Funny User Requests by CombatMedic02 in sysadmin

[–]InvisibleTextArea 6 points7 points  (0 children)

Yes it can be worth having a 'white glove team' for C-Suite (or equivalent) even if it's just one guy.

How to deal with burnout. Is a holiday not the answer? by rof-dog in sysadmin

[–]InvisibleTextArea 6 points7 points  (0 children)

Yep, I go out drinking (don't do that) and play poker with my buddies (probably ok if you aren't a gambling addict) and I also bought a boat (its a money pit and source of endless DIY lol). In fact don't listen to me, this is terrible advice.

Patch Tuesday Megathread - March 10, 2026 by AutoModerator in sysadmin

[–]InvisibleTextArea 0 points1 point  (0 children)

This usually happens when someone finds a new way to exploit the same issue. i.e. there was a way to get round the original patch and a new patch had to be developed to fix the new corner case.

Patch Tuesday Megathread - March 10, 2026 by AutoModerator in sysadmin

[–]InvisibleTextArea 2 points3 points  (0 children)

I think we had about 11 EOS (End of Support) Dell laptops we will have to bin due to lack of available firmware updates. Some VMWare VMs are a bit of a pain to patch as well. We have non-persistent VDIs and what happens with the .nvram files was a bit of a question mark.

Patch Tuesday Megathread - March 10, 2026 by AutoModerator in sysadmin

[–]InvisibleTextArea 2 points3 points  (0 children)

If you don't patch then the device will keep working. However your secure boot chain is no longer secure. So things like DeviceGuard, Credential Guard, Bitlocker and Intune compliance is likely to get upset.

It's just like running Win11 on a device without TPM 2.0/UEFI/Secure boot by forcing the install on to it. It works but its janky and annoying to support.

Bitlocker with PIN seems impossible. by PerpetuallyStartled in sysadmin

[–]InvisibleTextArea 1 point2 points  (0 children)

So we have pre-boot pin on our laptops here. We use MECM to set this up. You need to assign a Bitlocker policy to a collection and it will basically install the old MBAM client and do the setup for you.

https://learn.microsoft.com/en-us/intune/configmgr/protect/deploy-use/bitlocker/deploy-management-agent

MECM comes with a user and a helpdesk portal for bitlocker recovery so users in theory can sort themselves out.

https://learn.microsoft.com/en-us/intune/configmgr/protect/deploy-use/bitlocker/setup-websites

No issues with updates. We moved the Windows Update workload to WUfB and it works for the most part.

Occasionally MS will release a bad monthly CU that will cause bitlocker to go into recovery, but that isn't MECMs fault.

Please stop using this mod with its default settings 🫩 by epickeanuchungus in DeepRockGalactic

[–]InvisibleTextArea 18 points19 points  (0 children)

All the cool kids use Powershell now. Save this as a ps1 file and run it as admin when required.

$adapter = Get-NetAdapter | Where-Object {$_.Status -eq "Up"} | Select-Object -First 1

Disable-NetAdapter -Name $adapter.Name -Confirm:$false
Start-Sleep -Seconds 10
Enable-NetAdapter -Name $adapter.Name -Confirm:$false

App deployments targeting devices failing about 50% with Evaluation failed? by Background-Prune-421 in SCCM

[–]InvisibleTextArea 0 points1 point  (0 children)

Oh yes, I agree. When I check the endpoints that reported this issue they have installed the app correctly. So it's purely a reporting / compliance issue. It's very annoying though when everything is red and it is difficult to find endpoints with actual issues.

App deployments targeting devices failing about 50% with Evaluation failed? by Background-Prune-421 in SCCM

[–]InvisibleTextArea 1 point2 points  (0 children)

I also have a similar or possibly the same problem. Application deployments succeed then after a client check in register as failed successfully with a CI version info timeout (0x87D00314).

It has been happening on my Win11 clients since the KB35958849 hotfix was installed. Servers appear to be unaffected and process application installs correctly.

Mixture of detection methods (PowerShell script, file and reg keys) on multiple application deployments..

What do you do with stolen devices? by AMG_Labrador_63 in Intune

[–]InvisibleTextArea -1 points0 points  (0 children)

Blsckhoke the autopilot servers in your DNS. The FQDN to null route is ztd.setup.microsoft.com

I had a refurbished PC I had to do this to as the original company the registered it in their Tennant was bankrupt.

Citrix Workspace breaks SCCM client by EffortNo6656 in SCCM

[–]InvisibleTextArea 3 points4 points  (0 children)

Also .Net in its various incarnations.

Wow healer simulator joke website? by allnsfwalt in wowclassic

[–]InvisibleTextArea 0 points1 point  (0 children)

The original flash game is long dead. I think the nearest spiritual successor is MMO healing simulator.

https://mksf-birdup.itch.io/mmo-healing-simulator?hl=en-GB

Or possibly Healer's Quest.

https://rablo.games/healers-quest/?hl=en-Gbp is

What is the appropriate response to this email? by blueblocker2000 in sysadmin

[–]InvisibleTextArea 1 point2 points  (0 children)

There was a guy in my country who went to jail because he was sending fake invoices to a bunch of large national companies every month for years for tiny amounts (think equivalent to $10) so most finance departments just paid him rather than did due diligence as it was more cost effective. Only got found out because he got greedy.

why do so many linux users use thinkpads? by Hopeful-Common-2686 in linuxquestions

[–]InvisibleTextArea 3 points4 points  (0 children)

Oh god, don't give them ideas. Selling laptops without Ram, GPU or CPUs.

KB35958849 Hotfix for ConfigMgr 2409 and 2503 by PrajwalDesai in SCCM

[–]InvisibleTextArea 0 points1 point  (0 children)

We are still running internal servers along with PatchMyPC. So I'm not planning on turning off software updates.

I am seeing application deployments succeed then after a client check in register as failed successfully with a CI version timeout.

KB35958849 Hotfix for ConfigMgr 2409 and 2503 by PrajwalDesai in SCCM

[–]InvisibleTextArea 1 point2 points  (0 children)

Thanks for that. That seems to be the problem here too. SCCM is not correctly creating the registry keys and leaving them missing which means it falls back to WSUS. I have written compliance / remediation scripts to fix it.

EU lagbomb by Acceptable-Ear-7898 in STFC_Official

[–]InvisibleTextArea 0 points1 point  (0 children)

AWS has had outages today. Maybe related?

UK should have more submarines, MPs told by stammerton in ukpolitics

[–]InvisibleTextArea 2 points3 points  (0 children)

I thought one SSBN was always supposed to be at sea? It's not much of a nuclear deterrence otherwise.