-
Reddit SystemAdmin. Thanks @reddit2telegram and @r_channels.
Is this normal in Infrastructure?
I recently joined a new organisation having previously been a senior IT service desk technician. I also, for clarity, have a degree and one CompTIA security certification, took advanced networking in uni, good Linux skills, cloud model understanding etc. Shortly after starting, I did notice that there seemed to be a bit of a lack of structure to the training - literally the entire approach to training bar a small portal with approximately 10-15 how to's on it (which does not go far in Infrastructure) is 'ask questions'. That's it. I am now finding myself having to actually prepare a training structure for the organisation myself, even though I'm literally the newest team member and in a Junior role. 'Ask questions' just doesn't seem to be sufficient to really call a training plan, its like being sent out into a minefield of potential mistakes and knowing I probably won't pass my probation. I don't see how I can ask questions about infrastructure that I'm not aware of, and that is not documented anywhere, but it's my first infrastructure role, so I'm not sure. For the IT infrastructure staff - is this normal?
https://redd.it/1jzsrb8
@r_systemadmin
TLS Certificate Lifespans to Be Gradually Reduced to 47 Days by 2029
The CA/Browser Forum has formally approved a phased plan to shorten the maximum validity period of publicly trusted SSL/TLS certificates from the current 398 days to just 47 days by March 2029.
The proposal, initially submitted by Apple in January 2025, aims to enhance the reliability and resilience of the global Web Public Key Infrastructure (Web PKI). The initiative received unanimous support from browser vendors — Apple, Google, Microsoft, and Mozilla — and overwhelming backing from certificate authorities (CAs), with 25 out of 30 voting in favor. No members voted against the measure, and the ballot comfortably met the Forum’s bylaws for approval.
The ballot introduces a three-stage reduction schedule:
* **March 15, 2026**: Maximum certificate lifespan drops to 200 days. Domain Control Validation (DCV) reuse also reduces to 200 days.
* **March 15, 2027**: Maximum lifespan shortens further to 100 days, aligning with a quarterly renewal cycle. DCV reuse falls to 100 days.
* **March 15, 2029**: Certificates may not exceed 47 days, with DCV reuse capped at just 10 days.
[https://cyberinsider.com/tls-certificate-lifespans-to-be-gradually-reduced-to-47-days-by-2029/](https://cyberinsider.com/tls-certificate-lifespans-to-be-gradually-reduced-to-47-days-by-2029/)
https://redd.it/1jzqwtd
@r_systemadmin
VMWare threatening perpetual license holders than haven't purchased subcriptions.
This comes from one of my colleagues that is chronically offline but he informed me that his organization received a threat of audit from VMWare because they didn't convert their perpetual licenses to subscription licenses. The wording was specifically related to questioning whether my colleague's organization used "support services" after their support contract had expired or not. It was my understanding that it's impossible to contact VMWare's support if you don't have a support contract or a subscription and that they are also making it impossible to update without a download token in a week or so.
Did anyone else get one of these emails?
https://redd.it/1jzqbte
@r_systemadmin
"No updates for Windows 11 installed on unsupported PCs." (So, what's the point to "force-upgrade" your fully-functioning W10 to W11?
Microsoft: "if you proceed with installing Windows 11, your (W11 unsupported) **PC won't be entitled to receive updates**."
What's the point to "force-upgrade" your fully-functioning W10 to W11?
If you have upgraded to Windows 11 on unsupported hardware, please share:
\- Are you are still receiving updates for Windows 11?
\- A brief overview of your unsupported configuration.
Thank You!
Asking for those who are not planning to upgrade their hardware and want to check their options for home-office, small businesses, mom-and-pop environments, etc.
https://redd.it/1jzhj5z
@r_systemadmin
How quickly do you give out Global Admin?
New IT dude comes in, do you give them GA on day one or let em bake for a while with a lower level role for a bit?
https://redd.it/1jz87l9
@r_systemadmin
Microsoft support is a meme
Hi guys im a sysadmin fo over 15 years now and my experience with microsoft support has always been mediocre at best but the latest support case I opened with them has been so ridiculous i have declared it a meme.
I opened this support case almost 4 month ago, since the start it already felt the ticket wasnt goin anywhere but wat happened today made me want to quit that shit and start rolling out Linux.
Since we rolled out 24h2 in our company we have been experiencing connectivity issues in very specific use cases.
After our own investigation we came to the conclusion the root of the issue must be something that changed between 23h2 and 24h2. So we opened a ticket with microsoft support, heres what happened.
The support engineer asked us for logs so we provided him with logs.
Weeks later he asked for more logs which we sent them.
Then he came back stating the issue was not visible in the logs, we pointed them out, he asked for more logs. Which we provided.
The next two months can be summarized as us asking for updates and him asking for more logs. After these two months he requested a call with us and our networkprovider. We asked if he could write down the questions so we could ask them in advance he stated this was not possible
So with a lot of effort on our side to get the provider to join the call was planned.
The call started me, my colleague and 2 engineers from our provider joined.
The same microsoft engineer who had been "handling" our case from the start joined and the first thing he said was: let me read the ticket, after 5 minutes he stated we have not yet provided him with any logs.
We pointed out we have been attatching logs weekly to the ticket for over two months. He stated the logs we provided where useless. We told him we provided the logs he asked us for.
He stated there were no signs of the issue in the logs.
We replied by telling him that we in fact do see all the signs at the timestamp we provided with each log.
Then we asked him if he had any questions for our provider he requested to join in the call. He said he needed to read trough the logs first. (Which clearly contracdicted his last scentence stating the logs contained no valuable information)
At this point i was already pissed of beyond belief and I said out loud: this call is not going anywhere I suggest you read up on the ticket and logs we provided an come back to us when you actually have questions.
The support guy became a little salty and started firing questions at us about the issue.
Only the questions he asked where already answered a month ago in the ticket. Which we told him.
The next day the guy came back in the chat of the teams meeting to complain some more about the logs we provided. Untill he sent us a screenshot as "evidence" the logs where useless. I looked at the screenshot about 10 seconds and thats when i noticed the hostname in the screenshot was a hostname.someothercompaniesdomain.com.
I replied by stating these are not the logs we sent you, the hostname in the screenshot is not from our company devices and i straight up asked him:" have you been looking to logs from some other customer the entire time?"
This happened over a week ago, he never replied. Ticket has gone stale as well.
TLDR:
MICROSOFT support is a joke, the guy never once actually read the ticket or the logs in over two months.
P.S.
To all microsoft customer care people who read this: dont contact me. I dont want special treatment I want you to get your shit together!
https://redd.it/1jz52na
@r_systemadmin
Automated my way into a free Hawaii vacation
Helped out a fellow sysadmin who reached out to me via Reddit, from my viral post —turns out they were bleeding money on Microsoft licenses and subscriptions. A bit of PowerShell magic, some handy tools, and years of experience saved them around $110k real quick.
Lucky me—their company owns resorts, so they're hooking me up with a free 2-night stay in Hawaii.
Felt pretty nice. I keep automating stuff just to stay sane and chill, but this time, it paid off in a big way.
Heading out the first week of June with kids—and no, I'm definitely not packing my laptop charger.
What’s the weirdest or nicest thing you’ve ever gotten for solving someone’s tech issue?
https://redd.it/1jz7l1s
@r_systemadmin
Its broken.
Pls come by it’s not working thx.
https://redd.it/1jz49aa
@r_systemadmin
Two passwords per account!
Had to share this one.....
Swapping out a paralegal's keyboard for a mechanical unit this morning, I'm approached by a "partner" who has some questions about user accounts.
After a few questions they ask me if there is such a thing as "two passwords for an account". I told them it's possible but usually discouraged, however Microsoft loves the password or pin method for logging in.
I'm then asked if I could setup a second password for all associate accounts........
Without missing a beat I told them "send the request over in an email so I can attach it to the ticketing system, you know standard procedure and I'll get right on it, if you can put the password you want me to use in the email also that would be super helpful otherwise I'll just generate something random".
Now we see if I get an email from this person and if I have to have an awkward conversation with their boss 🤣
https://redd.it/1jz1hfc
@r_systemadmin
Edge breaking copiers
Hi all, I have a situation where printing pdf's from Microsoft edge to Ricoh copiers is defaulting to 20 pages of wingdings. Anyone else seen This before?
Printing pdf's from Adobe is finenand any other type of printing is fine.
https://redd.it/1jywgk8
@r_systemadmin
Free ESXi hypervisor
*"Broadcom makes available the VMware vSphere Hypervisor version 8, an entry-level hypervisor. You can download it free of charge from the Broadcom Support portal."*
See: https://www.theregister.com/2025/04/14/vmware_free_esxi_returns/
https://redd.it/1jyumu2
@r_systemadmin
How to handle printing in cloud-based tenant
Hello lads,
I recently took over the administrative duties for a small repair company that was migrated fully to AzureAD (now Entra) a few years back. For the most part, this has been a positive change for them. It allows them to function with less direct intervention from IT staff, which is great for them.
There is one big downside though, and that is that the lack of a local server means that there's also no local print server. Instead, all the printers are just network printers.
Currently, these are added to the end-users (all mechanics with ZERO IT skill by the way, and unwilling to learn, important to note) via a script deployed via Intune that adds the printers with the correct name. Besides being scuffed as all hell, especially since these printers have dynamic IP's and this is therefore prone to breakage if not updated, it's also getting a bit inconvenient.
This is because the business has quite a lot of printers, and currently they just all show up at once in the selector. Now, this is not a huge issue, but if I roll out this script-based solution to more people, it will be.
The other solution then is to simply deploy a good naming standard to the printers' discover names, and then have the end-users add them themselves, something that is thankfully very easy in Windows 11. However, here we have another issue, and that is that Windows 11 for some reason prefers using the driver name over the discover name for these particular Brother printers.
This is a well-documented, unfixed issue, so it's not just us, and sadly there's no easy solution. Basically, the printers will show up correctly when discovered, but then change name after being added by the user, very frustrating. Even more frustrating is that renaming printers is not nearly as easy as adding them, meaning I'd need to school the end-users, something I do not really want to do if possible.
So I would like to hear you seasoned sys-admins' opinions.
Should I simply refine the deployment of this script, so that users only see the printers related to their department? That is what I am leaning towards right now, but I'd like to hear what you people do where you are.
UniversalPrint is not an option by the way. We have a massive print volume for our size due to our workflow, and a per-print plan is therefore going to be way over-priced. Not to mention the fact that not all of our printers are compatible.
https://redd.it/1jyuke6
@r_systemadmin
Veeam CDP VMs hanging from vMotion or snapshot actions after updating
We updated our VBR to v12.3.0.310, which also brought a CDP I/O filter update to v12.3.19-1OEM.700.1.0.15843807. After this, the VMs we have in CDP policies unpredictably hang during vMotion or snapshot actions. The only way to get them back is to kill the world process id. We have a ticket into Veeam, but has anybody else encountered this?
We're running:
ESXi v8.0.3.2428076
VBR v12.3.1.1139 (CDP I/O filter v12.3.20-1OEM.800.1.0.20613240)
P.S. Yes, I know there are two different versions of VBR listed above. Before we realized this hanging behavior looked associated with the CDP I/O filters, we updated again due to the VBR vulnerability.
https://redd.it/1jynrpf
@r_systemadmin
IT Support Specialist that is the IT Director/Sysadmin
For context, here is my post in: r/networking.
I come here to now ask about the sysadmin side.
I am in charge of 3 sites, but this is mainly about the site where I am based out of:
I did some more reading. Our main server is the DC/ADDS/DNS. There are also 4-5 other virtualized servers. The 2nd server holds backups, or the software for financials. 3rd server is IBM server that is backing up data from old MRP they will no longer use after August I believe.
As we are a manufacturing company, the engineers need AutoCAD, SolidWorks, and SigmaNEST. The main server is the license server for 2 of the software.
The servers (hardware) are expired and past warranty, except one, this one will expire in October. There are no group policies. How do I go about auditing what everybody has access to and then creating group policies based on that access? How do I set up a new DC without bringing everything down? On top of the network being a mess, there are printers, printers everywhere, all hogging up an IP address. Should I do managed printer service? All the printers are out of date. Everybody has their own scanner, many of which are outdated, and do have their own software to run. Nothing is compatible with Windows 11 btw.
The MSP has backups of the main site, but it has never been tested to see if things can come back up from that backup. How do I create my own backup and test from that backup? Can I create virtual machines in Azure and have those be the license servers for the software we use?
OH, by the way, it's Windows 2022. We're also running an Exchange server, 2016, but thankfully we are getting off that soon.
For the 2nd site that is a mess:
Their server is running VMWorkstation, the free license, because they needed to virtualize the backups for the old MRP that other site is on. Because of the way the whole thing was set up, the Administrator must never be logged out, the server cannot be restarted at all, and it's Windows 2008... I guess my questions for this one are the same: how do I separate the DC/AD from this server? How do I move the data from their old MRP to the new ERP the main site is using?
I want to upgrade everything to Windows Server 2025. How do I find dependencies, and how do I take care of those before migrating?
I do not want to quit this job just yet because I feel like this will give me the experience I have been wanting to accrue, and slowly build up to being IT director. Didn't think I'd be getting all the experience AT THE SAME TIME. I am going to try to convince them to let me hire 2 people (one full time, another an intern) because I know this will be a very long project, and they will not want to pay the MSP any more money than they already have. They may not even renew the contract next year because they're trying to raise the price. We'll see.
Again, any and all advice is GREATLY appreciated. The people over at r/networking have helped me so much on that aspect, and I honestly feel like I can do this, lol.
https://redd.it/1jyl69k
@r_systemadmin
Torii, the SSO tax and tips on optimal IT stack from an Google Workspace and Atlassian standpoint.
So I stumbled upon Torii after finding out Zylo won’t sell to us (we are around 100 employees).
Torii seems quite interesting, but I wonder if it is worth it ? Or if there are other solutions out there?
One issue I stumbled upon is that many of our SaaS applications need an upgrade to Pro or Enterprise to be able to function with Google SSO?
And some SaaS applicationsb Torii didn’t have a API for.
Our current IT stack is:
Google Workspace
Atlassian - Jira
HiBoB
Slack
Zoom
Notion
And according to Torii: 160 other SaaS applications in our Ghost IT
It also looks like we will move over to a Fortinet (Saas solution) for our new network.
I also think we should use Google Meet instead of
Zoom .
And move away from Notion and over to Confluence to gather as much as possible under Atlassian.
Jira Service Manager could also function as our ITSM.
The question is, however, if that could also function as our ITAM tool and procurement? Or would another SaaS solution or Atlassian 3rd party add-on or partner work better with it?
Any suggestions on the full IT stack?
- Torii as a SaaS asset management tool? Are there other solutions that would fit better into our stack? Could Atlassian Jira Service Managers create the onboarding/offboarding workflows instead?
- SAML SSO? Stick with Google IAM or look into Okto or Fortinet solutions?
- Use Google Workspace as the main directory? Or should one use another?
- ITAM ? Is Jira Assets enough? Together with Checkout? Or would one need something else with better discovery features?
- Endpoint security?
https://redd.it/1jyddav
@r_systemadmin
Sysadmin brain: anyone else get called out for taking things too literally all the time?
I've been working in IT and sysadmin roles for a few years now, and something people keep pointing out to me is how literally I take things.
Like someone might say "That was like an hour ago" and I’ll jump in without thinking and say "No, it was 42 minutes ago." I’m not trying to correct them on purpose, my brain just instantly starts solving a problem the second it sees one. It’s automatic.
Family and friends have commented on it more than once. I’ve even had a few awkward or tense moments because of it. I’m not trying to be annoying, it just happens.
Is this a normal sysadmin thing? Like has the job rewired my brain or is it just me? Curious if anyone else has run into the same thing.
https://redd.it/1jztnse
@r_systemadmin
eXo Platform Launches its Community edition 7.0
eXo Platform, a provider of open-source intranet and digital workplace solutions, has officially released **eXo Platform Community Edition 7.0.** This edition includes a lot of changes compared to the previous Community Editions, in terms of new features but also in terms of features packaged by default.
In its core, the community edition is based on the **same code-base as the enterprise edition**. The new version ships with many new features and capabilities, such as :
* **Upgrated technical & functional components** incorporating JDK21, Tomcat 10, spring 6, Jitsi, elastic search, Only Office..
* **New packaged Add-ons** including document editing and multiple video-conferencing
* Other **Open-source and closed source add-ons available** for packaging for email, personal calendar, personal drive, translating services, anti-virus apps, etc.
* **A migration manager** to help you to move your data to eXo Platform 7.0
* Reviewed maintenance policy through **available maintenance releases**
To learn more about this new release, visit [our detailed blog](https://www.exoplatform.com/blog/exo-platform-community-edition-7-0-is-released/)
The version is available for download (docker compose) with updated technical documentation [here](https://docs.exoplatform.org/guide/getting-started/start-community.html) .
About eXo Platform
The solution stands out as an open-source and secure alternative to proprietary solutions, offering a complete, unified, and gamified experience.
The platform is available in the private cloud, on-premise or in a customized infrastructure to meet organization’s security constraints.
https://redd.it/1jzq5nx
@r_systemadmin
Am I the only one feeling that AI is still coming up short?
In the news one can read of the huge expansions in GPUs and power and Studio Ghibli generators, but in my experience it's just a hallucinated mess for most applications, except say established code.
I forgot the title of a song the other day and asked it where it was from, to where it gave a complete wrong answer with zero basis in the real world (Gemini 2.0 Flash)
https://i.redd.it/b3txya04eyue1.png
I've earlier had Claude tell me the clock is 1 hour 13 minutes in the future, and it can't count the amount of letters in a string.
Users are noticing it too. I'm seeing the Gartner hype cycle in real life, to where they realize that it's indeed a co-pilot/rubber duck, and even the advanced search isn't much better than a standard web search if you say filter on "site:reddit.com" + "after:2024" for example.
I wish for an AI assistant that gives you actual or factual advice, compared to the Microsoft azure support first line esque answers we have today
https://redd.it/1jzmc0w
@r_systemadmin
How is this possible?
Got an alert about a log entry in our DC. It says "The session setup from computer 'name' failed because the security database does not contain a trust account 'name of computer followed by dollar sign' referenced by specified computer.
So I searched Users and Computers, nope, it isn't in our entire domain. Not even as disabled or in a funny OU.
So I remoted into the computer, ran "Set l" and it logged into a valid DC. It thinks it's still a member of the domain, connected to our VPN, let the user log in etc. it even had the custom comment still there that we leave in the Advanced System Settings window - Computer Name section.
So I left the domain, rejoined it, and it worked. It showed back up. What happened and how is this even possible? It can't be both there and not there? Did someone just delete the wrong computer, this one, out of AD and the computer somehow just kept using the locally cached version on our network with no side effects?
https://redd.it/1jz6vw3
@r_systemadmin
Random: Had to pull and re-image a PC because somehow Norton AV got installed
This is just more of an interesting anecdote/warning.
A staff member reported they were getting a pop-up about Norton being out of date because the free-trial lapsed which doesn't make sense because we have our own security stack.
Went to the (shared desk) PC and sure enough there was a Norton pop-up. Alright weird but whatever go to uninstall it and leave. Get an update not even an hour later another user logged on and it's showing up for them. Look into and and sure enough there's another Norton pop-up. Uninstalled it again but this time checked for anything in public users or startup and found some entries in startup folder and registry so deleted all of them and uninstalled again.
A while later another user has logged into the PC and another Norton Pop up is asking for their money and dedication.
Go to every user profile on the PC and delete the Norton folders. Use the official Norton Uninstall/cleanup tool for cases where it didn't get fully removed to remove all traces of the program. Cleanup Registry keys of anyone already logged in. Pull someone random who I already uninstalled it for to test leave and close the ticket.
The next day someone new logs into the PC and there's another Norton pop-up and the it's showing up in the appdata folder for every user on the PC again.
At this point I just pull the PC and re-image it because I am done.
If you want a post-mortem it seems to have been installed when an IT staff member installed Adobe Digital Editions on the PC because it was requested by the department head for a specific ebook and you have to uncheck a box to NOT install Norton. Honestly it's scary how it managed to establish such thorough persistence I've dealt with actual malware and PUPS that were easier to get rid of.
https://redd.it/1jzcyin
@r_systemadmin
TLS certificate lifespans reduced to 47 days by 2029
The CA/Browser Forum has voted to significantly reduce the lifespan of SSL/TLS certificates over the next 4 years, with a final lifespan of just 47 days starting in 2029.
https://www.bleepingcomputer.com/news/security/ssl-tls-certificate-lifespans-reduced-to-47-days-by-2029/
https://redd.it/1jz562u
@r_systemadmin
I..... I was appreciated
A few weeks ago I get a cold call. Name seemed familiar, turns out it was a former C-Suite official at my company. Mostly retired a few years ago, shortly before I started here.
He was referred to me by the VP of infrastructure, who held my position for quite a few years that this C-Suite worked here, so retired guy had called him first.
Because of the industry I am in, it's common for retired folks to still be involved in industry-related groups/lectures/studies/etc. So it's common for us to leave their email active and let them keep their laptops, as long as they are near end of warranty anyway.
So this gentleman calls me, says he is ready to kill the email account, but he has about 20 years of stuff he wishes to keep. Most of it is industry related and not company related, he's already deleted that. Corp already gave green light for this.
He wants to migrate over to a personal email, already set up autoreplies that forward new emails, but he was trying to forward emails one at a time and he quickly realized that he would be spending his entire retirement doing it that way.
I asked him to bring in both computers, set up some PST's, and started the copying. Took a few days to download all from the server and move it, but not exactly labor intensive, but still a lot of babysitting the transfer and making sure he had everything.
Very nice guy, he's very happy, I wish him happy retirement and carry on.
Last night I checked my email to prep for Monday, and I see one from him. I go to that one first thinking I might've messed something up, and instead I see this:
Hi XXX, happy Sunday.
I wanted to let you know that I am so appreciative of the IT help that you gave me in transferring my electronic folders from the COMPANY account to my personal account. (As I told you, I had started by transferring individual emails, and I realized that this was going to take me forever). You may think what you did is part of your job, and therefore no need to give anything . But I wanted you to know that you helped me in an enormous way, so I did want you to have this Amazon gift card as a token of my appreciation.
Best,
YYYYYYYY
I checked back in my inbox, sure enough there was a gift card in there. And more than the $25 that I would have been extremely humbled and grateful for.
I think I will use it towards something for helpdesk team. The task I did is something they would have handled if it wasn't dropped on my desk by an exec.
Feels strange. Usually we aren't noticed until something goes wrong.
It's not even the gift card, it's someone taking time out of a Sunday to say "Thank you" for something you did weeks go.
Feels... refreshing, and needed to share it with you, as you and I are all on the same team, in one form or another, and I appreciate all you do as well.
https://redd.it/1jz607q
@r_systemadmin
Explain SNAPSHOTs like I'm Five
I don't know why, but I've been trying to wrap my head around snapshots of storage systems, data, etc and I feel like I don't fully grasp it. Like how does a snapshot restore/recover an entire data set from little to no data taken up by the snapshot itself? Does it take the current state of the data data blocks and compress it into the metadata or something? Or is it strictly pointers. I don't even know man.
Someone enlighten me please lol
https://redd.it/1jz1ut3
@r_systemadmin
3072 bit CA root certificate
We have an enterprise AD:CS configuration. We want to renew our root certificate with a long term certificate (10 years or so). The Microsoft documentation I found mentions 2048 and 4096 bit keys as options but not 3072.
I ran an experiment and found it can issue 3072 root certificates. Is anyone using 3072 in production? I’m concerned that going with 4096 could break compatibility with various systems, not windows or Linux servers but more IoT devices where our control is limited. Thanks in advance.
https://redd.it/1jyzcjh
@r_systemadmin
Outage?
Anybody else seeing 365 shart itself? Issues with various Microsoft products including portals. I figured there was a problem when banking apps and other sites wouldnt load correctly now it seems issues have come closer to home.
EDIT - all seems to be back up now. Thinking it was a CDN issue maybe.
https://redd.it/1jywrdr
@r_systemadmin
Moronic Monday - April 14, 2025
Howdy, /r/sysadmin!
It's that time of the week, Moronic Monday! This is a safe (mostly) judgement-free environment for all of your questions and stories, no matter how silly you think they are. Anybody can answer questions! My name is AutoModerator and I've taken over responsibility for posting these weekly threads so you don't have to worry about anything except your comments!
https://redd.it/1jyv6fq
@r_systemadmin
Windows 11 In Place Upgrade - bypass checks
Hi all
So I'm trying to perform some testing on 1 Windows 10 standalone Azure VM
Specs are Standard D4s v3 (4 vcpus, 16 GiB memory) but I'm unable to edit the Security configuration, so its Standard.
Right now, when I run the setup .\setup.exe /auto upgrade /dynamicupdate disable
I'm receiving
"The processor isn't supported for this version of Windows" even though I have a Gen2 D4s VM
"The PC must support TPM 2.0"
Now if I set create the AllowUpgradesWithUnsupportedTPMOrCPU regkey and set it to 1, this removed the processor error but does not remove the TPM check Set-ItemProperty -Path "HKLM:\SYSTEM\Setup\MoSetup" -Name "AllowUpgradesWithUnsupportedTPMOrCPU" -Type DWord -Value 1 -Force
I'm just wondering what else I could do ? I need to perform the IPU so that everything is retained on the VM.
https://redd.it/1jynpoy
@r_systemadmin
Certifications for Sys Admin
Good day!
As the title suggests, what are the recommended certifications that a system administrator must possess? I currently manage M365, on Prem Servers, and some networking hardware.
Any recommendations?
https://redd.it/1jynbdb
@r_systemadmin
Clickwrap & Click-thru Agreements - How to mitigate
Hello! It seems this is a problem/risk that touches so many departments from IT to Finance. I work as a software Sourcing Manager in a tech company and see end users accepting clickwrap agreements without Procurement or Legal engagement. I wanted to ask here for thoughts on how to mitigate this problem or better yet, if you do accept these terms, what drives you to not engage Procurement/Legal?
Thanks!
https://redd.it/1jyh5vr
@r_systemadmin
What I’ve learned building a full-stack virtualization platform (from orchestration down to the hypervisor)
Hi everyone! I wanted to share some thoughts and lessons from my journey building a full virtualization stack over the years.
I’m the co-founder and CEO of Vates. We started more than a decade ago by building Xen Orchestra, and over time, we ended up going deeper and deeper — eventually forking XenServer and maintaining the whole stack ourselves. It’s been a long road, and definitely not the easiest one, but it taught me a lot about what it really means to own and master a platform.
After 20 years working with virtualization (mostly Xen-based), I thought it was time to write something about what makes hypervisors anything but a commodity — and why understanding what you're building on matters more than ever.
I figured some of you might find this useful or interesting — especially those running any virt platforms daily.
https://virtualize.sh/blog/few-build-hypervisors-were-one-of-them/
Happy to chat or answer questions if you have any!
https://redd.it/1jyffk2
@r_systemadmin
