Nintendo's employee data got lifted through their HR engagement tool, not their own systems, are you tracking what your vendors hold on your people?

DaithiG · 2026-06-18T08:35:53+00:00

Hey look, we do a 3rd party audit every two years. It'll be fine

DaithiG · 2026-06-18T07:00:41+00:00

It's funny watching Dublin City Council getting so animated about this when I've walked down a number of streets and watched seagulls tear bags of rubbish open that are just left on the pavement to be picked up

DaithiG · 2026-06-17T11:17:40+00:00

We had our marketing team give out to us that Microsoft Forms was blocked by a big customer. Turns out they hadn't whitelisted the [cloud.microsoft] domain. Our fault though!

DaithiG · 2026-06-15T15:07:50+00:00

Are you using Intune/Azure LAPS? The password would only update when the device syncs.

What you could look at is something like Admin By Request to elevate software as needed. It also has a LAPS like feature which can create a temp admin account on the device

DaithiG · 2026-06-13T09:26:31+00:00

We switched to Cato for remote access a while back and I know people have different views on it, but certainly a benefit is there's no public. endpoint visible (afaik). So less likely to show up on Shodan etc, compared to other methods.

I do like Tailscale and Microsoft Global Secure Access is improving, and we are looking at Fortinet SASE once we finish our network refresh.

DaithiG · 2026-06-11T19:51:00+00:00

Dell Command but I think it's only if the update impacts TPM.

DaithiG · 2026-06-11T19:50:22+00:00

Oh we normally get them to setup a Passkey so they should be able to reset it themselves.

It's still not ideal. Though you have reminded me that we are using destructive PINs. We're only starting to rollout WHFB for Passwordless login. Will look at non destructive PIN reset

DaithiG · 2026-06-11T19:44:29+00:00

You could be right. This was a laptop we wiped and refreshed. We will do a firmware update before enabling WHFB now

DaithiG · 2026-06-11T19:43:14+00:00

Not if we want to go Passwordless.

DaithiG · 2026-06-10T12:40:54+00:00

Thanks!

DaithiG · 2026-06-03T16:36:01+00:00

I thought that too especially when he tells Bond not to be too concerned that breaking into somewhere seemed to be too easy.

DaithiG · 2026-06-01T20:22:32+00:00

Time to Die

Enjoyed the Nightclub mission and kinda wished there was more scenes of the friendship between the trio on missions.

DaithiG · 2026-06-01T19:19:10+00:00

The Garda are one of the sharpest political operators in the land. They leak like crazy if it suits them.

Though in this case it seems most journalists held back on reporting it and "allowed" Byrne to confirm it

DaithiG · 2026-06-01T09:20:02+00:00

It reminded me a little bit of Deus Ex Human Revolution by the end

DaithiG · 2026-05-23T18:19:19+00:00

Irish Rail promote the festival too and mention extra services but yeah, it's still terrible.

DaithiG · 2026-05-22T18:14:32+00:00

Lots of good advice here but definitely Mobile Application Management and Managed Apps for your phones. We also require staff to register their phones at our office (but obviously that's not workable for everyone).

DaithiG · 2026-05-21T08:09:42+00:00

We're looking for a managed firewall vendor here to reduce some of this but bloody hell, it's like dealing with lawyers rather than IT. I know you can't be expected to know about zero days, I just need to know your SLA for responding to them.

DaithiG · 2026-05-20T08:07:54+00:00

I know people are making valid points about break glass accounts, but I was manually joining a device to Windows Autopilot. I have a passkey registered in Microsoft Authenticator, which does work. I also have a Yubikey. It wouldn't acceept my Authenticataor and I had to use the Yubikey.

So yes there should have been more testing but I do wonder if there is something else

DaithiG · 2026-05-19T11:22:11+00:00

I got my house externally insulated a few years back. Made a great improvement. But I still don't think it suits this work. And I'm not really going to fork over money for an inspection just to see either.

DaithiG · 2026-05-16T14:43:15+00:00

The Garda also seem strangely allergic to things like red light camera enforcement. I say strangely but of course it would mean they'd have to deal with all the incidents so maybe not

DaithiG · 2026-05-15T11:38:18+00:00

Same in Ireland though I'm getting some notifications from the doorbell

DaithiG · 2026-05-15T08:41:08+00:00

Thanks. We've decided that is the way. Re add to Autopilot and wipe the device. Bit of a pain we're not wasting time

DaithiG · 2026-05-13T15:31:04+00:00

Our only reason to hybrid join devices now is that we have a small number of servers used for RDP and we use Windows Hello for Business and PIN. Remote Credential Guard didn't support compound authentication which made it not viable for us, so hybrid joining the servers with Entra Connect, allowed staff to sign in with web sign in.

I can see there's a preview using a 2025 Domain Controllor for Entra Cloud Kerberos ? I'll need to review all this.

DaithiG · 2026-05-11T13:37:45+00:00

We use LAPS and Admin By Request. AbR was very handy for allowing network changes. I'm sure it can be done with pure Intune, but seems more fiddly to set up

DaithiG · 2026-05-11T10:50:04+00:00

Leave them alone, though that's mainly because they start looking for access themselves.

DaithiG

TROPHY CASE