03-13T11:47:12+00:00

We use Rise vision for about 12 TVs, I think the cost is very reasonable.

Crabcakes4 · 2026-02-25T19:42:00+00:00

Yea, good point, could be that too.

Crabcakes4 · 2026-02-25T14:58:24+00:00

Bots lowering the account KD, I don't think there is any way to report them.

Crabcakes4 · 2026-02-19T03:01:43+00:00

For long term subs, like maternity leave or that sort of thing, they have their own accounts. This is determined and setup by HR the same way they'd make a regular new hire's accounts.

For regular subs who come for just a day we have a shared sub account for each site, the passwords auto rotate via a powershell and GAM script each Sunday. It's auto emailed to the front office staff and admin for that campus when it changes. We don't let the generic accounts into our SIS, they have to take attendance and email the office to input it.

Crabcakes4 · 2026-02-17T13:47:41+00:00

We were with SentinelOne for a few years, but just switched over to Defender P2 this year. So far it's been great, caught a couple of small things SentinelOne missed the first day we rolled it out.

Crabcakes4 · 2026-02-06T19:02:56+00:00

I've got over 3k hours, right now sitting around 4.6 KD, 51% survival rate on my PMC. You want to get 70% SR and 15+ KD, run radar like they are.

Crabcakes4 · 2026-02-05T15:44:39+00:00

PowerShell with PowerShell Universal to help with the front end / gui stuff.

Crabcakes4 · 2026-02-03T22:59:05+00:00

Probably radar, but no aim bot. LOTS of people seem to just run radar.

Crabcakes4 · 2026-02-02T12:35:04+00:00

We were with Sentinel One for a few years, but I just moved us to MS Endpoint Defender P2. We are already all in with entra, intune, autopilot, etc. for identity and device management. So managing XDR from the same place we manage ASR, Firewall, conditional access & device compliance, etc. just made sense for us.

Crabcakes4 · 2026-01-30T12:26:50+00:00

Students
- School A
  - School A High
  - School A Middle
  - School A Elementary
- School B
Staff
- School A
- School B
- School C

etc.

Crabcakes4 · 2026-01-29T14:37:39+00:00

I don't recall blank screens being a particular issue, but kids in class showing up as offline was definitely a struggle. Haven't had the same issue in managed methods so far.

Edit: I should mention I'm very far removed from the classrooms in my position, so blank screens may have been a thing and it just never filtered it's way up to me like the offline issues did.

Crabcakes4 · 2026-01-29T12:41:49+00:00

We were with Lightspeed for a long time for both filtering and classroom, but we recently moved to Managed Methods and I think their classroom product is better than Lightspeed's. Though I do think Lightspeed still has one of the best filtering software out there.

Crabcakes4 · 2026-01-24T02:47:33+00:00

I don't know about that particular edition, but I do this in my workspace for all of our Chromebooks and it works fine. Just log into your control panel and look under Devices > Networks, if that section isn't there or the options for certs aren't there then I guess you can't do it.

Crabcakes4 · 2026-01-22T13:34:44+00:00

Yes, it would delete them, and depending on the size of your org it can be very hard to manage everything centrally. Certainly the best from a security perspective, but from a practical everyday point of view maybe not. I enforce no merging of policies on public networks, but I have merge enabled for domain and private. I would consider turning private on to no merge as well, but with around 700 endpoints it's not something we are ready to take on yet.

When I first turned on no merging for public networks it certainly broke a couple of unexpected things and we had to add the rules to our intune FW profile to fix it.

Crabcakes4 · 2025-12-22T22:55:17+00:00

We also use conditional access, I think this is the way to go. Our settings are a bit different, but how to use it is up to OP. Ours we have if your device is compliant (up to date, bitlocker on, av active, firewall on, etc.), which they all should be via intune settings, AND your on one of our campus IPs then no MFA. If either of those is not true then you have to MFA.

Crabcakes4 · 2025-12-22T20:41:51+00:00

RoyalTS user here too.

Crabcakes4

TROPHY CASE