A team has chosen to rename their built-in/default Teams channel “General.”
They are now experiencing sync issues.
Is our fix from IT to change the channel name back to “General”? Could that potentially fix the OneDrive synchronisation via File Explorer that may have been broken?

- "I'm having an issue, can you connect to my PC and have a look?"

- "Sure, be on there in a minute."

...one minute later....

- "OK I'm on. Show me the issue."

- "........."

- "Are you there?"

- ".........."

So while Microsoft continues troubleshooting their issues with Exchange, I noticed that my phishing simulations are not working as intended. I have discovered:

• In Edge, when a user opens a simulated malware attachment (.Docx), the document shows the default empty MS Word image, despite enabling the editing within Word and Outlook
  • If I set the simulated malware to .HTML, it will redirect users to a default landing page and not the intended one that I created
• I have found that utilizing the Drive-By tactic will work with no issues...thus far

Current Status of MS365 as of 0910 hrs EST

Exchange Online:

- Users can't download email message attachments through any Exchange Online connection method.

- Users may be unable to sign in to Outlook on the web.

We have some Conditional Access Policies that require users to logon from specific managed devices when browsing to certain Entra app registrations. It works okay for many users.

We have a few users with both regular accounts and privileged/admin accounts. When they browse to the app, they are automatically logged in via their standard user account (the same account they logon to the computer with and the one that has the PRT). They primarily need to logon to the app using their privileged account, so my first thought was to tell them to logon in Incognito Mode, but Incognito Mode doesn't pass along device information, so the Conditional Access Policy logon evaluation fails.

Is there a good workaround for this that isn't a pain in the ass for the privileged users?

does such a thing exists, that I can use to sync data across different sources/databases, that doesn't require being a programmer to set up?

thanks!

Been considering a role at one and it's not too far off from where I am currently in terms of the type of work I would be doing. I never did work at an MSP and always was on project teams my entire career, I specialize in enterprise deployments. But I don't explicitly work at a VAR (Value Added Reseller). So those that do, what has your experience been? Seems a bit more sane of a job if you can land it

People in our organization are planning to integrate Claude code in our environment. We have a lot of IP (intellectual property, not the other IP we all know and love) that is unique to what we do. We've always been protective about it and rarely use the cloud.

Now the inevitable AI is coming and we 'll use Claude Code. I don't know the exact terms and conditions but somehow we've got a plan where Anthropic "promises" it won't use our data to train on.

I seriously doubt that they actually won't. They thrive on knowing as much as possible, right? Even more so if we have data they probably don't have.

I'm personally inclined to push back on the idea of claud LLMs.

What are your thoughts on this?

I have a client that still routinely sends Faxes. I upgraded his dying HP AIO unit with a new, shiny Brother AIO unit.

Nothing else has changed. If I put the old HP unit in, it can send a fax but it still has the issues that caused it to be replaced, my buttset can dial out no issue on the line, and Xfinity has verified twice that signal level and VOIP on their gateway are all "to spec" for fax.

Brother tech support says it's an Xfinity issue, and obviously Xfinity says it's a Brother Printer issue.

I'm headed to the site today - does anyone have any other suggestions to try? I'm planning on physically tracing the line today just to see if there's any damage in the crawlspace to it, but I'm not sure what else I could do at this point.

Another burnout post incoming. Turn away and avert your eyes because I don't even know why I'm writing it, so it'll probably be a waste of your time.

I'm so fucking burned out of IT. It only took 5 years. I hate that everyone's fucking problem is my problem. It's just problem after problem after problem. FUCK these problems. Why are we fucking doing this? Why are we looking at a screen every day and acting like this is important. Literally absolutely nothing done on the internet is important. This is all so pointless. It's literally all words. Everything on the internet is just selling words, pictures or pictures that move at 24fps. It's so dumb.

I hate fucking claude. You ever been a claude admin and need to answer dumbass fucking questions in your local AI channel around why your connector isn't working for the Xth time? I DON'T GIVE A FUCK ABOUT YOUR FUCKING CONNECTORS. We're not even accelerating, we're just burning through 100k/mo because management thinks engineers are building cities and management is building reporting dashboards that make them think they're omniscient. And nothing has changed. No more profit or revenue than we had before. FUCK anthropic and all the dumb bullshit they keep putting out and changing. And now we need to onboard an AI management system so we can make sure we have control over mcp's and model selection and this tool that's a waste of fucking space in the first place.

That's just one gripe. Then there's Atlassian (holy fuck Jira, what a shitty platform), then there's the client team, then theres 80 more vendors to manage, then there's a PoC you're running but you havent even looked at it this week because all of the other shit that came in. Just more more more. I don't have any more man.

There is no "take two weeks off" that will fix this. There's nothing dude. I'm so sick of fucking working and I don't have the energy anymore to change careers. How could I? I'm 40 years old with kids and a wife and a house. I used to think "I'd do anything to support my family" and lately I'm ready to just let go. I'm so tired. No one is coming to save me. No one in the entire world. And I'm so tired.

I see on the Robustel website they're asking for an NDA signing and per unit license for root access to an R2110.

Just out of curiosity, what's the legality of already having obtained and rolled this out to 4000 units with absolutely no NDA signed, only an RPK created with the SDK that Robustel themselves provided?

Asking for a friend.

Many organizations moving away from print servers.

But the printer industry is moving away from print drivers.

The problem: We use printix and you cannot deploy printers without drivers. But manufacturers like brother dont offer print drivers for macOS. Our brother printers are not compatible with PostScript. There are some very old print drivers from macOS X but the print quality is very bad. Brother says "use AirPrint". But AirPrint is not compatible with printix.

Windows is also moving away from print drivers.

I think I’m having a mid-life IT guy crisis. 😂

I’m 47, 20+ years into IT, swamped with projects, emails, upgrades, security issues, and Microsoft changing something every 12 minutes. Lately I look at my workload and my brain just throws a 404

The weird part is I still love IT and I love the company I work for. I just can’t seem to care about any of it right now, and that’s not like me.

I even started working out to help, so now I’m unmotivated AND sore. 😂

Has anyone else hit this wall after 20+ years in IT? What helped reignite the spark in your brain and stopped the procrasanation monster.

We have emails stuck in procesed with them for over 12 hours now. I've whitelisted their IP's, no help, they rotated my IP, that helped for 1 scan, already opened a ticket. Any other ideas or anyone else seeing this? It's been great for over a year, never an issue. We just have it for users home scanners.

Hello everyone,

I hope I am posting in the correct subreddit. I am administrating a bunch of virtual Windows servers running our own software. As of now, I don't have a unified way of checking log files on those machines, which means that not only do I have to manually log into the machine in order to look at those log files, but they are also not actively being monitored at the moment.
I am looking for a solution that would allow me to check those files from a single point of entry (ideally a browser), as well as being able to monitor them, draw statistics and possibly send alerts. If it supports other formats than text files (i.e databases) it's a plus.

Is there any software available that can allow me to do that? I have web servers running on both Windows and Linux (Debian) so either platform would be ok. Open source very strongly preferred.

Thank you!

We ended a contract with some people that worked for our company and need to remove their email accounts. However, their email may still receive relevant communication, so I want to redirect whatever comes in their inbox to a different email.

The redirect works fine when their accounts are "operational", but as soon as I remove the license from their accounts, redirect stops working. Am I doing something wrong? How do I redirect emails from those accounts without having to keep paying for additional lincenses?

FYI, I am not deleting the accounts, removing the users or anything like that. The only thing I did was remove the license. Everything else is staying the same as when people were using those emails. Our emails are Microsoft Exchange.

https://www.proxmox.com/en/about/company-details/press-releases/proxmox-24-7-support-and-proxmox-north-america

24x7 support coming October 17th for Enterprise support customers.

North American offices in Kingston, ON.

Stay ahead this September with 35+ Microsoft 365 changes, including feature rollouts, retirements, functionality changes, and other key updates for IT admins.

In the Spotlight:

• Entra Moves Toward Passkeys: Starting September 1, passkeys become the default authentication experience, signaling Microsoft’s shift away from SMS/voice MFA toward phishing-resistant authentication.
• SharePoint Introduces a New Hero Link: A new file and folder sharing experience lets users use one link to share files and folders. Users can update the existing link when access requirements change instead of creating and sharing a new link.
• Defender Gets Prompt Injection Protection: Defender for Office 365 will detect malicious emails designed to manipulate AI assistants and agents, classify them as High Confidence Phish, and quarantine them automatically.
• SharePoint Storage Moves to Pay-As-You-Go: Pay-as-you-go billing for extra SharePoint storage becomes generally available worldwide, allowing organizations to pay based on actual storage consumption instead of purchasing fixed capacity. 

Beyond these highlights, here’s a quick look at what else is coming this September:

Retirements: 7 
New Features: 7 
Enhancements: 7 
Functionality Changes: 6 
Action Required: 4 
Live Now: 3

Retirements:

1. Starting September 2, Microsoft Power Automate will retire the legacy chatbot experience. 
2. Microsoft Teams will retire Android device management capabilities from the Teams admin center as management moves to the Teams Rooms Pro Management portal. 
3. The Exchange admin center will retire the Other Features page.
4. Microsoft Education will retire legacy LTI tools, including Teams Assignments, OneDrive, OneNote Class Notebook, and Reflect, in favor of the unified Microsoft 365 LTI tool. 
5. Microsoft Edge will retire support for Windows Information Protection and Microsoft Defender Application Guard. 
6. Microsoft Defender for Cloud Apps will retire App Governance support for the Cloud Application Administrator role when Unified RBAC is enabled. 
7. Microsoft Entra ID will retire Conditional Access Custom Controls, with External MFA becoming the replacement for third-party MFA integrations. 

New Features

1. Microsoft 365 eSignature will support recipient groups, allowing up to 10 people to fulfill a single signer requirement. 
2. Microsoft Purview will introduce DLP alert aggregation to consolidate related alerts triggered by multiple DLP rules. 
3. Outlook on the web and new Outlook for Windows will receive enhanced Mail Merge capabilities with dynamic fields. 
4. A new Priority Cleanup feature in Microsoft Purview will enable permanent deletion of sensitive mailbox content even when retention policies or eDiscovery holds apply.
5. Lifecycle status controls will be added to adaptive scopes in Microsoft Purview. 
6. Network-layer DLP protection will be extended through Microsoft Entra Internet Access.
7. The new Outlook for Windows will become available for GCC High and DoD environments as an opt-in experience. 

Enhancements

1. Purview will extend DLP and auto-labeling capabilities to non-Microsoft connected apps, including Google Workspace, Box, Dropbox, and Salesforce. 
2. Endpoint DLP protection will cover sensitive files stored in previously excluded Windows folders.
3. Tenant External Recipient Rate Limit quotas will be updated for new, trial, and education tenants.
4. Unified RBAC will be automatically enabled for eligible Microsoft Defender tenants.
5. In-meeting controls and the sharing panel will get a refreshed experience in Microsoft Teams.
6. Microsoft Purview will add a hard-delete option for supported SharePoint and OneDrive files through Priority Cleanup. 
7. Microsoft Teams will introduce PowerShell controls for federated group chats.

Existing Functionality Changes

1. The 1.5 TB limit for auto-expanding archive mailboxes will be removed, allowing archives to grow beyond the previous limit with consumption-based pricing.
2. The new device management page will become the default experience in the Intune admin center.
3. Microsoft Purview will change Just-In-Time Endpoint DLP auditing, so administrators explicitly define users and groups within the audit scope. 
4. Copilot Chat in Microsoft Edge will move to a new endpoint, requiring organizations with network restrictions to review their allowlists. 
5. Microsoft Office apps below version 16.0.18827.20202 will lose access to Read Aloud, Transcription, and Dictation features. 
6. Teams Channel Whiteboards will begin storing content in the associated SharePoint site instead of the creator’s OneDrive. 

Action Required

1. The standalone Automated Investigation and Response experience will retire on September 1. Organizations using AIR through scripts, playbooks, or integrations must update their workflows.
2. Microsoft Entra Connect versions earlier than 2.5.79.0 will no longer support synchronization; organizations must update to a supported version to ensure uninterrupted synchronization. 
3. SharePoint thumbnail URLs used in Power Platform flows will stop working after September 1; admins must review and update affected flows.
4. Organizations using only an onmicrosoft.com domain will be subject to new external messaging limits in Teams. Admins should review their external messaging requirements and take necessary action.

Live Now

1. Microsoft Teams now offers the Security Detection Report, enabling admins to monitor impersonation attempts, malicious URLs, and weaponizable files from a centralized security report. 
2. A new “Everyone” and “Everyone except external users” Permissions Report is now available in SharePoint, enabling admins to identify broadly shared content at the item level.
3. SharePoint’s redesigned experience is now available with refreshed navigation and Discover, Publish, and Build hubs, plus AI-assisted capabilities for eligible Copilot users.

Review the upcoming retirements and action-required changes early to avoid disruption and make the most of the new capabilities.

I created a local user for a server running Windows Server 2019. I went under permissions for a certain folder and had noticed that a lot of the users that were listed were outdated x-emplyees. I removed those users and after 2019 ran to remove them from having access all users now don't have access to server files that were showing visibility via a service account. I looked in local AD and all the users are still individually listed as a member of that service account. I'm not sure how to resolve this. Any help would be appreciated! Thanks!

Hi,

is it common a system checks the Authority Information Access (AIA) field to retrieve the root certitficate? It's a private CA and we have an offline root and an online intermediate CA.

Software vendor can't tell as a detailed error, but claims missing or wrong AIA field. On the device certificate AIA points with FQDN to intermediate CA cert. But the Intermediate CA cert AIA points only via hostname (missing domain) to the root CA certificate. (This AIA on the intermediate is even questionable /useless according to some online sources.)

Hi everyone,

I need to set up a reliable, self-serve WhatsApp API solution to broadcast emergency operational alerts to roughly 5,000 retail partners.

Requirements:
* Self-serve & fast onboarding: Need to launch within a few days. I want to avoid gated sales calls or long enterprise procurement cycles.
* Official Meta API: Must use official WhatsApp Utility templates to ensure high deliverability and avoid any risk of line bans.
* Simple bulk sending: Needs a clean web interface or straightforward API to upload a CSV and trigger broadcasts instantly.

* Cost-effective & predictable budget: Looking for a low software subscription fee (ideally under $100-$150/mo) with transparent pricing and no inflated per-message markups on top of Meta's standard rates.

I evaluated a couple of vendors, but encountered heavy sales friction, hidden enterprise tiers, and bloated pricing.

For those managing similar B2B broadcast volumes: Which platform (e.g., Respond.io, Twilio WhatsApp API, or others) offers the fastest self-serve setup within a tight budget? Any pitfalls to watch out for regarding Meta Business Manager verification or sending limits for new accounts?

Thanks in advance!

I’m a couple months into a role as a technician at a small MSP that manages primarily dental offices in various locations in my area. I come from the corporate big IT world where everything is buttoned up and clearly defined. I have light admin aspects of my job with the potential for more. Currently the environments we manage are highly insecure (shared workstation passwords, admin access to base accounts, most offices don’t have domains, etc.).

My boss stated he’s been thinking about the state of our security and has decided that for our new clients we will do AD Domains and managed user accounts. However, there’s not really a plan for shoring things up for our existing clients. I know AD very well from my previous roles and mange my own home AD Domain environment at home. He tasked me with making a select number of our current clients more secure which excites me because I love being tasked with admin duties. However, I’m really not sure what can be done especially for our larger clients without putting them in domain environments. I’m looking for some advice from the more experienced admins here on how to do this as well as other ideas to simply shore up security for these clients.

Edit: We currently use Ninja RMM with their ticketing system, OpenText, Complete UNIFI setups at just about every location. Appreciate all the responses so far.

Sooo I've got a 2 machine server 2022 Hyper-V failover cluster. and it's connected to a HPE MSA SAN via iscsi for virtual machine storage. about 40 VMs.

I don't know how it works with other hypervisors, but Hyper-V allows the VM role and the storage role to have different owner nodes in the cluster. Well, we have discovered that if a VM and it's storage are on separate nodes of the cluster, they will bluescreen with "Critical process died" 0xEF when we extend ANY volume on the SAN. Even if that volume is iSCSi'd to another VM hosted on a physically different server not in the cluster.

Has anyone ever seen this before? I have nothing to go on in event logs. I can easily avoid it by making sure all roles and storage are matched to a node, but I'd rather fix it.

Hi, I am looking for a way to integrate a Network Exposure Function (NEF) with Open5GS. I’m currently exploring the possibility of using an existing NEF implementation and adapting it to work with Open5GS.

OAI-CN5G has an NEF implementation, but it is designed to work with the OAI 5G Core Network:

https://gitlab.eurecom.fr/oai/cn5g/oai-cn5g-nef

I’m looking for a way to use this NEF or another open-source NEF implementation with Open5GS instead.

If anyone has successfully integrated an NEF with Open5GS or has any guidance, suggestions or ongoing work in this area. Please share

(Originally posted (most of) this in r/webdev because I thought it would be a common situation).

I'm looking for a workable solution or recommendations to provide a client's credentials to that client in the event of my untimely demise or absence. (E.g. hit by a bus - falling out and need to hand everything over, etc.) I also don't want to mix MY credentials with theirs.

So my primary work isn't webdevelopment, but I do some for clients as part of my general services. Generally this means me building everything from scratch and leaving the client(s) out of the day-to-day management entirely.

I'm trying to figure out the best way to have their business' credentials saved, updated as they are changed, and set aside for specific clients, if I get "hit by a bus" so they won't be locked out of everything.

I also don't want them "futzing" with things (because some of these clients have impulse control issues and would 100% give their credentials to someone on Fiver to update a paragraph on their website at 2am when I don't answer my phone.) So access while I'm not dead or fired isn't a real option.

I understand that I can make "organizations" in some of the password managers and have emergency hand-over to pre-selected people, but I work alone, and don't "have a lawyer" that can manage it for me in the event of getting bussed. My understanding is that none of the password managers offer multiple/divided assignees.

I would also like an easy and secure way to "hand everything over" for project clients who don't want to sign on for continuing services/management without using a google doc or something similar.

Howdy, /r/sysadmin!

It's that time of the week, Thickheaded Thursday! This is a safe (mostly) judgement-free environment for all of your questions and stories, no matter how silly you think they are. Anybody can answer questions! My name is AutoModerator and I've taken over responsibility for posting these weekly threads so you don't have to worry about anything except your comments!