CommPulse

What on-prem hypervisors are people using within Secure Areas being accredited? Need to move away from VMware for all the reasons. Currently looking at Hyper-V and Proxmox? Would need to STIG the box so Hyper-V is looking to be the frontrunner rather than Proxmox which does not have a checklist and the AO is not familiar with. submitted by /u/Santitty69 [link] [comments]

The Hardware: Dock: Lenovo ThinkPad Universal USB-C Dock (40AY) Laptop: HP Pavilion 14-dv2000 The Problem: If I plug the dock into the laptop while on battery power, it connects for a few seconds, then completely drops all data and power. Worse, it completely crashes the dock. The dock's white light stays on solidly (indicating computer connection is still established), even if I unplug the USB-C cable from the laptop. I have to switch the wall socket off and on just to reset it. The Workaround: If I plug the laptop’s original HP AC charger in first , and then plug in the dock, it works flawlessly. Once it's connected, I can even unplug the HP charger and the dock takes over, charging the laptop and running peripherals indefinitely without any issue. What I've Already Tried (None of it worked): Updated laptop BIOS and Lenovo dock firmware to latest versions. Disabled USB Selective Suspend and PCIe power saving. Unchecked "allow computer to turn off this device to save power" for literally all usb controllers in device manager. Uninstalled the Windows UCM-UCSI ACPI device, performed a hard 60-second power drain on the laptop, and then reinstalled the Windows UCM-UCSI ACPI device. Didn't work "Bare dock" test where I plugged the dock in with zero monitors or peripherals attached—it still crashed. Tried disabling USB Always On (HP Sleep and Charge). Nope How do I fix this? I'd rather not have to always connect the laptop's AC power first every single time, before connecting it to the dock... submitted by /u/Unusual_Trade5917 [link] [comments]

I'm studying for a certification. When I signed up for Azure, I got $200 in credit. The 30 days is almost up and I still have most of the balance. I "upgraded" to pay as you go. Do I still get to continue using the credits? How do I know which services are free? How does all this work? submitted by /u/Excellent_Shine4875 [link] [comments]

hello azure experts, Is a Power BI Premium Per User (PPU) or Fabric capacity (F SKU) required to deploy the VNet data gateway resource into an Azure subnet? (License requirement to deploy VNet data gateway) another q, Deployment method options Is app.fabric.microsoft.com (or app.powerbi.com then Manage gateways) the only supported way to deploy a VNet data gateway? We cannot find this resource type in portal.azure.com, Azure CLI (az network), or any documented Terraform provider. Is there an API or infrastructure-as-code method to deploy the VNet data gateway without using the Fabric/Power BI portal UI? submitted by /u/SmartWeb2711 [link] [comments]

I'm trying out Azure Foundry and seem to be running into issues. Firstly, my quota is severely limited and most models need to be requested. I was able to get Opus 5 deployed and was using it for a few hours but now all I'm seeing is: "Error: Error Code no_capacity: The system is currently experiencing high demand and cannot process your request" I've set the TPM to the max allowed but still getting the same error. Anyone else experiencing this? https://preview.redd.it/qi66hxyt38hh1.png?width=1630&format=png&auto=webp&s=95d86128065183920b6671f6a205e487d28c2ba4 submitted by /u/blavelmumplings [link] [comments]

submitted by /u/ryanmerket [link] [comments]

Hey all, I read and heard that devops is not a starter job that I can learn number of skills and start job searching. There is no junior or entry level devops jobs. I can understand it. If it is true, what can I learn and search for jobs? Shall I go for AWS? Linux? The only one skill will get me a job? I am sorry I am very new to IT. I want to change my career. submitted by /u/Secure-Rice-4913 [link] [comments]

When I type "google.com", first my browser checks its DNS cache, then the OS cache, and if it still doesn't find the IP, it queries the configured DNS server. Once it gets the IP address, it reaches the Load Balancer, performs the TCP three-way handshake, and then establishes a TLS connection. Once the secure connection is established, the browser sends an encrypted HTTP request to the Load Balancer. The Load Balancer forwards the request to a suitable backend server based on its routing rules. Now let's talk about what happens within the server. The request is processed, the service does whatever work is required, maybe querying a database, calling another service, or executing some business logic, and then sends the response back. But how did the browser send the request in the first place? Your home router uses DHCP to assign your device a private IP address from its pool. Your ISP provides your router with a public IP address. When your browser opens a connection, the operating system assigns it a random ephemeral source port. The router then performs NAT, more specifically PAT, by mapping your device's private IP and source port to its public IP and another source port. It keeps this mapping in its NAT table so that when the response comes back from the server, it knows exactly which device and which browser connection the data belongs to. Once the response reaches your browser, the browser decrypts the HTTPS data using the established TLS session and renders the webpage. HTTPS works over TLS, so both the request and the response are encrypted while in transit. When the connection is no longer needed, the TCP connection is closed, which also ends the TLS session, although modern browsers often keep the connection alive for a while so they can reuse it for subsequent requests. submitted by /u/Bitter_Teaching_2905 [link] [comments]

I'll admit not the best m365 admin since I do not support a big company and just do not do a lot of stuff with it so I thought I would ask. I have been updating documentation in regards to a small non-profit that I support and ensuring that if something were to happen to me then someone would be able to pick up and continue on. One area I missed was making sure that the M365 accounts had a back up authorization capability vs the MS authenticator on my phone. I had a yubikey so I configured things and added the yubikey to the admin account and that is working now BUT it does not allow me to use any other MFA except the passkeys. I understand that passkey/security keys are phishing resistant and better than the codes but I would still like the option when logging on to have the passkey AND the authenticator option available, again right now only passkey is the option. I think it is something I need to change with the conditional access policy, I have passkeys defined but I also have standard MFA defined (2 separate) policies but when I log on it does not present any additional options vs passkey. Anyone know what I am missing? Thanks submitted by /u/bishoptf [link] [comments]

I want users to be able to use Bluetooth only for passkeys for Microsoft 360 login. Windows Hello will not work for us, so BT is the only option. However, I need to lock it down so users cannot connect bluetooth devices to their workstations. We use Sophos EDR and while it is support to block BT devices, I find it still allows them to connect and it is not reliable at blocking. Thanks. submitted by /u/No_Loss_3996 [link] [comments]

I have come to believe that authselect profiles are a literally unworkable solution. That is, I believe it is literally impossible to create authselect profiles that will interoperate with all imaginable PAM configurations in all cases. It is likely, in computer theory, an undecidable problem. This stems from the fact that PAM allows for conditionals and gotos, while authselect profiles generally hope that you can just toggle lines of PAM code in and out to enable or disable different features. So, for example, if I want to implement MFA, and I want to allow for EITHER password/OTP OR ssh publickey/OTP, I can do this in PAM. But in doing this, I have created code complex enough that it is literally impossible for a set of authselect profiles to have this be a toggle-able feature along side other toggle-able features. The question isn't, do you agree with me. The question is, is there a forum where I can have a productive conversation about this that could actually lead to a better overall design in the long run? submitted by /u/thomasafine [link] [comments]

Looking for a 365 backup for a small company and afi has come up in a few places, but I haven't heard much about them. Are they solid? Any gotchas in the pricing? I saw one review that said the bill kept going up and they had a hard time canceling, but I'm not sure how much to credit that. Thanks. submitted by /u/chronopunk [link] [comments]

Howdy all, I have a new VOIP setup through Ring Central for my home office and have been struggling with poor call quality. I'm able to understand the person on the other line fine and vice versa, but the audio sounds tinny, slightly muffled, and just thin/cheap for lack of a better word. Noticeably worse than when I make calls on my iphone. I am a solo business owner and will be using this line to call out to new and existing clients so it's very important to me that call quality is as good as possible. I've been using my cell for the past 5 years. On to the technical side of things, I am using a Cisco 8851 desk phone with a Jabra Engage 65 SE headset. The desk phone is hardwired with an etherent cord into my router, and I have gig internet. My internet download speed shows as 915 mbps, upload is 40 mbps, latency is 8 ms and jitter is 1 ms. I disabled SIP ALG on my router settings, and the cisco phone is set to use OPUS codec. On the cisco admin portal I have HD voice enabled and bandwidth set to high. I have the same low call quality issues when calling with the Ring central app off my cell phone, which leads me to believe the issue is with the ring central servers. Whenever I call their support though they just tell me they show the quality is fine and close the ticket. I've asked them to confirm the codec they have the account set to, but they don't seem able to do so. Any ideas? I'm tempted to switch VOIP providers at this point, but would be a lot of work, and maybe I'm just expecting too much out of this system. submitted by /u/Joel_Hirschorrn [link] [comments]

After filling out the startup form from Barclays Eagle Labs, I received a referral code for the Microsoft for Startups program. As a result, I was credited with $100,000. I’ve been emailing support for three days now, asking them to increase my limits for creating machines with GPUs. Support keeps lying to me and isn’t doing anything. They’re denying my requests to create machines with GPUs via email. Where should I turn? Does anyone have any contacts? submitted by /u/AppropriateBoard8397 [link] [comments]

I recently inherited a network component that collects syslogs from various Network devices at my firm. I have checked the Azure costs, Azure LB costs are 800€ for processing 370TiB in July month (private, internal only LB). The 10 collector VM scale set instances behind this LB cost 600€. The VMs, LB are in the same subnet, region.. We do have an Enterprise agreement, it's not that our firm is going bankrupt. I just find it funny that bandwidth costs within the same region (without peering) surpassed the actual infrastructure costs. Have you guys observed something similar? Edit :: Unfortunately, most of the syslogs are UDP bound & sent as soon as they are written, there is little to no compression. This blows up the bandwidth costs. submitted by /u/anxiousvater [link] [comments]

I have seen people suggesting the fix is to disable IPV6 on the NICs. Doesn’t that put Windows in an unsupported state and potentially break functionality even if you don’t actively use IPV6 networking in your environment? submitted by /u/Fabulous_Cow_4714 [link] [comments]

I am on the hunt for the best UI for my BIND DNS server to use at an enterprise level. I have found some, but they are either too old and not really functioning, or they are GitHub repositories maintained by a single user. How is this? I have also found one that I like, but I can't wholeheartedly say that the code would be suitable for production. Do you have any suggestions? I have also used Webmin, but that's not what I'm looking for. I have also managed bind sevrers manually before without gui. But I am not sure how you guys do it today in 2026? submitted by /u/AgreeableIron811 [link] [comments]

New video diving into STANDARD service endpoints! https://youtu.be/HK6irXQNv2o 00:00 - Introduction 00:19 - Compute and PaaS 02:18 - VNet to PaaS communication 03:04 - Service endpoints 06:16 - Scale and complexity issues 06:57 - Standard service endpoints 07:12 - Network Identifier 08:26 - Network identifier association to subnet 09:07 - Enable NID with a service endpoint 09:39 - Details around Network ID use 10:34 - Demo of assigning NID 14:09 - Using NID with many subnets and service endpoints 14:54 - Associating NID RBAC 16:17 - Using NID to access PaaS resources 16:28 - Using a Network Security Perimeter 17:31 - Updating NSP to accept inbound NID 18:47 - Demo updating NSP 19:57 - Using NID with many NSPs 21:20 - Supported services 22:08 - Don't reuse public IPs with regular services 23:20 - Service endpoint policy support 23:36 - Pricing 25:05 - Scalability solution 25:50 - Close submitted by /u/JohnSavill [link] [comments]

submitted by /u/rdaniels16 [link] [comments]

Where does Amazon Bedrock end, where does Strands start and what is AgentCore actually for? I built the smallest thing that uses all three and wrote it up. Posting in case it saves someone else the same head-scratching. Disclosure: I work for AWS. This is my own blog post and video. It's all one question "what should I make for dinner?", answered three ways: Raw Bedrock via the Converse API. Call bedrock, it runs inference and answers. Ultimately asks you what's in your kitchen, because it can't see anything you don't tell it. A local Strands agent with one tool, get_pantry, and the agentic loop. It's using the same model but now it checks the pantry and builds a real recipe. I didn't write an orchestrator or a parser, Strands is the harness that runs the tool-calling loop. This same agent deployed to AgentCore Runtime. Managed serverless endpoint. Four CLI commands the whole way (create, dev, deploy, invoke). A few things that tripped me up: agentcore create doesn't give you a blank project. It scaffolds a working sample agent (an add_numbers tool plus an example MCP client). Turning it into my agent came down to two file edits, the model ID and the tool plus prompt. The runtime deploys with networkMode: PUBLIC, which reads as scary and isn't. It means reachable over the internet, not open to the world. Every call still needs IAM SigV4 or an OAuth bearer token. "Anyone can call it" really means "anyone you grant bedrock-agentcore:InvokeAgentRuntime to." The CLI-generated IAM execution role is fine for a demo, but the AWS docs say those are meant for dev and test. Scope it to the runtime ARN before anything real goes behind it. Teardown is backwards from what you'd guess. You run agentcore remove all -y then agentcore deploy -y. You deploy the emptied config to tear the resources down. Cost is close to nothing on Free Tier. Chapters 1 and 2 are local Node plus a Bedrock call (this costs a little bit per inference call). Only the deploy makes billable resources and you remove them at the end. agentcore dev serves on port 8080 by default (override with -p <port>). Gotcha: if 8080 is taken, the server quietly moves to 8081 but the invoke still calls 8080 and fails — so pass the same -p to both the dev server and the invoke, e.g. -p 8099 on each. Stack: Node and TypeScript, Claude on Bedrock. Link to full written walkthrough Link to same build as a video on the AWS Developers channel if you prefer video format Happy to answer questions. I usually build Strands agents in Python, but wanted to try this one in TypeScript. If you see something you'd do differently, or you've got tips for anyone else on this stuff, please share out. submitted by /u/j-vogel [link] [comments]