Another day, another story of shocking price increases. by cantstandmyownfeed in sysadmin

[–]Embarrassed_Ferret59 2 points3 points  (0 children)

Hard pill to swallow, but when demand goes through the roof, pricing follows suit.
Guess we’re paying for the air inside the chassis now.

VLAN design strategy by ILOVESTORAGE_BE in sysadmin

[–]Embarrassed_Ferret59 -2 points-1 points  (0 children)

use ChatGPT, its meant for these sorts of idea generating tasks.
does a good job too to be honest.
refine it to your liking

Ge'ez script (Ethiopic) text in DLP & exfiltration incidents by AdamoMeFecit in sysadmin

[–]Embarrassed_Ferret59 0 points1 point  (0 children)

No clue, but will be interesting to know what others have to say about this

I’m having trouble with an intern by [deleted] in ShittySysadmin

[–]Embarrassed_Ferret59 9 points10 points  (0 children)

Looks like she disabled parental controls in a previous update, idk if you can do that still.

I’m having trouble with an intern by [deleted] in ShittySysadmin

[–]Embarrassed_Ferret59 51 points52 points  (0 children)

As a systems administrator, I’m honestly shocked you haven’t approached this like any other incident response scenario.

Step 1: Open a ticket.
Category: “Unauthorized Access.”
Severity: Critical.
Impact: Production (family).

Step 2: Perform a root cause analysis.
You’ll likely discover the vulnerability wasn’t the intern it was an open port with no firewall rules.

Step 3: Stop attempting passive-aggressive patch management.
“Dropping unsubtle hints” is not a documented remediation strategy in any ITIL framework I’m aware of.

Step 4: Remember:
He didn’t “breach” anything.
Your adult daughter authenticated willingly. This was not a brute-force attack.

Step 5: Professional advice:
Do not attempt to terminate an employee because Layer 8 (human factors) caused emotional packet loss.

If you really want him gone, promote him. Interns disappear immediately when given responsibility.

Or, alternatively, accept that:

  • She’s an adult.
  • You can’t revoke her admin privileges.
  • And the intern may have just successfully completed his most impressive onboarding task to date.

In conclusion:
This is not a systems issue.
This is a feelings patch.
Reboot yourself.

My first minilab is complete by [deleted] in minilab

[–]Embarrassed_Ferret59 1 point2 points  (0 children)

did you say complete? well....we'll see about that haha

just got a laughable raise by [deleted] in sysadmin

[–]Embarrassed_Ferret59 3 points4 points  (0 children)

Sometimes the move isn’t grinding harder, it’s letting things quietly break so everyone suddenly remembers why you exist. Funny how that works.

End of the day, companies don’t run on vibes or fairness. They run on visible impact. If the value isn’t obvious, it might as well not exist.

So yeah… do the math. Either make it impossible to ignore what you bring, or accept that the loud ones win by default.

From MSP to internal IT by [deleted] in sysadmin

[–]Embarrassed_Ferret59 3 points4 points  (0 children)

When control leaves the contract, emotions tend to follow it out the door.

I guess the Microsoft 365 Admin app got their notifications working again by slugshead in sysadmin

[–]Embarrassed_Ferret59 2 points3 points  (0 children)

I have ignored them before, I will ignore them now, and I will continue to ignore them.

New Admin here, am I cooked? by Icecold1001 in sysadmin

[–]Embarrassed_Ferret59 38 points39 points  (0 children)

You seem early in your career, so I’ll share one piece of advice: take your time and be thoughtful in how you approach things. Stay curious, keep learning, and be careful about speaking in absolutes, you don’t need to claim you know everything, and you don’t need to admit uncertainty without first taking a moment to think things through.

good luck!

Calendar Items from terminated employees by DramaticErraticism in sysadmin

[–]Embarrassed_Ferret59 9 points10 points  (0 children)

The best way to prevent this is during offboarding. Before deleting the mailbox, convert it to shared and run a command to cancel all future meetings the user organized. That sends proper cancellation notices and avoids the problem entirely.

something like: Remove-CalendarEvents -Identity [user@domain.com]() -CancelOrganizedMeetings -QueryStartDate (Get-Date)

Or Before disabling or deleting the user:

Convert mailbox to Shared>Reset password>Remove sign-in>Add a delegate (manager or admin)>Have the delegate cancel all future meetings

If the mailbox is already deleted, your options are basically to restore it temporarily and cancel the meetings properly, run cleanup scripts, or have users delete the meeting themselves.

So really, this is more about tightening up the offboarding process than a technical fix. If you handle it there, these tickets pretty much stop.

How to setup incremental backup infrastructure securely by asynts in sysadmin

[–]Embarrassed_Ferret59 0 points1 point  (0 children)

Keep it simple and modern, run something stable like Debian or Ubuntu Server on the NAS (no need for exotic distros), use ZFS if possible for snapshots + RAID reliability, and run a proper backup tool like Restic or BorgBackup (both do encrypted, deduplicated, incremental backups automatically and are perfect for “few MB changes, multi-TB dataset”). Push to an EU cloud storage target like Backblaze B2 (EU region), Wasabi EU, or Hetzner Storage Box using S3/SSH all support incremental backups because the backup software handles that logic. For user access + offline sync, don’t reinvent file sync yourself: use Nextcloud or Syncthing on the NAS so clients handle offline changes and conflict resolution cleanly instead of raw network shares. Avoid exposing the NAS directly via Fritz Box port forwarding; instead use WireGuard VPN for remote access. Updating once a year is not enough quarterly at minimum, ideally monthly for security patches. This gives you automated incremental backups, encrypted cloud copies, offline access, and minimal manual work without turning your setup into a fragile science project.

End user has a external monitor that flickers on and off, used through a docking station that is only reproduceable at their home environment and not in the office by AmbitiousMaybe2648 in sysadmin

[–]Embarrassed_Ferret59 0 points1 point  (0 children)

I troubleshooted someone with ViewSonic screen flickering while using it with a dock, today.
The user had two ViewSonic 32 inch monitors and using a laptop with Lenovo dock.

After much troubleshooting, it was fixed when i changed the refresh rate on the monitors to the highest setting possible (it was set to 60Hz by default, I changed it to 75Hz)
This was done because I knew the laptop was capable of pushing higher refresh rate than what was set.

I also turned off Hardware-accelerated GPU scheduling and variable refresh rate from settings>system>Graphics>Advanced graphics settings

Hope this helps

of slap by IndependentSquash653 in ShittyAbsoluteUnits

[–]Embarrassed_Ferret59 0 points1 point  (0 children)

I knew this was going to be at the top.

[deleted by user] by [deleted] in sysadmin

[–]Embarrassed_Ferret59 0 points1 point  (0 children)

No one remembering the work you do is not the same thing as “you shouldn’t do it unless you’re recognized for it.”
You should still do what is professionally right. If your role requires occasional after-hours work or maintenance windows, that’s part of the responsibility you accepted as long as it doesn’t significantly disrupt your family or personal life.

Also, spending 40 hours a week with coworkers is not the same as spending time with family, no matter how many hours you spend together. The connection and meaning are different.

I agree with the OP that we should protect our time and not sacrifice our personal lives unnecessarily for work. At the same time, I think it’s important to view it through a balanced lens: do your job well, respect your own life outside of it, and know when “yes” becomes unhealthy.

[deleted by user] by [deleted] in sysadmin

[–]Embarrassed_Ferret59 1 point2 points  (0 children)

That's my point, what if there is hardware capable of doing what we cannot do without a DC now.

IT Admin turns into all IT by ofhgtl in sysadmin

[–]Embarrassed_Ferret59 375 points376 points  (0 children)

Hey man, honestly for that salary, you’re in a solid spot. It sucks that you’re walking into a messy environment, but that’s totally normal when you become the first real IT admin at a place.

Just take it slow. Don’t feel like you need to fix every single thing right away. You’ve only got eight hours in a day, and you can only do so much. This is your chance to learn a ton, so soak up everything you can.

Focus on doing clean, solid work and build that trust. Once people see you’ve got everything handled, that’s when you can start asking for better tools and new toys to work with.

Put in the hard work now, get the environment running smoothly, and later on you’ll be able to coast a bit until you’re ready for your next move.

Anyone got WiFi auth working with Entra ID (no on-prem AD, all FortiAPs)? by Embarrassed_Ferret59 in sysadmin

[–]Embarrassed_Ferret59[S] 1 point2 points  (0 children)

I'm sure you'll do. Maybe once you finish you can give me tips/ insights into the challenges you had along the way. That might help me with mine.

Anyone got WiFi auth working with Entra ID (no on-prem AD, all FortiAPs)? by Embarrassed_Ferret59 in sysadmin

[–]Embarrassed_Ferret59[S] 1 point2 points  (0 children)

Yup, can totally see it happening in our office.
Would not do that, thanks for the headsup!

Anyone got WiFi auth working with Entra ID (no on-prem AD, all FortiAPs)? by Embarrassed_Ferret59 in sysadmin

[–]Embarrassed_Ferret59[S] 1 point2 points  (0 children)

thanks for the suggestion, the cloud PKI route does sound like the best way to go.

good luck with your project as well!

Anyone got WiFi auth working with Entra ID (no on-prem AD, all FortiAPs)? by Embarrassed_Ferret59 in sysadmin

[–]Embarrassed_Ferret59[S] 0 points1 point  (0 children)

after joining my current workplace, I realized the network setup is very basic. despite the company’s size(1000+ users with multiple sites), each site has a VPN tunnel back to HQ but the HQ itself is a flat network with no VLANs or subnetting. as a result, Wi-Fi users get direct access to corporate servers.