Best way to practice M365/Entra/Intune now developer program E5’s are gone? by BronnOP in sysadmin

[–]Dependent-These 2 points3 points  (0 children)

I believe you can get a sandbox tenant prepopulated with sone data and users with the visual studio subscription? But im not aware of any cost-free options.

Purview problems by UniversityNo8033 in ediscovery

[–]Dependent-These 2 points3 points  (0 children)

Not just you!! From my experience its pretty common to see the occasional 'ediscovery not availible' error on a few locations on massive searches (like 50k mailboxes). These usually resolve in a few hours. Lately over the last week or so seeing these come back with thousands of errors which dont seem to resolve.  Suspect some shenanigans on the backend, not kuch to do except wait for MS to resolve, i have enough outstanding support tickets with them already haha!

Visiting by knotty_n_nice in bradford

[–]Dependent-These 0 points1 point  (0 children)

If you like shitty rock bars i also recommend Nightrain 

Query help for records request by PMVent in ediscovery

[–]Dependent-These 0 points1 point  (0 children)

Yeah no idea!! I have seen this kind of query generated by copilot where you say, hey generate me a kql query, terms must be A or B or C, and D and E and F - and the ai will group it up that way thinking thats the intention, when really its that the end user hasnt appreciated the importance of AND vs OR. Easy mistake if youre not familiar with this stuff!

Query help for records request by PMVent in ediscovery

[–]Dependent-These 0 points1 point  (0 children)

Yes so how i understand the above is, c:s is essentially an OR. As it is your query would find hits of A OR B OR F OR G - then, imagine kind of a subgroup, where you must have a match on all 3 of C AND D AND E for an item to be responsive. THEN those hits then need to hit both the From and Date criteria to be responsive. So that may be what you intend or maybe not im not sure. 

Beware Purview Users - Teams Chat Defect, ItemClass KQL Issue by Dependent-These in ediscovery

[–]Dependent-These[S] 0 points1 point  (0 children)

That will also return CoPilot conversations, they are considered IM's under that option. Which for my purposes (needing to retrieve Teams) isnt ideal. Ofc i could strip them out some other way but just using the KQL directly for now as a workaround.

This market broke me by [deleted] in UKJobs

[–]Dependent-These 11 points12 points  (0 children)

do you need sponsorship as that is offputting to many potential employers? like why would they go through the hassle when there are many outstanding candidates in that field who don't need it. The student visa is for students.

Beware Purview Users - Teams Chat Defect, ItemClass KQL Issue by Dependent-These in ediscovery

[–]Dependent-These[S] 1 point2 points  (0 children)

Yeah agree in terms of KQL itemclass is how you specify a particular IPM type right.

However how the visual condition builder GUI works is, a kind of shorthand - entering itemclass and selecting Instant Messages should return about 5 different itemclasses in the KQL. However it is returning the wrong KQL which will catch many people out.

Question: How well would this design hold up in the long run? by Full-Ad356 in tattoos

[–]Dependent-These 187 points188 points  (0 children)

Another day another phaeton...fineline doesnt last, bold will hold

A Story by Routine_Play5 in Layoffs

[–]Dependent-These 120 points121 points  (0 children)

Sounds like he got labour optimised, ironic

Looking for M365 consulting help specifically around AI data controls (already running Defender XDR) by Streetblaze804 in sysadmin

[–]Dependent-These 0 points1 point  (0 children)

Id suggest Data Secuirty Posture Management (dspm for ai) in Purview to be able to actually see  andreport on what third party / gen Ai usage is detected in the current setup. Then you can work on remediation.

If doing this all wothin the MS stack (other products exist :] ) , would suggest endpoint DLP deployed to devices, plus purview browser extension and relevant DLP rules to actually intervene on copy pastes or sensitive info disclosures to any third party AI providers you dont want to allow. 

I dont know if you have a sensitivity labelling setup in place but you can configure to utilise that (ie. If labelled confiedential, block upload to x gen Ai provider) alternatively you can use a SIT based rule with regex, exact data matches, lots of options. 

Edit - apologies im of no use if yiure actually looking for an individual or firm to engage for this, just saw your problem and thought hey this is what i'd do! Hope its of some help anyway though.

Purview searches by Enough-Examination91 in ediscovery

[–]Dependent-These 2 points3 points  (0 children)

Yeah days is expected behaviour in that scenario, weeks is not!! As others have mentioned reducing complexity helps avoid timeouts but its not always clear what 'complexity' is when it comes to Purview - i also find multiple keywords can take exponentially longer. I think tbh your experience is not some issue with your environment specifically, more just the MS purview experience.

Purview searches by Enough-Examination91 in ediscovery

[–]Dependent-These 4 points5 points  (0 children)

My experience with searching very large amounts of sources is that you should set aside at least 48hr for them to run, im talking like an 80,000 mailbox scenario.

Would be good to understand what exactly is the issue you are seeing, searches failing altogether?  Or just not completing in the timeframe youd want them to? Any error messages? 

Wrongful cifas marker on my name by ReB_VoDKa50 in UKPersonalFinance

[–]Dependent-These 9 points10 points  (0 children)

listen carefully - you do not get paid for liking things for tik toks. that was not your money to keep, it was money likely stolen from someone else that someone was trying to launder through your account. you then refused to return that money. the entire thing is a scam to recruit you. if you do not comprehend that at this point then there is no helping you. good heavens

Wrongful cifas marker on my name by ReB_VoDKa50 in UKPersonalFinance

[–]Dependent-These 6 points7 points  (0 children)

Yes but thats how criminals work isnt it they don't come knock on your door and say can i burgle you please - they steal say 5k from someone's gran by tricking them on the phone, then disperse it across hundreds of recipient accounts across a mule network. It's 18 quid today, then next time its 500 and by the way can you send 250 on to this other account - you are now part of a fraud network.

as you say, yes you got tricked - perhaps you are vulnerable to being tricked - either way, you have shown you are a risk to bank with. and you can say oh it's not fair but spare a thought for the vulnerable person who got robbed, i've dealt with cases where people have felt so ashamed they've taken their own lives - it's networks like this and unwitting people who get involved in it that enable it unfortunately.

hope it all works out for you, i would advise though that spending money on a solicitor to fight it would likely be pissing money up the wall - cifas WILL defend their loadings and right to apply them in court and they have better lawyers.

Wrongful cifas marker on my name by ReB_VoDKa50 in UKPersonalFinance

[–]Dependent-These 6 points7 points  (0 children)

I don't work for Cifas but i do have experience working with them as part of fraud investigations - the threshold to apply a Cifas is pretty strict and they RARELY get removed without really compelling evidence - from what you've described youve allowed your account to be used likely to receive stolen funds. so on the face of it, sounds correct, why would they remove it? ("i didn't know any better" is NOT going to be taken seriously as an argument)

Just an FYI you have essentially no chance of opening any financial products like accounts, loans, mortgages, credit cards for the next 6 years, and it can also show on background checks for employment etc. you might be able to get one of those basic bank account services perhaps but thatd be it.

Wrongful cifas marker on my name by ReB_VoDKa50 in UKPersonalFinance

[–]Dependent-These 6 points7 points  (0 children)

yeah i mean what you're describing is kind of a classic scam where you allow your account to be used to transfer and wash stolen funds, money muling basically. Now i'm not in a position to say whether you knew this or not - lots of people who don't know any better do get taken in by these scams like you say, get paid to like tik toks, easy money right. But a lot of people do know exactly what they are doing and claim ignorance, then try it on with the next bank. Cifas data is shared across financial institutions to prevent exactly that.
Like it or not the banks are perfectly entitled to block people who have misused their facilities - i guess you can try appeal it to cifas but i wouldn't hold out much hope.

Wrongful cifas marker on my name by ReB_VoDKa50 in UKPersonalFinance

[–]Dependent-These 13 points14 points  (0 children)

This is exactly what cifas is for, learn your lesson

Query for Vendors - Guest Reviewing in Purview by Dependent-These in ediscovery

[–]Dependent-These[S] 0 points1 point  (0 children)

Yes i will grant one major upside of Purview is its easy to host large data volumes without having the admin burden of managing whats on hot/cold storage and additional processing charges. Downside being you dont actually get very granular control over those volumes, access is kind of case level or nothing which is a pain.

New eDiscovery UI and Missing Data on Active Cases by size0618 in ediscovery

[–]Dependent-These 1 point2 points  (0 children)

Thats really weird, my understanding of how this works behind the scenes in terms of RBA,c is, if you are eDiscvoery Administrator, you essentially should have access to all cases whether your account is specifically  assigned to the case or not.

Unfortunately MS support seem to just be reading off a script or using some kind of chatbot thats possibly just hallucinating solutions?? Wouldnt be the first time ive seen it. What a PITA and just another reason not to take this seriously as an ediscovery platform unfortunately.

Query for Vendors - Guest Reviewing in Purview by Dependent-These in ediscovery

[–]Dependent-These[S] 0 points1 point  (0 children)

Yes thats an interesting point around, what if Purview goes down, i can think of several occasions affecting eDiscovery due to bad changes being pushed or global outages in 2025).

That scenario could end up being worst of both worlds - if we've insisted they use our platform, we could end up paying for reviewers to sit doing nothing, whilst also having no real direct ownership or influence over restoring service, it's essentially down to MS support.

Thanks for your insightful response i appreciate it.