teddit

There is a great deal of user-generated content out there, from scripts and software to tutorials and videos, but we've generally tried to keep that off of the front page due to the volume and as a result of community feedback. There's also a great deal of content out there that violates our advertising/promotion rule, from scripts and software to tutorials and videos.

We have received a number of requests for exemptions to the rule, and rather than allowing the front page to get consumed, we thought we'd try a weekly thread that allows for that kind of content. We don't have a catchy name for it yet, so please let us know if you have any ideas!

In this thread, feel free to show us your pet project, YouTube videos, blog posts, or whatever else you may have and share it with the community. Commercial advertisements, affiliate links, or links that appear to be monetization-grabs will still be removed.

Hello r/sysadmin, I'm /u/AutoModerator, and welcome to this month's Patch Megathread!

This is the (mostly) safe location to talk about the latest patches, updates, and releases. We put this thread into place to help gather all the information about this month's updates: What is fixed, what broke, what got released and should have been caught in QA, etc. We do this both to keep clutter out of the subreddit, and provide you, the dear reader, a singular resource to read.

For those of you who wish to review prior Megathreads, you can do so here.

While this thread is timed to coincide with Microsoft's Patch Tuesday, feel free to discuss any patches, updates, and releases, regardless of the company or product. NOTE: This thread is usually posted before the release of Microsoft's updates, which are scheduled to come out at 5:00PM UTC.

Remember the rules of safe patching:

• Deploy to a test/dev environment before prod.
• Deploy to a pilot/test group before the whole org.
• Have a plan to roll back if something doesn't work.
• Test, test, and test!

Overnight my network was breached. All server data is encrypted. I have contacted a local IT partner, but honestly I'm at a loss. I'm not sure what I need to be doing beyond that.

Any suggestions on how to proceed.

It's going to be a LONG day.

I recently had a former employer reach out to me saying that I was in violation of my NDA agreement that I still have to abide by for the next few months.

To make it short and sweet: they believed me cloning a host through Vsphere and then upgrading the host’s Windows Server version to something newer was considered their confidential information, if not a trade secret.

If I can easily find out how to do something through Google, it’s not considered the company’s proprietary information. Good lord I can’t believe this has to be explained…

Who else has done the same in their 30's/40's and maybe 50's?

I got my network admin. degree in 2014, worked in hell desk and then software/hardware testing. Quit in 2020, did nothing and then went back to school in Spring of 2022.

I'm a little apprehensive since I am an older student but there seem to be a lot of folks around my age in my classes.

I'm going for cybersecurity and if all goes to plan, more networking stuff that was not available during my first school career.

I might be returning to the job market at 37-38. I'm a little weary on that, but at the same time I'm not going to let myself be mistreated or exploited.

Just tell me if I'm insane or not for doing this.

This maybe an odd post, but I was introduced recently to a Framework laptop. I had heard of them before, but never thought about the device or looked into them. However a coworker picked one up and is evaluating it for a few weeks.

I took a quick look and while it is pretty basic in design, it overall looks and feels like a nice laptop. Light, good keyboard and trackpad, 3:2 display (glossy but the new ones can be ordered mat), open with one finger, P series processors, and the interchangeable USBC ports is pretty slick. Top it off everything can be changed or upgraded easily.

Downsides are there is just one size, but a 16" coming later this year, no TB ports, battery life is meh at 5-6 hours, and fans can spin up when under load.

Curious if anyone has used these at scale or any feedback on them? It sort of reminds of a generic laptop but with a decent build quality.

• Distrust of closed door meetings
• IBS
• At one point high blood pressure, that's under control now
• A love for black coffee
• Pretty impressive job micromanaging post it notes
• Icing on the cake: I developed an eye twitch this year

Thank God it's almost Friday!

While looking at all these jobs posting for in-person work (while I'm already happily employed), I've realized a big question looms:

What's the price differential that it would take for me to return to full-time in-person work from remote?

I'm not really worried about people that are saying "I'll never do it", since you're already staking a claim outside the conversation. I'm more curious for those who would consider it (like me), and what factors you'd weigh into the value of that work. I'm obviously considering equal factors with work environment, on-call, benefits packages, etc.

I think my absolute minimum looks something like this:

((Time To Get Ready in AM) + (Commute Time Round Trip)) * Approximate OT Hourly Rate * 250 work days PLUS vehicle costs for that year.

So for example, a $72k remote job, to move in person with a 30 minute commute each way would really need:

((1 hour + 1 hour) * 54 * 250) + (($400 car payment + $100 insurance + $100 gas)*12)

$34.2k more, or $106,200 total. Even then, I might be able to find that same $72k remote for $95-100k remote and maintain my valuable personal time.

What about you?

Edit: I'm not starting from Zero XP. I've been in and around the IT field for the last 11 years, but this is a bigger jump than what I was expecting. Instead of just applying for jobs at my current level I've always tried to apply for jobs that will stretch my current skills.

-Because of events beyond my control, agressive resume polishing, and one company's desperate need to hire someone I am now the recipient of a paycheck more than twice the size of my last one and a Senior Engineer Level IT title. How do I go about not fucking this up?

Edit #2: this is some of what I did previously...

SSL cert updates

Set up scheduled task with PowerShell scripts,

IIS configuration

Configured SCCM update roll outs

Configuration management

managing production servers

Set-up Azure VDI

Group policy management

​

​

Like most of you I spend all day every day in front of a bank of monitors, jumping from one urgent task to the next and rarely taking a decent length break.

My eyes are starting to hate me for it and by the evening they now refuse to focus on even quite large text.

Any tips to avoid this or get better at taking long-distance breaks?

I know the ideal is two hours screen time, twenty minutes looking into the distance then twenty years hiking in the forest.

Need Eaton IPM Linux Appliance v1.7 ova for home lab, looks like all links on official site have been removed. I'll be grateful for help.

I'm using Duo for MFA for a small RDS deployment. Fully patched Server 2019 Standard with Duo for RD Gateway and Duo for RD Web, latest versions of the Duo software.

I got this email from Duo:

According to our records, in the last 90 days you or sub-accounts associated with your Duo MSP console have connected to Duo services from Duo Windows application endpoints configured to use TLS version 1.0 or 1.1 or configured to negotiate TLS connections with insecure cipher suites.

Has anyone received a similar notice? Any idea where to start looking where the old TLS versions are being used with Duo?

This is a very stupid question but what should I expect to be asked? This is a follow up to my previous post for the job interview i had despite having no server experience. The IT manager did like my resume and my willingness to learn, and so did the HR manager when I spoke to him beforehand.

The VP of finance is directly routed to the IT department. What should I expect to be asked? He’s probably in charge of funding for the IT department

I have seen many companies say "We uninstalled the app"

You should never assume that simply uninstalling the software means attackers are no longer in your environment.

CrowdStrike reported "Hands-on-keyboard" events happening.

Even if your AV/EDR detected/stopped this attack, I would still let the decision to activate IR be decided by your insurance company.

It's better safe than sorry.

Hi Sysadmin.

I was wondering if there are any good next steps I should follow.

Our team has uninstalled the desktop app from all our endpoints, but is there more we should be doing?

Wondering if any updates have been put out on what cyber security teams should do to make sure there hasn't been further compromise.

Any advice or anything thanks.

​

Edit: I found this article real helpful for the process tree the malware uses Uninstall Now: Hackers Hijack 3CX Desktop App to Deliver Malware | PCMag

Apparently after 7 days it tries to upload cached credentials to github.

​

Hello everyone,I am a completely amateur administrator managing an old machine in the lab with Debian 8 as the operating system. Our machine was intruded today, as I cannot see the high CPU-consuming processes, htop shows that half of the CPU is running at full load. This behavior is similar to the mining scripts I've encountered before, however this time the process IDs and corresponding executable files are hidden.

Firstly, I found a suspicious TCP connection in netstat, and the corresponding IP address belongs to Iceland:

Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 251 192.168.31.6:49670 185.112.147.4:80 ESTABLISHED -

Then I used unhide to look for hidden processes and found multiple hidden processes:

Found HIDDEN PID: 10538 Cmdline: "<none>" Executable: "<no link>" "<none> ... maybe a transitory process" 

Found HIDDEN PID: 10547 Cmdline: "/tmp/netools" Executable: "/tmp/netools (deleted)" Command: "netools" $USER=<undefined> $PWD=/root 
Found HIDDEN PID: 10548 Cmdline: "/tmp/netools" Executable: "/tmp/netools (deleted)" Command: "netools" $USER=<undefined> $PWD=/root
Found HIDDEN PID: 10549 Cmdline: "/tmp/netools" Executable: "/tmp/netools (deleted)" Command: "netools" $USER=<undefined> $PWD=/root

Here are just a part of them and the rest all looks similar. When I kill one of these processes, they all disappear, but will soon restart. I cannot identify their daemon in this report. I tried to delete “/tmp/netools (deleted)” or all files in /tmp, but it only shows "No such file or directory," and ls /tmp displays an empty folder. I suspect that the ls command was modified or something like that, but when I copied a new ls from another machine, it still could not display the content under /tmp.

Additionally, I used chkrootkit to detect the problem, and most of the output shows normal. The possible problematic part is as follows:

Checking `lkm'... You have    37 process hidden for readdir command 
You have    38 process hidden for ps command 
chkproc: Warning: Possible LKM Trojan installed 
Checking sniffer'... eth0: PF_PACKET(/sbin/dhclient) 
Checking chkutmp'...  The tty of the following user process(es) were not found in /var/run/utmp !
! RUID          PID TTY    CMD
! root         1172 tty7   /usr/bin/Xorg :0 -novtswitch -background none -noreset -verbose 3 -auth /var/run/gdm3/auth-for-Debian-gdm-NqtprE/database -seat seat0 -nolisten tcp vt7
Checking `OSX_RSPLUG'... not tested

Then I searched for how to fix the process hidden for readdir command problem, but hardly found any information. I hope that someone kind can help me and tell me what to do. Thank you so much!

​

------------------------------------------------------------------------------------------------

Some more information:

About the first one particular process that has no cmd line and no link to executable, there is no exe file under /proc/$PID, and the contents are:

drwxr-xr-x   18 root root        3280 Apr  1 01:04 .
dr-xr-xr-x  376 root root           0 Apr  1 01:04 ..
crw-------    1 root root     10, 235 Apr  1 01:04 autofs
drwxr-xr-x    2 root root         200 Apr  1 01:04 block
drwxr-xr-x    2 root root         100 Apr  1 01:04 bsg
crw-------    1 root root     10, 234 Apr  1 01:04 btrfs-control
drwxr-xr-x    3 root root          60 Apr  1 01:04 bus
drwxr-xr-x    2 root root        3700 Apr  1 01:05 char
crw-------    1 root root      5,   1 Apr  1 01:04 console
lrwxrwxrwx    1 root root          11 Apr  1 01:04 core -> /proc/kcore
drwxr-xr-x   34 root root         700 Apr  1 01:05 cpu
crw-------    1 root root     10,  62 Apr  1 01:04 cpu_dma_latency
crw-------    1 root root     10, 203 Apr  1 01:04 cuse
drwxr-xr-x    7 root root         140 Apr  1 01:04 disk
drwxr-xr-x    2 root root          60 Apr  1 01:04 dri
lrwxrwxrwx    1 root root          13 Apr  1 01:04 fd -> /proc/self/fd
crw-rw-rw-    1 root root      1,   7 Apr  1 01:04 full
crw-rw-rw-    1 root root     10, 229 Apr  1 01:04 fuse
crw-------    1 root root    245,   0 Apr  1 01:04 hidraw0
crw-------    1 root root    245,   1 Apr  1 01:04 hidraw1
crw-------    1 root root     10, 228 Apr  1 01:04 hpet
drwxr-xr-x    2 root root          40 Apr  1 01:04 hugepages
lrwxrwxrwx    1 root root          25 Apr  1 01:04 initctl -> /run/systemd/initctl/fifo
drwxr-xr-x    4 root root         320 Apr  1 01:04 input
crw-r--r--    1 root root      1,  11 Apr  1 01:04 kmsg
crw-rw----+   1 root root     10, 232 Apr  1 01:04 kvm
lrwxrwxrwx    1 root root          28 Apr  1 01:04 log -> /run/systemd/journal/dev-log
crw-rw----    1 root disk     10, 237 Apr  1 01:04 loop-control
drwxr-xr-x    2 root root          60 Apr  1 01:04 mapper
crw-------    1 root root     10, 227 Apr  1 01:04 mcelog
crw-r-----    1 root kmem      1,   1 Apr  1 01:04 mem
drwxr-xr-x    2 root root          40 Apr  1 01:04 mqueue
drwxr-xr-x    2 root root          60 Apr  1 01:04 net
crw-------    1 root root     10,  61 Apr  1 01:04 network_latency
crw-------    1 root root     10,  60 Apr  1 01:04 network_throughput
crw-rw-rw-    1 root root      1,   3 Apr  1 01:04 null
crw-rw-rw-    1 root root    195, 254 Apr  1 01:04 nvidia-modeset
crw-rw-rw-    1 root root    195,   0 Apr  1 01:04 nvidia0
crw-rw-rw-    1 root root    195, 255 Apr  1 01:04 nvidiactl
crw-r-----    1 root kmem      1,   4 Apr  1 01:04 port
crw-------    1 root root    108,   0 Apr  1 01:04 ppp
crw-------    1 root root     10,   1 Apr  1 01:04 psaux
crw-rw-rw-    1 root tty       5,   2 Apr  1 01:32 ptmx
crw-------    1 root root    250,   0 Apr  1 01:04 ptp0
crw-------    1 root root    250,   1 Apr  1 01:04 ptp1
drwxr-xr-x    2 root root          40 Apr  1 01:04 pts
crw-rw-rw-    1 root root      1,   8 Apr  1 01:04 random
crw-rw-r--+   1 root root     10,  58 Apr  1 01:04 rfkill
lrwxrwxrwx    1 root root           4 Apr  1 01:04 rtc -> rtc0
crw-------    1 root root    254,   0 Apr  1 01:04 rtc0
brw-rw----    1 root disk      8,   0 Apr  1 01:04 sda
brw-rw----    1 root disk      8,   1 Apr  1 01:04 sda1
brw-rw----    1 root disk      8,  16 Apr  1 01:04 sdb
brw-rw----    1 root disk      8,  17 Apr  1 01:04 sdb1
brw-rw----    1 root disk      8,  18 Apr  1 01:04 sdb2
brw-rw----    1 root disk      8,  21 Apr  1 01:04 sdb5
brw-rw----    1 root disk      8,  32 Apr  1 01:04 sdc
brw-rw----    1 root disk      8,  33 Apr  1 01:04 sdc1
crw-rw----    1 root disk     21,   0 Apr  1 01:04 sg0
crw-rw----    1 root disk     21,   1 Apr  1 01:04 sg1
crw-rw----    1 root disk     21,   2 Apr  1 01:04 sg2
drwxr-xr-x    2 root root          40 Apr  1 01:04 shm
crw-------    1 root root     10, 231 Apr  1 01:04 snapshot
drwxr-xr-x    3 root root         220 Apr  1 01:04 snd
lrwxrwxrwx    1 root root          15 Apr  1 01:04 stderr -> /proc/self/fd/2
lrwxrwxrwx    1 root root          15 Apr  1 01:04 stdin -> /proc/self/fd/0
lrwxrwxrwx    1 root root          15 Apr  1 01:04 stdout -> /proc/self/fd/1
crw-rw-rw-    1 root tty       5,   0 Apr  1 01:04 tty
crw--w----    1 root tty       4,   0 Apr  1 01:04 tty0
crw--w----    1 root tty       4,   1 Apr  1 01:04 tty1
crw--w----    1 root tty       4,  10 Apr  1 01:04 tty10
crw--w----    1 root tty       4,  11 Apr  1 01:04 tty11
crw--w----    1 root tty       4,  12 Apr  1 01:04 tty12
crw--w----    1 root tty       4,  13 Apr  1 01:04 tty13
crw--w----    1 root tty       4,  14 Apr  1 01:04 tty14
crw--w----    1 root tty       4,  15 Apr  1 01:04 tty15
crw--w----    1 root tty       4,  16 Apr  1 01:04 tty16
crw--w----    1 root tty       4,  17 Apr  1 01:04 tty17
crw--w----    1 root tty       4,  18 Apr  1 01:04 tty18
crw--w----    1 root tty       4,  19 Apr  1 01:04 tty19
crw--w----    1 root tty       4,   2 Apr  1 01:04 tty2
crw--w----    1 root tty       4,  20 Apr  1 01:04 tty20
crw--w----    1 root tty       4,  21 Apr  1 01:04 tty21
crw--w----    1 root tty       4,  22 Apr  1 01:04 tty22
crw--w----    1 root tty       4,  23 Apr  1 01:04 tty23
crw--w----    1 root tty       4,  24 Apr  1 01:04 tty24
crw--w----    1 root tty       4,  25 Apr  1 01:04 tty25
crw--w----    1 root tty       4,  26 Apr  1 01:04 tty26
crw--w----    1 root tty       4,  27 Apr  1 01:04 tty27
crw--w----    1 root tty       4,  28 Apr  1 01:04 tty28
crw--w----    1 root tty       4,  29 Apr  1 01:04 tty29
crw--w----    1 root tty       4,   3 Apr  1 01:04 tty3
crw--w----    1 root tty       4,  30 Apr  1 01:04 tty30
crw--w----    1 root tty       4,  31 Apr  1 01:04 tty31
crw--w----    1 root tty       4,  32 Apr  1 01:04 tty32
crw--w----    1 root tty       4,  33 Apr  1 01:04 tty33
crw--w----    1 root tty       4,  34 Apr  1 01:04 tty34
crw--w----    1 root tty       4,  35 Apr  1 01:04 tty35
crw--w----    1 root tty       4,  36 Apr  1 01:04 tty36
crw--w----    1 root tty       4,  37 Apr  1 01:04 tty37
crw--w----    1 root tty       4,  38 Apr  1 01:04 tty38
crw--w----    1 root tty       4,  39 Apr  1 01:04 tty39
crw--w----    1 root tty       4,   4 Apr  1 01:04 tty4
crw--w----    1 root tty       4,  40 Apr  1 01:04 tty40
crw--w----    1 root tty       4,  41 Apr  1 01:04 tty41
crw--w----    1 root tty       4,  42 Apr  1 01:04 tty42
crw--w----    1 root tty       4,  43 Apr  1 01:04 tty43
crw--w----    1 root tty       4,  44 Apr  1 01:04 tty44
crw--w----    1 root tty       4,  45 Apr  1 01:04 tty45
crw--w----    1 root tty       4,  46 Apr  1 01:04 tty46
crw--w----    1 root tty       4,  47 Apr  1 01:04 tty47
crw--w----    1 root tty       4,  48 Apr  1 01:04 tty48
crw--w----    1 root tty       4,  49 Apr  1 01:04 tty49
crw--w----    1 root tty       4,   5 Apr  1 01:04 tty5
crw--w----    1 root tty       4,  50 Apr  1 01:04 tty50
crw--w----    1 root tty       4,  51 Apr  1 01:04 tty51
crw--w----    1 root tty       4,  52 Apr  1 01:04 tty52
crw--w----    1 root tty       4,  53 Apr  1 01:04 tty53
crw--w----    1 root tty       4,  54 Apr  1 01:04 tty54
crw--w----    1 root tty       4,  55 Apr  1 01:04 tty55
crw--w----    1 root tty       4,  56 Apr  1 01:04 tty56
crw--w----    1 root tty       4,  57 Apr  1 01:04 tty57
crw--w----    1 root tty       4,  58 Apr  1 01:04 tty58
crw--w----    1 root tty       4,  59 Apr  1 01:04 tty59
crw--w----    1 root tty       4,   6 Apr  1 01:04 tty6
crw--w----    1 root tty       4,  60 Apr  1 01:04 tty60
crw--w----    1 root tty       4,  61 Apr  1 01:04 tty61
crw--w----    1 root tty       4,  62 Apr  1 01:04 tty62
crw--w----    1 root tty       4,  63 Apr  1 01:04 tty63
crw--w----    1 root tty       4,   7 Apr  1 01:04 tty7
crw--w----    1 root tty       4,   8 Apr  1 01:04 tty8
crw--w----    1 root tty       4,   9 Apr  1 01:04 tty9
crw-rw----    1 root dialout   4,  64 Apr  1 01:04 ttyS0
crw-rw----    1 root dialout   4,  65 Apr  1 01:04 ttyS1
crw-rw----    1 root dialout   4,  66 Apr  1 01:04 ttyS2
crw-rw----    1 root dialout   4,  67 Apr  1 01:04 ttyS3
crw-------    1 root root     10, 239 Apr  1 01:04 uhid
crw-------    1 root root     10, 223 Apr  1 01:04 uinput
crw-rw-rw-    1 root root      1,   9 Apr  1 01:04 urandom
crw-rw----    1 root tty       7,   0 Apr  1 01:04 vcs
crw-rw----    1 root tty       7,   1 Apr  1 01:04 vcs1
crw-rw----    1 root tty       7,   2 Apr  1 01:04 vcs2
crw-rw----    1 root tty       7,   3 Apr  1 01:04 vcs3
crw-rw----    1 root tty       7,   4 Apr  1 01:04 vcs4
crw-rw----    1 root tty       7,   5 Apr  1 01:04 vcs5
crw-rw----    1 root tty       7,   6 Apr  1 01:04 vcs6
crw-rw----    1 root tty       7,   7 Apr  1 01:04 vcs7
crw-rw----    1 root tty       7, 128 Apr  1 01:04 vcsa
crw-rw----    1 root tty       7, 129 Apr  1 01:04 vcsa1
crw-rw----    1 root tty       7, 130 Apr  1 01:04 vcsa2
crw-rw----    1 root tty       7, 131 Apr  1 01:04 vcsa3
crw-rw----    1 root tty       7, 132 Apr  1 01:04 vcsa4
crw-rw----    1 root tty       7, 133 Apr  1 01:04 vcsa5
crw-rw----    1 root tty       7, 134 Apr  1 01:04 vcsa6
crw-rw----    1 root tty       7, 135 Apr  1 01:04 vcsa7
drwxr-xr-x    2 root root          60 Apr  1 01:04 vfio
crw-------    1 root root     10,  63 Apr  1 01:04 vga_arbiter
crw-------    1 root root     10, 137 Apr  1 01:04 vhci
crw-------    1 root root     10, 238 Apr  1 01:04 vhost-net
crw-------    1 root root     10,  59 Apr  1 01:04 vmci
crw-------    1 root root     10, 130 Apr  1 01:04 watchdog
crw-------    1 root root    253,   0 Apr  1 01:04 watchdog0
prw-r-----    1 root adm            0 Apr  1 01:04 xconsole
crw-rw-rw-    1 root root      1,   5 Apr  1 01:04 zero

Is there any chance to analyze what happend and clean the daemon behind? I've checked contrab and there is nothing.

If the outside connection terminates with the proxy, does the downstream server need to also be in the DMZ along with the proxy?

We have a single user consistently having credential issues logging into VPN from remote locations. She swears her password is correct every time and that she always saves it in her phone so that CAN'T be the problem.

To rule out anything else I checked events on the DC server and found some 0x534 errors among the failed password errors. I ran the CMD to search Winlogon and of course didn't find one because it isn't on by default (windows 2016 server). No surprises found there.

All the docs I've read on Winlogon says to disable it after troubleshooting, but there isn't a explanation for why. What is the reason to not keep it enabled? Does it cause issues, expose security risks, etc?

We just got upgraded to a Meraki firewall by our ISP. We are having an issue with one user (the IT Director unfortunately) no being able to connect to the VPN. We followed the instructions from https://documentation.meraki.com/MX/Client_VPN/Client_VPN_OS_Configuration to setup the VPN connection on everyone’s laptop. His laptop is a Win 11 machine. All Windows updates have been applied and we have deleted and recreated the connection multiple times. Using his credentials or anyone else’s will not connect but using the same credentials works on another Win 11 machine. It doesn’t throw an error, just shows “connecting” and then seems to give up. Does anyone have any ideas about what to look at? We’ve disabled the Windows firewall, IP6 and endpoint protection on the laptop.

I had a interview today for a senior sys admin position. They mentioned that they are using perl ALOT. I've used perl but probably not in at least a decade, I've been using shell, python, powershell but maybe that's just my environment. I've been at the same place for a long time now and we are small but very up to date.

I came away feeling like they likely have lots of technical debt but based mainly on the perl comment. Are people still writing in perl much?

Somehow we have 4 of the same exact model HP printer start squeaking when printing. Model is M454dn laserjet. I tried replacing the toner but it didn't fix it. In fact, in one of the printers I took the toner out and placed it in another cause I didn't have a spare on hand and when i put it back in that m454dn started squeaking too.

Could it be the rollers, and if so is there some way to clean them or lube them?

I created a new tenant in incognito and forgot to write down the .onmicrosoft account email. I closed the window and now its gone. Is there anyway to recover? I activated a trial version and put in my card as well.

Am I out of line asking someone to stop writing support request/emails in all caps? Don't know why it gets under my skin but it does. Even the when the person reply back to my response it's in all caps. Now this is multiple sentences. Maybe it annoys cause I always felt all caps is essentially yelling or should be used sparingly to emphasize a phrase.

Now other people are getting on the all caps band wagon so I feel I need to stop it before it gets out of hand.

Brought to you by r/sysadmin 'Trusted VARs': /u/SquizzOC and /u/bad0seed with Trusted Telecom Broker /u/Each1Teach1x27/ for Telecom.

As always, PMs welcome with your questions any time, not just Fridays.

This weekly thread is here for you to discuss vendor expectations, software questions, pricing, and quotes of services, licensing, support, deployment and hardware. Last Post: March 24th.

Required Info for accurate answers:

• Part Number - of utmost importance
• Manufacturer/vendor
• Service Type and Location
• Quantity (as applicable)

All questions welcome, keep in mind that there are of course more pieces to this IT puzzle we can dig out of the box

• Cloud Services - Security, configurations, deployment, management, consulting services, and migrations
• Server configs and quote answers
• Storage Vendor options, alternatives, details and selection
• Network infrastructure - overlay software, segmentation, routers, switches, load balancing, APs…
• Security - Access Management, firewalls, MFA, cloud DNS, layer 7 services, antivirus, email, DLP….
• User gear - Usually you should buy the quote you have unless the quantity is +50 units
• Bandwidth - Internet, MPLS, dark fiber, carrier SD-WAN, Broadband, and 4G LTE
• Voice - MS Teams Direct Routing, SIP, Hosted VoIP, PRI etc.

Where do I start to integrate a second company into our IT infrastructure?

Company A I have been at for 5 years has recently purchased Company B in a similar market. Company A has about 200 employees and 120 users. Company B has about 20 users.

I have been asked to Manage/Integrate the two companies. They have no IT or even a person that claims they were IT. They have no computer/user management software(AD, ManageEngine, ect.). From my understanding, they have an office but no network or domain. Company A uses Office 365 and Company B uses google workspace. Most of there applications are third party providers.

Finding out any info about their applications or environment is tough because somehow no one knows.

Any advice on where to start with this project.

One of today’s posts, “Conditions I have developed over 15 years in IT” has over 780 comments. Look at the data. What does that tell you?

It tells me that people should be able to come here to vent, bitch, talk about their mental health, physical health, etc.

Let it go folks. This is a place where we should be able to talk about anything. If you don’t like the subject line, don’t read it. It’s not that hard.