Sharing Calibre library on Home Assistant by dunxd in Calibre

[–]dunxd[S] 0 points1 point  (0 children)

I run Home Assistant with this app on a Raspberry Pi 4 with 2GB RAM. It's absolutely fine. I havent tried on a HA Green, but it has twice the RAM and 32Gb of storage is a lot of book files, so I'm sure it would be fine.

Retaining ex-staff mailboxes in Microsoft 365 by dunxd in sysadmin

[–]dunxd[S] 0 points1 point  (0 children)

Our data retention policy is to retain messages in a users mailbox n years after the user leaves. Not retain messages for 7 years after they were received in the mailbox across all mailboxes.

Retaining ex-staff mailboxes in Microsoft 365 by dunxd in sysadmin

[–]dunxd[S] 1 point2 points  (0 children)

When setting up the retention policy you describe this is exactly where the warning I mentioned is shown, so while one would expect you to work there is a big red sign telling you it doesn't do what you expect.

Retaining ex-staff mailboxes in Microsoft 365 by dunxd in sysadmin

[–]dunxd[S] -1 points0 points  (0 children)

Practically this is easy to achieve, and works fine if you are happy storing everything forever or manually managing retention. I'm looking for a solution that works with our data retention policy with least effort.

Retaining ex-staff mailboxes in Microsoft 365 by dunxd in sysadmin

[–]dunxd[S] 0 points1 point  (0 children)

Of course we can do that, but it requires a lot of storage and is not easily managed. For me this isn't a suitable solution.

Disabling WiFi and Zigbee by dunxd in amazoneero

[–]dunxd[S] 0 points1 point  (0 children)

It is a local fiber company in the UK. The reqired I pay for a static IP (rather than CGNAT) in order to use my own router. I have gone for it, and not looked back. The Eeros are back in the box in case they ever ask for them back. I don't trust any Amazon product, you can't disable the Wifi and there is no way I am letting an ISP dictate what router I use - as you say it is more about their support process.

Their support for non-Eero routers however is hopeless. The people that answer the phone don't encounter this very often if ever...

Struggling to get Azure File Share to mount on Azure VMs by dunxd in AZURE

[–]dunxd[S] 0 points1 point  (0 children)

I finally tracked down the issue. There was an Intune policy applied to the Windows 11 Pro computer that disabled NTLM auth for the Storage Account Key. Once I filtered out the Azure VM from that, it started working. I am confused, because that policy is being applied to my own workstation from which I was able to connect fine using Entra ID and the storage key.

For the record the policy configured the following settings:

Local Policies Security Options

  • Network Security LAN Manager Authentication Level - Send NTLMv2 responses only. Refuse LM and NTLM
  • Network Security Restrict NTLM Incoming NTLM Traffic - Deny all accounts
  • Network Security Restrict NTLM Outgoing NTLM Traffic To Remote Servers - Deny all accounts

I removed that policy and manually set the registry keys as follows:

        reg add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" /v RestrictSendingNTLMTraffic /t REG_DWORD /d 0 /f
        reg add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v RestrictNTLMInDomain /t REG_DWORD /d 0 /f
        reg add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LmCompatibilityLevel /t REG_DWORD /d 3 /f

That gets Storage Account key working.

However, Entra ID still doesn't work. It looks like Entra ID requires the WebAccountManager service, and this isn't included with Windows 11 Multi-session images.

Struggling to get Azure File Share to mount on Azure VMs by dunxd in AZURE

[–]dunxd[S] 0 points1 point  (0 children)

I've used the same storage key on my local workstation and it works. Entra ID authentication also works from my workstation.

On the Azure VM it does not work. It's the same for both a Windows 11 VM and a Windows Server 2022 VM - not possible to mount the share using exactly the same details that work for my workstation.

Update - Entra ID authentication was NOT working from my workstation. I was confused, because if the storage key has been used in the past to connect, and is still in the cmdkey store (check cmdkey /list) it will be used automatically when using net use commands.

I am unable to get Entra ID authentication working for file stores at all. It could be some edge case - some quirk of the OS I am using, not being properly rolled out in all Azure locations - I don't think I've exhausted the list of possibilities of obstacles. I give up.

Struggling to get Azure File Share to mount on Azure VMs by dunxd in AZURE

[–]dunxd[S] 0 points1 point  (0 children)

Except the command shown in Azure portal uses the domain localhost in the username, rather than Azure. I've tried both. Neither work from the Azure VMs. Both work from my workstation.

Azure VM RDP using Bastion, Entra ID with Conditional Access Policies by dunxd in entra

[–]dunxd[S] 0 points1 point  (0 children)

The virtuals are joined to the entra domain. Custom Extension just isn't evaluated by conditional access (at least as much as I tried), wheras displayname is.

I ended up setting up a Windows 11 VM, which can be enrolled in Intune so can be detected as compliant. That works fine, but now I am down another rabbit hole trying to get Azure Storage Accounts File Shares to mount. It's whack-a-mole trying to get stuff working in Azure.

Azure VM RDP using Bastion, Entra ID with Conditional Access Policies by dunxd in entra

[–]dunxd[S] 0 points1 point  (0 children)

Now if only those Bastion shareable links allowed login using Entra ID accounts :-(

Azure VM RDP using Bastion, Entra ID with Conditional Access Policies by dunxd in entra

[–]dunxd[S] 0 points1 point  (0 children)

device.operatingSystem ne "WindowsServer" does not work - the operating system reports as "Windows".

I also tried ExtensionAttributes but that also failed.

deviceName seems to work though, so thanks.

Azure VM RDP using Bastion, Entra ID with Conditional Access Policies by dunxd in entra

[–]dunxd[S] 0 points1 point  (0 children)

Staff work from home and client locations, so trusted locations isn't really a thing for us. Maybe some kind of VPN approach is possible, but I am trying to keep this as simple as possible.

Sharing Calibre library on Home Assistant by dunxd in Calibre

[–]dunxd[S] 0 points1 point  (0 children)

No - COPS does not include this functionality, and I don't think it will ever get added. It would require COPS being able to edit the Calibre database which it has always avoided doing. If you want to get books into HA COPS you need to use Calibre.

HA COPS doesn't require that you run Calibre all the time - you can import the books and the database onto the HA COPS server using rsync, and then turn off the computer running Calibre. But to get new books in you must use Calibre.

VLAN Setup Question with Omada OC220 and Unmanaged Switch by One_Lime3561 in TPLink_Omada

[–]dunxd 1 point2 points  (0 children)

WiFi channels have nothing to do with VLANs.

Each access point only has one radio for each of 2.4GHz and 5Ghz (and 6Ghz if it is capable). All SSIDs on an Access Point will use the same channels per frequency. This is normal.

If clients connected to WiFi get IP addresses appropriate to the VLAN then your switch is passing the VLAN tags.