CommPulse

I have spent most of my career in AWS, but more and more, I am seeing companies asking for skill sets with multiple cloud providers. I feel like the skill set is transferable; if you know how to spin up EKS then spinning up a GKE cluster shouldn't be that much different. It's still Kubernetes under the hood, still installing helm charts, still using cluster autoscaler to provision new nodes, still installing Argo CD via Helm along with Prometheus, Grafana, Loki, etc. All that changes are the resources used and modules on the Terraform/cloud provider level. Am I correct in thinking this or am I way off base here? submitted by /u/Sure_Stranger_6466 [link] [comments]

I was employed by a business because they're growing. I need some advice, because part of making changes in company processes is changing ways of thinking. I've helped introduce new frameworks but they seem to be reluctant to change their processes, which makes it difficult to do my job. I don't want to overstep the mark or looking like I'm overruling/ignoring them For example, my manager and I have different ideas about approaches to developing a solution. Most of our work where we have different ideas is writing data integrations. My manager is more knowledgeable about the data and underlying system, but I have more technical expertise at the scale we are working, given the new systems/architecture. The problem is that we're a small team with work from home policy, so catch up meetings get cancelled and put off. The specifications are usually email threads, which are fine for quick fixes or small tasks, whereas I like a central written document/project plan that outlines the requirements and approach, including potential problems or limitations from the outset. Those questions may become something in an email thread, but unless there is a document/project plan then things get lost. Generally I like standardized approaches at least to get people on the same page and understand accountability. I accept we can't know everything up front and it's easy to go off on a tangent; that's the real world. But without a base to bring everything together and focus priorities, that leads to failure or problems further down the line. submitted by /u/Critical_Bat_8914 [link] [comments]

Recently had an AI integration for basically everything IT related. Ticketing system, kb article, assets, blah blah blah. It pretty much just acts as a triage/organizer for projects and tasks, but can add notes and update things for us. I was working on updating an internal KB article and decided to try the cool “AI helper” to make quick work of it all. Well, it decided to delete basically everything in our knowledge base. Like gone, hundreds of articles just wiped out! My heart sank. I tried to restore the articles, but then the site crashed. Took me a few minutes to get it back, and thank God I was able to restore every article. I’m pretty annoyed to be honest. Not using that crap again. submitted by /u/Mustard_Popsicles [link] [comments]

I have published a (very) long article about analysing multiple aspects of feature availability on Databricks. The general gist is to filter regional availability through the lens of the Lakehouse WAF. With that aperture I create a measure of enterprise readiness. My general finding is that the lower ranked tiers are at an significant and increasing disadvantage relative to the frontier regions. I also include a list of suggestions as to how to approach analysing your home region's overall Databricks readiness sourced from my current experience with building a production. My best practice if you will. The above diagram shows feature releases aggregated by month since 2023. Don't hesitate to reach out if you've got questions. submitted by /u/GeirAlstad [link] [comments]

I recently joined a small municipality (~150 employees) as their first-ever internal IT Manager . Before me, everything was handled by an MSP. They actually didn't choose to build an internal IT department, the MSP informed them they could no longer support them because the municipality had simply grown too large for their available staff. According to the former admin, they were losing money on the contract and couldn't recruit enough people to keep up. He left me a list of passwords and no documentation at all. On my first day, the MSP walked away completely. I'm currently alone, although two IT technicians are supposed to join soon. Here's what I inherited: ~150 employees 20 buildings connected through private fiber back to the main site Single Internet connection at HQ 100% Fortinet environment (FortiGate, FortiSwitch, FortiAP) Network hardware is mostly D-series and approaching EoL Most remote buildings are tiny (usually one switch and one AP) Server infrastructure: VMware ESXi/vSphere Veeam backups Main site: 3 production hosts 1 SAN Secondary site: 2 backup host 1 SAN 2 NAS Backup site receives Veeam backups and VM replicas for DR (it's 1 km away for HQ tho) The part that really surprised me: There are 5 completely separate Active Directory domains , each with its own domain controller and file server. They're not in the same forest . Examples: Administration Public Services Library etc. Some of these domains have fewer than 15 users. To make it even more interesting, all four file servers are still running Windows Server 2008. All domains sync to the same Microsoft Entra tenant through Entra Connect. Remote users connect through FortiClient SSL VPN with FortiToken MFA, and WFH usage is fairly common. The former admin told me his long-term plan was: Migrate VMware → Proxmox Replace the entire Fortinet network with UniFi Personally, I'm not convinced either of those would be my first priorities. My instinct is that the Windows Server 2008 boxes, AD consolidation, hardware lifecycle and documenting everything probably deserve attention before a platform migration. If this landed on your desk, what would your roadmap look like? What would you tackle in the first 3-6 months and what would you intentionally leave alone? submitted by /u/Other-Bison-3071 [link] [comments]

Hey everyone! Could use some help here. I am trying to get Autopilot to work. I have it set as User-Driven and it goes through ESP and passes everything. The problem I am running into is that after it passes it goes to just a blank screen, but you can move the cursor. I have tried a few things like, CTL+ALT+DEL, CTL+SHIFT+ESC, CTL+WINODWS KEY+R, etc and nothing works. It just stays as a blank screen. I left it overnight hoping it just needed time but nothing. Now, when I do hit the power button, the 'Slide down to shut off PC' does pop up and when I do power it off and power it back on, it goes to the user login, but the email I use to get Autopilot going for said computer, the profile does not populate. I click into 'Other User' and type the email with the OKTA password I used when first going, but nothing. I am stuck and dont know what to do. Thank you submitted by /u/mm0750 [link] [comments]

This is a DoD-related air-gapped network with about 2000 end users. We're using Azure DevOps now as a ticketing system and we'd like to invest in a more professional solution. I've used Solarwinds Web Help Desk in a similar environment in the past and wasn't a fan, it was buggy, ancient UI, and expensive. Does anyone know of a better alternative? submitted by /u/Intelligent-Owl5620 [link] [comments]

Hello all. Apologies if this is the wrong place, but I'm wondering if anyone has experience with physically securing iMacs. We will have two public facing, 24/7 iMacs in an exhibition. They will be in kiosk mode with Jamf, but I need to make sure they aren't stolen, as well. I found the Kensington safe dome which seems ideal, but nobody has it in stock, and we don't have the time to wait weeks or months. Should I just use a cable lock and loop it through and around the stand and then bolt it to the table? Does anyone have any other suggestions? submitted by /u/RandomPony [link] [comments]

We have a new client I am setting up. We put the full name of the clients business in the company name when setting it up as "Always Be Cooking Services Ltd" (not the real name) This then means when they sync folders from SharePoint it is in the patch "Always Be Cooking Services Ltd\library\etc" I want to shorten the name to something like "ABC Ltd" but its not in the Organisation settings where it used to be. I can find it in the billing information, but thats greyed out and says to change I need to contact MS Where are you meant to change this now so you dont end up with huge path names in Windows when you sync files? submitted by /u/PEBKAC-Live [link] [comments]

Docs: https://www.pilum.dev/docs/getting-started/introduction/ The problem: I run side projects across GCP, AWS, and Cloudflare, and each one has its own deploy incantation. gcloud commands for one, SAM for another, wrangler for a third. I kept forgetting the flags and the order of operations and wanted a simpler CI/CD pipeline. Pilum is a single binary (Go, Cobra) that reads one pilum.yaml and handles the deploy for whichever provider the service targets. Define your services once, then pilum deploy will build, push, provision, and deploy. What it supports today: - GCP Cloud Run - GCP Cloud Run Jobs - AWS Lambda - Azure Container Apps - Cloudflare Workers - Homebrew - GitHub npm packages GCP is the most mature of the platform hence why I am sharing it here! It's not trying to be Terraform or Pulumi; there's no state file and no general-purpose infra provisioning. Happy to answer questions about the internals. Here is a write up about it a bit more: https://logicalbytes.dev/posts/pilum-road-to-production/ . But if anyone wants to add a provider, there's a contributing guide for adding exactly that! submitted by /u/Flannel007 [link] [comments]

submitted by /u/TeamVenti [link] [comments]

We have a user that used to be the owner of our Azure subscription. We changed the subscription owner a few months ago, but they are still receiving the "Action recommended" emails from [email protected] . For example, last night they received a message with subject "Action recommended: Migrate your Azure Service Bus SDKs by 30 September 2026". The new subscription owner is also receiving these emails. Any ideas how I can turn them off for the former owner? There is no unsubscribe option. Thanks. submitted by /u/FamiliarShirt [link] [comments]

With more and more teams using LLMs and inference services wondering how everyone is making decisions about their infrastructure like are you choosing one major cloud provider , using Kubernetes across multiple providers or trying platforms like RunPod, CoreWeave, Yotta Labs, Lambda to keep things flexible ? more interested in whether anyone has found a real way to move workloads between different GPU providers without having to maintain completely separate deployment processes . submitted by /u/makemoney-TRADEnIT [link] [comments]

I’m looking for feedback from anyone running a similar setup: On-prem AD RDS with multiple session hosts RD Web HTML5 published through Entra Application Proxy FSLogix profiles Microsoft 365 Apps with Shared Computer Activation Entra Connect Sync The setup is working, but Microsoft 365 sign-in inside the RDS sessions is inconsistent. Some users have manually added their account under Access work or school, which has created duplicate user-owned device registrations. I’m planning to hybrid join the session hosts so users can get better SSO for Outlook, Teams, OneDrive, and Office when they log into RDS. Has anyone done this successfully? Any issues FSLogix roaming, MFA, Conditional Access, duplicate device registrations, or users moving between session hosts? Mainly looking for any warnings or words of wisdom! submitted by /u/frankfrrris [link] [comments]

Can't say it isnt comical, given they laid off like 7k workers this morning... But yeah, 3 of my clients are experiencing Service Now Outages currently. submitted by /u/AV1978 [link] [comments]

Hey all, I’m setting up iPhones with Apple Business Manager with Intune ADE and I’m stuck on a very annoying issue. The devices are assigned to the correct MDM server in ABM and they sync into Intune fine. In Intune, under the Enrollment Program Token > Devices, the iPhones show that they're ready to enroll. So from the Intune side it looks like they’re ready. But when I fully erase the iPhone using Apple Configurator (iOS app), it completely skips the Remote Management screen. It just continues with normal iPhone setup. I'm expecting it to go like: Hello > language/region > Wi-Fi > Remote Management What happens: Hello > language/region > Wi-Fi > normal setup, no Remote Management Things already checked/fixed: iOS/iPadOS enrollment restrictions are now Allow APNs is active ABM assignment is correct Devices are not removed/released from ABM Devices are visible in the correct Intune enrollment token Profile is assigned I’m not using the enrollment policy “device group” field for a dynamic group anymore, because that seems to be for Enrollment Time Grouping only This worked once last week on one iPhone, but now new devices won’t hit Remote Management at all. Question: Can Intune show “Ready to enroll” and “Profile Assigned” while Apple activation still doesn’t serve the ADE profile? Is this usually a stale profile/policy issue, old ADE Profile vs new Enrollment Policy weirdness, or something else? Any specific places/settings I should check? (i used copilot for the summary of this question) Im genuinely going insane yall... submitted by /u/Momientje [link] [comments]

Hey guys how do yall do IT Training? At one point I had my teams up to a 92% completion rate and it has been a pretty steady fall off from there. any suggestions on release cadence? Also I am considering doing a training amnesty thing where I will remove all the previous training and start over so they don't have a couple hours to do at this point but that feels like rewarding shitty behaviour. I am just at a loss due to how drastically it has fallen off. submitted by /u/GasBackground3335 [link] [comments]

Is anyone else dealing with an issue like this? I am a solo IT employee for around 30 end users. We have a mixed fleet, some P16 Gen 2 with NVIDIA GPU, and mostly T16 Gen 3 (Intel Graphics) Users keep reporting that their networking stops working randomly and the only fix for them is a reboot. When I started digging into this issue, I realized that the computer was handling ICMP requests just fine, but anything attempting TCP connections was failing. What I actually found from reviewing dumps and logs was the the display or GPU driver locking up, causing the entire OS GUI to freeze solid. Sometimes Windows would recover, and then leave a user in a weird state where they couldn't use the internet, and even UAC prompts would not come up. This is where I learned that if you could get CMD open, you could ping things. But anything trying to make an actual connection like OneDrive or Teams, browsing the internet etc just hung. Some other distinct things I've noticed: Way worse on docked setups (Lenovo Thunderbolt 4 Universal Docks, external monitors) than laptops used standalone. The NVIDIA GPU models seem to hang the hardest — full freezes, sometimes forcing a hard power-off. The Intel-graphics models get it too, just a bit less often. Waking from sleep is a common trigger. Chasing driver updates has helped some but not fully solved it. It feels like it's sitting somewhere between driver bugs and possibly a hardware quirk on a subset of units. Curious if this rings a bell for anyone else running a Lenovo mobile-workstation fleet (or docked laptops in general) I am at a loss with these issues. Lenovo Premier Support has offered very little guidance so far. submitted by /u/borderline_tentative [link] [comments]

I could use a senior person's advice on this, as this is a tough nut to crack. Intro: I was tasked with taking an existing, kind of expensive Azure VD setup and migrating it to something leaner and more efficient. I wanted to use VMSS with dynamic autoscaling (less manual intervention, lower risk of human error), so I looked into how the VMSS would create new machines. This would require a machine image , but we have custom software, so I made an Azure image gallery (private) with a custom image definition and version (Specialized) with the software preinstalled. Issue 1: From my reading, a Specialized image will cause problems, as any host instantiated from that image will have the same hostname, therefore creating the risk of machine name conflicts on the network/in DNS and require manual corrective actions. Which we don't want for an autoscaling system. Issue 2: The alternative to the Specialized image is a Generalized one (equivalent to running Sysprep on the original VM). But this creates other potential issues: the resulting machines need a hostname and local admin credentials at boot, which if they're being instantiated automatically by the VMSS, they're not going to have (unless...? Correct me if I'm wrong). Issue 3: Finally, producing either a Generalized or a Specialized image from a VM will render that VM inoperable , which is absurd because I want to keep that VM to produce future image versions with updated patches, apps etc. I read that the VM should be snapshot before being generalized and captured, but in my experience creating a snapshot also renders the VM unusable. Am I right? Or was my snapshot VM rendered unusable by another cause? (Note: I placed my snapshot in another Azure subscription, this might have affected the snapshot VM) So basically I am trying to build a safe, repeatable process for patching and republishing my custom image. What I've got so far is: - Have a "golden" VM on hand - Do patches on the VM - Snapshot the VM - Capture image (Generalized?)[breaks the VM] - Publish new image version in Image Gallery from capture - Apply snapshot to VM [fixes the VM back up??] - Wait for next patch cycle Does this look logical at all to you? submitted by /u/RequirementFit1128 [link] [comments]

I've got around 290 VDI VMs that were created with P20 OS disks due to IOPS concerns with FSLogix. They're not even coming close to the provisioned IOPS limit and because of that we want to reduce them to P10 disks to save on costs while still allowing for enough provisioned IOPS for FSLogix. In the portal, doing this throws an error that reducing disk size is not supported. The docs say we should create snapshots of the disks then create new disks from the snapshots. That is a bit of a non-starter given the quantity of disks involved - I'm sure it could be automated but our automation devs might have a really long backlog before they can have a look at it. I have a support case to ask if they can execute the SKU change on the back end in some way, but is there any way we can execute the change ourselves? All the disks are below 128gb in size within the OS so size isn't a concern. https://learn.microsoft.com/en-us/azure/virtual-machines/disks-performance-tiers?tabs=azure-cli#restrictions mentions that tier reductions can happen only once every 12 hours, so it's technically possible. submitted by /u/MohnJaddenPowers [link] [comments]