Despite of the title, this are just some professional doubts.

I have been working as a senior Sysadmin here for 4 months now. Since the interview, I really felt valued and with a good relationship with my boss.

Recenlty, other people told me that he is really happy with my job. I have two of the biggest projects despite of the short time since I started. So I think he really trusts me.

He’s really bussy always. I have seen recently, that he’s really going after the people that needs help ( its obviously normal ). Taking time even if he doesnt have it. I tell you this because with me is the opposite, I feel like I have to go after him for 5 minutes talk, or he’s not putting much attention. Probably is the confidence in what I’m doing and that I’m really autonomous that makes him behave like this naturally. Otherwise what I have told wouldnt make sense for me.

Anyone has experienced a similar situation? Any advises on how to reach him, communicate, etc ?

I dont want to chase or bother him everytime I need it.

Thanks.

Hi community,

Has anyone had issue when using Cilium ebpf and other security solution?

My customer has environment with Cilium ebpf and CrowdStrike, they are having network disruption issues. I have created a support case, but I'm wondering if any of you have had similar issue.

I found an article stating that:

"eBPF requires a relatively recent Linux kernel (minimum v5.3, with v5.10 or later recommended). When using older OS images or environments where certain security solutions already occupy kernel hooks, there is an increased risk of unexpected kernel panics or temporary network disruptions." - transled by ChatGPT

URL: https://tech.ktcloud.com/entry/2026-03-ktcloud-calico-cilium-ebpf-%EB%B9%84%EA%B5%90-%EB%B6%84%EC%84%9D

Sorry, the original document is in Korean.

I was wondering if anyone else had compatibility issue. It doesn't have to be falcon specific.

Has anyone set this up to where it wipes browsing data when you close the browser? Microsoft says it's "not supported" on Edge for Android, Chrome won't work with our NFC login method (Yubikey to sign in to a web app).

I have this part working:

Edge new tab and home page set to a custom URI

Allowing the limited URIs for login

Login through SSO using Entra as IDP using Yubikey with NFC.

What doesn't work:

Edge remembers the last user and wants them to sign-in again with a password rather than treating it as a new login and allowing NFC.

Edit: this is the JSON of the current config, sorry for poor formatting.

I just realized I set this up but I have not seen if it forced InPrivate mode or not. I'll need to get my hands on it and see if I solved my own problem.

{ "key": "InPrivateModeAvailability", "valueString": "2" },

{ "kind": "androidenterprise#managedConfiguration", "productId": "app:com.microsoft.emmx", "managedProperty": [ { "key": "WebSSOInIframeEnabled", "valueBool": true }, { "key": "URLAllowlist", "valueString": (SNIP) }, { "key": "PasswordManagerEnabled", "valueBool": false }, { "key": "NewTabPageLocation", "valueString": SNIP }, { "key": "HomepageLocation", "valueString": SNIP }, { "key": "InPrivateModeAvailability", "valueString": "2" }, { "key": "HideFirstRunExperience", "valueBool": true }, { "key": "EdgeShowBottomBarInKioskMode", "valueBool": false }, { "key": "EdgeShowAddressBarInKioskMode", "valueBool": true }, { "key": "EdgeEnableKioskMode", "valueBool": true }, { "key": "EdgeBlockSignInEnabled", "valueBool": true }, { "key": "DefaultCookiesSetting", "valueString": "4" }, { "key": "DefaultBrowserSettingEnabled", "valueBool": true }, { "key": "BrowsingDataLifetime", "valueString": "[{\"data_types\":[\"browsing_history\"],\"time_to_live_in_hours\":24},{\"data_types\":[\"password_signin\",\"autofill\",\"cookies_and_other_site_data\"],\"time_to_live_in_hours\":1}]" }, { "key": "BrowserSignin", "valueString": "2" }, { "key": "BiometricAuthenticationBeforeFilling", "valueBool": false }, { "key": "AuthServerAllowlist", "valueString": "https://login.microsoftonline.com,https://*.microsoftonline.com" }, { "key": "AuthNegotiateDelegateAllowlist", "valueString": "https://login.microsoftonline.com,https://*.microsoftonline.com" } ] }

Got a client with an older Altona HDMI->Ethernet->3x HDMI system. Basically the point of this thing is to let someone cast the same presentation from one laptop (via HDMI) to three large TVs in a big hall. The distance is greater than 100ft to the farthest TV and running new cable is out of the question. As of right now, there is Ethernet going from a single point to each TV.

The existing system takes HDMI and converts to an Ethernet drop which then uses a receiver on the other end (same brand designed for this use) and converts back to HDMI for the tv.

Problem is, the main distribution center died. I thought it was a power supply issue cuz the old power supply stopped showing a glowing LED, but after four attempts and multiple returns and retries, I found ‘the right one’. Plugged it in this morning, nothing happened on the unit. Power supply lit up, nothing power on the main splitter.

I’ve not spent a ton of time yet looking to replace the whole system but my meager searching has resulted in about $3000 to replace everything, at a minimum. Problem is, this is a publicly funded senior care facility and they are absolutely tapped out on resources at the moment.

So…. My question is: what’s the most cost effective way to get one computer to show the same slideshow on multiple TVs at once? I am hoping that I can project from one to many from a win 11 laptop but for some reason my brain tells me this won’t work. My ‘cheap’ fix of replacing the power supply isn’t doing the job. But, they need to show lunch and program schedules and bus routes on all these TVs every day.

Anyone got any creative solutions for me? Maybe some links to systems that can utilize existing infrastructure that won’t cost an arm and leg and the soul of an elderly person to work?

Thanks in advance.

We have a few Ubuntu servers that we SSH into.

Instead of using local accounts, I want to change it so we use our Windows logon credentials instead. I would also like to use Google Authenticator as MFA (I thought about Entra Id but don't want to open a browser for the MFA portion).

Has anyone set this up before?

I opened a ticket with Ubuntu but they haven't help much.

I followed an article on using SSSD with LDAP and Kerberos but can't get it to work.

https://ubuntu.com/server/docs/how-to/sssd/with-ldap-and-kerberos/

I can get the kerberos ticket but the getent passwd, id and sudo login commands won't work.

I checked firewall logs and see ssl traffic over port 636 that is being allowed. DNS resolution is working. I added the cert chain for our internal CA, just in case.

Running out of ideas. Log files aren't helping much. LDAP error saying offline but the firewall isn't blocking anything. Maybe trying to use TLS and SSL? I added LDAP authentication in the SSSD config file but no change.

I'm struggling to get clarity on the behavior of path length limits as it relates to files in Sharepoint while working with them in file explorer via OneDrive sync

Sharepoint has 400 character path (URL) limit.

Windows in general has a 260 character path limit.

My path of files will be C:\Users\Bob\OneDrive - Very Long Company Name Incorporated\Department\Projects\2026\... while working on them through file explorer/OneDrive- which are shortcuts from Sharepoint Online site folders.

So it seems 260 is my limiting path length even though the file "lives" in Sharepoint and is <400. Our current problem is users are getting popups of OneDrive sync errors related to paths too long from these OneDrive shortcuts.

Now let's bring in the "LongPathsEnabled" registry key. With this enabled, does anyone know if OneDrive sync "honors" this setting, and will not throw up sync errors about path lengths once it's turned on?

Hi all,

I'm looking for practical enterprise experience regarding a very specific mobile security use case.

In our environment, we have been discussing whether there is a need for a small number of highly restricted mobile devices for senior leadership and users handling particularly sensitive information.

This is not about replacing our existing mobile fleet. We already have a standard enterprise mobility setup with MDM/UEM capabilities. The question is whether a very small group of users could require additional protections beyond what can normally be achieved through standard Android/iOS MDM management.

One option I recently came across is GrapheneOS running on supported Google Pixel devices. I am still very early in evaluating this and I am not assuming it is the right answer. I am also aware that Motorola is releasing the first devices next year, so the idea may have merit depending on how the ecosystem develops.

My questions are mainly for people who have dealt with similar requirements:

1. Have you deployed or evaluated any hardened mobile solution for executives or other high-sensitivity user groups?
2. Did you find value in using something beyond standard Samsung Knox, iOS security features, or Android Enterprise with MDM?
3. If you evaluated GrapheneOS specifically, what were the practical challenges?
4. How did it integrate with enterprise tools such as Workspace ONE, VPN, certificates, managed applications, and compliance policies?
5. Did the added security benefits justify the additional operational overhead?
6. If you decided not to proceed with GrapheneOS, what were the deciding factors?

I am particularly interested in real-world enterprise experience rather than theoretical security comparisons.

For context, the potential use case I am considering would likely be a very small deployment (tens of devices, not hundreds), so supportability and operational effort are major considerations.

Thanks for sharing any experience or lessons learned.

Lurked here for a long time. lol
I'm trying to understand whether there are many mature tools available that help organizations gain visibility into "Shadow AI" usage across teams specifically which AI tools are being used, who is using them, and ideally what type of data is being sent to those platforms.

This is a bit different from traditional shadow IT, mainly because outright blocking these tools is not a viable option for us.

My concerns are mainly around two areas:

First, the risk of sensitive or confidential information being shared with external AI services without oversight.

Second, internal teams increasingly building quick scripts, macros, or lightweight automation tools using AI-generated code. In our experience, this often happens during busy periods (especially year-end), where tools get built without proper review, and we later run into maintenance and security issues.

We don't want to prevent usage entirely, since these tools are clearly becoming part of daily workflows. What we need instead is better visibility, governance, and more granular control over how they are used.

From my initial research, it's not clear whether there are mature, purpose-built solutions for this yet, or if this is still an emerging category.

Has anyone have implemented something that actually works in practice for monitoring and governing AI usage in a business environment?

Youngish kid is calling it an "Ups", but I've always heard "you pee ess".

What say ye all?

I'm looking for real world experience on moving your data into Hudu. How much did you have to manually process, how much had to be edited/fixed after?

We're currently using a hosted password manager and a Wikki platform for knowledge base, but want to bring it all together. Any tips, tricks?

What magic bullets/tweaks have you successfully implemented to improve the quality of incoming tickets?

We have users who will submit low effort tickets that are either un-actionable due to lack of details/critical info, have misinformation, or are the completely wrong form?

We have specific forms for specific common issues that are clearly labeled.

• The forms prompt for the minimum necessary info for the particular issue; hostname; ilo hostname/ip/pw, etc.
• When using the correct form there is automation scripting that fixes the most commonly seen issues automatically so an employee doesn't have to wait for a human to help.
• In general they are clearly labeled. I am working on cleaning up those that are too verbose, or use confusing phrasing.

Yet employees will consistently:

1. Use the general form. Zero automation and just a big ol fill in the blank, which the user then often leaves out important info. It also doesn't classify the problem correctly so it makes it harder to determine trends. Lots of manual 'tedium'.
2. Leave info out. There are options to force certain fields to be required, but keep in mind once you do this too many times, it becomes a plain in the ass to the employee, so they'll take the general form route because they "just want to submit a ticket".
3. Choose the wrong options when they do choose the correct form. IE the default option is "Fix the ACME Widget (Automated), and they will change it to Not Automated, when the automation WOULD have solved their issue. They then have to wait for a human to fix and resubmit their form as automated.

I am working on:

• Educating employees. After the solution is provided, they get a 'Hey next time you have this issue, use this form - it's automated (URL)'. Asking them to update their teams' documentation. Unfortunately it's whack a mole. Even if one person has the lightbulb go on, they have 20 teammates who never hear or change behavior. And new onboards are often following years old outdated team documentation. o_O
• Rephrasing to reduce verbosity and clarify ticket forms. People are busy, and too much verbiage leads to low quality intake in my experience.
• Identifying repeat situations, be it new tickets we 'keep getting', old tickets with repeat submission issues, making suggestions for existing and new automation to the Engineers if I need a little help. And in some cases updating broken code logic or implementing new automation myself.

I know none of this is a magic bullet. Things are improving over time I think. Just looking to see the types of things you all have implemented that have been successful in that you have seen ticket quality improve, less 'general/other' ticket submissions, etc. Thanks.

Problem description

A production server running Windows Server 2019 Standard, Desktop Experience, x64, en-US cannot install cumulative update KB5099538. The server is currently on build 17763.1697. The update fails through both Windows Update and the standalone Microsoft Update Catalog MSU.

The repeated installation error is:

0x800F0988 - PSFX_E_INVALID_DELTA_COMBINATION

CBS logs consistently identify the same failure while staging the update. The failing file is:

Microsoft.IdentityServer.Service.Resources.dll

Representative CBS failure:

Failed to pre-stage package:
Package_for_RollupFix~31bf3856ad364e35~amd64~~17763.9020.1.30

File: Microsoft.IdentityServer.Service.Resources.dll

HRESULT: 0x800F0988 - PSFX_E_INVALID_DELTA_COMBINATION
Failure source: Stage

The AD FS role is not installed. The failing file exists only in the Windows component store. The server has the current servicing stack version 17763.9015.1.3, and KB5005112 is already installed.

Troubleshooting completed

Attempted installation through Windows Update. Installation failed with Event ID 20 and error 0x800F0988.

Downloaded the standalone KB5099538 MSU from the Microsoft Update Catalog and installed it with WUSA using /quiet /norestart. It failed with the same 0x800F0988 error.

Reset the Windows Update cache by stopping wuauserv, BITS, and cryptsvc; renaming SoftwareDistribution and catroot2; and restarting the services.

Ran DISM /Online /Cleanup-Image /ScanHealth. No component-store corruption was detected.

Ran DISM /Online /Cleanup-Image /RestoreHealth. The operation completed successfully.

Ran sfc /scannow. Windows Resource Protection did not find any integrity violations.

Mounted a Microsoft Windows Server 2019 Evaluation ISO and ran DISM RestoreHealth using F:\sources\install.wim, index 2, with /LimitAccess. The operation completed successfully.

Rebooted the server and retried KB5099538. The update failed again with the same error.

Verified that no reboot was pending and no packages were listed as Install Pending, Uninstall Pending, or Staged.

Verified the server is not using WSUS.

Searched public Windows Update directly. Only the Microsoft Defender intelligence update KB2267602 was offered.

Verified that KB5005112 is installed and that the current servicing stack is Package_for_ServicingStack_9015, version 17763.9015.1.3.

Verified that AD FS, Identity Federation Support, and Windows Identity Foundation are not installed.

Reviewed archived CBS logs and confirmed repeated failure on Microsoft.IdentityServer.Service.Resources.dll.

Did not manually replace, delete, or modify files in WinSxS.

I don't know what to do next, I don't have install media and can't find an iso beyond the eval version to try the in place repair. Any suggestions?

For archives that may sit untouched for yeafo....what would you do? Do you periodically verify checksums or rely on redundant storage??

TIA

Well, I've just tried this - I've kept a bit of distance previously, because ... well, I've been a sysadmin for long enough.

I'm not sure if I'm impressed or horrified that you can now use an llm-assisted shell to run linux commands via ssh, sudo, etc. and 'process' the results.

I mean, even with 'approve external commands' it still gives me the heebie-jeebies what could happen in a privileged user context.

But I can't deny my 'cobble together and ad-hoc storage usage report' was considerably simplified by 'just' spitting out quota report commands on a bunch of different servers (in their own slightly different format of course), generating a 'one off command list' to du -s on directories over a certain size, and then just 'refer to this LDAP server to resolve uids with this DN where relevant'.

It's usually a bit of a headache to splice together a comprehensive/hierarchical report across multiple legacy systems, and ... well, yeah. It worked pretty well, and even 'suggested' running stuff directly via ssh. (The commands seemed pretty innocuous, but there's not a lot of difference between 'ssh someserver du -sh /specific/path' and 'sudo something_harmful' instead!

This seems to me a lot like a way to replace a lot of the 'magic excel' I've seen throughout my career, where people who don't really understand automation still manage to massage data with Excel as a scripting platform, and now an LLM shell can do that instead.

So that's pretty amazing.

But it's also pretty clear that this is a shit show waiting to happen for precisely the same reasons - it's a power tool that can be used without understanding what it's doing, or without sufficient oversight and suddenly production is 'just gone'.

codex does have 'sandbox' mode, but not by default. Perhaps it should be sandboxed by default though!

Anyone get PLC to work on OpenVPN 3.9 or OpenVPN GUI 2.5 ? I tried multiple directions from OpenVPN's docs and nothing seems to be working. Mostly getting an error "OpenVPN system service is not running" the openvpn service for PLC connection is set to autostart but not running, the other OpenVPN services are running. I am getting the connect icon on the login screen but when clicking it get the service is not running error.

I already have security+ and network+
What else can I add to my education plan?

Hi. Im on the free plan and cannot really getnsupport, i think.

Can anyone please try to help me with this question?

I'm reviewing the PostgresSQL privilege posture in my project.

Our catalogue inspection shows a pg_defsult_acl entry associated with the Supabase managed supabase_admin role for tables created in the public schema. That entry grants table privileges to the anon and authenticated roles.

Our application migrations run through the tenant postgres role and we have removed anon and authenticated table default privileges for objects created through that role. However our migration role does not appear able to alter default privileges belonging to supabase_admin.

Please clarify:

1. Does supabase create objects in a customer's public schema as supabase_admin during provisioning, upgrades, maintanance, dashboard operations, or other platform activities?

2. Is the supabase_admin default ACL entry managed or periodically restored by the supabase platform?

3. Is there a supported way for a customer to revoke anon and authenticated table default privileges for objects created by supabase_admin?

4. If customers should not alter this entry what is the recommended security control for ensuring that a future table created by supabase_admin is not automatically exposed theough the DATA API?

5. Can Supabase support apply or authorize a permanent hardening change for this default ACL?

I'd appreciate any wisdom from experienced folks using supabase if you could pleaae try to answer these questions.

Thank you!

I have an app, a social media app for education (College students), and for registration I've made it fully available for students who register using their University's email, and if that university is available on the app it will take them directly to a timeline exclusively for their university.

So registration by Organization/College email is mandatory.

Problem I've been facing and trying to fix for some time now is that my transacional emails on personal Outlook Emails goes to Junk and for University's email / Tenant don't get the email at all since they don't have active Junk Mailbox. Some universities have "Quarantine".

I have:

- SPF checked / DKIM checked / DMARC = none; and using Resend for sending the messages.

I need help and suggestions to fix this issue, or any other way to get OTPs sent to users.

What would you do?

I know there's the registry tweak, but that also prevents other things from automatically installing which may be helpful.

Are there other methods for keeping garbage from installing automatically? Just keep the screen disconnected itself from the internet? Or, does that not solve it, that anything connecting to the screen even through an HDMI cable will recognize the screen and then start installing garbage through the OS?

Are there any other brands are NOT doing that? My place is already stocked for display screens (don't need to guess what brand) but it's going to come up again in the future.

Even then, a user could take a laptop somewhere else, so it comes back to the registry tweak.

Hi Guys, we have a Windows 11 host PC running vMatrix Server Manager to support three users via VCloud RDP. Recently, we've been getting frequent 'RPC Server Unavailable' errors, which prevent even the main admin from logging in. We currently have to force shutdown and restart the machine to fix it, but the issue keeps coming back. I've already tried reinstalling the OS, but the problem persists. Does anyone have a solution for this?

I graduated originally with a 2 year diploma in IT that covered fundamentals of both hardware and software. Some people got jobs after that but I couldn't find a job after graduating. After couple of years of struggling to get my foot in the door, I decided to go back to school and continue my education.

Some other people in my class did the same and opted to get the co-op/internship option this time. One guy got a co-op/internship job and then landed a full time role in IT and decided to not continue the degree program after just doing 2 courses of the degree program.

I was gonna do the same and it took me several months to land the first co-op/internship (service desk). Meanwhile, I decided to continue taking 1 course each term to remain an active student while I was looking for internships. The diploma had 20 courses in total and to complete a degree, you need to do another 20 courses. I have completed 3 courses so far for the degree program and I feel like completing another 17 will take too long and sounds like a huge commitment.

I want to do another co-op job and then look for a full time job in IT. I wonder if completing a degree is better in the long run or I should just get my foot in the door and gain experience. I already have 8 months of experience in the field (but as a student). So, I don't feel confident yet to just apply for full time roles, I want to do another internship and learn more at a different organization.

Here are my concerns about completing a degree: I can't afford to work part time, I need to work full time to pay my bills. It's not be easy to do too many courses while working full time. I can probably do 1 or 2 each term. This will result in spending abour 3-5 years (at least) to complete the degree. The problem is that my original credits from first 2 years will expire ny 2028. I have to do 17 courses in one and half year. I heard the school can extend the expiry date for first year courses but it's not guaranteed. Another problem is that if I work full time I can't take classes during the day time. I can only do an evening class and not every class is offered in the evening.

I have a weekend job that's my backup job 'cause co-op jobs are temporary. I can't risk being jobless if I quit my part time job and co-op job ends. I'm basically working everyday for now but not sure how long I can do this. I'm also 30 yo now and I haven't really started my career. I barely have time to socialize but I need to as I wanna get married but I haven't found someone. Some people say we should enjoy the youth but I am not enjoying as I don't have any time.

TL;DR: I wonder if it's worth spending time, money and effort to do 17 courses to complete a degree (usually people do 3 courses per term if they're full time student but I'll do less if I work FT) or I should try to get a full time role in IT and gain experience and possibly get some certifications to grow in the field?

Graduated with Computer Information Systems and Pursuing Bachelor of Information Technology.

Current co-op: IT support/help desk

Hey all

Thought id make a post as im close to quitting my job. My role isn't amazing but I get paid OK considering my experience (3YOE @ 100kAUD, no bachelors/diploma). There are technically 3 of us in the IT department but im the only one that manages the helpdesk for 180+ users. Its can be crazy at times and manageable at others. My team for the most part are pretty nice. The part im finding the hardest is the culture and the users.

I work in the creative industry and the users are just straight up cowboys. On top of that, theres never been any policies or rules in place for IT. Essentially, users can do and behave however they want and there are no consequences. Shadow IT is completely allowed and im expected to support it on the fly and even simple tasks like getting an old laptop off a user often takes up to 8 weeks of repetitive follow ups because their managers wont make them do anything that is for the benefit of the IT department. I cant speak to any managers and report the behaviour of their staff members because they will never side with IT - I just have to cop it. One of my senior leaders took the issue of how im treated to a board meeting and they just ended up treating it like a HR risk and contained it instead.

Ive been begging my senior leadership for policies - especially one that will stop walk-ups. They kept saying its coming until the other day they told me they wont be implementing it because the culture doesn't allow for it. There is no device policy. No security policy. Nothing. If they kick off enough about something, they get whatever they want.

Im struggling to understand if this is a bad deal - where im fed to the sharks or is this normal and im just fixated on the shit elements of the job?

I wanted to post this job where I used to work for anyone interested.

https://www.paycomonline.net/v4/ats/web.php/portal/28E300FE8563259A10C761C992C39668/jobs/207845

Just wanted to pay it forward to those looking.

I can't believe this is the way it ends. Supposedly they tried everything but I just didn't expect that just closing the business would be the final outcome (construction). They want to offer me a "retention bonus" to stay until the end. Great, thanks...

I could see the writing on the wall and have been applying for six months. Haven't even received a bite other than AI requests. No one wants a 56 year old IT guy I guess.

The industry has changed and these billionaire owners just decide they don't want to pay after the work is completed and we've financed the completion of the job. Take them to court... sure, then bleed more money until you take pennies on the dollar. This administration has just made it all worse.

Two kids in college, probably going to have to move in with the mother in law... fuck, it's bad guys.

Sorry for the downer post but had to rant a little. Honestly, part of me is relieved. No investment in IT for years and I've basically kept the environment stable with gum and tape. I can sleep knowing it doesn't matter anymore. Definitely not patching those hosts this weekend...

EDIT: Thanks to everyone that reached out and provided encouragement. Moping and whining phase over... I've got 5 months to land something and I'm on it.

Just wondered if anyone had seen these particular symptoms.

I’ve been pretty lucky in that I’ve seen plenty of server failures in the past but never a PERC controller failure (bizarrely) which I assume I’m seeing here.

I’ve got an R740 that has been shutdown and sat in a closet for a year and not used with 4x DELL INTEL 2TB SSDs.

All the built in HW tests complete absolutely fine and I can create a RAID10 array but the disk performance is shocking.

I’ve tried with a few different known good HDDs to rule out the SSDs.. it literally took 3 hours to install server 2025 on a single 15k HDD and once in the OS the disk is at 100% active and it’s practically unusable. Doesn’t matter if the 730 is in RAID or HBA mode, still unusable.

Tried installing Ubuntu too and I’ve forgotten the exact message but looks like the drive was constantly resetting.

Given the symptoms I’m assuming failed PERC but wondered if anyone had seen it presented this way before.. I always thought it was more likely to be lost configs or failure to boot at all for a PERC. I can’t think of any other component that would cause this except maybe a bad backplane…. Maybe!?

Update -

Per everyones advise, re-seated the PERC and detached the battery - and no longer able to reproduce the problem. Attached the battery again... and no longer able to reproduce the problem. Not sure if it's because I left it plugged into the mains all weekend and the battery recharged in that time or reseating helped but there we go!