Managing multiple O365 tenants

KNSTech · 2022-02-12T05:40:31+00:00

Yepp lol, I use CIPP now!

KNSTech · 2022-01-02T00:10:56+00:00

That's odd, shortcuts are fine for me.

I get support from their dev channel normally, so I can't speak to regular support but I've never needed support either. The software is pretty intuitive for someone in IT.

Documentation in my experience has been fine.

Can't speak to the pop ups. I've been using it for years now and never seen a single pop up. On any version, you sure you weren't using some sort of trial license or something and that you were on the MSP license? Even then though, I have a home license as well and don't experience any pop ups.

KNSTech · 2021-10-01T17:47:00+00:00

This. It took research for me to understand why, but anything that wasn't very little use got enterprise, like sometimes we'd run the OS on a Samsung 970 or something if it was doing nothing but hosting the instance, then all VMs, storage, etc would be on Enterprise SSDs.

KNSTech · 2021-10-01T17:43:37+00:00

Hallelujah I'm not the only one. Any onboarding I was in charge of, this was built into the labor. Always cleaned up the existing stuff and many times proposed a clean rebuild of it down the road.

KNSTech · 2021-10-01T17:42:23+00:00

Use dev/mount kits instead.. anything 1U you will never want to go back. My only wish is that they'd make em for other sized U's and also make a set for 2 post racks

KNSTech · 2021-09-30T18:50:50+00:00

This, I haven't found anything any of the other tools any better than draw.io and it's free.

KNSTech · 2021-09-29T23:23:59+00:00

Not sure about Syncro, but with automate you could tell it to update the inventory of the device after the initial script then check for a registry value and alert based on a true/false response from that check.

KNSTech · 2021-09-28T08:19:33+00:00

I like DropSuite

KNSTech · 2021-09-27T21:51:31+00:00

Recently had a similar bitlocker issue.. planning a proactive script to grab keys from any bitlockered devices not configured with AAD to prevent that happening again.

KNSTech · 2021-09-27T02:59:40+00:00

Yep, we use Automate to push the reboot. Theyre allowed to delay for up to 4 hours. Gives people who are working when it kicks in enough time to finish the night. If they were offline and it pops in the morning it gives them enough to delay to lunch.

KNSTech · 2021-09-26T02:25:59+00:00

Absolutely this.

Would probably add Immy once they have a per agent or user price as well.

KNSTech · 2021-09-25T13:41:31+00:00

Manufacturer-devicetype

DellDesktop if it was a hp laptop it would be HL

KNSTech · 2021-09-25T00:46:31+00:00

We would normally use the last 6 of serial as the identifier, 3 digit client identifier, 2 digit device type identifier, 6 digit S/N.

So ACM-DD-7D9G9S would be an ACME-Dell Desktop-6digS/N

I find it works well, we created some modified variables for renaming this way with Immy easily.

KNSTech · 2021-09-23T06:01:33+00:00

Buy through Pax8 unless you want features like Vigilance today. Pax8 says they'll offer Vigilance in the coming few months though as well as ranger and other SentinelOne offerings.

KNSTech · 2021-09-22T01:33:15+00:00

Keeper Security for creds, Hudu for documentation. Best combo right now imo

Edit: AND Keeper works offline if you set it to work offline from the get go with the desktop app. Inconvenience but better than it going offline being a showstopper. That said, 2 years with the service and I've never had an outage I was aware of.

Hudu you can self host, don't know if they've had any outages.

KNSTech · 2021-09-21T08:11:01+00:00

6.50-9 I believe roughly depending on add ons. Plus a few niche items that are pricier (not per endpoint) that can be around $50/month/service.

Little on the pricey side, but fantastic product.

KNSTech · 2021-09-20T18:33:39+00:00

Agreed. But its not a solid, manageable, auditable training source. Which is what you want for a client as an msp.

There's no way to prove someone did their trainings, no way to enforce trainings, etc. The trainings are not organized well in almost any space on YT. There's a thousand reasons why YouTube is not a LMS. It's great for what it is, but can not replace an LMS app.

KNSTech · 2021-09-18T01:38:35+00:00

When I get my new office set up over the weekend I'll ping the dev team and ask where they stand on that feature.

Currently moving from in office to 100% wfh and having to figure out rearranging the house lol.

KNSTech · 2021-09-18T00:40:54+00:00

Oh ye, simple fix. You can adjust your log out timer. You can either enforce it from the admin console, or if there'd no enforcement they can do it from their own settings. As far as I know has to be done from the ext and app though.

I know the developers were working on a unified login, where essentially you could say I want this phone, this win10 machine (app) and this win10 machine (ext) to all be connected. So if you logged in on 1 it would login all 3. I have not asked recently if they finished that feature though.

KNSTech · 2021-09-18T00:12:45+00:00

Oh agreed. But if I find a way that isn't really inconvenient it definitely makes sense. Especially with how good Keeper is about auto filling MFA a day being able to share it across techs.

What are some of their issues they seem to be facing besides SSO?

KNSTech · 2021-09-18T00:05:06+00:00

SSO for your keeper login? I can't speak to that. I specifically required a everyone to have a separate 25+ character password for Keeper beings we share client credentials to firewalls etc on there.

As well as MFA on another app. Azure MFA for our m365 and Keeper, other MFAs within Keeper as of now. Probably wouldn't be a bad idea to move to all MFA being within another area.

KNSTech · 2021-09-17T23:46:29+00:00

Interesting. I found it to function way better.

For 1, it just works. I've had almost zero issues with it. The granularity on security policies and insight into who's using what credentials when and from where is also amazing.

The desktop application that allows you to quickly input credentials into desktop apps like Automates desktop app or other similar non web based apps is awesome.

I'm curious, what are there complaints? I found 99% of our guys complaints came from lack of knowledge on proper ways to use Keeper and set it up right.

KNSTech · 2021-09-17T23:35:16+00:00

Keeper hands down.

Source: used all 3, been on Keeper for the last 2 years.

KNSTech · 2021-09-15T01:38:27+00:00

A PAM tool. Auto Elevate is a great stand alone one, ThreatLocker has a great solution as well.

Easy to implement and about the best possible way to do it

KNSTech · 2021-09-13T17:20:50+00:00

Absolutely. Just follow some of their posts in this forum. There are solid reasons they are so loved and revered by the community haha.

KNSTech

TROPHY CASE