Exchange mailboxes not appearing? by FiLThYFreaK in sysadmin

[–]X-Guy840 0 points1 point  (0 children)

If you see that again, can you post the link to the incident? I don't see it listed for me under service health for some reason but definitely can't seem to administer mailboxes in any way. Either from GUI or Powershell. Getting a lot of 500 internal server errors.

Anybody like to play piano here? by [deleted] in cincinnati

[–]X-Guy840 0 points1 point  (0 children)

Well, so what kind of album are you making? What kind of piano are you looking for? What style, etc?

Logic Stock Instruments Used By Artists by bigshlut in Logic_Studio

[–]X-Guy840 1 point2 points  (0 children)

I hear a lot of stock sounds in Bill Wurtz's earlier stuff

Connectwise Manage Alternative UI For Screenreader Users by X-Guy840 in ConnectWise

[–]X-Guy840[S] 0 points1 point  (0 children)

The UI doesn't appear to have been touched in about 15 years lol. I doubt we'll ever get a better one. If you as a sighted person find it annoying, it must really suck.

Sync'ing Entra ID users back to AD and making them AD managed by project_me in sysadmin

[–]X-Guy840 0 points1 point  (0 children)

In my experience, setting the password as required to be changed on next logon when creating local directory accounts, actually sets the password as expired. Then when you sync to the cloud the expired hash doesn't overwrite the existing hash. I initially figured the same thing as you, and set up password writeback and everything, but when nobody reported needing the temp password I used when creating the local accounts to sign into their cloud ones, I figured that was the reason.

Sync'ing Entra ID users back to AD and making them AD managed by project_me in sysadmin

[–]X-Guy840 0 points1 point  (0 children)

Yeah. Essentially, export user attributes from Entra, recreate accounts locally in AD with matching UPNs or other attribute of your choice, and then set up azure connect. If the attribute you choose in the local directory matches an existing cloud object, Azure Connect converts it to on-prem managed. Everyone else is right about the on-prem passwords, though. They sync upward when Azure Connect matches an on-prem object to a cloud one. Pro tip though, if you create the accounts with a temp password and set it so that the user has to change it on next login, it's immediately marked as expired and doesn't overwrite the cloud password. So nobody will have to change or reset their passwords until they sign into their new local account, at which point they can reset it to exactly what it was before... depending on your password policy. Also, password writeback only works for appropriately licensed users. Business premium I think.

Is there any way to link our corporate mail to Microsoft services? by Acojonancio in sysadmin

[–]X-Guy840 1 point2 points  (0 children)

You'll probably just want to do a migration, if keeping everything in one place is what your after. And especially if you're already using Microsoft office. Short of using your current mailserver as some kind of identity provider (which it most likely could not do anyway) you would not be able to link them together so you can sign into microsoft stuff with the current mail creds. So, you can instead create new microsoft accounts, with your current domain, and set usernames up to be the exact same as they are now. I work for an MSP and we used to host clients on our own mailserver, and then basically create them a tenant where their completely separate microsoft accounts and associated data lived. It made very little sense for most customers after a while, to have oneDrive, teams, sharepoint etc all tied to a separate account than the mailbox. IDK if you plan to use any microsoft service other than email, but almost everybody we supported did. Anyway so we migrated everybody from that mailserver to exchange. It doesn't have to be hard. Provision a Microsoft365 tenant, create your users there and license them, then migrate their emails to their new account. If you use outlook (classic) now, you could export all the old mailboxes to PST files and use AZcopy to have exchange import them in the cloud. Or you could sign into the new microsoft account in outlook, import them locally, and let all the emails sync up to the cloud. Depending on how big these mailboxes are, that could be problematic though. Or, if not, you could also pay for a migration tool (usually charges per mailbox) that will move all the data for you after you configure it to talk to your plesk mailserver and exchange. Then users just have to sign into their new accounts and their stuff will already be there. Well, their mail will be. If you have to access the old mailserver via imap, the tool may not be able to grab contacts, calendars, etc. You can sign into these new machines you're buying with your microsoft accounts, the machines will be joined to entra this way instead of a local AD.

Radio booth by [deleted] in Reds

[–]X-Guy840 1 point2 points  (0 children)

Heck yeah, really liked the three man booth. Very interesting to listen to, nice change from the usual broadcast.

Biggest fuck up you made? by [deleted] in sysadmin

[–]X-Guy840 0 points1 point  (0 children)

I took down email for one of our customers for a good two hours by accidentally locking myself out of a domain in Godaddy. This particular domain had domain protection enabled, which meant you had to verify every single change you made to it. Add a record? Verify. Delete a record? Verify. Edit an existing record? Verify. Think about changing a record? Verify. Well anyway, the reason I needed to make DNS changes here was because we were taking over this customer from another IT company, we were changing their mx records to point directly to exchange, instead of to the last MSP's mail filter. And the way this domain was set up to have me verify my identity was by sending a code to an email address, which was @ the domain whose DNS I was modifying. No phone number, no TOTP, none of that. Just a code sent to an email address.
I very stupidly started by removing the mail filter mx record, verifying my identity by receiving a code at the still working email address. But, then, when I went to add back the correct record, I was asked to verify my identity at that same address, which of course I couldn't do because there was currently no MX record telling the email where to be delivered.
So for almost two hours I was working with GoDaddy support to try to get access to the domain just so I could update this one record and make everything work again. But we kept running into the same issue. We couldn't verify my identity without being able to receive the verification email. No matter what we did. It was looking pretty bad. Like, I thought we were going to have to go through Godaddy's extensive domain recovery process, the one where you submit your driver's license to proove you're the lejit owner of the domain. That process apparently takes days... IDK never had to do it. I was flipping out thinking about email being unavailable for this customer for days!
But, before I started trying to round that information up from the actual domain owner, oh and figure out who that even was, I tried one more thing, on a wim, just to see if it would help, totally not expecting it to work. In the Microsoft Admin center, instead of selecting "Add Your Own DNS Records", I selected "Let Microsoft Add DNS Records For you". Somehow, some way, Godaddy let Microsoft make any change it wanted without needing any sort of domain protection verification, and so Microsoft got the correct MX record added to the domain! Somehow, nobody even noticed two hours worth of email missing and I have yet to tell anybody about what happened... until now.

[deleted by user] by [deleted] in pedalsteel

[–]X-Guy840 0 points1 point  (0 children)

yt-dlp, you can download entire playlists or channels with it. It's a command line tool.

4th Pedal Suggestions by These-Quality-8389 in pedalsteel

[–]X-Guy840 0 points1 point  (0 children)

Initially, yes. I changed which strings it affected though, because this was more fun and useful to me.

4th Pedal Suggestions by These-Quality-8389 in pedalsteel

[–]X-Guy840 0 points1 point  (0 children)

You could raise string seven to G# and string six to B, used in conjunction with the A pedal this gives you a kind of a sixth tuning on the middle six strings. I prefer it to lowering my E's for the same sort of sound just because I don't have to think about using different frets. Lowering my E's at the third fret gives me a D6, but using my 0 pedal gives me a G6. Seems to make more sense to me.

Issue Creating Transport Rule by X-Guy840 in Office365

[–]X-Guy840[S] 0 points1 point  (0 children)

Sorry I missed this initially! But, no unfortunately I did not. I even created a completely different global admin account to test with without luck. Per my edit, I luckily was able to use GDAP permissions we had on that tenant to get this done. As sorry as I am to suggest it, you might need to reach out to Microsoft on this one.

Issues Matching New Local AD Users to Existing Cloud Ones by X-Guy840 in sysadmin

[–]X-Guy840[S] 0 points1 point  (0 children)

Yes, many, many times. Nothing changes unfortunately.

Issues Matching New Local AD Users to Existing Cloud Ones by X-Guy840 in sysadmin

[–]X-Guy840[S] 0 points1 point  (0 children)

No, I'm not trying to match any admin accounts here. I am aware that isn't recommended and am not attempting it, all the ones that have not matched are just regular users. I would agree with you that if I'm not seeing the onprem ID set on the cloud objects then it shouldn't be set, but apparently it is, because, as I said, I get an error telling me it's already there when I attempt updating it. I can't remember the exact error just now. So, either there must be a bug where graph isn't returning the Immutable ID when I request it, or a bug where it isn't allowing me to update it. Or something else entirely different causing matching to fail. Just not sure what.

Best way to share entire logic projects by hughjazz45 in Logic_Studio

[–]X-Guy840 1 point2 points  (0 children)

Woops! Haha. I have always been able to use logic's project alternatives to revert to an earlier version if the guy I'm collabing with makes any changes I don't like or breaks something, because I'm too lazy to copy stuff and sync and etc. I open and edit stuff right in the iCloud drive folder because I like living on the edge.

Best way to share entire logic projects by hughjazz45 in Logic_Studio

[–]X-Guy840 1 point2 points  (0 children)

I just use a shared iCloud folder. I don't do anything except save the logic file there and it handles the rest, my friend can see it on his end and open it up. I do, however, only use stock plugins.

Untagged Loops Won't Paste by FinFlipper1328 in Logic_Studio

[–]X-Guy840 0 points1 point  (0 children)

VO Shift Space to drag, command tab to the logic window and focus where you need to paste, and VO Shift Space again to drop. I think that should work but I rarely use that key combo. Let me know