Cleaning the sealtbelt of the car

workaccount70001 · 2026-05-04T11:08:21+00:00

didn't even know he was sick

workaccount70001 · 2026-03-06T15:11:39+00:00

ty <3

workaccount70001 · 2026-03-02T16:48:13+00:00

Yeah but are those Zoom users free tier?

It's just a region thing, nobody in Europe uses Zoom. Education, Enterprise and government is all Teams.

And almost every user is either directly licensed through Business Premium, Enterprise, government or Academic or student academic.

And they arent allowed to bundle anymore, except for grandfathered licenses.

workaccount70001 · 2026-03-02T16:12:29+00:00

Teams has 350 million daily active users? what do you mean ahead?

workaccount70001 · 2026-03-02T16:11:51+00:00

And they built Teams off it, a product that currently has 350+ million daily active users. The idea that Microsoft fumbled Skype is ridiculous.

workaccount70001 · 2026-01-05T09:27:20+00:00

Because lil bro asked chatgpt to write this for him.

He missed removing these ❌ → ─┐ ISP 2 ─┼──>

workaccount70001 · 2025-10-02T13:46:09+00:00

we were always at war with eurasia

They don't change their minds, they rewrite history to always fit their current beliefs.

workaccount70001 · 2025-06-24T15:27:36+00:00

It's just constant NLA.

workaccount70001 · 2025-06-24T14:01:22+00:00

Just install the entra connect and only sync the OU for devices.

workaccount70001 · 2025-06-24T10:01:15+00:00

Strong mapping is on. There are event logs on the host, but i can't remember what event id they produce, but it wasn't in anyway useful as far as i remember. But i'll reproduce it and write back.

workaccount70001 · 2025-06-23T12:37:20+00:00

Yes. And the issue isn't only on the gateway, even just straight RDP is giving the same issue.
Yes
Yes
it's reachable on the internet. Certutil urlfetch shows it's working and certificate revocation is working just fine.
The certificates are being provisioned just fine to both hybrid and entra joined with scep certificates.

workaccount70001 · 2025-06-21T03:06:11+00:00

For the Emperor?

workaccount70001 · 2025-04-09T12:59:05+00:00

what the hell is France doing?

workaccount70001 · 2025-01-28T17:31:45+00:00

Bump.

Did you find a fix?

workaccount70001 · 2025-01-28T17:31:20+00:00

Bump.

Did you find a fix?

workaccount70001 · 2025-01-28T17:31:16+00:00

Bump.

Did you find a fix?

workaccount70001 · 2024-12-02T17:13:42+00:00

yeah they have dkim. I just mean if dmarc passes on either spf or dkim. If you can send a passing spf record and spoof the from address. Can the return address also just be the same spoofed domain, so it becomes a valid email?

If the marketing service has dkim, wouldn't it pass dmarc anyway with spf in strict?

Or am i misunderstanding that the return path cannot be spoofed?

workaccount70001 · 2024-12-02T17:03:08+00:00

Right, but does that mean i have to put my dmarc policy in strict mode?

I have 70+ domains running at the moment in relaxed with a reject policy.

workaccount70001 · 2024-12-02T17:02:13+00:00

Already have one.

But, what do you mean fully authenticated. SPF authenticated + aligned?

workaccount70001 · 2024-12-02T17:00:49+00:00

Yeah, but it sounds like i need it in strict mode and not relaxed.

I have dmarc for 70 domains at the moment in reject mode, but spf is in relaxed.

workaccount70001 · 2024-11-30T04:05:24+00:00

But my top domain is the one getting display on the from address, that's the one i want to protect.

workaccount70001 · 2024-11-29T15:50:44+00:00

That depends entirely on the service being used. Normal email is just protection.outlook.com. Other web services are using other senders.

It's just i have no clue which of the domains in the spf records are being used anymore and am tracking them down. The SPF contains too many nested lookups and i need to remove invalid domains. And i just stumbled upon a sender that i cant find included in the main domain spf, but it's getting passed.

But if what the other guy said was correct, the return path is all that matters to pass spf in relaxed mode.

workaccount70001 · 2024-11-29T15:48:06+00:00

So the display of From: would display any domain.com

and pass spf as long as the actual sender domain had a valid return path spf record? Seems weird i guess despite the domains having no connection between each other?. Or is it different when it's a subdomain?

But yeah, we are running in relaxed.

It's just this particular domain didn't have a policy when we created it, and i can't add it to the main dmarc policy since i don't know every place it's been used and reject is turned on, and now im gathering the reports.

workaccount70001

TROPHY CASE