79
Reddit SystemAdmin. Thanks @reddit2telegram and @r_channels.
Admins: We have people sending PMs trying to get people to do ads in sysadmin
Just got this PM
"Hey! Your comment in the r/sysadmin thread on securing legacy and manufacturing environments, about terminating VPNs at the firewall so traffic can be inspected, was really interesting. I'm with Captain Words, a small team that works with network security companies. We're looking for a few hands-on network and security engineers who'd share honest, firsthand takes on Reddit now and then (segmentation, NAC, zero trust), always clearly marked as a paid partnership. It's paid, low effort, and you only say what you actually think. Open to hearing more?"
Just be aware.
https://redd.it/1xq8rqw
@r_systemadmin
SonicWall CVE-2026-19868: another login method can skip SAML and its MFA on SSL-VPN. Exploited per CISA, no workaround
SonicWall's advisory SNWLID-2026-0014, published Nov 6, covers seven SonicOS flaws. One of them, CVE-2026-19868 (CVSS 7.1 per SonicWall, 7.5 in CISA's ADP entry), affects SSL-VPN services configured for SAML. A user with valid credentials for an alternate authentication method can bypass the SAML controls, including SAML-enforced MFA.
SonicWall says it investigated a report of possible exploitation and has not shared details. CISA added the CVE to KEV on Nov 6, with a Nov 20 deadline for federal agencies.
Affected: SonicOS Gen7 up to 7.3.3-7015 and Gen8 up to 8.2.2-8015. Fixed in 7.3.4-7013 and 8.2.3-8015. SonicWall lists no workarounds.
The same update fixes two management interface flaws rated 8.8 that let unauthenticated attackers act under specific conditions. It also fixes pre-auth buffer overflows in SSL-VPN and TACACS+ and weak password hashing on virtual appliances.
After patching, check which authentication methods the SSL-VPN still accepts besides SAML.
Has anyone seen unexpected logins on a SAML-protected SSL-VPN, and what did the logs show?
Sources: BleepingComputer (Nov 7), CISA KEV (Nov 6), NVD, SonicWall PSIRT SNWLID-2026-0014.
https://redd.it/1xq5o02
@r_systemadmin
At my wit's end trying to enroll one laptop in Intune
I'm the IT administrator for a company with a hybrid Active Directory / Microsoft Entra ID environment. I'm having an extremely frustrating issue getting one Windows 11 computer enrolled in Microsoft Intune.
**The main problem: Windows repeatedly attempts Intune enrollment using Device Credential even though the effective domain GPO and registry settings explicitly specify User Credential throwing error 0x80180018**
Other computers in the same environment have enrolled successfully.
I've spent considerable time troubleshooting this and would appreciate input from anyone who has encountered this behavior.
**Environment**
* On-premises Active Directory synchronized with Microsoft Entra ID.
* Windows 11 domain-joined workstation
* Microsoft 365 Business Premium license assigned to the user, including Intune.
* Intune MDM user scope configured to **All**.
* Automatic MDM enrollment configured through domain Group Policy.
* Computer belongs to the correct security group targeted by the enrollment GPO.
* Other hybrid-joined computers have successfully enrolled using the same environment and policies.
* Windows build reported by MDM diagnostics: `10.0.26300.9711`.
**The Main Problem**
* GPO explicitly specifies **User Credential** for automatic MDM enrollment.
* Registry confirms `UseAADCredentialType = 1`.
* Windows creates the normal automatic enrollment scheduled task.
* Scheduled task executes: `deviceenroller.exe /c /AutoEnrollMDM`
* Despite this, Windows repeatedly attempts enrollment using **Device Credential**.
* Enrollment fails with an MDM user-license validation error.
* Failed enrollment attempts recur approximately every 9–10 minutes.
* Each attempt creates or updates an incomplete enrollment record.
* The computer never successfully appears as Intune-managed.
**Exact Event Log Errors**
From:
`Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Enrollment`
**Event ID 90:**
`Auto MDM Enroll Get AAD Token: Device Credential (0x0), Resource Url (https://enrollment.manage.microsoft.com/), Resource Url 2 (NULL), Status (The operation completed successfully.)`
**Event ID 91:**
`Auto MDM Enroll Enrollment Information: AadResourceUrl (https://enrollment.manage.microsoft.com/enrollmentserver/discovery.svc), DiscoveryServiceFullUrl (https://enrollment.manage.microsoft.com/), TenantID (...), Upn (fooUser@midwestcontracting0.onmicrosoft.com)`
**Event ID 52:**
`MDM Enroll: Server Returned Fault/Code/Subcode/Value=(UserLicense) Fault/Reason/Text=(Failed to issue token: UserValidation).`
**Event ID 76:**
`Auto MDM Enroll: Device Credential (0x0), Failed (There was an error with your Mobile Device Management (MDM) user license. Contact your system administrator.)`
* Scheduled task failure result: `2149056536` (`0x80180018`).
* Group Policy MDM extension also reports `2149056522` (`0x8018000A`), indicating Windows believes the device is already enrolled.
* The device is not actually managed by Intune.
**Hybrid Join / Authentication Checks**
Ran `dsregcmd /status` in the user's context.
Results:
* `AzureAdJoined : YES`
* `DomainJoined : YES`
* `DeviceAuthStatus : SUCCESS`
* `AzureAdPrt : YES`
* `WamDefaultSet : YES`
* MDM enrollment URLs are populated correctly.
Additional checks:
* User has Microsoft 365 Business Premium with Intune enabled.
* Intune MDM user scope is All.
* Enrollment device limit is 5.
* User is not known to be exceeding the enrollment limit.
* Removed an additional personal Microsoft account that used the same email address and rebooted the computer. No improvement.
**Group Policy Checks**
Created a domain GPO named **Intune Auto Enrollment**.
Configured:
`Computer Configuration > Administrative Templates > Windows Components > MDM > Enable automatic MDM enrollment using default Azure AD credentials`
Settings:
* Enabled
* Credential Type: **User Credential**
Registry settings:
`HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\MDM`
* `AutoEnrollMDM = 1`
* `UseAADCredentialType = 1`
* `MDMApplicationId`
Data Migration
Hey Everyone
We are currently in the process of moving roughly 8TB of data from SharePoint Online to a local server
Currently we are using RClone for moving data around
WinDirStat and TreeSize for analysis on our data but we are looking for a good tool that can identify duplicate data (such as files that are roughly the same name / same file hash etc )
Any recommendations?
https://redd.it/1xq1l4h
@r_systemadmin
Data Migration
Hey Everyone
We are currently in the process of moving roughly 8TB of data from SharePoint Online to a local server
Currently we are using RClone for moving data around
WinDirStat and TreeSize for analysis on our data but we are looking for a good tool that can identify duplicate data (such as files that are roughly the same name / same file hash etc )
Any recommendations?
https://redd.it/1xq1ktz
@r_systemadmin
Real case of yubikey usage in corporate enviroment
I am preparing passwordless project for my company. And i got big question... how do you force user to use the yubikey and not some other less save auth methods? My idea was to block password on windows log on, because i want passwordless, but in the same time i need to have some fall-back authentication and the methods how to block passwords in hybrid-joined enviroment are disabling admin workflows (Run as dif user, run as admin etc.). My other idea is to disconnect pcs from company network, when Yubikey 5 is not connected with the right certs (NAC/VPN), but maybe there is easier methods or something where FIDO2 auth is enough and you do not need to prepare PKI. Do you have some experience?
https://redd.it/1xpc2m5
@r_systemadmin
Microsoft for Education Minecraft?
First time creating a submission for issues we're having in getting this to work for our students.
We have HP ProDesk G7 with 16 gigs of RAM. We created a Smart Deploy Windows 11 image with latest updates. It has a 500 Gig SSD drive. We get the following System Prep Tool error 3.14.
Sysprep was unable to validate your Windows Installation. Review log file %windir%\\System32\\Sysprep\\Panther\\Setupact.log for details.
We are looking at having to purchase new workstations. What would be your recommendations for Memory on new workstations in order to accommodate MS Minecraft and the next Windows OS?
We have MS Volume licenses and have valid keys.
Any assistance would be greatly appreciated.
https://redd.it/1xpf0n8
@r_systemadmin
SPF validation error and DNS record faulty
Anyone getting this garbage SPF validation error crap with their outlook emails lately? I can't seem to send emails to outlook accounts from my outlook email. I have no problem with sending emails to gmail or yahoo though. I assume it's something with the DNS records from some basic research. Anyone have any idea how to fix this?
https://redd.it/1xpw96a
@r_systemadmin
M365 Release preferences retiring, does anyone see the new ones in their tenant yet? or am i misunderstanding?
https://learn.microsoft.com/en-us/microsoft-365/admin/manage/configure-release-options?view=o365-worldwide
"To prepare for the retirement of Targeted release, we recommend configuring Standard release and Deferred release options to manage when users in your organization receive generally available Microsoft 365 services as Microsoft delivers features through the new release model."
does anyone see the new release channels > i still see the standard and target release options under organization profile > release preferences. i would expect to see the new standard, deferred and frontier.
https://redd.it/1xpfroj
@r_systemadmin
How to find specific reason Windows 11 device did not restart for updates outside of active hours?
The device has active hours set and ends in the evening, and a Windows update policy set to allow automatically restarting before the deadline outside of active hours.
The device does not sleep or hibernate overnight and was not powered off.
The user was not active on the computer outside of active hours.
Instead of only guessing what the issue might be, is there a specific log entry to look for anywhere in Windows 11 that specifies the reason it did not attempt to restart at any time overnight or if it tried and failed to restart? For instance, the device thinking the user is still actively using the device, anti virus scanning etc.?
I‘m trying to look through event logs and windowsupdatelog, but don’t know what text to look for or if the info is written somewhere else.
https://redd.it/1xph7r3
@r_systemadmin
What are you using for immutable cloud storage for enterprise backups?
We're evaluating Veeam and Veritas NetBackup for an enterprise backup environment and need immutable S3 compatible cloud storage for roughly 250 TB of backups.
Our main requirements are immutable storage for disaster recovery, a budget of around $20k per year, minimal or no egress fees, reliable restore performance, and enterprise level reliability.
We're currently comparing options such as Wasabi, backblaze, AWS S3 Glacier and vendor managed storage.
For those managing large backup environments, what cloud storage are you actually using and how has it performed during restores?
Anything you would avoid or specifically recommend?
https://redd.it/1xpobo6
@r_systemadmin
Have your company ever been compromised?
I have been reading some books and watching some videos on incidents, from big stuff like nopetya , Stuxnet , etc.. all the way to smaller companies on my country that have been compromised and hacked before. Which I find really interesting, since it gives someone that is new to the industry good insights and lessons, on how devastating something like a ransomware can be for a company; and where normally starts. Plus nowadays its seems that it is a matter of WHEN rather than IF with all the CVEs and how crazy advanced social engineering is getting.
But i was wondering if you have ever lived some situation where a company that you worked for ever got compromised in some way , and brief story on how were you able to stop it or recover from it, and what you learned?
I know that on some companies there was the need to hire an Incident response team, while others maybe did not have backups that were good enough to start production again , etc..
So i would assume from a sysadmin perspective this would be one of those worst case scenarios.
So out of curiosity, if you feel you could add an interesting experience would be nice to read about, and stuff that you think was important to learn from it.
It feels like redundant to say but , anyways = off course not looking for details and points that would expose anyone's job or company.
https://redd.it/1xpl6wc
@r_systemadmin
I'm studying to become a system administrator, but I feel like I don't know anything.
This year, I finally started seriously getting into my future profession.
Over the past year, I've deployed an mtproto proxy, set up a vpn using the vless protocol through the 3x-ui panel, hosted websites using nginx, configured nginx as a reverse proxy, and deployed my own static websites and file hosting services.
I did all of this on the cheapest vps I could possibly find.
Recently, I also managed to get a public static IP address from my ISP through my father. This means I can now host game servers, file servers, and even set up remote access to my PC without relying on workarounds. I've already hosted a Minecraft server and experimented with RDP.
However, there's one thing bothering me: I relied heavily on AI throughout most of this process. Quite often, I felt like I was simply copying and pasting commands without fully understanding what I was doing.
I know I've gained some practical experience, but I still feel like I barely know anything.
So I'd like to ask more experienced system administrators: Is it normal to feel this way when you're starting out? And how do you move from following AI-generated instructions to actually understanding what you're doing?
https://redd.it/1xphe4w
@r_systemadmin
How are you handling Autodesk ACC/Forma updates?
Hey,
We use ACC/Forma. We currently use PDQ Connect. I see PDQ have an Autodesk ACC/forma package there so I could set up an automation to patch.
The bit that has me concerned though is if something goes wrong during the upgrade, and the user has unsynced items/errors.
Just curious to see if anyone else here is patching ACC/Forma automatically and see how it has been for you.
Cheers!
https://redd.it/1xpd241
@r_systemadmin
Microsoft Authentication failed when using Mailstor
So uh hey everyone, maybe im just dumb or something like that but here is the issue:
We are using MailStore, its a tool which archives all Mails from all of our Users, for a half a year or so we are experiencing following issue:
When trying to access MailStore via Web and loggin in via your Microsoft User, it drops you out as soon as youre trying to access your mails, browser console is showing:
polyfills-7L7SEW4Y.js:1 GET https://XXXXXXX/api/tokens/user 401 (Unauthorized)
main-de-7F3CDFE2.js:16 13:36:46.167 INFO: HTTP Error 401, MS-Error 1001: Redirecting to login ...
If youre deleting Cookies it works 50/50 of the Time and after a couple Days we are back at the same Issue, different browsers tried, no difference, Entra is set up correctly with APIs/Tokens, in MailStore Server it gets registerd as a new Session which stays open for a couple of Minutes, on Entra on the other Hand there is no Login registred in the Logs,
anyone perhaps experienced similar with Microsoft Logins? (doesnt have to be Mailstore but perhaps a seperate Tool/App?
Id be happy for any recommendations.
https://redd.it/1xpc64r
@r_systemadmin
M365 Software OATH Token not working anymore?!
Today I wanted to connect to the O365 Account and I get this error message below:
Besserer Schutz für Ihr Konto mit der Microsoft Authenticator-App. Weisen Sie Ihre Identität ganz einfach durch Pushbenachrichtigungen nach.
I had created a group a few month ago where iam allowed to use Software OATH Token. I dont have a Android or iOS compatible device instead I have ubuntu touch smartphone only.
What do I need to configure that Software OATH works again? The option to set up another Method is also missing.
This is timely related a few days after we have enabled Microsoft Auth instead of ADFS. But initally it was still working with Microsoft Auth and the OATH Token.
https://i.imgur.com/xAg7hz7.png
https://redd.it/1xq6jqe
@r_systemadmin
is blank.
Additional troubleshooting:
* Confirmed the computer is in the appropriate AD security group.
* Confirmed the GPO is applying to the computer.
* Ran `gpupdate /force` repeatedly.
* Generated and reviewed a full Group Policy Results HTML report.
* Confirmed the enrollment GPO is the winning GPO.
* Confirmed both registry preferences applied successfully.
* Confirmed there are no unexpected additional values in the MDM policy registry key.
* Confirmed the MDM Administrative Template setting is Enabled with User Credential.
* The Group Policy MDM extension fails with a message indicating the device is already enrolled.
**The effective policy is correct, but Windows continues using Device Credential.**
We also enabled the same MDM enrollment setting through Local Group Policy as a troubleshooting step.
**Important: The problem existed for hours before the Local Group Policy change.** That change did not cause the original issue and did not resolve it.
https://redd.it/1xp676n
@r_systemadmin
At my wit's end trying to enroll one laptop in Intune
I'm the IT administrator for a company with a hybrid Active Directory / Microsoft Entra ID environment. I'm having an extremely frustrating issue getting one Windows 11 computer enrolled in Microsoft Intune.
The main problem: Windows repeatedly attempts Intune enrollment using Device Credential even though the effective domain GPO and registry settings explicitly specify User Credential throwing error 0x80180018
Other computers in the same environment have enrolled successfully.
I've spent considerable time troubleshooting this and would appreciate input from anyone who has encountered this behavior.
Environment
On-premises Active Directory synchronized with Microsoft Entra ID.
Windows 11 domain-joined workstation
Microsoft 365 Business Premium license assigned to the user, including Intune.
Intune MDM user scope configured to All.
Automatic MDM enrollment configured through domain Group Policy.
Computer belongs to the correct security group targeted by the enrollment GPO.
Other hybrid-joined computers have successfully enrolled using the same environment and policies.
Windows build reported by MDM diagnostics: 10.0.26300.9711.
The Main Problem
GPO explicitly specifies User Credential for automatic MDM enrollment.
Registry confirms UseAADCredentialType = 1.
Windows creates the normal automatic enrollment scheduled task.
Scheduled task executes: deviceenroller.exe /c /AutoEnrollMDM
Despite this, Windows repeatedly attempts enrollment using Device Credential.
Enrollment fails with an MDM user-license validation error.
Failed enrollment attempts recur approximately every 9–10 minutes.
Each attempt creates or updates an incomplete enrollment record.
The computer never successfully appears as Intune-managed.
Exact Event Log Errors
From:
`Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Enrollment`
Event ID 90:
`Auto MDM Enroll Get AAD Token: Device Credential (0x0), Resource Url (https://enrollment.manage.microsoft.com/), Resource Url 2 (NULL), Status (The operation completed successfully.)`
Event ID 91:
`Auto MDM Enroll Enrollment Information: AadResourceUrl (https://enrollment.manage.microsoft.com/enrollmentserver/discovery.svc), DiscoveryServiceFullUrl (https://enrollment.manage.microsoft.com/), TenantID (...), Upn (fooUser@midwestcontracting0.onmicrosoft.com)`
Event ID 52:
`MDM Enroll: Server Returned Fault/Code/Subcode/Value=(UserLicense) Fault/Reason/Text=(Failed to issue token: UserValidation).`
Event ID 76:
`Auto MDM Enroll: Device Credential (0x0), Failed (There was an error with your Mobile Device Management (MDM) user license. Contact your system administrator.)`
Scheduled task failure result: 2149056536 (0x80180018).
Group Policy MDM extension also reports `2149056522` (`0x8018000A`), indicating Windows believes the device is already enrolled.
The device is not actually managed by Intune.
Hybrid Join / Authentication Checks
Ran dsregcmd /status in the user's context.
Results:
`AzureAdJoined : YES`
DomainJoined : YES
`DeviceAuthStatus : SUCCESS`
AzureAdPrt : YES
`WamDefaultSet : YES`
MDM enrollment URLs are populated correctly.
Additional checks:
User has Microsoft 365 Business Premium with Intune enabled.
Intune MDM user scope is All.
Enrollment device limit is 5.
User is not known to be exceeding the enrollment limit.
Removed an additional personal Microsoft account that used the same email address and rebooted the computer. No improvement.
Group Policy Checks
Created a domain GPO named Intune Auto Enrollment.
Configured:
`Computer Configuration > Administrative Templates > Windows Components > MDM > Enable automatic MDM enrollment using default Azure AD credentials`
Settings:
Enabled
Credential Type: User Credential
Registry settings:
`HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\MDM`
AutoEnrollMDM = 1
`UseAADCredentialType = 1`
MDMApplicationId
Where can I learn professional IT documentation, policies, SOPs, memos and agreements? Are there any templates or references?
I'm currently working as an IT Support and want to improve my skills beyond day-to-day technical support. I want to learn how to prepare professional IT-related documents commonly used in corporate IT departments, such as:
* IT Policies (Password Policy, Acceptable Use Policy, Email Policy, etc.)
* SOPs
* Internal IT Memos and Official Letters
* IT Vendor Agreements and Service Level Agreements (SLAs)
* IT Proposals and Reports
* Technical Documentation (Active Directory, Microsoft 365, Network Infrastructure, Servers, Backup Procedures, etc.)
* IT Asset Management and Inventory Documentation
I'm particularly interested in understanding how these documents are structured and written in real corporate environments.
**My questions:**
1. Are there any standard formats or templates that IT departments commonly follow?
2. Where can I find professional, real-world examples of these documents?
3. Are there any free resources, websites, books or courses where I can learn professional IT documentation?
4. Do organizations follow any standards or frameworks, such as ISO 27001, NIST or ITIL, when preparing these documents?
5. What Microsoft Word or other tools should I learn to prepare professional-looking documents?
I'd appreciate any templates, sample documents, GitHub repositories, reference websites or practical advice. My goal is to develop these skills and become better at IT operations and administration.
https://redd.it/1xq2sj8
@r_systemadmin
Removed by Reddit
Removed by Reddit on account of violating the [content policy. ]
https://redd.it/1xq1dmw
@r_systemadmin
Do companies use Oracle VBox to host VMs?
Title
https://redd.it/1xpzeps
@r_systemadmin
Microsoft 365 price increase - which plans went up and which didn’t
We help orgs with Microsoft licensing day to day, and the July 1 increase is still generating a lot of “what changed?” questions.
Quick version: Business Premium and Office 365 E1 stayed flat. Microsoft 365 E3 went from $36 to $39, E5 from $57 to $60, and frontline took the biggest hit (F1 from $2.25 to $3, F3 from $8 to $10). E3 also picked up Defender for Office 365 Plan 1, so if you’re paying for that as an add-on, check whether you can drop it at renewal. If you’re on an EA, the bigger number is the volume discount removal from last November, which stacks on top of this. Happy to answer any questions if you’re modeling a renewal.
https://redd.it/1xpw13k
@r_systemadmin
Go-to cross-platform remote access for small business
I'd appreciate recommendations for a cross-platform remote access solution for a small business.
I need to remotely access MacOS M*, Windows x86-64, Windows ARM, and Linux x86-64 systems.
I also need clients for all of the above and, ideally, also Android and iPadOS.
The solution they are using has yet to release ARM builds for macOS and Windows, and I have no confidence they will.
Open source is always great, but they won't mind paying a reasonable amount for a quality solution.
https://redd.it/1xpuvn8
@r_systemadmin
NVMe hardware RAID via Perc H965i or Storage spaces? 15 users 4 VMs.
I have been scouring posts here. Some are using hardware RAID controllers designed for NVMe and others are using storage spaces.
Currently running fine on RAID 10 via (6) 12Gbps SAS drives on a Perc H730 on a 7 year old server. It's 4 VM's and 15 users including RDS doing word/excel etc. nothing heavy. Replacing server with T560 and storage options are SATA 6Gbps, SAS 12Gbps (expensive) and NVMe with H965i controller. Should I use the controller or go direct to the bus without a controller. My gut says I am getting a lot more performance even with a controller's potential bottleneck and that dealing with storage spaces and giving up the familiar Perc controller interface is probably not worth a performance increase our usage would likely never utilize. Wondering what others are experiencing.
https://redd.it/1xpsc4n
@r_systemadmin
LTE Antenna suggestions for edge device
We deploy an edge device in all of our sites and they have a last-resort circuit using an internal LTE modem with dual sim's. We popped them onto Verizon and T-Mobile and they work. They really are just a last-resort redundancy should the primary internet circuit (or even circuits depending on the location) go down, but they're built in and adding a few data only lines on existing cellular accounts is cheap insurance that has been useful 2 or 3 times in as many years.
Problem is they're siting in the rack with all the network gear generally near the middle of each building. So the signal is already not great, and the detachable antenna they ship with are pretty terrible. I dont have access, nor is it probably worth, running external antennas to these for their limited use, but does anyone have a suggestion for an indoor antenna that connects via SMA that you've found to be good that you've used with a similar sdwan device or maybe cellular mobile hotspot?
It's not really important because they do work but if I can toss a little money at it to make it just a little stronger, at least in sites that are more important, why not?
https://redd.it/1xpktpu
@r_systemadmin
Went from a Senior Helpdesk/Monitoring role to a Junior SysAdmin position
>I recently joined a new team as a sysadmin. Before that, I was in a helpdesk, monitoring, and major incident management role for 4 years. I was really good at my previous job, but I badly wanted to get out because I felt there was no growth and I wasn't learning anything.
>
>Now it's been a month since I started as a sysadmin, and, God, it's so overwhelming. There are so many things I don't know, and I have to keep asking team members for help. I feel like they must be thinking how stupid I am.
>
>I know my past experience wasn't fully relevant, and the team has mostly been kind in helping me out. I take notes so I don't have to ask the same thing twice. But I feel very stressed and embarrassed. It's like I went from being a senior, high-performing resource in my previous role to suddenly being the most junior person, but the expectations are same. Also, there are a few freshers on the sysadmin team who joined 4-5 months before me, and they already seem to know everything or so I feel.
>
>I have this constant feeling that people on the team think I'm the dumbest person in the team and I keep berating myself. For those of you who made this transition, how did you get through the first few months without losing your mind?
https://redd.it/1xplxzv
@r_systemadmin
How are you managing Shadow AI in your environment?
We're trying to get better visibility into Shadow AI without simply blocking every AI service.
The two areas I'm most concerned about are employees sending sensitive company data to third party AI services and internally built scripts or tools created with that may introduce security issues.
I've been looking at ways to identify which AI services are actually being used and whether we can get more visibility into the data being sent, but I haven't found a solution that covers everything cleanly.
For those managing this in production, what are you using for discovery and governance? Are you relying on existing security tools such as web filtering, DLP or endpoint controls or have u added a dedicated AI governance tool?
I'm mainly looking for visibility and sensible guardians rather than completely blocking AI usage.
https://redd.it/1xphe6p
@r_systemadmin
Looking for Secure Client Data upload software/service
We handle applications for services that require some sensitive information (SSN, Driver's License, Bank Info) given to us for processing. While 95%+ of this is done in person, there are the few that want to email this information to us.
I'd like to find some sort of service that allows for us to maybe give the customer some kind of authorization number that allows them to upload documents which we can retrieve and enter into our system. We've used KiteWorks in the past with one of our Vendors, but that seems way overkill for this task.
I was also thinking about a mailbox with a short retention policy may be a cheaper route. Once the data is in our CIS it can be deleted.
Any suggestions on an application or other way of handling this?
https://redd.it/1xpg4ra
@r_systemadmin
Edge error after recent update?
Curious if anyone else came into their office to reports of Edge giving an error when being launched. We have several reports in our org, but trying to determine if its isolated.
Version: 156.0.4314.70
“The application was unable to start correctly (0xc000007b).”
https://redd.it/1xpczkj
@r_systemadmin
Lumen Nebraska Fiber Vandalism
Anyone else following the outages this week due to what they now suspect is fiber vandalism?
https://redd.it/1xos293
@r_systemadmin
