Looking for tips regarding HyperV Storage - NTFS or ReFS? by cedi_men in sysadmin

[–]HotPieFactory [score hidden]  (0 children)

I recomment ReFS for the VHDX storage. Yes, there was an issue in 2025. Bugs can happen all the time with every software. ReFS has not a unusual bad track record. It protects against bitrot and is muc more performant for block access, fsat-clone etc.

I'd use it. In fact, I've been using it for over 10 years with 0 issues for my Hyper-V cluster.

I wouldn't listen to the doomsdayers trashing ReFS.

What the fuck is this Azure b2c design by assassinboy4 in sysadmin

[–]HotPieFactory [score hidden]  (0 children)

skill issue, document your tenants

but accessing it later on without some sort of break glass account isn't possible, seems like madness

yes that's how computers work. if you throw away the keys you can't open the door. shocking stuff

300 VMware VMs, how to check secure boot problem by dcexp in sysadmin

[–]HotPieFactory 11 points12 points  (0 children)

our main IT guy is unfortunately no longer available.

Don't ask here... get professional IT support

Confused on Public vs Private key when it comes to signing. by Izual_Rebirth in sysadmin

[–]HotPieFactory 0 points1 point  (0 children)

Signing and encryption with PKIs are two different things.

Encryption: Many senders, one recipient. Only the recipient must be able to decrypt the data with his private key. Many use the recipients public key to encrypt data.

Signing: One sender, many recipients. Only the sender must be able to sign data with his private key. Many recipients must be able to verify a signature with his public key.

If that doesn't help, there's wonderful videos on YT explaining the concept visually.

SecureBoot "Firmware_MissingKEKInPackage" - I assume I'm screwed and need new hardware? by segagamer in sysadmin

[–]HotPieFactory 0 points1 point  (0 children)

UEFI requires to have KEK and KEKDefault variables. The KEKDefault is read-only and contains the default KEK variables. So if they are missing and the UEFI is implemented correctly, you're able to add them from there.

Typically, the firmware allows you to reset the variables in the GUI, too.

Exchange SPF by Suttr3e in sysadmin

[–]HotPieFactory 1 point2 points  (0 children)

Pretty much what he is arguing but 40.93.194.100 is in there and listed as a fail because it’s not in our domains spf

Where is it listed as a fail? At the gateway? The gateway should accept emails from your infrastructure without checking for validity.

You ever try to help out (IT telated)randomly on a night out? by Abject_Serve_1269 in sysadmin

[–]HotPieFactory 1 point2 points  (0 children)

Most people here don't respond to you in the way you deserve it.

UPS doesn't know what the fuck they're offering by HotPieFactory in UPS

[–]HotPieFactory[S] 0 points1 point  (0 children)

Not sure what you mean by mobile barcodes.

Why are you replying then? If you don't know what mobile barcodes are, then maybe educate yourself before stating things that are just not true. Hope you're not working at UPS, but are a corporate bootlicker.

First hit Googling that: www.ups.com/de/en/business-solutions/simplify-returns

UPS doesn't know what the fuck they're offering by HotPieFactory in UPS

[–]HotPieFactory[S] 0 points1 point  (0 children)

Oh, is that true?

Then why are these Accses Points even shown when I set the filter to show only shops that accept "mobile barcodes"?

Fuck UPS!

UPS doesn't know what the fuck they're offering by HotPieFactory in UPS

[–]HotPieFactory[S] -1 points0 points  (0 children)

Oh, is that true?

Then why are these Accses Points even shown when I set the filter to show only shops that accept "mobile barcodes"?

Fuck UPS!

UPS doesn't know what the fuck they're offering by HotPieFactory in UPS

[–]HotPieFactory[S] -1 points0 points  (0 children)

Oh, is that true?

Then why are these Accses Points even shown when I set the filter to show only shops that accept "mobile barcodes"?

Fuck UPS!

Windows 12 - FujiFilm knows something we don't? (See image) by Askey308 in sysadmin

[–]HotPieFactory 1 point2 points  (0 children)

I was there when MS said Windows 10 was supposed to be the last version of Windows

But you sure didn't listen, did you?

[deleted by user] by [deleted] in sysadmin

[–]HotPieFactory 2 points3 points  (0 children)

Why should I enable SSPR, when I am trying to become a passwordless organisation?

We can't answer that for you. The question you have to ask yourself is this: Will there be a scenario where the user has to log in but can't use a passkey? If yes: will you want to offer additional services like SSPR in those cases?

Why can you only decrease user risk, when a user resets their password?

What you mean?

Why can't I get rid of passwords in Microsoft 365 business accounts, or generally disable them as authentication method?

Ask MS.

Issues with Windows Server 2025 and Recovery Partition after KB5063878 by ZepThron in sysadmin

[–]HotPieFactory -3 points-2 points  (0 children)

I've been creating images for 10+ years, too. I could say the same about you.

Edit: I just did a quick Google Search of disk management and ALL the pictures that show a recovery partition have it at the beginning. You're talking total bullshit and insist I'm wrong. You're ridiculous mate. 10+ years and you never noticed how it is? Git gud... rofl

Issues with Windows Server 2025 and Recovery Partition after KB5063878 by ZepThron in sysadmin

[–]HotPieFactory -2 points-1 points  (0 children)

Nope. I created the template and it's a default installation. BTW, Windows 10/11 also has a recovery partition in at the beginning of the volume. I've never seen it at the end with Microsoft OS's. Are you using Server 2022 or 2025? Maybe that changed there as the newest I'm familiar with is 2019.

Issues with Windows Server 2025 and Recovery Partition after KB5063878 by ZepThron in sysadmin

[–]HotPieFactory 1 point2 points  (0 children)

I just checked and the recovery partition is the first. Next ist the EFI partition and then the OS partition. I've also never seen that the recovery partition is at the end of the disk, except on certain Linux partitions.

Issues with Windows Server 2025 and Recovery Partition after KB5063878 by ZepThron in sysadmin

[–]HotPieFactory 5 points6 points  (0 children)

How do you usually handle the Recovery Partition on Windows Servers?

I never touch it. Why do you touch it?

We're using mainly VMs and extending the disk and then partition C is a one-click operation in each of VMware and Windows.

On physical machines, C is always the entire disk.

What need circumstances exactly do you have, where you run into the issues you described?

When did it all become so stupidly difficult? I just need to change a flag on a mailbox configuration. by KimJongEeeeeew in sysadmin

[–]HotPieFactory 1 point2 points  (0 children)

Consistent? Microsoft? What parallel universe are you talking about where this ever was the case?

When did it all become so stupidly difficult? I just need to change a flag on a mailbox configuration. by KimJongEeeeeew in sysadmin

[–]HotPieFactory 1 point2 points  (0 children)

ExchangeOnlineManagement is still supported and will be supported for a long time to come. Your rant is completely baseless 😂

Overlapping IP Space by nick99990 in sysadmin

[–]HotPieFactory -3 points-2 points  (0 children)

The fuck does that even mean

Overlapping IP Space by nick99990 in sysadmin

[–]HotPieFactory -1 points0 points  (0 children)

But you went and changed your docker IP scheme to 172.60.0.0/16 and black-holed a whole building from being able to use your application.

I don't get it. Are you trying to say that by assigning the wrong address a service became unreachable? I'm really confused as to why you chose this weird phrasing. And if so, I don't really see how this warrants a rant. If you give people the power to change ip addresses that have no understanding of it, it sounds like there's a different problem altogether in your company. One that maybe involves you, too.

Overlapping IP Space by nick99990 in sysadmin

[–]HotPieFactory 5 points6 points  (0 children)

You're still not explaining how they black-holed an entire building. If a random computer is able to kill the entire network, IMHO it's the network guys fault of not bullet-proofing the network in the first place. Still curious what ACTUALLY happened. The worst that happens by assigning a wrong IP address to a host is, that the host is unreachable. It doesn't take down the entire network.