CommPulse

OVH launched a new VPS line 2027 with changes in hardware and pricing. This line goes back to old standards, but without the smallest plan existed before 2026. The prices going up almost 100% The launched hardware is unknown, waiting for yabs, if someone is willing to test. Sadly no local zones and less locations than before.

I recently joined a small municipality (~150 employees) as their first-ever internal IT Manager . Before me, everything was handled by an MSP. They actually didn't choose to build an internal IT department, the MSP informed them they could no longer support them because the municipality had simply grown too large for their available staff. According to the former admin, they were losing money on the contract and couldn't recruit enough people to keep up. He left me a list of passwords and no documentation at all. On my first day, the MSP walked away completely. I'm currently alone, although two IT technicians are supposed to join soon. Here's what I inherited: ~150 employees 20 buildings connected through private fiber back to the main site Single Internet connection at HQ 100% Fortinet environment (FortiGate, FortiSwitch, FortiAP) Network hardware is mostly D-series and approaching EoL Most remote buildings are tiny (usually one switch and one AP) Server infrastructure: VMware ESXi/vSphere Veeam backups Main site: 3 production hosts 1 SAN Secondary site: 2 backup host 1 SAN 2 NAS Backup site receives Veeam backups and VM replicas for DR (it's 1 km away for HQ tho) The part that really surprised me: There are 5 completely separate Active Directory domains , each with its own domain controller and file server. They're not in the same forest . Examples: Administration Public Services Library etc. Some of these domains have fewer than 15 users. To make it even more interesting, all four file servers are still running Windows Server 2008. All domains sync to the same Microsoft Entra tenant through Entra Connect. Remote users connect through FortiClient SSL VPN with FortiToken MFA, and WFH usage is fairly common. The former admin told me his long-term plan was: Migrate VMware → Proxmox Replace the entire Fortinet network with UniFi Personally, I'm not convinced either of those would be my first priorities. My instinct is that the Windows Server 2008 boxes, AD consolidation, hardware lifecycle and documenting everything probably deserve attention before a platform migration. If this landed on your desk, what would your roadmap look like? What would you tackle in the first 3-6 months and what would you intentionally leave alone? submitted by /u/Other-Bison-3071 [link] [comments]

Hey everyone! Could use some help here. I am trying to get Autopilot to work. I have it set as User-Driven and it goes through ESP and passes everything. The problem I am running into is that after it passes it goes to just a blank screen, but you can move the cursor. I have tried a few things like, CTL+ALT+DEL, CTL+SHIFT+ESC, CTL+WINODWS KEY+R, etc and nothing works. It just stays as a blank screen. I left it overnight hoping it just needed time but nothing. Now, when I do hit the power button, the 'Slide down to shut off PC' does pop up and when I do power it off and power it back on, it goes to the user login, but the email I use to get Autopilot going for said computer, the profile does not populate. I click into 'Other User' and type the email with the OKTA password I used when first going, but nothing. I am stuck and dont know what to do. Thank you submitted by /u/mm0750 [link] [comments]

This is a DoD-related air-gapped network with about 2000 end users. We're using Azure DevOps now as a ticketing system and we'd like to invest in a more professional solution. I've used Solarwinds Web Help Desk in a similar environment in the past and wasn't a fan, it was buggy, ancient UI, and expensive. Does anyone know of a better alternative? submitted by /u/Intelligent-Owl5620 [link] [comments]

Hello all. Apologies if this is the wrong place, but I'm wondering if anyone has experience with physically securing iMacs. We will have two public facing, 24/7 iMacs in an exhibition. They will be in kiosk mode with Jamf, but I need to make sure they aren't stolen, as well. I found the Kensington safe dome which seems ideal, but nobody has it in stock, and we don't have the time to wait weeks or months. Should I just use a cable lock and loop it through and around the stand and then bolt it to the table? Does anyone have any other suggestions? submitted by /u/RandomPony [link] [comments]

We have a new client I am setting up. We put the full name of the clients business in the company name when setting it up as "Always Be Cooking Services Ltd" (not the real name) This then means when they sync folders from SharePoint it is in the patch "Always Be Cooking Services Ltd\library\etc" I want to shorten the name to something like "ABC Ltd" but its not in the Organisation settings where it used to be. I can find it in the billing information, but thats greyed out and says to change I need to contact MS Where are you meant to change this now so you dont end up with huge path names in Windows when you sync files? submitted by /u/PEBKAC-Live [link] [comments]

Docs: https://www.pilum.dev/docs/getting-started/introduction/ The problem: I run side projects across GCP, AWS, and Cloudflare, and each one has its own deploy incantation. gcloud commands for one, SAM for another, wrangler for a third. I kept forgetting the flags and the order of operations and wanted a simpler CI/CD pipeline. Pilum is a single binary (Go, Cobra) that reads one pilum.yaml and handles the deploy for whichever provider the service targets. Define your services once, then pilum deploy will build, push, provision, and deploy. What it supports today: - GCP Cloud Run - GCP Cloud Run Jobs - AWS Lambda - Azure Container Apps - Cloudflare Workers - Homebrew - GitHub npm packages GCP is the most mature of the platform hence why I am sharing it here! It's not trying to be Terraform or Pulumi; there's no state file and no general-purpose infra provisioning. Happy to answer questions about the internals. Here is a write up about it a bit more: https://logicalbytes.dev/posts/pilum-road-to-production/ . But if anyone wants to add a provider, there's a contributing guide for adding exactly that! submitted by /u/Flannel007 [link] [comments]

submitted by /u/TeamVenti [link] [comments]

We have a user that used to be the owner of our Azure subscription. We changed the subscription owner a few months ago, but they are still receiving the "Action recommended" emails from [email protected] . For example, last night they received a message with subject "Action recommended: Migrate your Azure Service Bus SDKs by 30 September 2026". The new subscription owner is also receiving these emails. Any ideas how I can turn them off for the former owner? There is no unsubscribe option. Thanks. submitted by /u/FamiliarShirt [link] [comments]

I just got the email from Reliablesite that they are taking preorders for their Mexico DC. Interesting location, never thought I would see Mexico given they already have Miami/Los Angeles. Link to Mexico servers: https://www.reliablesite.net/dedicated-servers/mexico-dedicated-servers.aspx Email: Our Mexico location is in its final phase. Racks are in, the network is being tested, and we're close to the official launch. As we prepare, pre-orders for our AMD EPYC and Ryzen dedicated servers in Mexico are now open. Secure your preferred configuration today and be among the first to deploy when our new location launches. Choose from our high-performance bare metal, available for pre-order: AMD EPYC 4545P 256GB AMD Ryzen 9950X 256GB Our Querétaro, Mexico location will mirror the bare metal infrastructure of our U.S. and Europe regions, with instant provisioning, 24/7 in-house technical support, and DDoS protection enabled by default. All servers in Mexico include 500 Mbps of unmetered bandwidth. Claim Your Server Today If you have any questions, simply reply to this email or open a ticket, and our team will get back to you shortly. Mexico is one of several new locations we’re introducing this summer at ReliableSite. We’ll have more to share soon. — The ReliableSite Team

With more and more teams using LLMs and inference services wondering how everyone is making decisions about their infrastructure like are you choosing one major cloud provider , using Kubernetes across multiple providers or trying platforms like RunPod, CoreWeave, Yotta Labs, Lambda to keep things flexible ? more interested in whether anyone has found a real way to move workloads between different GPU providers without having to maintain completely separate deployment processes . submitted by /u/makemoney-TRADEnIT [link] [comments]

I’m looking for feedback from anyone running a similar setup: On-prem AD RDS with multiple session hosts RD Web HTML5 published through Entra Application Proxy FSLogix profiles Microsoft 365 Apps with Shared Computer Activation Entra Connect Sync The setup is working, but Microsoft 365 sign-in inside the RDS sessions is inconsistent. Some users have manually added their account under Access work or school, which has created duplicate user-owned device registrations. I’m planning to hybrid join the session hosts so users can get better SSO for Outlook, Teams, OneDrive, and Office when they log into RDS. Has anyone done this successfully? Any issues FSLogix roaming, MFA, Conditional Access, duplicate device registrations, or users moving between session hosts? Mainly looking for any warnings or words of wisdom! submitted by /u/frankfrrris [link] [comments]

Can't say it isnt comical, given they laid off like 7k workers this morning... But yeah, 3 of my clients are experiencing Service Now Outages currently. submitted by /u/AV1978 [link] [comments]

Hey all, I’m setting up iPhones with Apple Business Manager with Intune ADE and I’m stuck on a very annoying issue. The devices are assigned to the correct MDM server in ABM and they sync into Intune fine. In Intune, under the Enrollment Program Token > Devices, the iPhones show that they're ready to enroll. So from the Intune side it looks like they’re ready. But when I fully erase the iPhone using Apple Configurator (iOS app), it completely skips the Remote Management screen. It just continues with normal iPhone setup. I'm expecting it to go like: Hello > language/region > Wi-Fi > Remote Management What happens: Hello > language/region > Wi-Fi > normal setup, no Remote Management Things already checked/fixed: iOS/iPadOS enrollment restrictions are now Allow APNs is active ABM assignment is correct Devices are not removed/released from ABM Devices are visible in the correct Intune enrollment token Profile is assigned I’m not using the enrollment policy “device group” field for a dynamic group anymore, because that seems to be for Enrollment Time Grouping only This worked once last week on one iPhone, but now new devices won’t hit Remote Management at all. Question: Can Intune show “Ready to enroll” and “Profile Assigned” while Apple activation still doesn’t serve the ADE profile? Is this usually a stale profile/policy issue, old ADE Profile vs new Enrollment Policy weirdness, or something else? Any specific places/settings I should check? (i used copilot for the summary of this question) Im genuinely going insane yall... submitted by /u/Momientje [link] [comments]

Hey guys how do yall do IT Training? At one point I had my teams up to a 92% completion rate and it has been a pretty steady fall off from there. any suggestions on release cadence? Also I am considering doing a training amnesty thing where I will remove all the previous training and start over so they don't have a couple hours to do at this point but that feels like rewarding shitty behaviour. I am just at a loss due to how drastically it has fallen off. submitted by /u/GasBackground3335 [link] [comments]

Is anyone else dealing with an issue like this? I am a solo IT employee for around 30 end users. We have a mixed fleet, some P16 Gen 2 with NVIDIA GPU, and mostly T16 Gen 3 (Intel Graphics) Users keep reporting that their networking stops working randomly and the only fix for them is a reboot. When I started digging into this issue, I realized that the computer was handling ICMP requests just fine, but anything attempting TCP connections was failing. What I actually found from reviewing dumps and logs was the the display or GPU driver locking up, causing the entire OS GUI to freeze solid. Sometimes Windows would recover, and then leave a user in a weird state where they couldn't use the internet, and even UAC prompts would not come up. This is where I learned that if you could get CMD open, you could ping things. But anything trying to make an actual connection like OneDrive or Teams, browsing the internet etc just hung. Some other distinct things I've noticed: Way worse on docked setups (Lenovo Thunderbolt 4 Universal Docks, external monitors) than laptops used standalone. The NVIDIA GPU models seem to hang the hardest — full freezes, sometimes forcing a hard power-off. The Intel-graphics models get it too, just a bit less often. Waking from sleep is a common trigger. Chasing driver updates has helped some but not fully solved it. It feels like it's sitting somewhere between driver bugs and possibly a hardware quirk on a subset of units. Curious if this rings a bell for anyone else running a Lenovo mobile-workstation fleet (or docked laptops in general) I am at a loss with these issues. Lenovo Premier Support has offered very little guidance so far. submitted by /u/borderline_tentative [link] [comments]

I could use a senior person's advice on this, as this is a tough nut to crack. Intro: I was tasked with taking an existing, kind of expensive Azure VD setup and migrating it to something leaner and more efficient. I wanted to use VMSS with dynamic autoscaling (less manual intervention, lower risk of human error), so I looked into how the VMSS would create new machines. This would require a machine image , but we have custom software, so I made an Azure image gallery (private) with a custom image definition and version (Specialized) with the software preinstalled. Issue 1: From my reading, a Specialized image will cause problems, as any host instantiated from that image will have the same hostname, therefore creating the risk of machine name conflicts on the network/in DNS and require manual corrective actions. Which we don't want for an autoscaling system. Issue 2: The alternative to the Specialized image is a Generalized one (equivalent to running Sysprep on the original VM). But this creates other potential issues: the resulting machines need a hostname and local admin credentials at boot, which if they're being instantiated automatically by the VMSS, they're not going to have (unless...? Correct me if I'm wrong). Issue 3: Finally, producing either a Generalized or a Specialized image from a VM will render that VM inoperable , which is absurd because I want to keep that VM to produce future image versions with updated patches, apps etc. I read that the VM should be snapshot before being generalized and captured, but in my experience creating a snapshot also renders the VM unusable. Am I right? Or was my snapshot VM rendered unusable by another cause? (Note: I placed my snapshot in another Azure subscription, this might have affected the snapshot VM) So basically I am trying to build a safe, repeatable process for patching and republishing my custom image. What I've got so far is: - Have a "golden" VM on hand - Do patches on the VM - Snapshot the VM - Capture image (Generalized?)[breaks the VM] - Publish new image version in Image Gallery from capture - Apply snapshot to VM [fixes the VM back up??] - Wait for next patch cycle Does this look logical at all to you? submitted by /u/RequirementFit1128 [link] [comments]

I've got around 290 VDI VMs that were created with P20 OS disks due to IOPS concerns with FSLogix. They're not even coming close to the provisioned IOPS limit and because of that we want to reduce them to P10 disks to save on costs while still allowing for enough provisioned IOPS for FSLogix. In the portal, doing this throws an error that reducing disk size is not supported. The docs say we should create snapshots of the disks then create new disks from the snapshots. That is a bit of a non-starter given the quantity of disks involved - I'm sure it could be automated but our automation devs might have a really long backlog before they can have a look at it. I have a support case to ask if they can execute the SKU change on the back end in some way, but is there any way we can execute the change ourselves? All the disks are below 128gb in size within the OS so size isn't a concern. https://learn.microsoft.com/en-us/azure/virtual-machines/disks-performance-tiers?tabs=azure-cli#restrictions mentions that tier reductions can happen only once every 12 hours, so it's technically possible. submitted by /u/MohnJaddenPowers [link] [comments]

Hi everyone, I'm looking for some guidance on what the recommended architecture is for SageMaker Unified Studio in an enterprise environment. Our current access model works roughly like this: Users request AWS access through our enterprise identity/access management process. Once approved, they receive an AWS application in Microsoft MyApps. Selecting that application signs them into the AWS Console. The problem is that everyone ultimately assumes the same highly privileged role in a shared AWS account. As a result, every user effectively shares the same environment. If User A creates resources (EC2 instances, SageMaker notebooks, S3 buckets, uploads datasets, etc.), User B can generally see or interact with them because they're operating with the same permissions. This obviously isn't ideal from a governance, security, or data privacy perspective. What we'd like instead is something along these lines: Each user has their own isolated SageMaker environment/workspace. We can control which datasets or S3 buckets each user can access. We can control which instance types or compute sizes users are allowed to launch. Different users or teams can have access to different projects without exposing everything to everyone. We'd still like to manage everything centrally rather than creating completely separate AWS accounts for every individual (unless that's actually considered best practice). For those of you running SageMaker Unified Studio (or even SageMaker Studio more generally) in an enterprise, how have you solved this? Thanks in advance! submitted by /u/DieLyn [link] [comments]

I've been curious how different teams approach this in practice. Imagine you're on call and something in production starts behaving differently. It's not immediately obvious whether it's a deployment, infrastructure change, configuration change, scaling event, cloud service issue, or something else. Once the alert fires, how do you actually answer questions like: What changed? When did it change? Was the change intentional? What's the fastest way to confirm the root cause? I'm less interested in the tools themselves (Terraform, Kubernetes, CloudTrail, Grafana, etc.) and more interested in the actual investigation workflow that experienced engineers follow. For example: Where do you usually look first? Which sources of truth do you trust the most? What part of the investigation tends to consume the most time? Are there still manual steps that you wish were easier? I'm trying to understand how this is handled in real production environments, especially at companies running on AWS/Kubernetes. Thanks in advance—I’m hoping to learn from people who've been through enough incidents to know what actually works. submitted by /u/Narrow_Power [link] [comments]