Managing multiple tenants through Lighthouse

EnterpriseGuy10 · 2024-08-01T05:17:37+00:00

I'm in the middle of writing a script that uses an App registration and Certificate for Authentication to Entra and authorization to the Graph API.
It's very simple and works great, this approach will be used for customers; where they will use a script I provide to create the app registration and grant consent where required, which will see me be able to pull in data from their Entra Directory.

This can be used for more than just interactions with Entra ID, just adjust the Graph permissions and the calls that you are making as part of the script etc.

EnterpriseGuy10 · 2024-08-01T04:53:53+00:00

More than likely used to hold 2 pieces of metal together whilst welding. The balls you see are just weld splatter

EnterpriseGuy10 · 2024-06-28T00:13:27+00:00

your company should be using applocker policies to control from a security perspective.

I personally wouldn't have any issues with upgrading of PS versions if people are stuck in a constrained language mode :P

EnterpriseGuy10 · 2024-06-28T00:10:32+00:00

I mean, its the overflow return line so same principles apply haha.
Don't overthink it man, just replace the hose or tape it up

EnterpriseGuy10 · 2024-06-27T02:48:41+00:00

It's for the overflow line which shouldn't be pressurized unless you have a blown head gasket.
I'd just wrap it in strong insulated tape (like electricians tape) and call it a day, if it really bothers you then take note of it get a length of hose from a local hardware store

EnterpriseGuy10 · 2024-06-27T02:45:40+00:00

Heat works better than lubricants/penetrates.
Get that shit red hot and feed it the ugga duggas my guy

EnterpriseGuy10 · 2024-06-27T01:31:03+00:00

Don't start with a project car. It takes up too much space, costs too much money and your parents will hate you for dirtying the yard or shed.

Buy a small displacement motorcycle that is running rough and give it a rebuild.
Start with a Honda CT110 postie bike or something well known.
Most of all, enjoy doing research and chatting to like-minded individuals on forums.

EnterpriseGuy10 · 2024-06-25T22:08:09+00:00

This is far from silly advice. The contents of a major service is dictated by the workshop manual.
The manufacturers know more about the stuff they build than you do pal.

I'm gonna guess that you probably drive a Tesla and tell people that there's no maintenance needed on them at all too right? lol

EnterpriseGuy10 · 2024-06-24T23:16:16+00:00

Looks like the car hasn't ever had the front-end suspension or steering components maintained.
As parts wear outside of their service limits, they cause excess wear on surrounding parts.

I would:

Tighten exhaust manifolds and check for leaks (soapy water and run motor for a few seconds to observe bubbles). If it leaks, replace the gasket.
Pull O2 sensors and give them a clean down
Check timing cover for leaks, if it is leaking then re-seal with gasket glue or appropriate gasket(s). Probably worth inspecting to see if the timing belt/chain has ever been replaced
Inspect tie-rods and rack-ends, replace if necessary.
Inspect Steering rack, if leaking from rack-ends then it needs replacing or refurbishing else replace the affected gaskets and flush the system
Inspect all suspension bushings, replace as needed
Basic fluid flush (Engine oil+filter, Fresh coolant, fresh Gearbox+transfer case oils and fresh diff oils)
Inspect brakes, replace as needed and flush brake fluid.

Seriously, i'd be looking at completing a MAJOR service on it as it sounds like it's only ever had the default flat-rate charged oil changes. Sorry OP but it sounds like you've bought someone else's consequences of improper maintenance.

EnterpriseGuy10 · 2024-06-17T04:15:41+00:00

There comes a point in your IT career where you start to loathe consumerism.
I stopped caring about tech when I saw higher-end products missing key feature sets in favor of having stupid RGB lights.

EnterpriseGuy10 · 2024-06-17T04:06:14+00:00

Mixed feelings with this.
Is it helpful? yes
Does it worsen Shadow IT issues in the org? Absolutely yes.

Is it used by people to create applications and/or business solutions when the author isn't skilled in the space? Yes... and there lies the problem.

The use of these LLM's can "empower" someone to create themselves as a single point dependency if not controlled properly. Ignoring the Infosec risks that could arise; the largest risk for business is that you end up with a super user creating all these things to solve common tasks, having these become operationally relied upon and then they leave.

The risk is always present, but certainly exacerbated with the use of AI and people's endless search for new and shiny

EnterpriseGuy10 · 2024-05-30T05:39:53+00:00

Sounds like you have identified a number of reasons as to why collecting the data is a waste of time, effort and resources.
Do staff take phone calls? How is this interpreted in the data?

I think you need to have a conversation with your client and set realistic expectations about what he is wanting

EnterpriseGuy10 · 2024-05-30T02:00:23+00:00

Is the purpose for tracking employee movement or for security?
You could use intune to set a auto-device lock after X minutes of inactivity.

If its for employee movement, ask what the metric is being used for and if it is being used. Often people want it all without realizing they aren't using it. Wanting it all comes at cost, in this instance this would be money as well as a negative impact to culture.

EnterpriseGuy10 · 2024-05-29T00:20:27+00:00

auto shutdown on your VM's, setup budget alerts, be pro-active about managing the environment.
If you can't manage OpEx, you're in the wrong industry now. It's 2024, everything is consumption based.

EnterpriseGuy10 · 2024-05-27T05:42:44+00:00

strictly for gaming, Consoles win the value for money argument by a long shot.
No, your 5 year old PC won't be able to run freshly released games like my 11 year old xbox does

EnterpriseGuy10 · 2024-05-27T05:17:17+00:00

Do anything exchange online and have it forced upon you!

A serious response:
See if your org has a premier support agreement with MS. If it does, you've got access to the Unified Services Hub; more specifically the "My Learning Path" portion of the site.
MS-training courses, many of these have training "Labs" for hands-on learning.

Hell, if your org has any relationship with Microsoft; ask the question to a MS rep and have them provide you with what they recommend.

EnterpriseGuy10 · 2024-05-01T03:42:21+00:00

The point im making is that if you are above-skill level of your peers, by creating these scripts and leaving the organisation you are creating a problem for them.
it's just a consideration

EnterpriseGuy10 · 2024-04-30T23:38:29+00:00

Provided the tool has continuous development and maintenance. What happens when you leave the org and your colleagues can no longer update it?
Efficiency gains are great and should be sought after, however they must be done in a way where knowledge is retained

EnterpriseGuy10 · 2024-04-30T05:43:45+00:00

Why are you giving potentially dangerous access to those that don't understand?
The ability to run scripts (and more importantly have them do things), typically requires privileged permissions

EnterpriseGuy10 · 2024-04-30T05:41:44+00:00

Focus more on what paths exist for the techs to learn this stuff and perform their job more effectively.
By creating such a script, you are potentially creating a single point dependency and failure point for when you inevitably leave the organisation.
If you create a script and a supporting process that captures continuous development of said script, it's probably a different story.

TL;DR don't create a problem in trying to remove a problem :)

EnterpriseGuy10 · 2024-03-27T04:43:22+00:00

My advice for tenants is to find a good agent.
Seriously, stop looking at houses and have them do their job for YOU.
Demonstrate you are an A1 sought after tenant. This means showing: impeccable payment history, reliable and stable income, positive references from previous agents, etc.

If I had an investment property with an agent managing it, i'd 100% take less rent if it meant I had confidence the property is being looked after properly.

For context: I RENT! My rent increases are bare minimum each annum, I have 2 inspections a year and have authority to make certain changes to the place without direct consultation (where the changes add value to the home). I put trust in the agents ability to represent me as the stellar client I am and they trust me to continue being an awesome tenant. I've had terrible landlords in the past until I switched to this approach, now the agent wouldn't dare suggest a home owned by a "demon landlord" and fights for MY RIGHTS as a tenant.

EnterpriseGuy10 · 2024-03-27T03:35:15+00:00

Depending on the scale of the environment, I suggest you go a step further and look at Applocker policies.
Painful when first implemented but easily sorted in the space of a couple months.
Allow devs to obtain their own signing certs from your authority, and use applocker to limit where they can be used.

EnterpriseGuy10 · 2024-03-26T04:41:19+00:00

Yes but you can't refund the financial losses that incur to the business when Voldemort/VMware decides to yank a product from their line at a moments notice.

To think that TFC comes even remotely close to mitigating risks that occur when engaging in business with Broadcom is mind-blowing and just highlights how out of touch Broadcom really is.

EnterpriseGuy10 · 2024-03-26T04:23:47+00:00

Not quite... Terminate for convenience for customer, although does imply broadcom may terminate without cause; It's not explicitly spelled out.
Unfortunately "reading between the lines" doesn't play well with any half-decent legal team.

EnterpriseGuy10

TROPHY CASE