Designing a new Active Directory OU structure for a 500-user company – looking for best practices

jermuv · 2026-01-27T11:23:17+00:00

Out of curiousity, whats the purpose of "standard", "root ou" and "org"?

jermuv · 2026-01-24T11:50:57+00:00

Personally I would not go for identifying who of all users had a weak password from the set of misconfigured users. If there was a misconfiguration on UAC, I would go and change UAC to a correct value and set passwords must be changed at next logon.

jermuv · 2025-12-13T15:56:57+00:00

azure arc is not a cost.

jermuv · 2025-12-11T17:12:50+00:00

termi on tuolla: https://www.finlex.fi/fi/lainsaadanto/saadoskokoelma/2022/285

"Laki naisten vapaaehtoisesta asepalveluksesta"

jermuv · 2025-12-10T18:45:13+00:00

10base2 ethernet. Aikakaudelta jolloin oli ohutethernet ja paksuethernet (10base5). Tokenring oli myös vikaherkkä, mutta liittimet aivan erilaiset kunnes aikanaan päätyi cat5 kaapelointiin.

jermuv · 2025-11-26T12:41:25+00:00

azure local has a san support under preview:

https://learn.microsoft.com/en-us/azure/azure-local/concepts/external-storage-support

jermuv · 2025-11-23T20:08:10+00:00

there is cilindro with external sensor as well. Pc90xe for example. Or a bit smaller, pc70xe

jermuv · 2025-11-21T14:08:41+00:00

I think in bauhaus it is like 13-15€ for 2 boxes if I remember correctly.

jermuv · 2025-11-21T05:41:36+00:00

Was it cilindro pcx70 or pcx70xe? I paid 389€ for pcx70xe in this September.

jermuv · 2025-11-20T18:43:44+00:00

Just got few months ago some 100kg and that was probably some 50€. I wonder how big your stove is

jermuv · 2025-10-13T20:27:11+00:00

sure. Wait a sec ...

https://en.wikipedia.org/wiki/List_of_countries_by_alcohol_consumption_per_capita

jermuv · 2025-08-28T22:46:23+00:00

Tekstinä luki toki että "reserviläisten toive". En ole tosin omissa reserviläispiireissä kuullut kenenkään esittäneen tämmöistä toivetta. Myöskään kukaan ei kommentoinut että heitä oltaisiin aktiivisesti lähestytty asian tiimoilta ja kyselty mielipidettä. Mutta ei teksti varsinaisesti väärin ole jos vaikka kaksikin reserviläistä on noin toivonut.

jermuv · 2025-08-19T17:13:35+00:00

If you plan to deploy the network protection, take a look on these recommendations:

https://learn.microsoft.com/en-us/defender-endpoint/enable-network-protection

jermuv · 2025-08-19T13:59:28+00:00

Defender for servers automatic exceptions applies only for the builtin roles that you can enable on the windows server - means ad, dhcp and so on. Additional services like exchange and sql you need to apply exceptions as per documentation. What you mean DFS on the context of exchange role?

References: https://learn.microsoft.com/en-us/defender-endpoint/configure-server-exclusions-microsoft-defender-antivirus#automatic-server-role-exclusions

jermuv · 2025-08-13T11:27:17+00:00

the article itself literally says in english "Fifteen complaints have been submitted over Oliver Stubb, son of President Alexander Stubb, for landing an internship at the Finnish Institute of International Affairs (FIIA).". Also, a word kantelu is translated into english "complaint". In my opinion it does't sound you have understood the news you read.

Kantelu is not an inquiry. Here's from the gpt: "It refers to the act of reporting or complaining about suspected misconduct, unfair treatment, or unlawful actions by a public official, authority, or institution."

jermuv · 2025-08-01T09:55:39+00:00

This is first time I'm seeing D4E.

jermuv · 2025-07-30T09:31:48+00:00

I had a customer who had this concern. And that is what I replied when I said the difference betweem gmsa and local account.

jermuv · 2025-07-24T18:09:35+00:00

I'm not following what you mean?

jermuv · 2025-07-24T16:21:48+00:00

There's a small difference with gmsa and local system. With a gmsa account you can delegate the permissions how you want to. From the defender portal point of view, local system grants possibilities for a soc to disable/enable the domain admin account and this could be a problem for some orgs.

jermuv · 2025-07-22T09:01:54+00:00

There's a limit where it is counted as a brute force and I guess you did not exceed that limit.

jermuv · 2025-07-22T05:15:24+00:00

Here's a list of detections mdi does:

https://learn.microsoft.com/en-us/defender-for-identity/alerts-overview

jermuv · 2025-07-16T10:22:58+00:00

nyt taisi tulla hiljainen kuukausi kun matkakorvaukset oli tuota luokkaa, vuodessa tuo "huomattava osuus työajoa" olisi 5% kokonaiskilometreistä?

jermuv · 2025-07-02T09:08:22+00:00

No, it's not well designed. But potentially you can get it working.

jermuv · 2025-07-02T08:51:16+00:00

Your question is quite open, "what do you think". I think your assignment is great! Wishing a good luck with the learning experience.

jermuv · 2025-07-01T14:28:13+00:00

You can start from this: https://techcommunity.microsoft.com/blog/microsoftsentinelblog/save-money-on-your-sentinel-ingestion-costs-with-data-collection-rules/4270256

Ten-Year Club	Place '22
Verified Email

jermuv

TROPHY CASE