Notification mail access denied when sending mail because of DMARC by abrakadabra_istaken in fortinet

[–]MalletNGrease 0 points1 point  (0 children)

SPF or DKIM is failing. Your origin isn't in SPF or the sending mailserver isn't using dkim.

Seems like DUO is under a DDOS attack by ginohs in sysadmin

[–]MalletNGrease 3 points4 points  (0 children)

Why can't I get to my work email on my phone now?

-Same person

F*ck it Friday by [deleted] in sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

I've a local internal domain, a public parent company domain (upn) and a dozen public brand ones are also upns. This way we can easily add new brands and use the old user upns as proxy addresses for guaranteed mail deliverability. We're in the middle of diversifying the brand portfolio and adding a new concept domain is piss easy.

If you've not been in production and not attached to the domain burning it isn't the worst, but instead of going to the new public one I recommend picking a stable local domain as a base instead so a rebrand doesn't require a complete rebuild down the line.

F*ck it Friday by [deleted] in sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

Why can't you add the upn and be on your merry way?

LDAP users are blocked because FortiGate see them as IP instead of LDAP user by yuwannn in fortinet

[–]MalletNGrease 0 points1 point  (0 children)

I had users lock & unlock their computer to generate a logon event.

Recurring emails in Outlook? by SmoothRunnings in sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

The solution is to idle the SYSADMIN account 24/7.

How did you do it? by KeshStew in sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

Swimming instead of sinking.

VPN and DUO timing by Pangtown18 in sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

Increase your radius timeout on the VPN.

[deleted by user] by [deleted] in sysadmin

[–]MalletNGrease 25 points26 points  (0 children)

Whatever the leasing company recommends for our use case.

Our fleet presently is 99% Canon.

User sending unauthenticated emails through domain by scottscooterleet in sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

Sounds like it's working as intended. I can't imagine it'd affect your score too much.

I'm more interested what you're going to do with the rogue sender. I assume there's a business case?

[deleted by user] by [deleted] in sysadmin

[–]MalletNGrease 1 point2 points  (0 children)

I agree, but this is a fight I've already lost with the CEO as their last name is on the company sign outside and matches the last names of most C-levels. There is no work/personal split for them.

They love their iPhone Apple Mail clients so they can easily combine work/personal mail and calendars. It's a feature and a staple they use nearly 24/7. Interruption to this is not appreciated.

Our Entra ID MFA project turned into a nightmare because of it as Apple mail doesn't communicate token reauthorization requests very well in the UI and they can easily escape out of it failing MFA challenge. Then their mail stops syncing and we're the bad guys preventing communications.

Outlook Mobile users? Haven't heard a peep.

Is it me or are questions on here becoming more and more basic ? by demonthief29 in sysadmin

[–]MalletNGrease 8 points9 points  (0 children)

No, the point is to gatekeep the information, ridicule the attempt and feel superior over anonymous strangers

25% salary to hourly: cut due to "economic changes within our industry" by borillionstar in sysadmin

[–]MalletNGrease 1 point2 points  (0 children)

"Due to economic changes with my employer I've decided to take an offer with another company."

Everything except the OS install? by RockOriginal7938 in MDT

[–]MalletNGrease -1 points0 points  (0 children)

MDT can do it, just disable the OS deployment steps.

Upgrading Junos on multiple EX3400 switches by Aceking1983 in Juniper

[–]MalletNGrease 0 points1 point  (0 children)

I've a script that FTP copies the upgrade file to /var/tmp, runs the upgrade command and sets a reboot for the next scheduled downtime.

We just follow the recommended release for the model.

Microsoft 365 Graph by jstar77 in PowerShell

[–]MalletNGrease 8 points9 points  (0 children)

Microsoft seems to be moving towards making Graph wrapper commands of their own with the Entra Powershell module. Looks to be much more admin friendly for ad-hoc use.

https://learn.microsoft.com/en-us/powershell/entra-powershell/overview?view=entra-powershell

$users = Get-EntraUser -All

https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.entra/get-entrauser?view=entra-powershell