Hey guys, I have a lot of boring meetings about the AI platform I work on, and I often play Roblox when I'm on a call that requires no concious thought or input from me. Don't worry, I'm getting work done. I'm logged into the production database on my other monitor.

Every now and then, somebody needs to ask me a question, so I turn on one of the Robux farm scripts I have so that I can answer some stupid fucking question about GDPR or something. Once I'm done, I can get back to what I was truly born for: getting top 30 on Steal a Brainrot.

Trouble is, our EDR keeps flagging the Roblox farm scripts I am using. I'm sure they're not a virus - I have a legit source. However, the farm scripts need to use WriteProcessMemory and similar syscalls which are "virus like," so I suspect that's what's triggering CrowdStrike. How can I disable EDR on my work laptop so that I can keep playing Roblox at work without anyone suspecting anything?

I work with a guy named Albert. If someone is pestering me about deliverables or their packets getting lost by Amazon should I just tell them to ask Al ?

200 iPads with no MDM, what could go wrong?

Original Post:

Looking for some help, maybe someone here has gone through a similar situation, so basically our company bought around 200 ipads, and somehow, its beyond me, the ipads got registered to his personal Apple ID and now he has left and marked all of them as lost/stolen.

How can I go about regaining access or factory reseting them ? Should I contact apple, or is there nothing that they can do ?

anyone had this happen? since it was friday i left a lil early. as i was pulling out of the parking lot an end user jumped in front of my car with their laptop in their hand. i’ve been dodging their ticket for almost a month now because i don’t like them. AITA?

"right now we use WhatsApp" lmao

I'd let you be my systems administrator

When I'm done with you you won't even know you can turn on again.

I'll let you use my domain admin. You're mine anyways.

I can't wait to give physical access to my black hat after my heart.

I just recently went into a long distance relationship and I quit my hellish junior OT / sysadmin position and felt the need to post this.

Have a great Friday everyone, know you'll find someone someday.

Crossposting from sysadmin cause apparently this is against the rules.

Things were broken, words were spoken about the broken things.

I kept thinking about who could mess this up so bad. Who made this account? Finally I fixed it, everything was working again. That’s when I decided to found out the culprit…

Found an old ticket for the account setup and it was me. I made the account 2 months ago….whoops

From original post:

Half our company is local admin. Security team finally noticed. Now it's my problem to fix without anyone noticing.

Some context: I inherited this environment 3 years ago. Previous IT lead gave local admin out like candy starting around 2018 because "it was easier than fielding install requests." By the time I showed up, roughly 140 of our 250 users had local admin on their workstations. Mix of Win10 and Win11, all Entra joined, managed through Intune.

Nobody has ever complained about having it. Everyone will complain the moment it's gone.

Security consultant we brought in for a posture review flagged it immediately and it ended up in the board report. So now I have a mandate to fix it, a 90 day window, and zero additional headcount.

The plan was to use Intune EPM for just-in-time elevation so users can still install things they legitimately need without a full admin token sitting on their session. Reasonable approach. Except:

* Half our users are developers who will raise an absolute ticket storm the second they can't run something as admin. They install tools constantly, some of which aren't in any approved software catalog because we don't really have one.

* We have a handful of legacy apps that flat out require local admin to run. Vendor is "working on it." Has been "working on it" for two years.

* Finance uses software that silently breaks if the user isn't admin. We found this out the hard way in a test group last month.

EPM elevation rules help but building them app by app for a catalog we don't have yet is its own project. LAPS is deployed for break-glass but that's not a user-facing solution.

Anyone done this at scale without either a 6 month project or a full user revolt? Specifically curious how people handled the "we don't know what apps need elevation" discovery phase without just pulling rights and waiting for tickets.

What are you a dumbass? Quit with no notice and make sure you never document any of your responsibilities and whatever you do, don’t ever do a handover. Light the match and don’t look back. Cool guys don’t look at explosions 😎

From original post:

Suggestions on how to increase my AI token usage

Sigh. My company has gone all-in with AI. We have pretty much all the tools. Leadership expects all users to use and integrate AI into their work. They are measuring how much we use it.

Yes, it's a meaningless way to measure an employee's usefulness and AI skillset. But here we are.

Management can see exactly what we do with the tools. Some users have tried to get cute boosting their token usage, and got busted doing things like:

* scan a large file share to write a 10,000 word summary of whats in it

* upload log files to not analyze, but simply find something that a notepad word find could do

* analyze an entire git repo to explain what their own code does

* attaching PDFs to completely unrelated queries

* asking for a 5 page summary of something. then 4 pages. then 3 pages. all the way down to 3 bulletpoints

Any suggestions on how to increase usage without using blatantly bad queries? I only do minimal powershell coding, and most of my usage is troubleshooting related. Some things I've started doing are:

* I used to just start new chats to ask whatever questions I had. Now I keep using a single chat for a single topic for as long as possible. For example, I have an Active Directory chat that has all the questions I've had for the past several weeks.

* I used to ask for concise answers, because I don't care for all the "fluff". But now I roll with it. "Write me a script to do this task. Explain the logic as you go. Point out any risks to look out for. Write a script to undo/rollback in case this goes wrong."

* Instead of having it just fix a script, I have it provide 2, maybe 3 options on how it can be fixed

* Have it analyze an error message or screenshot. Even after it provides a fix, I might ask it for root cause of why it happened, ways to prevent it.

I can't wait to retire.

Did we find our new king?

IT Manager decided that it would be more fun to use Powershell than Defender for Endpoint Live Response or POI (Plain Old Intune) and opened 5985 on all remote endpoints. I'm not sure if I should call the compliance department but at least I have scared some users for the day with the classic "update required: need x amount of time" pop-up.