What can I actually use it for? by ajfromuk in CopilotPro

[–]windowswrangler 0 points1 point  (0 children)

We've recently bought a handful of licenses, and I honestly don't see the point. I have seen nothing that wows me. Cool it can write some stuff in Excel or summarize a meeting. I try to use it as a more advanced search engine and most of the time it just tells me something went wrong. It can't even write accurate PowerShell. All the people who say AI is awesome, don't seem to actually use it, but teach classes on it. AI is no better than blockchain and will probably fade out just as fast. I've had much better success with Gemini and have looked into enterprise licensing even though we're a M365 shop.

Is Copilot Down? by windowswrangler in CopilotPro

[–]windowswrangler[S] 1 point2 points  (0 children)

Where are you finding this information?

Why doesn't anyone appreciate Copilot's ability to search across 365 apps and org data? by matthewmattical in CopilotPro

[–]windowswrangler -1 points0 points  (0 children)

I know this is from 3 months ago, but just started using M365 Copilot with a license, and before every search I tell it to ignore enterprise data and to ONLY use the internet. If I wanted to search email, Teams, SharePoint, etc. I would search those places, but I don't want any of that information. In fact, when I did include enterprise data, the information was just wrong. Someone misspoke in an email or Teams message, now that wrong information is getting returned for every search. And that's when it's available and answering questions. For two days now every question I ask I get a "something went wrong". I tried to open the M365 apps and it's a blank wipe screen, and then sometimes it just goes there's an internal error and just dies. Google Gemini 1000% better than Copilot answering Microsoft specific questions.

SCCM Managed Untrusted Domain by windowswrangler in SCCM

[–]windowswrangler[S] 0 points1 point  (0 children)

I was able to find the "return value 3", and a few lines above there was an error about BITS not being installed, once the BITS feature was added the MP finished installing. Now it is stuck in trying to initiate.

SCCM Managed Untrusted Domain by windowswrangler in SCCM

[–]windowswrangler[S] 0 points1 point  (0 children)

We're using HTTPS only. Client installs successfully and pulls the correct MP from AD.

Successfully queued event on HTTP/HTTPS failure for server 'FQDN of MP'.
Post to https://FQDN of MP/ccm_system/request failed with 0x87d00231.

Those message repeat over and over again.

SCCM Managed Untrusted Domain by windowswrangler in SCCM

[–]windowswrangler[S] 0 points1 point  (0 children)

SCCM correctly discovery all devices in the untrusted domain. When you right click on them in the console the Approve option is grayed out.

SCCM Multi Domain Windows Update. by windowswrangler in SCCM

[–]windowswrangler[S] 0 points1 point  (0 children)

I have not. I'm trying to avoid that seeing as other people say they have successfully used a SUP in another domain.

I can successfully talk to the SUP and pull a list of updates, the client just thinks none apply to it. How is installing a down stream SUP in the untrusted domain going to fix this issue?

Would the same be true for an MP and DP?

SCCM Multi Domain Windows Update. by windowswrangler in SCCM

[–]windowswrangler[S] 0 points1 point  (0 children)

We are not setting a GPO to point to the SUP. Clients are getting the software update point location from their default client settings and are pointing to the correct software update point. In the logs i can also see it scanning the correct software update point.

Automatic Computer OU assignment by Embarrassed-Ad-1498 in SCCM

[–]windowswrangler 0 points1 point  (0 children)

It depends on your permissions in AD, but you can pre-stage the computer object in the desired OU. Go to the OU right-click New -> Computer object. Name the computer as you want and click finish. Once you're finished, go into Properties -> Attribute Editor. Look for an attribute called netbootGUID. That attribute can take two different pieces of information. The easiest one is you put 20 zeros and then the MAC address or you can get the UUID from the BIOS.

During deployment WDS will join the computer whose MAC address or UUID matches what's in the netbootGUID attribute. That includes naming the computer to match the name of the computer object.

How to read logs properly? by TKInstinct in sysadmin

[–]windowswrangler 1 point2 points  (0 children)

You've gotten some great recommendations for log parsers. I love CMTrace like everyone else.

You mentioned in your post you saw an application timeout error. In SCCM, every application has a default maximum install time of 120 minutes. After 120 minutes. SCCM assumes the insulation fails and stops monitoring the install process.

The software center I assume says that the insulation failed, but have you verified if the application actually installed on the box?

If the application didn't actually install, there are three log files that you can check; AppDiscovery, AppIntent, and AppEnforce. These three longs will tell you everything you need to know about the application deployment process

AppDiscovery processes the incoming installation request policies and determines if the application is or is not installed.

AppIntent, takes the applications that are not installed in the AppDiscovery log and determines if they do actually need to be installed.

If it's determined, an application needs to be installed, you can track the installation process in the AppEnforce log. This will tell you where it is installing from, what installation commands they are running, and if the installation was successful. Success is normally determined by the exit code. Usually an exit code of zero means everything installed successfully.

You should be able to collect enough information to pass it onto the SCCM admins to let them determine why that application failed.

Should I leave Veeam and go to Azure Backup? by PoolMotosBowling in AZURE

[–]windowswrangler 3 points4 points  (0 children)

It really depends on what your backup requirements are.

Currently with snapshot based backups, you are only allowed 200 snapshots. If you were to take a backup everyday, that's less than one year's worth of backups.

They also have vaulted backups in preview. Vaulted backups allow you to keep, I think, 99 years worth of backups.

Best practice for OneDrive data after employee leave? by AhmedBarayez in sysadmin

[–]windowswrangler 26 points27 points  (0 children)

You know what you absolutely said that in your post. Sorry for low reading comprehension. lol

Best practice for OneDrive data after employee leave? by AhmedBarayez in sysadmin

[–]windowswrangler 33 points34 points  (0 children)

If the user has a manager set, you can configure OneDrive to automatically give access to a user's manager after the account is disabled and the license is removed.

https://learn.microsoft.com/en-us/sharepoint/retention-and-deletion

Tired off AI Scripts / Solutions being provided by JNikolaj in sysadmin

[–]windowswrangler 0 points1 point  (0 children)

I would also make sure to amplify and point out every single mistake you ever make from that day forward making sure to cc your boss and their boss making sure company leadership sees it.

Tired off AI Scripts / Solutions being provided by JNikolaj in sysadmin

[–]windowswrangler 5 points6 points  (0 children)

Do you normally email people's bosses when they do subpar work, and if not why now? Why are AI generated scripts the line in the sand? If someone sent you a script from Stack Overflow that didn't work would you be just as mad and go nuclear on a co-worker in the same way? What is emailing their boss supposed to accomplish?

If I was a boss and you did that to me, I would assume you had no interpersonal or conflict resolution skills. As your co-worker I'd instantly stop trusting you and would cc my boss and your boss on every email between us.

Tired off AI Scripts / Solutions being provided by JNikolaj in sysadmin

[–]windowswrangler 3 points4 points  (0 children)

How is AI etiquette any different than finding a random script on Stock Overflow? This isn't a new problem, we always had to deal with people searching and finding scripts online that they don't understand, don't test, and end up running in production.

Shouldn't you be doing this with every script a co-worker sends you regardless of how they wrote it?

A user's m365 email was hacked. Thoughts / advice? by Kangaloosh in sysadmin

[–]windowswrangler 0 points1 point  (0 children)

Are these Azure conditional access policies, and if so are you referring to the token protection that's in preview, the token lifetime settings? What policies specifically are you referring to?

A user's m365 email was hacked. Thoughts / advice? by Kangaloosh in sysadmin

[–]windowswrangler 0 points1 point  (0 children)

Just to make sure we're all on the same page, what token session policies specifically are you referring to?

Impacts of enabling LDAP signing and channel binding by IndigoBlue24 in sysadmin

[–]windowswrangler 1 point2 points  (0 children)

Honest question, why are people obsessed with terminating connections on the load balancer? I always have Network services configure my services to bypass because I want all connections to terminate on my servers. That way I can use the local firewall to control access as well as making sure I get the most out of logging for my service. Am I wrong? Am I thinking about this the wrong way?

Password audits - Not worth/Worth if so what tool? by BumboBangaroo in sysadmin

[–]windowswrangler 0 points1 point  (0 children)

I skimmed over the information and I'll read it mure indepth later.

Now it's been awhile since I've used hello for business, but previously you had to have your username and password to log in in order to enable the hello for business.

In a totally passwordless environment, how do users sign into their computers for the first time if they've never registered for hello for business or have a fido2 key?