CommPulse

A few months ago, there was a card in the Microsoft admin panel that offered a way to block all generative AI sites except Copilot. Since this is something we wanted to do, I went ahead and followed the wizard, built the policy and implemented it after some testing. In general, it works great - when someone navigates to something like claude.ai , they get a page that says "this website is blocked by your organization" with a further explanation that "your organization has licensed Microsoft 365 Copilot as an approved AI tool that offers enterprise-grade data protection" - and along with this text, there's a go back button and a "Try M365 Copilot" button. This is PERFECT for our policy and a nice UX as well. It has the added benefit of forcing Edge and preventing Chrome and any other third party browser from running. Again, a perfect side effect that we wanted to do anyway. At the end of the day, it's effectively a WCF policy in M365 Admin Panel>Settings>Microsoft Edge but it also shows up under Intune>Devices>Windows>Configuration. The policy forces the use of Edge and then blocks the gen_ai category. Exceptions are possible, as well as explicit blocks, but the blocks do not show the same, nice UX message that directs people to Copilot. Today I noticed a user using Gemini. I can only assume that gemini is somehow not classified as gen_ai but there seems to be no easy way to check what site Microsoft classifies it as. I can solve the problem by just blocking the URL, but I just gotta know why Gemini, of all things, is not being blocked when I am blocking anything in the gen_ai category...what say you, gurus? submitted by /u/gopherwasbetter [link] [comments]

I received an email from Apple today stating that MacBook Air is the world’s number one laptop for business. They did not provide any data supporting that claim, so I am wondering if that is the case. I am in the Education realm and we have always used Windows devices and part of the reason is because they are most widely used in the business world. Are you seeing that MacBook are more prominent than Windows devices? submitted by /u/Temporary_Werewolf17 [link] [comments]

Hello everyone. We are a small-medium sized corporation and currently back up all of our essential servers to the cloud and can be spun up in the cloud and used over VPN if something breaks. We recently acquired a new location across town and are going to begin putting in some infrastructure down there kind of like a pseudo semi-warm/hot site. It isn't far enough away to be a true disaster recover site and people have been working ok on just a switch/firewall to talk to our main office. I am thinking about maybe spinning up another dc down there to handle DHCP and DNS, and maybe backup some of our main servers that we could spin up quicker than if spun up in the cloud. Anyone have any thoughts on this? Tips? Personal experience? Thanks! submitted by /u/Iron_Yesu [link] [comments]

I have a WordPress site where I need to handle 1000 requests per min within 100 ms TTFB, Server configuration OS: Debian 13 Hardware: 8 core CPU, 33 GB RAM - dedicated server with 1Gbps Port Speed, location would be same city as visitor. I have couple of options NGINX with HTTP/3, PHP-FPM Apache2 with HTTP/2, PHP-FPM OpenLiteSpeed with HTTP/3, LSPHP84 Caddy with HTTP/3, PHP-FPM Preferred caching strategy: Disk / rewrite I don’t like FastCGI. DB: MySQL 8 Which one do you think will be most resource efficient ? Also you can advise me for OS Thank you submitted by /u/Sad_Pie227 [link] [comments]

submitted by /u/TeamVenti [link] [comments]

Good morning. I am thinking of a solution that would allow my users who are in the domain admin group (Windows) to connect to a wifi network and be automatically placed in the right vlan. For now apart from a ssid dedicated to admins but which requires a shared key to connect to it that administrators will be aware of I do not know how to do this. I am a student it is part of an exercise for my studies in computer science submitted by /u/Cultural_Log6672 [link] [comments]

I’m currently reviewing some compliance against the UK Defence Standard for suppliers, and I’ve got a bit hung up on one in particular; ‘The Supplier shall employ appropriate nationally or departmentally approved cryptography when used to protect all Data (e.g. FIPS 140-2 or comparable standards)’ The only thing I’ve been able to reference so far is NCSC and it doesn’t seem to be too specific, I’m in particular interested around VPN’s, since we currently use Wireguard/Tailscale, but available info seems to advice against due to its encryption method, and advices to use something like OpenVPN instead since it uses AES. Am I being really dense about this? Or reading it the wrong way completely? I think I’ve got myself into a bit of a research spiral and have convinced myself of things that aren’t the case. I’ve also looked into Cloudflare’s meshing ZTNA but I’m concerned how info is processed at their edge before going to other nodes. submitted by /u/sctmedk [link] [comments]

Had a client ask me to review their AD environment last month. Before going in manually I built a quick workflow using PowerShell exports + Claude to get an initial picture of the estate. Sharing because the results were useful and the approach is reproducible. The workflow (read-only throughout, no changes made) Step 1 — Export all users and their group memberships: Get-ADUser -Filter * -Properties LastLogonDate, PasswordLastSet, MemberOf, Enabled | Select-Object Name, SamAccountName, Enabled, LastLogonDate, PasswordLastSet, @{Name='Groups';Expression={($_.MemberOf | Get-ADGroup | Select -Expand Name) -join '; '}} | Export-Csv C:\temp\ad-users.csv -NoTypeInformation Step 2 — Export privileged group members specifically: $privGroups = @("Domain Admins","Schema Admins","Enterprise Admins","Backup Operators","Account Operators") foreach ($g in $privGroups) { Get-ADGroupMember -Identity $g -Recursive | Get-ADUser -Properties LastLogonDate, Enabled, PasswordLastSet | Select Name, SamAccountName, Enabled, LastLogonDate, PasswordLastSet, @{Name="PrivGroup";Expression={$g}} | Export-Csv C:\temp\priv-accounts.csv -Append -NoTypeInformation } Step 3 — Feed both CSVs to Claude with this prompt (paste CSV content directly): "You are an Active Directory security auditor. Review these accounts and flag: (1) enabled accounts with no logon for 90+ days; (2) all privileged group members with last logon dates; (3) accounts that have never logged in; (4) service-looking accounts with personal display names; (5) accounts whose password was last set 365+ days ago without a documented non-expiring exception. Risk-rank each finding Critical/High/Medium and give the exact PowerShell to remediate." What it found (847 accounts in scope) 23 accounts in Domain Admins. Client thought there were 6. 14 enabled accounts with last logon > 180 days ago. 3 "service" accounts with first-name/last-name display names holding Domain Admin — leftover from a consulting engagement that ended 2 years prior. Nobody had off-boarded the accounts. 11 accounts that had never authenticated at all. 1 account with Domain Admin + non-expiring password + no known owner. This one went directly to an incident. Caveats before anyone runs this LastLogonDate replicates lazily across DCs (up to 14-day lag depending on replication interval). Use LastLogonTimestamp for a more conservative but consistent value, or query all DCs and take the max. "Never logged in" might mean a legitimate future-use service account. Don't disable without checking with the owning team. The AI ranking is a starting point, not a final audit. Validate every Critical finding manually before acting. Strip personally identifying data if you're pasting into any external LLM — at minimum replace real names with tokens before sharing with Claude/GPT. The time saving is in the initial triage pass. Going from 847 rows to "here are the 8 things to look at first" is where the AI actually helps. The remediation decisions still need a human who knows the environment. Happy to share the full PowerShell if anyone wants it cleaned up as a proper script. submitted by /u/RulezZzOr [link] [comments]

Chrome-like plating, with thick thumb knurled area. They're so smooth you can tighten down equipment just with your fingers. They're really nice, but I can't seem to find anything similar online. submitted by /u/BigCatsAreYes [link] [comments]

Hello, We have an old app that needs to be run by an end user on a server. I googled it and got two results - neither of which ran the app as an admin - they ran it as a regular user. In powershell type set __COMPAT_LAYER=RUNASINVOKER && "C:\Path\To\YourApp.exe" (changed the path and executable) Or Create a batch file cmd /min /c "set __COMPAT_LAYER=RUNASINVOKER && start "" "%1"" run the exe from that bat. submitted by /u/Deep-Egg-6167 [link] [comments]

submitted by /u/SnehaKD8 [link] [comments]

Most help desk tickets shouldn't exist. Finding the right desktop. Choosing the best region. Recovering a disconnected or frozen session. These are tasks users can solve themselves in seconds if they're given the right tools. That's why we built the AtlasAVD Self Service Portal. Instead of opening a support ticket, users can: • View all of their assigned Azure Virtual Desktops in one place • Connect to their desktop with a single click • Launch using the HTML5 client or the Windows App • Recover stuck or disconnected sessions with a single click • Choose the best region based on live latency, CPU utilization, and memory utilization Imagine a user assigned to both US Central and US East. If network latency is nearly identical, Atlas AVD helps them choose the healthier region by showing real time CPU and memory utilization before they connect. Better performance without calling the help desk. For IT teams, that means fewer repetitive tickets, faster issue resolution, and users who can solve common problems on their own. For leadership, it means lower support costs, happier employees, and a modern, branded experience that reflects the quality of your IT organization. Empower your users. Reduce your ticket volume. Let your helpdesk focus on the issues that actually require IT. Check out what else AtlasAVD has to offer. Now Accepting Private Preview Applications. 🎬 See it in action: https://demo.atlasavd.com/portal 🔎 Feature details: https://www.atlasavd.com/features/self-service-portal 🌐 About AtlasAVD: https://www.atlasavd.com https://preview.redd.it/7ismu3m19fgh1.png?width=2521&format=png&auto=webp&s=4638e65c761c8eaa68659bf1e84109eda22b1e34 submitted by /u/Atlasavd [link] [comments]

I’ve recently been tasked with standardizing how we replace laptops at my company. Currently, devices are imaged and then we run packages to install standard software. That part doesn’t need to change. What does need to change is the process for bringing users in to replace their old laptops — there’s currently no checklist or standardized way for techs to confirm that users are signed into their key systems, have transferred their data, bookmarks, etc. Right now it’s a bit of a free-for-all. I could build a Microsoft Form that saves checklist responses to an Excel sheet, but I’d like to know if there’s a more modern approach. We’re clearly not using Autopilot or anything similar, so the overall process is fairly outdated — is there a better way to handle a “laptop replacement checklist” than what I’ve described? submitted by /u/Original-Vacation-66 [link] [comments]

My company is replacing an aging Hitachi SAN with a new HP array. The existing environment was built by people who are no longer here, and my boss has mostly just maintained it over the past 4-5 years. With this new deployment, I’ll be responsible for setting up and configuring the SAN from scratch. I’ve worked with our Hyper-V hosts (clustered environment), but I haven’t had hands-on experience building out a SAN itself. I’m looking for advice on things like: Best practices for initial SAN setup (RAID layout, storage pools, etc.) LUN design for a Hyper-V cluster Things you wish you knew before your first SAN deployment We’ll be migrating from the old SAN once the new one is in place, so any tips on minimizing risk or downtime during that process would also be really helpful. Appreciate any guidance, trying to make sure I get this right the first time. submitted by /u/Extra_Wrongdoer_ [link] [comments]

So I’m used to handling application computer deployments, project management, and then doing whatever my CSO told me to do. I took a new job with that expectation and yes I asked before hand but was lied to. Skipping out on the job due to being lied to isn’t an option. I live in the south so no unions, am poor, and am old with declining mental cognition. Here are my questions 1. Now that Crowdstrike is defacto and apparently only flags when something activates is there anything I could trust to scan for hidden malware? I am super paranoid about googling results. I don’t know what to trust. 2. Is darkik nuke and boot still around? I have a machine I’d like to multi wipe as it had a nasty malware downloaded on it. Or should I just toss the machine to be safe? 3. How does anyone company that doesn’t have a security specialist figure out what to do about the AI threats? Is everyone just keeping their heads in the sand and hoping it’s over hyped! TIA submitted by /u/Real-Jicama7068 [link] [comments]

Hi We are having a lot of resources provisioned using Terraform, the state use being GCS buckets. However there are many bigquery datasets being created manually in console ui level and other resources as well. due to this drift we face a lot issues as the automation IAC doesnt obviously work with manually UI created resources. We can use terraform import to import existing resources to terraform state. However please let me know if anything we can use AI to assist us for such usecases? AI to autodetect resource drift in google cloud or something ? Also terraform import is not working for many resources as well submitted by /u/jaango123 [link] [comments]

Today marks exactly two weeks since I opened the ticket, and no one has responded. Stay away from this company. I've already migrated all my code to other servers and am amazed that I've always overpaid for rather mediocre services. submitted by /u/westdvina [link] [comments]

There is absolutely no reason to discontinue this, they’re shooting themselves in the foot with this decision. submitted by /u/69TheRock420 [link] [comments]

Periodically I go through our tenant to do some cleanup but it always bothered me that there are so many of these registered personal devices in here. I am pretty sure they are registered because someone signed in to an app and prompts them to manage this device, or this app only and the leave the device option checked. Can I periodically delete them? Disable them? It's more of an annoyance than anything else. We are fully Intune-managed. No hybrid. No personal devices. https://preview.redd.it/1euihru7yegh1.png?width=1213&format=png&auto=webp&s=edd37184f9dd6691edea3c9c9d2e707336d85850 submitted by /u/AiminJay [link] [comments]

My pool of NV12ads_A10_V5 hosts have worked for months, until this morning. 1/3 of my pool refused to boot due to resource issues in Azure. Is there a quiet outage, or do I just blame this on AI workloads overrunning resources? submitted by /u/powrofgrayskoal [link] [comments]