CommPulse

Hi everyone, I’m setting up a Windows Server 2022 VM in VMware for self-study and learning (Active Directory, DNS, group policies, etc.). My evaluation period is ending, and the VM has started shutting down automatically every hour. Since this is strictly for testing and education: Is using slmgr /rearm the standard approach to extend the trial period for lab environments? Does massgrave works in this as well?? PS: Only for study purpose use submitted by /u/Mysterious-Loquat619 [link] [comments]

We spent almost two years on a SASE migration at a manufacturing company with around 14,000 employees, more than 60 sites globally, and a WAN that had grown over a decade. The technology decisions were actually the easy part. The project nearly died three separate times because of politics. The network team and the security team both wanted to own the platform, neither trusted the other to run it, and nobody made an executive decision on governance until month nine. That alone cost us four months. What finally broke the deadlock was starting with the eight greenfield sites that had no legacy infrastructure attached to them. It gave everyone room to learn the platform without fighting existing architecture, and ownership questions started getting resolved through experience instead of meetings. The next bottleneck was identity. Years of stale accounts and inconsistent group structures meant the policies were only as good as the directory behind them. After that came monitoring. We kept the legacy SIEM feeds and new SASE telemetry running together for three months before retiring the old inspection points. By the end of the migration, the fully migrated sites were noticeably easier to manage than the hybrid ones, which helped convince the rest of the organisation to move forward. Has anyone else found that starting with greenfield sites made the technical rollout and the internal politics much easier? submitted by /u/RoughNo3048 [link] [comments]

I'm trying to get the OVA in vCenter up and running. I get to the point that I verify the key and then do the login/appliance registration status. All appliance services are up to date. I'm using the same account that I generated the key with and I am getting an error that I do not have permissions and it states the App Name is Microsoft Azure PowerShell. Has anyone seen this, how do I grant myself and what permissions need to be granted in order to get the login to be successful and move on to the next step? With vCenter being as ubiquitous as it is, this shouldn't be a huge issue. Any advice? https://preview.redd.it/rywyfit1ykgh1.png?width=1298&format=png&auto=webp&s=332ff60f9f190b11389bf6e52d23ef24e1116490 submitted by /u/tk42967 [link] [comments]

What solutions are you guys using that combines these 2 functionalities? submitted by /u/CasQuestioner2026 [link] [comments]

There's gotta be a reason, right? submitted by /u/-lousyd [link] [comments]

We currently have two licensed managed file transfer servers used for FTP/SFTP transfers with external parties. During a license review, I discovered that both servers are still running software from around 2015 . The licenses themselves are perpetual, so the servers will continue to operate, but their upgrade protection has expired. Renewing both would cost roughly €2,000 including VAT and give us access to current versions and updates. Whether technical support is included is still being confirmed. Management’s response is essentially: “If it still works, why renew it?” Meanwhile, spending around €30,000 on renovating the office was apparently worth it. They also rented an extremely expensive Microsoft AI solution because they wanted to join the AI hype. Almost nothing was done with it, and eventually it was simply switched off. But spending €2,000 to keep potentially internet-facing file-transfer infrastructure current is suddenly considered an unnecessary expense. We are a logistics company, and these servers may be involved in operational file exchanges with customers, agents and other systems. I am currently gathering logs and documenting the exact dependencies, but management already seems willing to accept the risk to save €2k. I understand that IT costs need justification and that blindly renewing unused software is bad practice. But this is not some optional desktop application. It is externally accessible server software running a version that is approximately eleven years old. If it contains a vulnerability, becomes incompatible or suddenly fails, the resulting downtime, investigation and emergency migration will almost certainly cost more than the renewal. Apparently visible office projects and AI buzzwords are considered worthwhile investments, while maintaining the boring infrastructure the company actually depends on is treated as wasted money. I genuinely do not find this acceptable. Am I overreacting, or is management taking an absurd risk over a relatively small amount of money? submitted by /u/timtim2000 [link] [comments]

submitted by /u/Electronic-Bite-8884 [link] [comments]

Anyone have any idea when (or even if) deepseek v4 pro will come to bedrock? The model lag in bedrock (regardless of who is causing the lag) is really bothersome. We prefer to keep all our API billing flowing through AWS and wrapped into our AWS bill but the really slow cadence of model release, aside from anthropic's, is brutal. Best to just ditch bedrock for 3rd party models and move to a provider that has faster support? submitted by /u/Akustic646 [link] [comments]

Great talk about how Antithesis uses Nix in production by John Murray. Thought some of you would enjoy. https://youtu.be/WaPOtisNu1k I've been interested in Nix for a while but have not yet taken the plunge. Do any of you use it work? What has your experience been with it? submitted by /u/isaacvando [link] [comments]

Who doesn't love Friday releases? Atlassian status page is green as usual. submitted by /u/Negative-Thinking [link] [comments]

Happy SysAdmin Day to all the gurus who are apparently expected to fix a fridge with one look and make the printer work through sheer force of will (because you're technical, obviously). We do hope nobody made you look at their fridge today. You know the type of request: the relative who assumes you can recover photos from a phone that went through the wash; the neighbor whose wi-fi "was working yesterday" and somehow that's your problem now; the colleague who brings you their personal laptop because IT and "knows about computers" are the same thing in their head. So on the one day of the year that's actually about you, what's the most ridiculous, weirdly sweet, or absolutely baffling thing you've been asked to fix just because you're The Tech Person? And has your mere presence ever fixed something you never actually touched? We'll be in the comments. Happy Sysadmin Day! submitted by /u/Sysracks123 [link] [comments]

Business currently runs a pair of NAS drives that are aged and in need of replacement. Both are 8TB available storage. Currently here is what they do. -one is simply an image of the other drive as backup -we back up certain files on local pcs weekly to the NAS. This is strictly file recovery for items that difficult to replace. No full image backups. Simply not necessary for us -long term storage of business wide files and information that need to be accessed by multiple users at any given time. -the origianal and really primary function is the manufactures we work with upload technical documentation and updates so they can be more quickly accessed than downloading them on an as needed basis from their servers…the slow down being the bandwidth they allow to be used to access these files they are not obscenely large and are accessed a handful of times a day. These are accessed My MSP is suggesting the same setup that we have now…effectively just replacing the appliances. Outside of the setup they really aren’t paid to manage the devices, we do that on house for the most part. All that being said I want to look at cloud options- and I’ve asked the MSP for options but I want other feedback. given what I do backup/filestorage. Any suggestions of who I would use and what a setup might look like. submitted by /u/the_legend_of_me [link] [comments]

I had requested that AWS give me access to Opus 4.8, and since 5 came out two weeks ago, I have not gotten a single reply from them. I signed up for the $30/month support plan, and a support person talked to me and said he'd send it on. That was a week ago. It is a new account if that matters. Is this normal behavior? Is there anything I can do to elevate the request? Thanks for your help. submitted by /u/cincyricky [link] [comments]

Hi everyone, I'm looking for advice from people who have been in this field longer than I have. I'm an Arts graduate who got into DevOps about 3.3 years ago. I've switched 3 companies and recently joined my 4th company, a large GCC. Along the way I've worked with AWS, Kubernetes, Terraform, CI/CD, automation, and earned AWS & CKA certifications. The problem is that I'm no longer sure what I should be aiming for. My current role has an exhausting work culture, the learning isn't what I expected, and it has made me rethink my long-term direction. I don't want to keep switching jobs without a clear goal. If you were in my position today, what would you optimize for over the next 3–5 years? Become a top-tier Platform Engineer/SRE? Move towards AI/LLM engineering? Solutions Architect Security? Target remote international jobs? Prepare to move abroad? I'd really appreciate hearing from engineers with 8–15+ years of experience. If you were starting over with my experience today, what roadmap would you follow and why? submitted by /u/Which_Operation_6152 [link] [comments]

with psexec you can connect to windows device internal admin account if active, but when that isn't active. What other ways might be possible to get to the device and push a script? submitted by /u/ShockZestyclose [link] [comments]

I can work with both macOS and Windows, but this time I've decided on a Windows laptop. I'm looking for a laptop with a design and build quality similar to a MacBook. It doesn't have to be a unibody, but an aluminum case would be nice. And it should have a sleek design like a MacBook. Can you recommend anything? submitted by /u/Sad_Mastodon_1815 [link] [comments]

Hello, I am currently working on transitioning our computers from an on-Prem AD environment into a Intune MDM joined, cloud-only environment, along with moving our users from a password+MFA login, to a completely passwordless login. For this we have decided that we would like to use Yubico security keys for authenticating into users' microsoft accounts, and WhfB for easily logging into their computers. Unfortunately, I have found that the use of WHfB on Intune MDM joined devices automatically adds a login.microsoft.com passkey into windows hello, which is always offered first during passwordless sign-in. I cannot find a way to block this behaviour or modify which passkey storage windows offers first. While WHfB passkeys are still very safe compared to passwords, we are (I think quite rightly) concerned that if the end users are not prompted to use their Yubikeys during perioodic reauthentication, they will forget how to use them, and if they set a unique pin on them that they don't reguarly use, then when the need to use their yubikey does actually arise, for instance when they get their next computer or phone, they won't remember it. This also makes periodic reauthentication feel somewhat pointless as the users will just press on their fingerprint scanner and be done with it. I have found exactly one way to change this behaviour, and that is by defining an Entra Authentication strength containing only yubikey AAGUIDs and forcing my intune testing user to adhere to that authentication strength with a conditional access policy, while this does block the ability to use the WHfB microsoft passkey to sign in, the end user experience is very bad, if a users sees this, they won't think that they can't use windows hello to login, they'll think that windows hello is not working correctly. In the gif below, you can see that windows hello offers itself first but silently fails and prompts the user to enter their pin, without any sort of error message. Processing img cabnfg8pqjgh1... (I realise that I specifically selected a windows hello key in the gif, but the behavious is identical when I initially load the login page or if I select log in methods>passkey, windows hello will always offer itself first, even if it cannot function correctly in this case). For personal use, https://github.com/Aldaviva/AuthenticatorChooser solves this issue, and while i am grateful for the fix, random scripts from github aren't really appropriate when configuring important security settings, Is there anything we can here or do we have to wait for MS? submitted by /u/soulfulsysadmin [link] [comments]

It's no secret that AWS lags behind the market when it comes to Identity, and it's products being integrated with one another. However in regulated industries it's almost a non-starter because some of us require the use of federated credentials, which is scoped machine authentication. The only thing in AWS that presents an oidc identity is a specific eks deployment, does anyone know what's AWS is roadmap for machine authentication? Thanks. submitted by /u/jorel43 [link] [comments]

Hi all! Since Windows Server licensing is extremly expensive and since I have until now not seen a properly licensed SMB out in the wild: Do you actually license accordingly? Meaning: Do you actually buy all the neccessary CALs, stick to VM maximums etc.? Or for short: Would you survive an audit? It's pretty tempting for small and medium businesses especially to weigh up the risk of an audit with the laughably expensive price for Windows Server licensing imo. What's your opinion? submitted by /u/Enough_Cauliflower69 [link] [comments]

Are there any companies offering freebies for SysAdmin Day? submitted by /u/jamesgamble [link] [comments]