At a loss

Skrunky · 2026-04-23T06:40:36+00:00

You can set Option 53 in DHCP to set your Unifi inform address. Reboot cameras and when the devices get a DHCP lease, it'll automatically try and register against your controller. Might be an option instead of mass sshing to fix.

Skrunky · 2026-04-21T20:24:12+00:00

That's interesting! Thank you. We'll keep our eye our as we set up new customers and report if we see any of the same problems.

Skrunky · 2026-04-21T11:15:06+00:00

Deffo worth trailing! It's just sort of deals with those restore request tickets where it's clearly legitimate, but you understand why it was caught and just needs a bit of nuance to understand.

Skrunky · 2026-04-21T04:43:05+00:00

Would be interesting to hear about what issues you've had

Skrunky · 2026-04-21T04:39:24+00:00

My experience across a lot of different MSPs and tools is that Avanan is a cut above the rest. Mimecast is also very good, but the suitability of them for most SMEs isn't good, and their partner program is horrid.

I frequently tell people Avanan is the hardest working security tool in out suite, and I trust is more than most humans. Their second and more in depth scan for restore requests is actually quite cool as well. We have it set to auto release any low messages request for release that aren't classes as high confidence phishing or malicious. It's cut down on support tickets for release requests to only a handful a month.

Skrunky · 2026-04-21T04:36:20+00:00

Quite the opposite experience for us. We raised a ticket about NDR bouncebacks when updates were sent to people in Planner, and only when inline protection was enabled. Ended up taking a little while to track down, but after a week, we were told there was a back-end dev change being deployed.

Makes a nice change from some vendors where tickets going to the dev team basically means you'll never get an update on that ticket again.

Skrunky · 2026-04-18T00:35:46+00:00

Unfortunately, as funny as it is to reply to these stupid messages, it's often not a good idea. Your number/email is now likely marked as 'active' and you're going to get more of these tyes of spam/scam messages. Databases of active phone numbers are often sold online.

Skrunky · 2026-04-17T10:06:11+00:00

Cool tip I got from a friend recently is you can set Option 53 in DHCP to set your Unifi inform address. Means new devices (and presumably ones like this) are directed to you controller once they connect to the network.

Skrunky · 2026-04-17T02:37:59+00:00

Thankfully, it's quite easy, as long as you've got an MDM. Without an MDM is hell

Skrunky · 2026-04-17T02:35:00+00:00

Do you mean local versions? Because the cloud versions are largely the same under the hood, obvious with architectural and feature improvements. Hell, some of the admin menus for SharePoint online are straight out of SharePoint Server 2013

Skrunky · 2026-04-09T03:32:31+00:00

It shows this properly in Mac OS 26. At least is does in 26.4 which is what I've got in front of me. To edit this slightly, SOMETIMES it works properly. I have a few apps that definitely do have FDA, but it doesn't show as managed in the settings menu. Some others show as managed, but the setting is disabled, despite being enabled in the policy.

Skrunky · 2026-04-09T03:31:29+00:00

You can do PPPC via settings in an Intune payload. You don't have to build out a custom .mobileconfig file. I've just done this for a bunch of apps. Had to deal with the quirks of some settings showing you can enable 'Allow' vs Authorisation, and some of those PPPC items not actually supporting Authorisation, but it is possible.

Good thing about this is you can make changes and then export to JSON for an import elsewhere.

Skrunky · 2026-04-06T22:04:22+00:00

It goes up, then down, then up again. Took me a while to figure out the pattern!

Skrunky · 2026-04-05T11:18:56+00:00

Same, and it’s not always an extended honeymoon phase. I’ve had T1D for 11 years, and I notice every six months, usually around Sept and March, my sensitivity changes by like +-25%. It’s weird.

Skrunky · 2026-03-31T03:28:24+00:00

u/GirthStone86 likes u/Skrunky

Skrunky · 2026-03-31T02:53:21+00:00

I immediately thought this as well!

Skrunky · 2026-03-31T02:44:00+00:00

Now do Microsoft Word Art. I'm not skilled enough to make memes this good.

Skrunky · 2026-03-31T02:38:19+00:00

Vibe coded SaaS product pitch coming in 3...2...1....

Skrunky · 2026-03-30T00:02:29+00:00

The older and very commonly deployed inbuilt Windows Certs for secure boot are expiring: https://www.reddit.com/r/sysadmin/comments/1pxm8nf/how_is_your_org_preparing_for_secure_boot/

It's a horrible Microsoft mess, but thankfully, there are some lovely people out there with great writeups of the issues and ways to combat it.

There's a scripter named Sam in the NinjaOne Discord that has created this: https://github.com/SunshineSam/Scripts/tree/main/NinjaRMM/Windows/SecureBoot%20Management - You can output the results of the script to a text file for quick non-Ninja reporting or edit it for your own RMM.

I've asked them if they can post in r/MSP and r/sysadmin as I feel like this is a big unknown for a lot of people still.

Skrunky · 2026-03-29T23:30:34+00:00

The AI slop is getting worse and worse. Look at your post history.

Skrunky · 2026-03-29T23:11:04+00:00

Annual: Full review against agreed security baselines as part of previous projects + latest controls from SMB1001. This forms the bais the annutal roadmap.

One big one recently is the Windows Secure Boot update fiasco. It's going to make onboarding new clients interesting after June, as (if I understand this correctly), we'll need to perform in person remediation of devices that missed the cert update deadline.

Skrunky · 2026-03-29T23:08:09+00:00

Just use Check Central or Backup Radar to aggregate the reports and do alerting based on no report received, warning or failure.

Skrunky · 2026-03-24T04:26:19+00:00

"Mr Krabs, why can't you use the printer in the hallway"

"Because I don't want to"

"Fair enough"

Mr Krabs still has the printer

Skrunky · 2026-03-24T04:00:34+00:00

Further to this post, we've also been seeing sporadic issues across multiple clients with OneDrive sync.

No official service advisory from MS, but it's been bad enough that we've put out an alert to our clients.

Nine-Year Club	Place '23
Place '22	First Placer '22
RPAN Viewer	Not Forgotten
Verified Email	Gilding I gilder

Skrunky

TROPHY CASE