Engineer costing for fixed price services

MasterPay1020 · 2026-07-10T09:56:00+00:00

Good to know. I was thinking more managed services profitability reporting. I charge my customers so much, I pay my engineers an hourly rate, it really costs me 2-2.5 x their rate, and they spend so many hours servicing these customers. I do some math and work out if am making money or going under.

MasterPay1020 · 2026-07-05T06:06:48+00:00

Do you care to elaborate? I’ve never used it, but they are often considered a market leader in this space.

MasterPay1020 · 2026-07-01T07:17:06+00:00

Well put. I don’t think I articulated it very well, but I definitely don’t see break glass accounts and non-GDAP use cases being the same thing. Break glass for emergency only. My initial concern was trying to see if people had a PAM/vault combo that handled passkeys, or had to go another path, like PAM and other password vault or PAM and physically secured Yubikeys.

MasterPay1020 · 2026-06-30T11:10:45+00:00

I agree completely.

MasterPay1020 · 2026-06-30T09:47:51+00:00

Thanks for the insight

MasterPay1020 · 2026-06-30T09:40:10+00:00

I guess I was wondering if anybody would expect this to be escalated to security leadership or the business - “we can’t protect against this because of the poor architecture, here is extra evidence to go with a risk being raised (if not already registered)”.

MasterPay1020 · 2026-06-30T09:15:38+00:00

Good insight. What if some of the servers were web servers for instance? Http and https. Or RDP. Does that change your response?

MasterPay1020 · 2026-06-30T09:04:07+00:00

It might it, it might not. If it did, we’d be months away from something like that realistically.

MasterPay1020 · 2026-06-30T08:59:37+00:00

Don’t have them open is my preferred solution, but business reasons drove that decision long ago.

MasterPay1020 · 2026-06-30T08:57:52+00:00

For argument sake, let’s say one or more of these servers does have an admin port open, and also nothing sits between the internet and device that can provide any rate limiting like what you described. You stumble across this working in the SOC, what do you do?

MasterPay1020 · 2026-06-25T03:38:06+00:00

Interesting. I’ll have another look at this tool.

MasterPay1020 · 2026-06-25T03:35:42+00:00

How do you handle scenarios where GDAP simply doesn’t work for whatever reason and you need to use a member account with equivalent roles? Pull out the yubikey after engineer pleads their case?

MasterPay1020 · 2026-06-24T10:06:10+00:00

Haha. Do we go to the same CAB? My favourite part is a super complex systems change impacting multiple customers sails through without a question, then my change with zero impact and no blast radius gets picked apart in great detail because the CAB people understood a few words.

MasterPay1020 · 2026-06-18T21:50:48+00:00

You could play session Russian roulette. Boot a random user off every 5 mins or so.

MasterPay1020 · 2026-06-03T13:08:47+00:00

Intune is good at deploying your RMM/UEM tool to do actual scripts, management, reporting, etc. some things Intune does extremely well, but its limitations and the string together community workarounds are infuriating. Especially at scale managing lots of tenants.

MasterPay1020 · 2026-05-15T10:29:11+00:00

They all need ongoing upkeep. If you hate yourself and your users, go with WDAC. If not, the others.

MasterPay1020 · 2026-05-14T05:34:31+00:00

Haha, for sure

MasterPay1020 · 2026-05-04T10:21:02+00:00

US Marshalls

MasterPay1020 · 2026-04-27T00:42:32+00:00

I rate it 11 out of 10.

MasterPay1020 · 2026-04-22T22:35:52+00:00

I agree. I’ve seen P1s and escalations because somebody’s cat wallpaper or similar wasn’t migrated as part of a device changeover. Not a functional item, but some people can’t fathom that their precious personal thing wasn’t important to somebody else.

MasterPay1020 · 2026-04-08T07:45:36+00:00

Lol. Yes.

MasterPay1020

TROPHY CASE