CommPulse

I’m currently reviewing some compliance against the UK Defence Standard for suppliers, and I’ve got a bit hung up on one in particular; ‘The Supplier shall employ appropriate nationally or departmentally approved cryptography when used to protect all Data (e.g. FIPS 140-2 or comparable standards)’ The only thing I’ve been able to reference so far is NCSC and it doesn’t seem to be too specific, I’m in particular interested around VPN’s, since we currently use Wireguard/Tailscale, but available info seems to advice against due to its encryption method, and advices to use something like OpenVPN instead since it uses AES. Am I being really dense about this? Or reading it the wrong way completely? I think I’ve got myself into a bit of a research spiral and have convinced myself of things that aren’t the case. I’ve also looked into Cloudflare’s meshing ZTNA but I’m concerned how info is processed at their edge before going to other nodes. submitted by /u/sctmedk [link] [comments]

Had a client ask me to review their AD environment last month. Before going in manually I built a quick workflow using PowerShell exports + Claude to get an initial picture of the estate. Sharing because the results were useful and the approach is reproducible. The workflow (read-only throughout, no changes made) Step 1 — Export all users and their group memberships: Get-ADUser -Filter * -Properties LastLogonDate, PasswordLastSet, MemberOf, Enabled | Select-Object Name, SamAccountName, Enabled, LastLogonDate, PasswordLastSet, @{Name='Groups';Expression={($_.MemberOf | Get-ADGroup | Select -Expand Name) -join '; '}} | Export-Csv C:\temp\ad-users.csv -NoTypeInformation Step 2 — Export privileged group members specifically: $privGroups = @("Domain Admins","Schema Admins","Enterprise Admins","Backup Operators","Account Operators") foreach ($g in $privGroups) { Get-ADGroupMember -Identity $g -Recursive | Get-ADUser -Properties LastLogonDate, Enabled, PasswordLastSet | Select Name, SamAccountName, Enabled, LastLogonDate, PasswordLastSet, @{Name="PrivGroup";Expression={$g}} | Export-Csv C:\temp\priv-accounts.csv -Append -NoTypeInformation } Step 3 — Feed both CSVs to Claude with this prompt (paste CSV content directly): "You are an Active Directory security auditor. Review these accounts and flag: (1) enabled accounts with no logon for 90+ days; (2) all privileged group members with last logon dates; (3) accounts that have never logged in; (4) service-looking accounts with personal display names; (5) accounts whose password was last set 365+ days ago without a documented non-expiring exception. Risk-rank each finding Critical/High/Medium and give the exact PowerShell to remediate." What it found (847 accounts in scope) 23 accounts in Domain Admins. Client thought there were 6. 14 enabled accounts with last logon > 180 days ago. 3 "service" accounts with first-name/last-name display names holding Domain Admin — leftover from a consulting engagement that ended 2 years prior. Nobody had off-boarded the accounts. 11 accounts that had never authenticated at all. 1 account with Domain Admin + non-expiring password + no known owner. This one went directly to an incident. Caveats before anyone runs this LastLogonDate replicates lazily across DCs (up to 14-day lag depending on replication interval). Use LastLogonTimestamp for a more conservative but consistent value, or query all DCs and take the max. "Never logged in" might mean a legitimate future-use service account. Don't disable without checking with the owning team. The AI ranking is a starting point, not a final audit. Validate every Critical finding manually before acting. Strip personally identifying data if you're pasting into any external LLM — at minimum replace real names with tokens before sharing with Claude/GPT. The time saving is in the initial triage pass. Going from 847 rows to "here are the 8 things to look at first" is where the AI actually helps. The remediation decisions still need a human who knows the environment. Happy to share the full PowerShell if anyone wants it cleaned up as a proper script. submitted by /u/RulezZzOr [link] [comments]

Chrome-like plating, with thick thumb knurled area. They're so smooth you can tighten down equipment just with your fingers. They're really nice, but I can't seem to find anything similar online. submitted by /u/BigCatsAreYes [link] [comments]

Hello, We have an old app that needs to be run by an end user on a server. I googled it and got two results - neither of which ran the app as an admin - they ran it as a regular user. In powershell type set __COMPAT_LAYER=RUNASINVOKER && "C:\Path\To\YourApp.exe" (changed the path and executable) Or Create a batch file cmd /min /c "set __COMPAT_LAYER=RUNASINVOKER && start "" "%1"" run the exe from that bat. submitted by /u/Deep-Egg-6167 [link] [comments]

submitted by /u/SnehaKD8 [link] [comments]

Most help desk tickets shouldn't exist. Finding the right desktop. Choosing the best region. Recovering a disconnected or frozen session. These are tasks users can solve themselves in seconds if they're given the right tools. That's why we built the AtlasAVD Self Service Portal. Instead of opening a support ticket, users can: • View all of their assigned Azure Virtual Desktops in one place • Connect to their desktop with a single click • Launch using the HTML5 client or the Windows App • Recover stuck or disconnected sessions with a single click • Choose the best region based on live latency, CPU utilization, and memory utilization Imagine a user assigned to both US Central and US East. If network latency is nearly identical, Atlas AVD helps them choose the healthier region by showing real time CPU and memory utilization before they connect. Better performance without calling the help desk. For IT teams, that means fewer repetitive tickets, faster issue resolution, and users who can solve common problems on their own. For leadership, it means lower support costs, happier employees, and a modern, branded experience that reflects the quality of your IT organization. Empower your users. Reduce your ticket volume. Let your helpdesk focus on the issues that actually require IT. Check out what else AtlasAVD has to offer. Now Accepting Private Preview Applications. 🎬 See it in action: https://demo.atlasavd.com/portal 🔎 Feature details: https://www.atlasavd.com/features/self-service-portal 🌐 About AtlasAVD: https://www.atlasavd.com https://preview.redd.it/7ismu3m19fgh1.png?width=2521&format=png&auto=webp&s=4638e65c761c8eaa68659bf1e84109eda22b1e34 submitted by /u/Atlasavd [link] [comments]

I’ve recently been tasked with standardizing how we replace laptops at my company. Currently, devices are imaged and then we run packages to install standard software. That part doesn’t need to change. What does need to change is the process for bringing users in to replace their old laptops — there’s currently no checklist or standardized way for techs to confirm that users are signed into their key systems, have transferred their data, bookmarks, etc. Right now it’s a bit of a free-for-all. I could build a Microsoft Form that saves checklist responses to an Excel sheet, but I’d like to know if there’s a more modern approach. We’re clearly not using Autopilot or anything similar, so the overall process is fairly outdated — is there a better way to handle a “laptop replacement checklist” than what I’ve described? submitted by /u/Original-Vacation-66 [link] [comments]

My company is replacing an aging Hitachi SAN with a new HP array. The existing environment was built by people who are no longer here, and my boss has mostly just maintained it over the past 4-5 years. With this new deployment, I’ll be responsible for setting up and configuring the SAN from scratch. I’ve worked with our Hyper-V hosts (clustered environment), but I haven’t had hands-on experience building out a SAN itself. I’m looking for advice on things like: Best practices for initial SAN setup (RAID layout, storage pools, etc.) LUN design for a Hyper-V cluster Things you wish you knew before your first SAN deployment We’ll be migrating from the old SAN once the new one is in place, so any tips on minimizing risk or downtime during that process would also be really helpful. Appreciate any guidance, trying to make sure I get this right the first time. submitted by /u/Extra_Wrongdoer_ [link] [comments]

So I’m used to handling application computer deployments, project management, and then doing whatever my CSO told me to do. I took a new job with that expectation and yes I asked before hand but was lied to. Skipping out on the job due to being lied to isn’t an option. I live in the south so no unions, am poor, and am old with declining mental cognition. Here are my questions 1. Now that Crowdstrike is defacto and apparently only flags when something activates is there anything I could trust to scan for hidden malware? I am super paranoid about googling results. I don’t know what to trust. 2. Is darkik nuke and boot still around? I have a machine I’d like to multi wipe as it had a nasty malware downloaded on it. Or should I just toss the machine to be safe? 3. How does anyone company that doesn’t have a security specialist figure out what to do about the AI threats? Is everyone just keeping their heads in the sand and hoping it’s over hyped! TIA submitted by /u/Real-Jicama7068 [link] [comments]

Hi We are having a lot of resources provisioned using Terraform, the state use being GCS buckets. However there are many bigquery datasets being created manually in console ui level and other resources as well. due to this drift we face a lot issues as the automation IAC doesnt obviously work with manually UI created resources. We can use terraform import to import existing resources to terraform state. However please let me know if anything we can use AI to assist us for such usecases? AI to autodetect resource drift in google cloud or something ? Also terraform import is not working for many resources as well submitted by /u/jaango123 [link] [comments]

Today marks exactly two weeks since I opened the ticket, and no one has responded. Stay away from this company. I've already migrated all my code to other servers and am amazed that I've always overpaid for rather mediocre services. submitted by /u/westdvina [link] [comments]

There is absolutely no reason to discontinue this, they’re shooting themselves in the foot with this decision. submitted by /u/69TheRock420 [link] [comments]

Periodically I go through our tenant to do some cleanup but it always bothered me that there are so many of these registered personal devices in here. I am pretty sure they are registered because someone signed in to an app and prompts them to manage this device, or this app only and the leave the device option checked. Can I periodically delete them? Disable them? It's more of an annoyance than anything else. We are fully Intune-managed. No hybrid. No personal devices. https://preview.redd.it/1euihru7yegh1.png?width=1213&format=png&auto=webp&s=edd37184f9dd6691edea3c9c9d2e707336d85850 submitted by /u/AiminJay [link] [comments]

My pool of NV12ads_A10_V5 hosts have worked for months, until this morning. 1/3 of my pool refused to boot due to resource issues in Azure. Is there a quiet outage, or do I just blame this on AI workloads overrunning resources? submitted by /u/powrofgrayskoal [link] [comments]

I have spent most of my career in AWS, but more and more, I am seeing companies asking for skill sets with multiple cloud providers. I feel like the skill set is transferable; if you know how to spin up EKS then spinning up a GKE cluster shouldn't be that much different. It's still Kubernetes under the hood, still installing helm charts, still using cluster autoscaler to provision new nodes, still installing Argo CD via Helm along with Prometheus, Grafana, Loki, etc. All that changes are the resources used and modules on the Terraform/cloud provider level. Am I correct in thinking this or am I way off base here? submitted by /u/Sure_Stranger_6466 [link] [comments]

I was employed by a business because they're growing. I need some advice, because part of making changes in company processes is changing ways of thinking. I've helped introduce new frameworks but they seem to be reluctant to change their processes, which makes it difficult to do my job. I don't want to overstep the mark or looking like I'm overruling/ignoring them For example, my manager and I have different ideas about approaches to developing a solution. Most of our work where we have different ideas is writing data integrations. My manager is more knowledgeable about the data and underlying system, but I have more technical expertise at the scale we are working, given the new systems/architecture. The problem is that we're a small team with work from home policy, so catch up meetings get cancelled and put off. The specifications are usually email threads, which are fine for quick fixes or small tasks, whereas I like a central written document/project plan that outlines the requirements and approach, including potential problems or limitations from the outset. Those questions may become something in an email thread, but unless there is a document/project plan then things get lost. Generally I like standardized approaches at least to get people on the same page and understand accountability. I accept we can't know everything up front and it's easy to go off on a tangent; that's the real world. But without a base to bring everything together and focus priorities, that leads to failure or problems further down the line. submitted by /u/Critical_Bat_8914 [link] [comments]

Recently had an AI integration for basically everything IT related. Ticketing system, kb article, assets, blah blah blah. It pretty much just acts as a triage/organizer for projects and tasks, but can add notes and update things for us. I was working on updating an internal KB article and decided to try the cool “AI helper” to make quick work of it all. Well, it decided to delete basically everything in our knowledge base. Like gone, hundreds of articles just wiped out! My heart sank. I tried to restore the articles, but then the site crashed. Took me a few minutes to get it back, and thank God I was able to restore every article. I’m pretty annoyed to be honest. Not using that crap again. submitted by /u/Mustard_Popsicles [link] [comments]

I have published a (very) long article about analysing multiple aspects of feature availability on Databricks. The general gist is to filter regional availability through the lens of the Lakehouse WAF. With that aperture I create a measure of enterprise readiness. My general finding is that the lower ranked tiers are at an significant and increasing disadvantage relative to the frontier regions. I also include a list of suggestions as to how to approach analysing your home region's overall Databricks readiness sourced from my current experience with building a production. My best practice if you will. The above diagram shows feature releases aggregated by month since 2023. Don't hesitate to reach out if you've got questions. submitted by /u/GeirAlstad [link] [comments]

I am looking for dedicated server in North America something in budget atleast 128gb ram

We are HostCram LLC , a US-based Wyoming registered company ( Filing ID: 2016-000736577 ) Back with our new Ryzen 7700 & 7900 KVM Deals on LowEndTalk. Our company registration can be verified here . We also provide Private Proxy , Email Servers , IP Rental & ASN services. We are present on dozens of ISPs, businesses, and hosting networks, with servers offering BGP sessions and IP announcements. One month free service for clients paying by cryptocurrency!! Post benchmarks on any forum and never be charged for bandwidth overuse. Existing clients can get Free Offsite Backup and restore slots enabled by posting a short review on any forum. Also, thanks for your continuous support, recommendations, and trust in me. New Features Included with Every Plan: Full Windows Server 2019 & 2022 automation Free Offsite Backup and Restore slots Redesigned & more secure Cloud Portal DHCP support for seamless network configuration Free IPv6 assignment directly from Cloud Portal Our Custom Built Ryzen 7000 Nodes Specification: Supermicro & In-Win Chassis with 80+ Gold PSU ASRock Rack, Gigabyte & Supermicro B650E Mobo AMD Ryzen 7700/7900 Processor with Boosted Speed Dynatron & Supermicro CPU Cooler for maximum cooling 192GB Crucial/Corsair/G.Skill DDR5 RAM Kits 2x2TB Samsung 990 Pro/Nextorage 4.0 NVMe (in ZFS RAID1) Debt-free, fully owned hardware inside FiberState SLC1 – Salt Lake City, Utah, USA data center. Looking Glass > https://lg-slc.hostcram.com Future processor upgrades at no additional cost! RYZEN: Killer-1C 1x RYZEN 7700 Core @ 5.30 GHz 3 GB DDR5 RAM 30 GB NVMe Storage 10 TB Bandwidth @ 10 Gbps Port 1 Dedicated IPv4 (Free IPv6) Order now: $30/Year or $50 for 2 Years (Recurring) Very limited stock. More plans can be found here: https://www.hostcram.com/vps Accepted primary payment methods: ACH, Debit/Credit Cards, PayPal, Payoneer, Bank Transfer, Bitcoin, Litecoin, Ethereum, USDT & 100+ Other Cryptocurrency One month of free service for clients paying with cryptocurrency. Refund Policy: Plans or services listed under this thread don't qualify for a refund. If you're unsure about something, ask us before buying. Don't buy if you want to do CPU mining. Don't buy if you want to use 100% of your resources 24/7. Those are not email servers. Contact us for buying email servers. Signup link > https://my.hostcram.com/order/main/index/register Limited stock available. Benchmarks are for reference only. We don't guarantee the same level of performance. We will assign you to a different node once the current one is sold out. Each order will be reviewed later. We accept orders placed using a proxy or VPN, as long as your account has valid contact information. All questions are answerable via support ticket and live chat . Don't forget to read our TOS , AUP & Privacy Policy before signing up. Thanks.