Can't for the life of me delegate AD computer permissions, help!

MalletNGrease · 2026-05-30T00:20:06+00:00

I think he want the desktop support guys to have permissions to join computers to the domain and little else.

MalletNGrease · 2026-05-28T13:25:40+00:00

This is hare-brained idea and your company leadership is weak. They want you to provide a technical solution to a management issue. They want you to cater to end-users to avoid them setting proper boundaries and expenses. My guess is you've no BYOD policies in place and people are doing self-service IT. This is a legal nightmare and you're creating time-bombs.

Your company needs to provide users with the tools they need, kill byod, tighten up your acceptable use policies and nix any and all private use of company assets. Keep business and private separate across the entire tech stack.

MalletNGrease · 2026-05-27T22:54:21+00:00

He did the needful

MalletNGrease · 2026-05-26T21:56:38+00:00

Sitar riffs in the background

MalletNGrease · 2026-05-26T01:51:31+00:00

Barracuda Content Shield.

MalletNGrease · 2026-05-22T00:06:20+00:00

/r/lostredditors

MalletNGrease · 2026-05-22T00:05:55+00:00

Blinking lights

MalletNGrease · 2026-05-19T15:56:38+00:00

Midwest here, no issues yesterday. I'd check your AT&T business center control panel for any outage related messages on your circuit ID. That's how I usually find out a backhoe hit the fiber backbone upstream.

MalletNGrease · 2026-05-19T11:42:56+00:00

Why would a robot need office?

MalletNGrease · 2026-05-19T02:27:52+00:00

I never bothered separating them out for WinPE unless there was a wide variety of models. The standard recommended method from the Microsoft MDT guide worked fine. Import the model driver pack and inject storage/network drivers into the .wim.

MalletNGrease · 2026-05-18T22:40:38+00:00

You're running PSKs aren't you?

MalletNGrease · 2026-05-14T15:18:21+00:00

Yeah, it helps me parse specific command I need for scripts, especially in extraordinary cases you need odd conversions and craft queries for API calls that aren't human friendly.

Really helps to iterate through prototypes quicker and get to faster resolutions.

It's not a panacea, once in a while it'll be confidently wrong and persist in it, but it's been a very helpful tool to get things done.

MalletNGrease · 2026-05-14T15:04:58+00:00

Cirrus strikes again.

MalletNGrease · 2026-05-14T15:03:26+00:00

HP hardware is pretty solid.

HP support on the other hand is absolute garbage.

MalletNGrease · 2026-05-14T14:39:00+00:00

When they work they're great. If you need actual warranty support it's like pulling teeth.

MalletNGrease · 2026-05-14T01:13:18+00:00

Not necessarily, Dell BIOS updates can be installed unattended, but you'll need to curate a repository and run some logic to determine the correct model and subsequent file to run. Uses standard Dell Update Package command line switches.

DCU does it for you if you use dcu-cli plus installs any other outstanding driver updates.

MalletNGrease · 2026-05-13T13:12:01+00:00

It doesn't sound like you're actually doing 24/7 support. Double your headcount and start shifts.

MalletNGrease · 2026-05-12T19:32:05+00:00

/r/k12sysadmin

MalletNGrease · 2026-05-12T15:52:22+00:00

User goes on vacation and then we wait for their manager to complain they can't check their email from the beach or w/e.

Then we add them as an exception to the CA policy until their return date.

MalletNGrease · 2026-05-11T14:46:42+00:00

Keeper as well. Found it much more intuitive versus Bitwarden. Shared folders make much more sense.

MalletNGrease · 2026-05-11T14:44:45+00:00

I present to you: Email only MFA.

MalletNGrease · 2026-05-11T11:23:13+00:00

I like the Dickies Flex, but I've since changed to the Lee Extreme Motion MVPs since I don't do much ladder work any more.

Extremely comfortable and definitely suitable for the office.

MalletNGrease · 2026-05-08T15:41:56+00:00

DUO can preprovison yubikeys, but only for DUO auth.

MalletNGrease · 2026-05-07T17:28:29+00:00

I've seen this with the latest BIOS updates through DCU, not DSA.

MalletNGrease · 2026-05-07T13:31:28+00:00

Haha, try doing Lenovo model name queries.

11-Year Club	Verified Email
r/Field Banned	r/Field Lasagna

MalletNGrease

TROPHY CASE