CommPulse

Hello All, I am a technology guy who primarily work with infrastructure, networking and security for servers aka - sysadmin aka - "IT Guy". I am always had experience with application developers and teams who mostly don't understand what I do. Also in corporate world a lot of time the infrastructure guy is not the most important person on the team. Most of the management executives don't comprehend the complexity of the role. Anyways that the current state. So as soon as AI tools were GA, a lot of hype was built to make it fascinating. One of the thing mentioned in a lot of things was AI can take coding roles - hmm with this me being me - I think I can built something with this. So I wanted to build something, now let me list why I think I can build something I have the understanding how thing work. I can tell AI to do thing I don't know how to do. Well if this happens, I think I have the recipe to do something interesting. To understand what you need to built is something that you want to use everyday. I am working on building a tool that can help with below. A checklist auto-generated from my notes , so I always know what's pending vs done without re-reading everything Calendar events created automatically for the tasks that need protected time, so they don't get silently skipped I am sharing my thought here to get some advice and feedback if anyone else would like to use the tool. submitted by /u/SeriousStaff3445 [link] [comments]

I work in an after-sales department (machinery industry), and we’re struggling with managing incoming requests via shared email inboxes. I’d really appreciate some advice or best practices. We’re a team of 4 split into two areas: spare parts and service. We currently receive around 40 emails/day for spare parts and about 30/day for service, all handled through shared mailboxes (Outlook). The main issue is that everything is email-based and not really tracked. Each person is responsible for their own customers, but when someone is out, things quickly become messy: Emails get missed or forgotten It’s unclear who is handling what No visibility on what’s been answered vs still pending No real way to measure response times or workload We’re considering setting up some kind of ticketing system (or possibly integrating something with Outlook) to: Track all incoming requests Avoid losing emails Improve response times Get proper metrics (response time, backlog, etc.) My questions: Has anyone implemented a ticketing system starting from shared inboxes? Any tools you’d recommend? Would love to hear real experiences submitted by /u/ValuableField5877 [link] [comments]

Hi all, I work on the team at Macrium. We're doing a giveaway for sysadmin day that I thought might be of interest to this channel. Went down well last year so we're doing it again. Until 31st July, IT professionals can claim a free one-year licence for Reflect X Home, our backup and recovery solution for personal PCs, as a thank-you to the people doing the work. Claiming it is pretty straightforward. We just need to verify that you work in IT, then we’ll send over the free licence - that's it. We have 10k licences up for grabs this year. You can get one here: SysAdmin Day 2026: Free Reflect X Home Licence for IT Professionals Happy SysAdmin Day :) - Brooke submitted by /u/Macrium_Inc [link] [comments]

Basically from time to time we might need to do some hardware work on a machine. When it's something is broke that is covered under our warranty for dell, but like a RAM upgrade or more HD space or something. I need to contract that out basically because we're all over the US. My plan was basically to just search around locally for a place but was wondering if you all have a service or company you recommend that handles this. While I don't want to break the bank, I'm willing to pay a bit of a premium if it's just easy to use as I don't have to do this a ton. Maybe once or twice a year. submitted by /u/andrewsmd87 [link] [comments]

I have Cisco TelePresence MX800 cameras. I have no issues with the video output, but I can’t send PTZ control commands via VISCA. Does Cisco use the same standard VISCA command set across all camera models, or does this particular model support VISCA over IP? If anyone has experience with this model or has worked on a similar project before, I would really appreciate your help. Thank you! submitted by /u/Whole-Program-4710 [link] [comments]

Google Cloud Console - Branding Verification Can someone help me with branding verification? my site: replytide.co submitted by /u/Turbulent_Toe2053 [link] [comments]

Hi All, I've got a query regarding Azure DNS private resolver, conditional forwarders and Active Directory integrated DNS servers. I have on premise DCs with DNS integrated into AD. I have DCs in Azure which are in the same forest/domain as the on premise DCs. Currently any Windows servers in Azure have their DNS set to the Azure DCs for DNS. I have a storage account configured with a private endpoint. I have a Private DNS Zone configured: privatelink.file.core.windows.net This zone is attached to my Azure vNet. I have a DNS private resolver configured. It has an Inbound endpoint - 192.168.x.4 Should I create conditional forwarder on my onprem DC DNS for file.core.windows.net and set the master server to 192.168.x.4 Initially I set privatelink.file.core.windows.net as the conditional forwarder, but I could not authenticate and map a network drive to the azure file share. Should I store this conditional forwarder in Active Directory and replicate it so the conditional forwarder is configured on all the DC DNS servers including the Azure DCs DNS. I read the post inserted below which has made me question whether I need to configure the Azure DCs DNS differently. Thoughts? Comment by u/hauntedAlpha RAM_Cache • 2y ago Let’s use blob.core.windows.net as the example. On prem forwarder should be set to blob.core.windows.net. The forwarder must point to either another VM (DC or DNS appliance) or an Azure private DNS resolver. If using a VM, do not replicate the conditional forwarder. Important: the Azure VM must NOT have the blob.core.windows.net conditional forwarder. Then you must create an Azure private DNS zone. The private DNS zone should be something privatelink.blob.core.windows.net (I think that’s the right one). You then link that zone to the VNET that your VM or Azure private DNS resolver is in. If you end up using a VM in Azure such as a DC, that VM must have its own conditional forwarder for privatelink.blob.core.windows.net. However, that conditional forwarder points to 168.63.129.16. Alternatively, you can set all public DNS resolution to 168.63.129.16 for that entire machine. Let’s say you are using domain controllers. A server on prem will do a query to a DC for xyz123.blob.core.windows.net. The DC on prem will then forward the request the Azure DC. The Azure DC will then reach out to public DNS and the CNAME is returned for xyz123.privatelink.blob.core.windows.net and the Azure DC will do a recursive lookup. It will then find that conditional forwarder and send the request to Azure private DNS. Azure private DNS will provide the private IP of the storage account. Side note: keep in mind this is NOT universally accepted for all Azure services. For example, Azure Monitor private link scopes. Additionally, the CNAME for a private link Azure resource does not populate unless you specifically configure it. Also, not all Azure resources that can have a private endpoint create a public CNAME (API management), so you may need to create conditional forwarders all the way through that are not private link. Another simple, but limited, option is to simply create a zone on prem and create A records to the private IP. I do not recommend this. submitted by /u/No-Pack8932 [link] [comments]

Hi,currently I lost my job as Software developer of angular. I want to switch to a career as endpoint administrator both for it to be less stresssful and helpful in regards to my health. I am a disabled person who will be looking for remote jobs. Can you give any advice on how can I learn end point administration from scratch. Also I’m getting 17 LPA now so I am willing to take pay cut till 13-14 LPA submitted by /u/Wrong_Perception2679 [link] [comments]

I just left one company as, despite me implementing a low cost solution for interfacing our existing ancient databases with AI through an API, they decided to hire a consultant, an out of work academic who insisted we needed MS Fabric. Old colleagues tell me he can’t get even basic things working and it’s probably going to take years for him to get anything close to what I built. My new company is similar in that they paid hundreds of thousands to setup a databricks environment, yet no one is really using it or has any good ideas for it, except “AI agents!!” submitted by /u/xmasnintendo [link] [comments]

We have historically had external filesharing disabled in our M365 tenant for security purposes. We are getting more and more request to enable the feature. I'm currently in discussions with leadership about the security implications of enabling external sharing. There is a business need for it and not enabling it is leading to shadow IT workarounds. I'd like to take r/sysadmin 's pulse on this topic. Is it enabled in your org do you do any active monitoring of files shared outside the org? submitted by /u/jstar77 [link] [comments]

Hi everyone trying to add the Checkpoint Data Connector CCF in Sentinel, I followed the procedure went on Harmony and Created 2 API key 1 for Hamony and 1 for Log as a Service Went to sentinel and added the connection with the info in the good lines, when I clicked saved it said Failed too many requests. The Table CheckpointEmailSecurityEventCL then connected green and started injecting Data The other 3 EmailsecurityPhishingExeptions, SecuritySpamExeptions and SecurityAuditLogs all stayed Grayed Disconnected. I check today the CheckpointEmaiSecurityEventCL is now Grey like it was disconnected and it says we got 10M logs, but the connector itself is Green Connected Anything I can do to check or I have to call Checkpoint? Please note the API keys are valid and I put an expiration date of 2032 Thanks Edit forgot to say, in the connector itself Iit says last log received -- and if I query the CheckpointMailSecurityEventsCL take last log is almost 24h ago with Graymail submitted by /u/neko_whippet [link] [comments]

our company has grown to about 150 people and the informal approach to it decision making that worked at 30 people is starting to create real problems. projects get approved without proper scrutiny, priorities conflict with each other, and nobody has a clear picture of what is actually in flight at any given time looking at governance frameworks but everything seems designed for either very small teams or large enterprises with dedicated governance functions. trying to find something that adds enough structure to solve the actual problems without creating a bureaucracy that slows everything down for companies at a similar stage, what worked and what turned out to be overkill submitted by /u/AdorableRope3117 [link] [comments]

Critical VMware vulnerabilities: patch vCenter and ESXi as soon as possible Broadcom has published VMSA-2026-0006 , addressing five vulnerabilities affecting VMware vCenter, ESXi, Workstation and Fusion. The most serious issues have a CVSS score of 9.8 and can potentially be exploited remotely by an attacker with network access to vCenter. Most important vulnerabilities CVE-2026-59309 — vCenter authentication bypass A vulnerability in VMware Directory Service may allow an attacker with network access to vCenter to: Bypass authentication Gain unauthorized access to vCenter Access the system without valid credentials Severity: Critical CVSS: 9.8 CVE-2026-59310 — vCenter remote code execution A directory-traversal vulnerability in the vCenter Syslog server may allow an unauthenticated attacker with network access to: Traverse directories Execute arbitrary code on vCenter Severity: Critical CVSS: 9.8 CVE-2026-47876 — ESXi host code execution through VMXNET3 An out-of-bounds write in the VMXNET3 virtual network adapter may allow an attacker with local administrative access to a VM to: Escape the affected VM context Execute code on the ESXi host Only virtual machines using a VMXNET3 network adapter are affected by this vulnerability. Note: You might suspect you need to update VMWare Tools but this is not required according to this FAQ Severity: Critical CVSS: 9.3 CVE-2026-41703 — information disclosure or host-process DoS An out-of-bounds read affecting ESXi, Workstation and Fusion may allow someone with VM deployment privileges to: Disclose information Cause a denial of service of the host process For Workstation and Fusion, Broadcom states that the impact is limited to information disclosure. Severity: Important on ESXi CVSS: Up to 7.6 CVE-2026-41709 — insufficient ESXi logging A malicious administrator may be able to perform certain operations without those actions being properly logged. Severity: Low CVSS: 2.7 Fixed versions For VMware vSphere 8 environments: Product Fixed version VMware vCenter 8.0 8.0 Update 3k VMware ESXi 8.0 8.0 Update 3k For VMware 9 environments: Product Fixed version VMware vCenter 9.1 9.1.0.0300 VMware vCenter 9.0 9.0.2.0100 VMware ESXi 9.1 9.1.0.0200 VMware ESXi 9.0 9.0.2.0100 Workstation and Fusion 25H2 users should update to 26H1 . Older VMware Cloud Foundation and Telco Cloud environments may require an asynchronous patch or product-specific update procedure. Important Broadcom lists no workarounds for these vulnerabilities. Restricting access to vCenter remains a useful security measure, but it does not replace installing the patches. Because the two vCenter vulnerabilities can be exploited by an unauthenticated attacker with network access, updating externally reachable or broadly accessible vCenter systems should be treated as a priority. Official advisory: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017 submitted by /u/Lick_A_Brick [link] [comments]

Just a headsup , getting 401 errors from a few users that rely on pages using it. Oddly enough ARM devices are not showing that issue, so it may be coupled with some Windows component. submitted by /u/autogyrophilia [link] [comments]

Got a chuckle when this popped up. Have to wonder if this is them being proactive, or a response to a specific incident. My bet is on the latter. Don't Do Dumb Stuff with AI course provides practical guidance to help you recognize common AI risks and make informed decisions when using AI tools at work. What You'll Learn The types of sensitive information that should never be entered into AI tools. Why careless AI use can create personal, physical, and financial risks. When to apply the STOP & CHECK framework before using AI. Practical ways to make safer decisions when using AI. How to recognize AI-powered threats, including phishing, voice cloning, and deepfakes. submitted by /u/Kodiak01 [link] [comments]

So i started my aprenticeship in the area sysadmin which included works in networking, it infrastructure, maintenance and updates, 2/3-Level Support and so on. I really loved it and i love tinkering and trying stuff out and learning something new. After i left my company (i didnt like how they worked) i started at a little IT-Consulting company and we mostly work with companys who want to automate or improve their it processes. I like to learn how to structure and organize processes and think of a better way to do them. The more i look at the tasks and the market i see so many possibilities for the future and how i can improve in this type of work. This is really nice and it pays well. But what about my love for tinkering. Can i invest into tech and still get a well payed job where i can improve and wont be put into the same tasks for 20 years? I hope i explained well what i mean. Does anyone have experience in that? submitted by /u/MMemoryy [link] [comments]

Hi, I wanted to learn about GCP so i started the 300$, i had some personal projects, i set up an infrastructure, some vm, and i thought nothing about it, thinking that maybe when the 300$ is gone, i will get an email or notification that i spent the free credits and that i will be on the paid plan.Nothing next thing i know i got charged 50$. I am unemployed had been so for 8 months now. And i squeeze my savings tight. This bill wasn't expected i emailed the support they told me to wait i waited some 3 days and nothing then another week then they sent email telling me that i had been granted 20$ in credits,but no monetary refund. this was early july this month.During this i had deleted billing account, then another one, and i deleted the Vms the platform is not really user friendly it's hard to navigate for beginners. Yesterday i was charged 100$ I dont know what to do, i contacted them they said wait for 32 hours. This is just unacceptable and i feel scammed. submitted by /u/Haunting-Lettuce-660 [link] [comments]

I'm a 3rd year CS student and I want to build something real over the next couple of months to learn RAG and agents properly. I've been thinking about one idea for a while and wanted to get opinions before I commit to it. The problem I noticed is when you install on e package, you end up pulling in a bunch of other dependencies. Then a CVE shows up in one of those, and you're exposed through code. I came across Log4Shell and the Equifax breach and then I got this idea. Fixing it is the annoying part. You can't just bump the broken package, because versions depend on each other, one thing needs a version below 2.0, another needs above 2.0, so you change one and others start conflicting. Now you have to fix all the issues, run tests, and hope everything works. So what I want to build is a tool that does that for you and checks the fix actually works. The rough idea is you point it at your project, it reads your dependency tree (there's a free Google API called deps.dev that gives you the whole thing), finds why each vulnerable package is there, and works out the smallest set of version changes that clears all the CVEs without causing conflicts. Then for the "will this upgrade break my code" question, I want to pull the changelog and release notes for each version jump and check them against the functions my code actually uses, so it can tell you whether the change touches anything you rely on. And the last part, it applies the fix in a Docker container, runs the tests, and only then tells you if it is safe. The way I'm thinking of stucturing it is most of it is a fixed pipeline (read the tree, solve for the versions, run the tests), but the one part I'd actually let an LLM drive is the retry loop, when the tests fail, it looks at what broke, decides whether to drop that version and re-solve or try something else, and loops until it either works or gives up. That's the part where letting the model make the decision seems worth it. The rest doesn't really need it. I'm thinking of using Postgres with pgvector, deps.dev and OSV for the data, a SAT solver for the version-conflict part, embeddings plus a reranker for the changelog retrieval, and Docker for running the tests. Later on, the nicest version would be exposing it as an MCP server so something like Claude Code could call it as a tool. At the end it gives a report, a single Markdown file summarizing every vulnerability it found, why each package was present, the minimal fix it computed, the changelog-based breaking-change assessment, and the test results verifying the fix. Something you can hand to your team or keep as a record. I know OSV-Scanner already does remediation, but only for npm/Maven, with no changelog check and no test verification, so the gap I'm aiming at is the full combination. A few questions: - Would you use it? Would you actually run this on your own projects? If not, what's missing or in the way? - Is it useful? Is this a real problem worth solving, or is it already handled well enough that it doesn't need to exist? - Does it already exist? Is there something that already does all of this (minimal fix + breaking-change check + test verification) that I haven't found? - Right direction? Is this worth building, or would my time be better spent on a different problem in this space? - Do's and don'ts? TL;DR: An agentic RAG tool that finds vulnerable dependencies, computes the smallest conflict-free fix, uses changelog retrieval to predict whether the upgrade breaks your code, and verifies the fix by running your tests. A verified patch. submitted by /u/iNSANExVeNoM [link] [comments]

Hi, I have an Asus Q670 Board that has Intel AMT on Board, which until recently worked fine. But suddenly now I get the Error Message "This computer does not support Remote Control Operations." Not allowing me to start, stop or reboot the PC. Also thew other feature like Remote VNC or SOL do not work anymore. I can access the AMT WebUI but other than that everything else has stopped working. I reseted the BIOS and AMT and Unprovisioned it, but I keep getting this error. I updated to the latest AMT, which is Intel® Active Management Technology firmware version: 16.1.40-build 2765 and BIOS available, but this still doesn't help. Anyone knows why this problem suddenly appeared and how to get all the options back like before? submitted by /u/Spam00r [link] [comments]

hey ppl We have a Windows Server that occasionally becomes unresponsive or crashes. Because the issue is intermittent, we need continuous disk activity logging so we can review what was happening immediately before the problem occurred. Ideally, the log should contain: Timestamp Process name Process ID Drive letter Exact file path being accessed Read speed Write speed Total disk activity Disk response time or latency The logging must: Start automatically when Windows starts Run continuously in the background Have minimal CPU, memory, and disk overhead Rotate or limit log size automatically Preserve enough recent data to investigate the period before a crash Export the results to CSV, or to a format that can later be converted to CSV Methods already checked Performance Monitor It can record process and physical disk counters, but it does not clearly show the exact file path being accessed by each process. PowerShell Get-Counter It can collect process and disk performance counters, but it does not directly correlate the process name, PID, drive, and exact file path in one report. Process Monitor It can capture process and file-level disk activity, but I am concerned about the performance impact and the size of the logs when it runs continuously on a production server. Windows Performance Recorder This appears suitable for detailed disk I/O tracing, but I am unsure whether it is safe and practical for continuous long-term monitoring or circular logging. What is the safest and most reliable Windows-based method for this requirement? Would a combination such as Performance Monitor plus Windows Performance Recorder be better, or is there a recommended way to run Process Monitor continuously with a circular backing file and controlled resource usage? I am looking for a method that someone has successfully used on a production Windows Server, preferably with automatic startup, log rotation, and low performance impact. submitted by /u/Few_Adhesiveness4456 [link] [comments]