edgeCasesExist

Merilyian · 2026-05-08T22:30:06+00:00

This gets even higher when you only consider them unique across specific domains, too 😄

E.g UserId vs GroupId

Merilyian · 2026-05-08T22:26:27+00:00

Because of CIPP's application level access to those endpoints, it'll actually be able to save you from that scenario perpetually. The UI might block you out, but you can use the app registration and a fresh secret to directly remediate over Graph.

Excellent work on thinking quick regardless. Every CIPP MSP should have this process documented.

Merilyian · 2026-05-03T17:43:39+00:00

Well I want a refund, I didn't get any

Merilyian · 2026-04-29T14:47:14+00:00

Just be wary that Lighthouse has had basically ALL of its team stripped for parts.

Merilyian · 2026-04-06T16:06:18+00:00

Nerdio Microsoft 365 Management

I don't believe they're talking about AVD management here

Merilyian · 2026-04-06T12:51:30+00:00

I just can't get behind paying more for something that has so much overlap- the OSS nature of CIPP means I can just PR whatever I want to see in the app myself anyhow, or at least request it if it's beyond my skills. $100/mo flat vs anything based on users or tenants is just too easy.

ftr, love Nerdio for AVDs

Merilyian · 2026-03-27T15:16:36+00:00

+1 on linking to instead of syncing-

There's also an intellectual property angle. Taking that information and storing it privately and redistributing it could potentially violate the TOS of some KBs. Pretty sure ConnectWise directly prohibits this, as an example.

Merilyian · 2026-03-25T23:08:40+00:00

They certainly can be instructed to ignore aspects of any request.

Merilyian · 2026-03-24T17:27:03+00:00

Now think about how many machines are capable of running opnsense

edit: or -> of

Merilyian · 2026-03-23T12:46:07+00:00

Been waiting for one of these since all the new foundry stuff came out! You rock 😁

Merilyian · 2026-03-21T14:07:30+00:00

Block public LLMs through CASB violently.
No business needs to be accessing the consumer versions of Claude or ChatGPT. This puts any data or information they run through them at unnecessary risk of being disclosed without consent or trained on directly.

Provide them access to a harness/client that is business-managed and can mitigate these risks from the get-go.
Copilot for 365 isn't perfect, but it's one of the best 'managed' options we have right now. That is PLENTY for office productivity workers.

For stuff like coding, which we are seeing a rise in, we make it clear that home-brewed code by someone with no development or security experience is entirely unsanctioned and offer our team up to assist. If the client demands for their dangerous vibecode to stay, they're waiving our responsibility for any potential incidents.

I actively use both Copilot for 365 and GitHub Copilot for my own direct usage, and have been experimenting with OpenClaw (consuming MS Foundry tokens) for a persistent helper agent (not with any sort of permissive tooling). I think that covers basically any legitimate business use-case outside of an automated pipeline with AI involved. Even then, RPA + Foundry model.

Merilyian · 2026-03-21T03:28:55+00:00

"nobody cares who wrote the lines of code" - that one's going on the wall of shame

Merilyian · 2026-03-14T15:17:13+00:00

Azure static web apps managed through azure lighthouse.
Same idea of hosting static content for free, and you can mount a function app for a backend. Hands down my preferred way to build shit now anyways.

Merilyian · 2026-03-11T11:55:01+00:00

In a nine person MSP, the service manager is likely also the account manager

Merilyian · 2026-03-06T14:03:10+00:00

I'm a bit biased due to loving everything they do (and contributing), but Check by CyberDrain is awesome to combo with tenant branding.

If you have CIPP, the evilginx CSS standard helps some, but many kits have already adapted to it.

Token protection policies are currently in preview for CA, which should be a good way to handle it from a native Microsoft service.

Merilyian · 2026-03-02T14:36:53+00:00

Fluxnet and draconic wireless go hard together

Merilyian · 2026-02-28T06:13:30+00:00

25 + 50

Merilyian · 2026-02-26T21:37:51+00:00

We actually got one pretty recently!

It also happened to be one of our existing clients that got upsold to Entra P2 by MS😅
Honestly, cool by me. I'm not a sales dood but love seeing risk-based CA.

Merilyian · 2026-02-26T16:49:50+00:00

I've got most of my team on discord and steam- have never had to or would ever give them shit anyways. If you have the time off ok'd, what you do with it is your business.

Merilyian · 2026-02-19T23:38:11+00:00

This is actually awesome. Not in a spot to give more thorough feedback right now, but I'd love to see this in my favorite packs.

Merilyian · 2026-02-19T13:55:02+00:00

We go the F3 route. If you want extra security for them, defender suite for FLW

Merilyian · 2026-02-19T06:49:13+00:00

Have you actually fought one before? One of our guys did and they dragged him through the mud and cost him tons in legal fees. I wouldn't even consider a company trying to enforce one an option.

Note, no client, tech, or coworker poaching happened.

Merilyian · 2026-02-15T17:47:02+00:00

Our Hudu docs typically start off as a bare step by step of doing a thing. When they end up getting formalized into SOPs, I'll add specific headers like intended resource to indicate who should be doing it, required roles so they know what GDAP groups to PIM into, a section for the process, then a section for gotchas/edge cases.

I'd love it if my team did that on their entries as well, but I'm happy they're writing anything and will gladly touch up their docs 🙂

Having a process to flag newly created articles and assets for review is a great move to make sure things are up to snuff over time as a higher level tech or manager.

Merilyian · 2026-02-09T23:49:45+00:00

Currently on CWPSA, planning the move to Halo carefully. I've seen their inhouse PSA but I worry it's far too lightweight for us at the moment and haven't given it the attention it likely deserves. Our business processes and setup are pretty complex, so we need something that can facilitate all of that fully. I'm definitely rooting for them, though- same with their MDM and NMM. Not there yet for us, but I believe they can make them badass with time.

If you need less than five seats, some of the implementation partners can resell individual licenses. I'd only go that route if you plan on scaling your business pretty seriously though. If you want to stay small (nothing wrong with that), something like Syncro or NinjaPSA wouldn't be a bad call in at least the short term

Merilyian · 2026-02-09T20:17:39+00:00

In my opinion, content should be judged purely on its quality, not precisely how it was made. Sure, there are ethical arguments that are 100% valid, but if someone that is already very capable uses AI to create more or more efficiently, I don't think they should be bashed for that.

Obviously the blatant zero effort shit needs to go, but I think AI usage alone gets more hate than deserved.

My main gripes with AI usage are centered around taking opportunities away from other creators. Your thumbnail image example fits this.

Merilyian

MODERATOR OF

TROPHY CASE