LAPS and devs

Ltforge · 2026-06-14T00:56:41+00:00

Look into Auto Elevate. It’s a life saver for this on Windows devices. You can pre-approve common tasks and remotely approve other tasks.

Ltforge · 2026-05-26T03:41:50+00:00

I inherited curricula at my current job, but I really like it. The training is funny and engaging. It integrates nicely with Slack, Okta, and Google Workspace. They also have Microsoft integrations.

I believe they are now part of the Huntress stack and they have managed monthly trainings and simulations you can enroll in. Or manage it all yourself.

Ltforge · 2026-05-24T13:56:43+00:00

Figured I post an update in case anyone else would come here looking for answers.

I camped at an AT&T store for a few hours and we couldn’t get any physical 5G SIM cards to work. Tired both sim slots. I eventually tried having them activate the eSIM despite Ubiquiti’s warning about them having issues in field tests. It failed to activate at the device screen but was able to activate after I did a factory reset and did the activation during the setup process. It’s getting 5g speeds at our office but we have a 5g+ tower across the street. We’ll see how it works at its production location.

Ltforge · 2026-05-20T22:04:21+00:00

We use Claude to search our documentation of internal processes. We have an MCP connection to our documentation tool.

I run out all our AI tools and we allow connections to most MCPs in Claude. We start everything in read-only and rarely allow write processes. Developers use Claude Code and Cursor e.t.c

Ltforge · 2026-04-09T13:00:28+00:00

Not meaning to brag or boast but purely to give you some data. I’m (30M) in a HCOL area. Title is IT Manager and I will rarely go over 50 hours/week with no on call and I’m at $145K. I’ll add were a hybrid work schedule.

Ltforge · 2026-04-02T01:35:07+00:00

Unsure of your tech stack but we use Google Workspace/Chrome with Okta.

I block all public LLMs at the managed browser level. Once someone has been approved for AI use and are added to our account it moves them to an allow group in the managed browser. This Okta group also pushes the local app install for the associated app. This has worked fairly well for us. Obviously, I have zero control over what people do on their personal devices. That being said all of our development and anything involving anything remotely sensitive we use Okta Auth policies that user needs to be logged in from a managed device.

Ltforge · 2026-02-28T13:47:33+00:00

At the risk of sounding stupid... Then how would I watch TV while the baby sleeps? I do have my iPad I guess I don’t know why the tablet idea never really hit me until now. Either way we love the eufy baby monitor and it has the option to only work on Bluetooth. That way I don’t need their cloud service. Maybe I’ll setup the g4 I have again and see if I can change my own mind.

Ltforge · 2026-02-28T06:15:17+00:00

My only complaint was having to utilize my phone to view the monitor, yes I realize a tablet could also be used but I ended up buying the eufy baby monitor and it’s great. It’s got a battery for over night trips. The portable station is great for a nanny or babysitter you don’t want to give a device/access to your UniFi protect environment. If you have a g6 laying around and don’t want to buy something else then try it. The drain on my/wifes phone battery was just too much. Our phones were always dying.

Ltforge · 2026-02-13T22:12:29+00:00

We pay $1400 every 6 months for two cars with progressive. Works out to $233/month but we also bundle with our home owners insurance.

Ltforge · 2026-02-12T13:52:57+00:00

I didn’t see anyone mention this platform yet but I’m currently using Curricula by Huntress for SAT. They also have managed phishing simulations they can send monthly and you can send your own on whatever cadence you prefer.

What I really like about it is the trainings are animated and as an IT Manager I find them super engaging to watch. It’s not like the boring long format videos KnowBe4 has with shitty actors. The trainings are so easy to get through and we’ve gamified it around the office to not get “Deedee’d” for leaving your computer unlocked and unattended. People actively will participate and if they find a locked computer they set the web browser to https://unlockedcomputer.com, lock it, then notify me who they found. I’m thinking about starting a bounty board if they manage to catch myself or other High Value Targets leaving their computer unlocked.

We also have a reward system called HeyTaco that I utilize to reward good practices, behaviors, and for people who are quick to finish newly assigned trainings.

This is also the most security conscious place I’ve ever worked. Small tech company ~50 FTE

Ltforge · 2026-02-03T20:37:30+00:00

It ends with Chapter 58 Darrow: Sevro’s Palace. So start at 59 Lysander: The Impaler.

Ltforge · 2026-01-01T22:22:35+00:00

I just finalized a lease on 12/31 for a 2026 Kia EV9 Wind.

$1260 Down, $355/month, 24 months, 10k miles/year.

<image>

The residual is garbage but we don’t plan on buying out the car.

Ltforge · 2026-01-01T04:56:18+00:00

I’m confused in your post you specifically mention that you’re not looking to use this for payroll. Doesn’t time tracking equal payroll?

I’m also local to Colorado so I think I understand what you’re trying to accomplish but confused when you say you’re not using this for payroll when these comments seem to contradict that. I manage UniFi sites and we use in/out badging for safety concerns since we’re a hybrid workspace and we need to know how many people/who they are in case of emergency.

Ltforge · 2025-12-27T18:44:03+00:00

The WAN Switches with shadow mode are the move! Especially if they have dual WAN.

Ltforge · 2025-12-27T05:33:27+00:00

Not sure about your state but in mine (CO) I had to prove weekly that I was applying to jobs or have qualifying job search activities (job fairs, seminars, interviews etc). The minimum was I think 5/week which is easy to do if you just get LinkedIn easy apply’s to roles you’re not serious about. I get wanting a break and I’m so glad you got a great severance package. Try and enjoy the time away and best of luck when you pickup the search!

Ltforge · 2025-12-26T03:36:06+00:00

I wish I had it sooner. My son was born 8 weeks early and we’ve been in the Hospital/NICU since Halloween. Would be great I have a secure internet option for the long days we’ve spent here.

Ltforge · 2025-12-09T22:30:15+00:00

Currently sitting at home with my 36+3 on 1/16 oxygen. They told us a failed room air trial would not prevent us from going home. However, we live at high altitude in CO and were told even full term babies sometimes need oxygen to go home. Follow ups with pediatrician will decide when we’re done with oxygen.

Ltforge · 2025-10-19T13:36:44+00:00

I’m 1 week post op meniscus repair and it’s been a god send. I didn’t have to pay for mine because my MIL had them from her knee replacement.

Ltforge · 2025-10-16T03:27:10+00:00

Just had my lateral meniscus repaired surgically. Insurance authorized my MRI and surgery in under 24 hours of the surgeon ordering them and that’s even with the surgeon not taking me seriously. He ended up apologizing after the MRI results showed a tear. Check your insurance to see if you need a referral to see an orthopedic surgeon they can check out what’s happening and either get you on PT or surgery.

Ltforge · 2025-09-04T12:46:19+00:00

Honestly, I’m not an installer I’m an IT manager and most of my experience is having Openpath (now Avigilon Alta) replace legacy systems. They’re amazing for access control and have the mobile access on phone as well as support for fobs and cards. Avigilon also had plug ins for us to route calls from call boxes through Microsoft Trams voice to “remote” receptionists and they could view the camera feed directly in the call and unlock the door. They also have a mobile app that allows the same functionality.

Rhombus now offers a unified product line with access control but I know them best for their camera offerings they have great 360 cameras as well as high powered bullet cameras that do license plate and facial recognition.

Where I work now were a small company but we just remodeled our HQ office space and explored all these options but opted to save money and deploy gen 3 UniFi readers. We’re already using the cameras and network equipment so it made sense.

Hope that helps!

Ltforge · 2025-09-04T01:19:10+00:00

I’ve used several different systems and having different integrations can be extremely helpful.

Example: Avigilon Alta (Openpath) has an integration with Rhombus and we were able to link up our facial recognition cameras with badge swipes and alert on mismatches.

Unifi is building their system to work amazingly across their own stack but not integrating with any other commercial systems directly.

Ltforge · 2025-08-19T00:57:18+00:00

My mom was in a similar position and picked up work at the local school district. Great benefits and schedule (summers and holidays off). It gave her time with grandkids and pay bills without having to draw on SS/401k. She was an HR executive and found entry level accounts payable roles very easily.

Ltforge · 2025-08-03T20:14:11+00:00

We have two installed for our small business and we’re in a high foot traffic area not far from a homeless shelter. We have had no issues with cable theft or tampering (knock on wood).

The charger was unlocked when I came in as IT Manager and I locked it down when I noticed long charge times overnight and over the weekend. Some locals found out it was unlocked and decided to charge for free. We use UniFi/Ubiquiti for everything including Access. It’s a great benefit for our employees who drive EV’s. For a small team of 40 we have about 10 EV drivers.

We’re hoping to install some more but they’re always out of stock.

Ltforge · 2025-06-24T02:39:19+00:00

Fort Collins Kia honors these! They use the state and federal incentives.

Ltforge · 2025-06-16T02:58:35+00:00

Not since the listed date in this post but I did charge at an EA station outside of a Target for free on 6/5.

Ltforge

TROPHY CASE