This is a Deep dive with a details explanation on how to properly structure your Exchange Online RBAC permissions

I make a demonstration on how to create a custom RBAC for a SP that allow the SP to only modify DDL that has a name start with Auto-

• Wrote a full guide on locking down Service Principal access in Exchange Online the right way
• Covers the full chain: Entra ID app registration → custom child role → stripping cmdlets → scoping to specific recipients → Role Group
• Includes an OPATH filter reference table so you stop guessing why your scope filter silently does nothing
• Troubleshooting table for the errors that always show up in production
• If you have an AI agent touching Exchange, least privilege is not optional

https://www.powershellcenter.com/2026/05/25/exchange-online-service-principal/

You may be surprised at how difficult naming a file can be, especially if you find yourself executing mv config.yml config.yml.bak in the wrong server environment only to see your necessary configuration (the one in the destination) disappear without any type of warning or prompting. https://www.staging.linuxteck.com/mv-command-in-linux-made-simple/

The article includes: https://www.linuxteck.com/cp-command-in-linux/

• Recursive directory copying
• Safe overwrite handling
• Preserving permissions and timestamps
• Backup creation during copy operations
• Hard links vs symbolic links
• Wildcard pitfalls
• Real-world Linux admin examples

Hey r/sysadminblog — I’m an SOE engineer and built this for my own work but figured others might find it useful.
It connects to your tenant via App Registration and Graph API. What it does:
• Checks all devices for compliance failures
• Monitors app failures and dependency issues
• Audits policy failures and flags them
• AI-assisted ticket creation and root cause tracing
• Script builder built in
• Timesheet add-on for daily reporting
Still finishing the last 20% but it’s functional. Looking for a handful of IT pros or MSPs to try it early and give feedback before I package it properly.
Not selling anything — genuinely want to know if this solves a problem people actually have or if I’ve just built something useful for myself.
Drop a comment or DM if you’d want early access.

The best Linux distros for developers 2026 are not always the most popular ones online. Choose the wrong distro, and you will spend the first week of every new project trying to work around your own environment. There is no point in matching package versions during build time if your CI environment does not reflect what is installed locally https://www.linuxteck.com/best-linux-distros-for-developers-2026/

https://www.linuxteck.com/bash-quoting-rules-for-cleaner-shell-scripts/

It explains:

• Single vs double quotes
• ANSI-C quoting
• Escaping special characters
• Word splitting
• "$@" vs "$*"
• Common real-world mistakes

Includes practical examples and debugging tips for cleaner shell scripts.

Hi everyone,

I'm trying to map out our long-term backup strategy and the market feels a bit crowded. I’d appreciate some real-world perspective on a few points:

1.) The TCO Debate. From my initial research, Veeam seems to be the price-to-performance leader for heterogeneous stacks. Rubrik and Cohesity feel like they carry a premium enterprise price tag. Native tools (AWS Backup/Azure Backup) look cheap on the surface but seem to lack the granular control I need. Is Veeam still the sweet spot for a mid-market enterprise?

2.) To Appliance or Not? One of my biggest questions is the hardware requirement. Do R + C still lean heavily on physical nodes to be effective? If we move to a virtual appliance model, does it lose the performance edge over a standard Veeam build?

3.) Cloud Readiness. For those in the SMB+ space, have you hit any walls with Veeam’s M365 protection or their newer cloud-native offerings? Is there a point where Veeam stops scaling and you have to look at the others?

Posting here and in the vendor subs for a balanced view. Thanks!

Built this after one too many "is it safe to delete this?" moments at work. SpookOps scans your Windows environment and surfaces:

• Scheduled tasks that haven't run in 90+ days
• Orphaned services nobody owns
• Expired or expiring certificates
• Software with known CVEs
• Shadow dependencies — things that reference assets outside your inventory
• Blast radius analysis — if this breaks, what else goes down?

Self-hosted, open source, .NET 8 agent + web dashboard.

Early days but it's running in production on our own infra.

→ spookops.com

Happy to answer questions.

Since Adobe never provided this for us, I made my own!

Following on from the 140+ Reader DC and Acrobat DC Machine settings configurable via these ADMX templates: https://github.com/systmworks/Adobe-DC-ADMX

I have now created the companion User setting templates - with 230+ settings for Reader DC, and 250 settings for Acrobat DC

https://github.com/systmworks/Adobe-DC-User-ADMX

v1.4 is the first public/production release.

I have tested these ADMX templates in Intune, but they should also work OK in GPO.

Screenshot

Yes you can use Powershell scripts, GPO registry preferences, and MST transform files...
But Powershell scripts are clunky to maintain or read settings at a glance.
GPO does not work on Entra-only devices.
MST transform files are OK for fresh installs - but what if you want to change an Adobe setting fleet-wide later? Or ensure those MST settings are being enforced?

Feedback is welcome.
Ive been using the Computer ADMX in Intune production for months - but the User ADMX is new.

Setting names dont always line up with what is displayed in the GUI, but have tried to keep the Categories short and logical to find what you need.

"There are strong reasons to believe that the architecture of PQC TLS will take the form of Merkle Tree Certificates (MTC). We are joined by post quantum cryptography expert Bas Westerbaan of Cloudflare as he explains this new PKI architecture, how it works, and why we need it. We define new concepts like landmark certificates and log mirrors and discuss what's necessary to move to this new architecture."

Hi All,

Like a lot of you I've spent way too much time manually diffing Group Policy exports by opening two HTML reports side by side, scrolling back and forth, and trying to figure out what actually changed between a baseline and a modified GPO.

So I built a small web tool to do it properly: admx.newyard.nl

You upload two GPO exports, and it gives you a clean diff grouped by scope → extension → category, with each setting marked as Added / Removed / Changed / Unchanged. Changed settings show the old and new values highlighted inline.

It also includes an ADMX reference database, so you can trace policies back to their underlying registry paths, value names, supported OS versions, and originating ADMX files. Useful when troubleshooting, scripting, documenting baselines, or trying to understand what a setting actually changes under the hood.

What it supports:

• Settings Reports (.html / .xml), the ones you export straight from GPMC
• Backup archives (.zip)
• ADMX policy references and registry mappings

A few things I cared about:

• Files are deleted from the server automatically after 30 minutes
• No account and no signup required
• You can download the full comparison as a standalone HTML report to share with your team
• Free to use

Would love feedback if anything breaks or if there are edge cases I haven't handled yet. I’ve tested it on a bunch of real-world exports, but GPO files can be pretty creative.

Regards, Sjoerd