@Florida_man said in Why IT certifications are worth more than you think...:

@flaxking said in Why IT certifications are worth more than you think...:

you have to work 100 hour weeks - and that doesn't let you open source your configuration as code, you have to pick your battles.

That's just a bad choice to stay in a strong economy. If you want put in 120% effort for your employer and get virtually zero out of it, that's on you and you alone.

I've been looking since they asked me to come in when I was on parental leave. The problem is that I need a remote position, and I haven't had much luck there yet.

I've been seriously thinking about my own startup.

Many of the sysadmin jobs I've been applying for want repo links. So when you have a family, and a job where sometimes you have to work 100 hour weeks - and that doesn't let you open source your configuration as code, you have to pick your battles.

And then there's the homework assignments, one job had me submit an architecture design even before I had an interview with the recruiter.

@stacksofplates said in Fedora 31 stuck in a boot loop:

I'll have to check my laptop to compare kernels. Mine won't go to sleep. If I shut the lid and open it again it does a hard reboot instead of resuming from sleep.

Mine goes to sleep when I unplug it from power

I don't think @JaredBusch runs gnome, so that probably saves him a lot of grief.

@Pete-S said in Fedora 31 stuck in a boot loop:

Can't provide any input but it's interesting to read the problems that shows up every time there is a new Fedora release out. Your customers are a forgiving bunch for sure.

That said, it's great for the open source community to have lots of people running the latest and greatest.

I've been on Fedora about 2 years on my laptop now and I know exactly what you're talking about.

When I was playing with graylog, I was using Beats

@StorageNinja said in How M$ shakedown stupid corporations:

@Obsolesce said in How M$ shakedown stupid corporations:

Azure Resource Manager

Oddly enough I can't find any azure documents that abbreviate it (They always use the full product name for this reason).

Still back to the origional post. Is OP Seriously expecting new features on his 10 year old car?

I see it referenced as ARM all the time, but my first thought always goes to processors

@wrx7m said in PowerShell - Add-ADGroupMember Script - Improvements?:

@flaxking said in PowerShell - Add-ADGroupMember Script - Improvements?:

When HR does the hand-off to you what information do they give you? Most likely the new staff member's role

Usually the role can be the abstraction layer on top these groups (one-offs aside). So you could create role-based groups with the appropriate groups nested within.

That is true. At least, to some extent. It would definitely cut down on the number of options. Most are grouped by role or service specific, so I could combine them (nested) under respective groups.

I worked at one company where HR always named a specific user the wanted the new user to have the same permissions as. So it was a user copy operation instead. That would be like a template method.

When HR does the hand-off to you what information do they give you? Most likely the new staff member's role

Usually the role can be the abstraction layer on top these groups (one-offs aside). So you could create role-based groups with the appropriate groups nested within.

@Dashrender said in Remote management of employees personal cell phones ...:

@flaxking said in Remote management of employees personal cell phones ...:

@IRJ said in Remote management of employees personal cell phones ...:

@flaxking said in Remote management of employees personal cell phones ...:

@IRJ said in Remote management of employees personal cell phones ...:

@flaxking said in Remote management of employees personal cell phones ...:

@IRJ said in Remote management of employees personal cell phones ...:

@flaxking said in Remote management of employees personal cell phones ...:

@IRJ said in Remote management of employees personal cell phones ...:

You can certainly do this with Intune and office 365. Basically you'd be able to wipe all corporate data as long as it's kept in office 365.

With Office 365 MDM, you can't disable the ability to do a full remote wipe. You do have more control over that with GSuite. Does Intune give you more control?

I'm pretty sure you can do what I described, but I'm not 100% sure.

https://support.office.com/en-us/article/Choose-between-MDM-for-Office-365-and-Microsoft-Intune-c93d9ab9-efb2-4349-9b93-30c30562ee22

It's not a question of what you can do, it's a question of what can the IT department be prevented from doing. The difference between wiping company data and wiping the whole phone just being different buttons does not reassure me.

This is how you do it - from MS link I posted earlier

"Enable your users to more securely access corporate information using the Office mobile and line-of business apps they know, while ensuring security of data by helping to restrict actions like copy, cut, paste, and save as, to only those apps managed by Intune."

If you restrict actions like copy, cut, paste, saving, screenshots, etc then you keep the data inside Office Mobile. Then you just remove the Office Mobile app remotely.

Are you able to enable remote removal of the app with just this feature?

You actually dont even have to do that. If they cannot login they cannot get to any of the data.

Assuming an encrypted cache, this sounds like a viable option. We have 100 Intune licences, so I can insist on being one of the users managed by Intune rather than Office365 MDM. But based on my recent experiences, I'm not too keen to have email or Teams on my phone.

what experience is that?

Nothing to do with the application, just to do with being always working. I did a 108 hour week followed by a 90 hour, followed by a 70 hour. I've now removed all work communication from my phone in order to try to get some peace when I can.

Aren't they talking about the hypervisors Azure is using? Which I believe used to be a modified version of server 2008 R2? So now being server 2016 would be good news, and thus the improved time syncing.

@IRJ said in Remote management of employees personal cell phones ...:

@flaxking said in Remote management of employees personal cell phones ...:

@IRJ said in Remote management of employees personal cell phones ...:

@flaxking said in Remote management of employees personal cell phones ...:

@IRJ said in Remote management of employees personal cell phones ...:

@flaxking said in Remote management of employees personal cell phones ...:

@IRJ said in Remote management of employees personal cell phones ...:

You can certainly do this with Intune and office 365. Basically you'd be able to wipe all corporate data as long as it's kept in office 365.

With Office 365 MDM, you can't disable the ability to do a full remote wipe. You do have more control over that with GSuite. Does Intune give you more control?

I'm pretty sure you can do what I described, but I'm not 100% sure.

https://support.office.com/en-us/article/Choose-between-MDM-for-Office-365-and-Microsoft-Intune-c93d9ab9-efb2-4349-9b93-30c30562ee22

It's not a question of what you can do, it's a question of what can the IT department be prevented from doing. The difference between wiping company data and wiping the whole phone just being different buttons does not reassure me.

This is how you do it - from MS link I posted earlier

"Enable your users to more securely access corporate information using the Office mobile and line-of business apps they know, while ensuring security of data by helping to restrict actions like copy, cut, paste, and save as, to only those apps managed by Intune."

If you restrict actions like copy, cut, paste, saving, screenshots, etc then you keep the data inside Office Mobile. Then you just remove the Office Mobile app remotely.

Are you able to enable remote removal of the app with just this feature?

You actually dont even have to do that. If they cannot login they cannot get to any of the data.

Assuming an encrypted cache, this sounds like a viable option. We have 100 Intune licences, so I can insist on being one of the users managed by Intune rather than Office365 MDM. But based on my recent experiences, I'm not too keen to have email or Teams on my phone.

@Dashrender said in Remote management of employees personal cell phones ...:

@flaxking said in Remote management of employees personal cell phones ...:

@Emad-R said in Remote management of employees personal cell phones ...:

@flaxking said in Remote management of employees personal cell phones ...:

@IRJ said in Remote management of employees personal cell phones ...:

@flaxking said in Remote management of employees personal cell phones ...:

@IRJ said in Remote management of employees personal cell phones ...:

You can certainly do this with Intune and office 365. Basically you'd be able to wipe all corporate data as long as it's kept in office 365.

With Office 365 MDM, you can't disable the ability to do a full remote wipe. You do have more control over that with GSuite. Does Intune give you more control?

I'm pretty sure you can do what I described, but I'm not 100% sure.

https://support.office.com/en-us/article/Choose-between-MDM-for-Office-365-and-Microsoft-Intune-c93d9ab9-efb2-4349-9b93-30c30562ee22

It's not a question of what you can do, it's a question of what can the IT department be prevented from doing. The difference between wiping company data and wiping the whole phone just being different buttons does not reassure me.

But it is always this case with us, the difference of taking snaphot or deleing the whole VM is just button, that is why we have all those stress related issues

If companies were interested in investing in proper pipelines for our work, it would make our lives much less stressful.

This is not entirely the company being cheap... but also employees not wanting to carry around multiple devices - i.e. no personal data on company phone.

I think we had spun off into production changes having a lot of potential for user error here.

@Emad-R said in Remote management of employees personal cell phones ...:

@flaxking said in Remote management of employees personal cell phones ...:

@IRJ said in Remote management of employees personal cell phones ...:

@flaxking said in Remote management of employees personal cell phones ...:

@IRJ said in Remote management of employees personal cell phones ...:

You can certainly do this with Intune and office 365. Basically you'd be able to wipe all corporate data as long as it's kept in office 365.

With Office 365 MDM, you can't disable the ability to do a full remote wipe. You do have more control over that with GSuite. Does Intune give you more control?

I'm pretty sure you can do what I described, but I'm not 100% sure.

https://support.office.com/en-us/article/Choose-between-MDM-for-Office-365-and-Microsoft-Intune-c93d9ab9-efb2-4349-9b93-30c30562ee22

It's not a question of what you can do, it's a question of what can the IT department be prevented from doing. The difference between wiping company data and wiping the whole phone just being different buttons does not reassure me.

But it is always this case with us, the difference of taking snaphot or deleing the whole VM is just button, that is why we have all those stress related issues

If companies were interested in investing in proper pipelines for our work, it would make our lives much less stressful.

@IRJ said in Remote management of employees personal cell phones ...:

@flaxking said in Remote management of employees personal cell phones ...:

@IRJ said in Remote management of employees personal cell phones ...:

@flaxking said in Remote management of employees personal cell phones ...:

@IRJ said in Remote management of employees personal cell phones ...:

You can certainly do this with Intune and office 365. Basically you'd be able to wipe all corporate data as long as it's kept in office 365.

With Office 365 MDM, you can't disable the ability to do a full remote wipe. You do have more control over that with GSuite. Does Intune give you more control?

I'm pretty sure you can do what I described, but I'm not 100% sure.

https://support.office.com/en-us/article/Choose-between-MDM-for-Office-365-and-Microsoft-Intune-c93d9ab9-efb2-4349-9b93-30c30562ee22

It's not a question of what you can do, it's a question of what can the IT department be prevented from doing. The difference between wiping company data and wiping the whole phone just being different buttons does not reassure me.

This is how you do it - from MS link I posted earlier

"Enable your users to more securely access corporate information using the Office mobile and line-of business apps they know, while ensuring security of data by helping to restrict actions like copy, cut, paste, and save as, to only those apps managed by Intune."

If you restrict actions like copy, cut, paste, saving, screenshots, etc then you keep the data inside Office Mobile. Then you just remove the Office Mobile app remotely.

Are you able to enable remote removal of the app with just this feature?

@IRJ said in Remote management of employees personal cell phones ...:

@flaxking said in Remote management of employees personal cell phones ...:

@IRJ said in Remote management of employees personal cell phones ...:

You can certainly do this with Intune and office 365. Basically you'd be able to wipe all corporate data as long as it's kept in office 365.

With Office 365 MDM, you can't disable the ability to do a full remote wipe. You do have more control over that with GSuite. Does Intune give you more control?

I'm pretty sure you can do what I described, but I'm not 100% sure.

https://support.office.com/en-us/article/Choose-between-MDM-for-Office-365-and-Microsoft-Intune-c93d9ab9-efb2-4349-9b93-30c30562ee22

It's not a question of what you can do, it's a question of what can the IT department be prevented from doing. The difference between wiping company data and wiping the whole phone just being different buttons does not reassure me.

@IRJ said in Remote management of employees personal cell phones ...:

You can certainly do this with Intune and office 365. Basically you'd be able to wipe all corporate data as long as it's kept in office 365.

With Office 365 MDM, you can't disable the ability to do a full remote wipe. You do have more control over that with GSuite. Does Intune give you more control?

@scottalanmiller said in Remote management of employees personal cell phones ...:

@BraswellJay said in Remote management of employees personal cell phones ...:

But then one of the managers has a brother whose company has some control over his personal phone so I thought maybe the practice was more widespread than I had thought.

Directly stealing from employees is actually common. In the US, employees are so scared and have so little protections from alternative retributions for sticking up for their "rights" that they often effectively have none.

This is true in Canada too. Labour law does not help you unless you are prepared to get fired and take legal action.

@scottalanmiller said in Trying to find a good, on-premises, multi-department help desk application:

@Pete-S said in Trying to find a good, on-premises, multi-department help desk application:

@dave247 said in Trying to find a good, on-premises, multi-department help desk application:

I've been having trouble actually finding a decent multi-department help desk solution. Google just results in the same old dead-ends. We are a small-ish company with about 60 employees yet we have something like 12 departments or so (always changing) and so our technician quantity is always high (like 40 technicians) and that is what always kills us in price.

Currently, I am trialing ManageEngine ServiceDesk Plus which seems to be the best option in terms of functionality and price, but it seems pretty problematic with bugs and weird functional issues. And support doesn't seem that great so far and the community feels kind of dead.

The only other product I found that might work is something called Jitbit help desk but I haven't had a chance to really look into them yet.

Does anyone have any good suggestions?

Here are my requirements:

• Internal, multi-department help desk (not just for I/T)
• 40 technicians / users who can complete requests
• Active Directory integration for SSO
• Price under $8,000/annually
• on-premises deployment
• Microsoft Windows Server based
• dead simple/basic - just need everyone to be able to submit HD requests for different departments and have other people be able to handle and close them. No freaking bells and whistles.

"Dead simple/basic" sounds like you can have something custom made for you. A full stack developer that does both the back-end and front-end could put it together pretty quickly - if you know what you need.

Yeah, can't be done for $8K, but if there are a lot of users and the workflow is really critical, going bespoke can pay dividends long term. Sounds scary, but with one dev that knows what they are doing it's pretty manageable for something of this nature.

Hey I need a new gig, got to get away from 100 hour weeks. But yeah, you're not getting a polished product for 8K

@JaredBusch said in ConnectWise Zero Day?:

Bad documentation and stupid users.

ScreenConnect has never needed more than ports 8040 and 8041 opened.

The article is talking about ConnectWise Automate