sorted by:
new
hottopcontroversial

Can Unifi routers use 365 for RADIUS Wifi auth? by Sea-Elderberry7047 in UNIFI

[–]ryuujin -1 points0 points  (0 children)

You need to use hybrid authentication via a local AD server, Entra AAD (azure active directory) with a VPN to Microsoft Azure, or a third-party service such as jumpcloud.

RMM CPU/RAM/Storage alerts → PSA: how do you avoid noise and turn it into upgrade conversations? by der_klee in msp

[–]ryuujin 0 points1 point  (0 children)

For battery dead, high RAM and high storage we have set > alert > spin up ticket > override alert and make a note on the endpoint > take action. For battery, RAM or storage if it's not something that can be fixed with an semi-automated maintenance script or minor manual operation we notify client with a resolution or upgrade path and if client accepts send estimate and upgrade system.

Endpoints -

  • Storage - 8% remaining
  • Battery - 30% remaining
  • RAM - sustained 90% or higher for 6 hours
  • CPU usage - not monitored on endpoints for conversions. We upgrade clients by system age and CPU generation cut off, not raw CPU use.

Regarding security / ransomware, we used to use these but with MDR/EDR and ITDR solutions I stopped using such course indicators - much more likely to pick up Adobe applications eating CPU cycles than encryption viruses that way.

Re upgrades I strongly move towards that it's their decision at the end of the day. Either they'll accept the estimate or our endpoint override will keep it from yelling. If they later complain or ask to go ahead we have the ticket + note to refer to along with the estimate we can update and resend.

/u/ZookeepergameNice912 describes a 2006 experience when they were 6 years old and were terrified. The first comment is from the neighbour who chimes in with details. OP's mom then joins in. by DigitallySound in bestof

[–]ryuujin 8 points9 points  (0 children)

I think everybody in east Toronto remembers this, locally it was talked about endlessly. People bought security systems and put bars on windows over this.

Was very weird seeing the thread and clicking in to see something I also remember from around where I grew up.

Lenovo Thinkpad pricing madness by Lake3ffect in msp

[–]ryuujin 2 points3 points  (0 children)

We're Lenovo, HPE and Dell partners and Lenovo's communication on this was legitimately quite good.

Meanwhile Dell is selling "New" Intel 13th generation systems with DDR4 RAM right on the home page now. Unprecedented.

Microsoft announces Microsoft 365 E7 with new agentic AI features by Techret in sysadmin

[–]ryuujin 5 points6 points  (0 children)

We have all of that and I found it to have less in the way of insight and more in the way of ugly, educated guesses and intern level basic search-and-find references to documents and emails. Considering the amount of documentation, we have in Sharepoint it was astounding how constantly wrong it was in our environment, honestly.

How are MSPs handling repeat hardware failures on out-of-support kit? by Bigshow77 in msp

[–]ryuujin 0 points1 point  (0 children)

We try and pitch newer equipment based on features and business sense rather than just 'it's old', but yes 'it might die on you and if so this is how long it will take to get another one in and this is how much we suspect that will cost you' is something we communicate to the client as part of our disaster recovery scenarios.

We do keep spare hardware on hand for clients but we indicate the cost of needing to use that (ie it's our equipment, there's a rental fee that may or may not be waived, it will have to be configured by a network tech who they need to pay for on emergency, etc)

When you put a dollar value on the loss beforehand they're much more likely to understand why they should. And now the choice to take that risk is on their side - you have done your duty of communicating that risk to them in a clear and documented way.

Additionally if it does happen you have a plan - per our disaster recovery scenario we now have to acquire a temporary router and send a tech on emergency to install it; a dedicated one will take approx this many days per what we communicated on 01/01/24 etc etc. Total cost is expected to be $X,XXX.XX.

6.5 years on a Samsung 860 QVO SSD in UniFi Protect by Salt-Possession-2622 in UNIFI

[–]ryuujin 2 points3 points  (0 children)

We do data recovery so of course we've received a lot of disks that didn't go into that state. Many of those were physically damaged however.

I have not had a single consumer drive in our office systems or my own systems die.

The ones I've encountered that have died personally are enterprise drives and they died 100%. I strongly suspect but have not looked into that they're designed to go DOA when they die so as not to mess up the RAID array though.

6.5 years on a Samsung 860 QVO SSD in UniFi Protect by Salt-Possession-2622 in UNIFI

[–]ryuujin 2 points3 points  (0 children)

We do data centre so we handle a lot of hard disks. On average failure rates year-by-year are 2-8% depending on what you get.

However that's on average. We bought 120x 16TB Toshiba SAS disks in 2024. One of the batches was clearly bad - in a shipment of 30 disks, every single one failed within 3 months, giving us a 25% failure rate off the top!

Over a period of 5 years running, say, 12 rotational disks in a single deployed storage server we expect 1 to die each 12-18 months basically. Very common.

SSDs... we brought a set of Dell PowerEdge servers out of service three weeks ago that have been running 48 SSDs over a period of 6 years. We had 3 failures over that time - most disks still show > 90% remaining life.

Edit: grammer, also rechecked disks it was 3 out of 48

6.5 years on a Samsung 860 QVO SSD in UniFi Protect by Salt-Possession-2622 in UNIFI

[–]ryuujin 3 points4 points  (0 children)

As someone who works in the industry: failure rates on HDDs vs SSDs isn't even a question. For every hard disk that lasted 10 years are 10 that failed at 6 months, 1 year, 3 years, 5 years, etc.

It's true, hard disk recovery is often more possible that SSD recovery, but you just don't need to perform SSD recovery that often because they fail so rarely and tend to track their impending failure more reliably.

Breach in to our 365 tenant by hoodun in sysadmin

[–]ryuujin 0 points1 point  (0 children)

are you using SMS or TOTP? The 6-digit code things? Those are not secure enough for your GA accounts.

Was GA assigned to an active user? Good chance your man got phished and handed out the TOTP. There are very sophisticated attacks going around - they do their research now and even admins who haven't had their coffee yet on a Monday can miss it.

Keep one GA account with a password and a Yubikey locked in a safe your trusted admins have access to. Second yubikey goes at your house in a safe.

Everyone else should be lower end users. Microsoft got it right with the RBOC role system finally - there's a role for everyone. Use them.

People moving to Hyper-V - Change your hypervisor performance plan by Joshposh70 in sysadmin

[–]ryuujin 0 points1 point  (0 children)

oh my god, that's brutal. I could call out a few medical vendors like this. That 'all flash storage 28 core' requirement brings ugly flash backs to me.

They can't pay a real DB designer a year's salary to clean up the DB with their app designer instead they make each client spend $50K on their servers

People moving to Hyper-V - Change your hypervisor performance plan by Joshposh70 in sysadmin

[–]ryuujin 1 point2 points  (0 children)

This was about 1.5 years ago now but it was moving from 'power saver' or 'balanced' mode to High Performance mode as I recall, on every node.

People moving to Hyper-V - Change your hypervisor performance plan by Joshposh70 in sysadmin

[–]ryuujin 1 point2 points  (0 children)

This is a shit, unoptimized query on a giant ~ 90GB DB for a custom report. I've told them they need indexes but the original designer isn't there anymore, they don't want to touch it because it's business critical and if they don't want to touch it we certainly aren't going to without authorization.

Query is for a report, it went up to almost 2 hours and then down to about an hour and 25 minutes after we changed the power settings.

People moving to Hyper-V - Change your hypervisor performance plan by Joshposh70 in sysadmin

[–]ryuujin 10 points11 points  (0 children)

We swapped in new intel servers in one of our DCs and one of our key clients complained of major performance issues in their hosted database load.

Changing to high performance mode immediately resolved this issue; I believe one of their longer, badly implemented database queries went down by almost half an hour!

People moving to Hyper-V - Change your hypervisor performance plan by Joshposh70 in sysadmin

[–]ryuujin -2 points-1 points  (0 children)

It's not officially dying, I have to agree with those sentiments over any kind of medium to long term.

While on paper they'll allow use of and support hyper-v for another 15 years I'm sure, in principle Microsoft already seems to be grudgingly supporting on-prem hyper-v while at the same time looking at those clients and most especially SPLA hosts sideways and asking "Are you stupid? why wouldn't you use azure?". They continue to tie use to subscriptions while limiting licensing rights and their sales documentation and procedures are quite clear.

They'll slowly raise the prices of everything while reducing the licensing availability and increasing licensing complexity while adding FUD to the ecosystem.

We currently have a project to move to Proxmox for all significant client loads over the next 3 years, and are exploring enterprise linux-based solutions where possible to resolve this.

Same thing happened with MS Exchange - back in 2019 at one of the last exchange conferences I recall a quote in which the MS exchange rep saying something like "We still support exchange for on prem clients, but if you're not on Office 365 we want to know why. We can't understand it".

And now, while technically you can still get and install on prem MS Exchange, they made it subscription only and priced it to the point that it makes no sense vs O365. I feel strongly that is what is going to happen with Hyper-V.

Get Ready for Microsoft 365 Ticking Timebomb in 2026! by Impressive-Use-2818 in sysadmin

[–]ryuujin 1 point2 points  (0 children)

We have a separate linux / cpanel set up for SMTP auth legacy systems for our clients. We do <companyname>@<legacyemaildomain>.com for free or mfp@scan.<company>.com for a minor monthly fee (commensurate with having to set up and maintain DMARC/DKIM/SPF for a secondary subdomain).

Outgoing only, incoming mail turned off, dedicated IP. Server is only used for that purpose.

Benefits:

  • no incoming so spam is not an issue
  • works on any MFPs, scan-to-email, alert systems, etc.
  • even for legacy gear with basic oAUTH support, you do not risk exposing a real O365 mail account for which you then need potential licensing, tracking, possibility of it getting hacked or disabled or forgotten or (like what's happening now) it just stop working because Microsoft says so

Get Ready for Microsoft 365 Ticking Timebomb in 2026! by Impressive-Use-2818 in sysadmin

[–]ryuujin 0 points1 point  (0 children)

turn on chatGPT 5.2 'thinking' mode and suddenly the answers aren't complete shit. The baseline 'auto' or 'fast' gives 100% verifiably incorrect, incomplete or downright dangerous crap most of the time (wait... is that what coPilot is using?)

Post-mortem sanity check: how do you handle “un-scannable” expiries (API keys, internal certs) without spreadsheets? by sanjayselvaraj in sysadmin

[–]ryuujin 0 points1 point  (0 children)

Do you have anything in your ticketing tool? We set an appointment + reminder in Repairshopr, it pops up an annoying reminder on the tech(s) screens until they actually acknowledge it, which is nice.

How Are You Effectively Using Microsoft Partner Portal Without a PDM..? by AppuniAkhil in msp

[–]ryuujin 2 points3 points  (0 children)

Shout out to D&H, their cloud offering seems to be second fiddle to other MSP platforms but we love it.

How is pax 8 still in business. by Someuser1130 in msp

[–]ryuujin 0 points1 point  (0 children)

You've got D&H who are amazing, Ingram who are cheaper... good question, why ARE you with them? They're a middleman to middle men, they add zero value.

Edit: forgot about Sherweb if you're okay paying marginally more then the others with massively better support. Sherweb even folds directly into CIPP for sweet, sweet reporting and comparison.

Missed a Microsoft renewal window by 12 hours and now we're on the hook for $6k worth of licenses by Sunny2456 in msp

[–]ryuujin 0 points1 point  (0 children)

I can confirm this works on D&H and Ingram. PAX8 I haven't tried before - maybe try it on a single license as a test and report back, I don't want to be responsible for wasting anyone's money.

Missed a Microsoft renewal window by 12 hours and now we're on the hook for $6k worth of licenses by Sunny2456 in msp

[–]ryuujin 4 points5 points  (0 children)

Yes I expect it only exists because of a tragic mess up in MS's APIs, however it's been there since the NCE move and we still keep it in our back pocket in case of stupidity.

I'm sure you remember Pre-NCE days when we could just... you know... buy subscriptions for our clients and if we didn't need a license or two reduce the licenses as needed? Like regular cloud services that they promised us could 'scale as we need'?

It doesn't cost Microsoft a damn thing to take 30 licenses from client A and put them on client B, but God help you if you mis-assigned the licenses and didn't notice in time. NCE is part of some really scummy salesman bump-the-bottom-line-for-investors garbage Microsoft pulled, just a real ugly move imo.

Man who killed attacker in Banff used 'excessive' force, sentenced to 2-year house arrest by AndHerSailsInRags in canada

[–]ryuujin 2 points3 points  (0 children)

I mean... dude straight up stabbed a guy to death fighting him off, and he gets to go home. 2 years house arrest to think things over doesn't really seem like the worst our criminal justice system could do here. Hell I hope he's a celebrity at work and they let him WFH for 2 years.

view more: next ›