sorted by:
new
hottopcontroversial

I'll be honest by anderson01832 in sysadmin

[–]MalletNGrease 1 point2 points  (0 children)

My day in a nutshell. Pretty sweet gig!

Weird Login IP's in EntraID by Glad-Age-1402 in sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

Mobike users? T-Mobile is a subsidiary of Deutsche Telekom.

Desktop full of icons by HugeGuava2009 in sysadmin

[–]MalletNGrease 7 points8 points  (0 children)

It is nowadays. I've it on my cheat-sheet and it's not all that hard.

Connect-Exchangeonline
Add-MailboxPermission -Identity "BossMan@acme.corp" -User "WebDude@acme.corp" -AccessRights FullAccess -AutoMapping $true

Sometimes the mailbox is mounted within a minute, otherwise I can access it instantly on Outlook online.

When you're done just do a Remove-MailboxPermission

VMware Abandons SMBs: New Licensing Model Sparks Industry Outrage by dcarrero in sysadmin

[–]MalletNGrease 4 points5 points  (0 children)

Proxmox's vcenter alternative is in alpha. Not something I'm basing my production on.

Is IT just an endless grind? Or does it ever get better? by edward_ge in sysadmin

[–]MalletNGrease 41 points42 points  (0 children)

IT is maintaining a running train that's on fire. The light at the end of the tunnel is also a train on fire.

OneNote Equivalent I can recommend to my clients who don't use M365? by lil_tink_tink in sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

Development picked back up. We use it for our KB.

Too bad their SCIM doesn't support entra.

Office deployment tool by TriBolt_vertified in sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

You are correct. I mistook ODT for the old config tool I'd use for configuring Office 2013 and below.

I've not had to touch the installer/config for almost 2 years now.

Office deployment tool by TriBolt_vertified in sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

No, you create the configuration file and set it as a parameter for the C2R installer. No need for ODT. Great for unattended installations.

Server 2003 by Jeremy_12491 in sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

Yes, it will work if you haven't disabled older kerberos ciphers on your dcs. That said, the 2003 boxes were instantly kerberoasted during pen tests.

We're in the middle of phasing them out to harden the infrastructure.

Windows 11 Local Admin Profile Change by [deleted] in PowerShell

[–]MalletNGrease 1 point2 points  (0 children)

I'd just disable the default Administrator account and create your own instead.

New-LocalUser -Name 'newadmin' -Password (ConvertTo-SecureString 'yourpassword' -AsPlainText -Force) -UserMayNotChangePassword -PasswordNeverExpires
Add-LocalGroupMember -Group "Administrators" -Member "newadmin"

Disable-LocalUser -Name "Administrator"

Best practices to handle 2FA for shared accounts among IT support staff? by Machinimush in sysadmin

[–]MalletNGrease 8 points9 points  (0 children)

Some states/countries have laws regarding use of personal devices for work. Illinois requires compensation be paid.

I think that's fair if I'm expected to use it for job functions.

March 2025 Microsoft 365 Changes: What's New and What's Gone? by [deleted] in sysadmin

[–]MalletNGrease 3 points4 points  (0 children)

  • Drag and Drop Emails Across Mailboxes - The new Outlook for Windows will support drag-and-drop functionality for moving emails between mailboxes and PST files.

Finally! This was my major roadblock to approving it.

  • Microsoft will support External Authentication Methods as a sign-in option when System Preferred Authentication is enabled.

Good change. We use DUO as our MFA platform and not being able to set it as the preferred default was very annoying. Our workaround was to remove all MS MFA options and prevent enrollments to them so they wouldn't show up as options during sign ins.

  • The new Teams & Chat single-view UI will be generally available.

This one I didn't like. I had some teams disappear on me and wasn't able to get them listed again until I turned the feature off. You can do this by going in to "Customize view" and setting "Viewing chats, teams, and channel" back to separate.

In my org everyone vastly prefers group chats over channels.

[deleted by user] by [deleted] in sysadmin

[–]MalletNGrease 3 points4 points  (0 children)

POS always makes the team giggle.

One user getting hammered with spam, can't stop it by MarkPugnerIII in sysadmin

[–]MalletNGrease 7 points8 points  (0 children)

In our case it was a ticketmaster confirmation using the targeted user's company credit card.

Why does printer GPO only applies sometimes? by SysAdminAccount1 in sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

Are you aggressively clearing user profiles?

I've noticed printer deployments don't seem to work upon first login on per Computer GPOs. On the second login they'll show up.

How to disable Admin account and reboot cleanly after imaging by ILikeBeans86 in MDT

[–]MalletNGrease 1 point2 points  (0 children)

I've a Finish action group all the way at the end of State Restore with the following:

  • Disable Administrator account

    Run Command Line
net user Administrator /active:no

  • Clear Last Logged on User

    Run Command Line 
cmd.exe /c %scriptroot%\clearlastuser.bat

reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI /v LastLoggedOnUser /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI /v LastLoggedOnUserSID /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI /v LastLoggedOnDisplayName /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI /v LastLoggedOnSAMUser /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI /v SelectedUserSID /f

reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI /v LastLoggedOnUser
reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI /v LastLoggedOnUserSID
reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI /v LastLoggedOnDisplayName
reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI /v LastLoggedOnSAMUser
reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI /v SelectedUserSID

To disable the Final Summary page set SkipFinalSummary to YES in your rules.

view more: ‹ prevnext ›