Refuse_

We have had our service agreement and master service agreement for years now and added or changed stuff over the year. Not unhappy with it, but it's mostly formatted text.

Wondering what others are doing. Do you include images, graphs and such? Is it short and to the point or an extensive Bible like book?

Not looking to copy, just to gain ideas.

Last Friday night someone hit my parked model X and sentry mode was active. Sentry didn't have any footage of the hit and alarm didn't go of. Dent is severe enough to trigger both. Any clue why I didn't record? I have tons of footage of people walking by, but nothing when my car got hit.

I need to create an audit of all devices that are used in the last 30 days to connect to any Microsoft service within a tenant.

This as a starting point for conditional access.

I can seem to audit all devices used to connect to SharePoint, Exchange etc, but I seem unable to do the same for Microsoft Teams. Teams shows the user, but not the devices.

Anyone who has a magic trick to get this info or a total overview of devices for any service?

We had a working site-to-site IPsec tunnel between a Draytek router and a PFsense.

The Draytek router broke so we replaced it with new (different model) Draytek router. We update the settings for more security, but kept the working config.

Both are set to a Phase 2 key lifetime of 3600. Still the connection breaks every hour at the re-key event. It does come online automatically but gives a network timeout for connected devices.

Any one a clue why it still breaks connection every hour?

So over the last years we had to make proposals for clients where there are a lot of variables in the services.

Security has become even more important and as a result of that so is Conditional Access (to name just one). So how do you handle proposing this to clients? I don't mean price-wise, but service-wise. Conditional Access for one has so many variables that it's difficult to completely cover. We have our baseline of course, but not every clients needs the same settings and restrictions.

I thought about a checklist but with the ever-changing Microsoft backend and the amount of settings/variables I quickly let go of this idea. In the end you need to discuss with the client and come to

A client is using SharePoint online for quite some time but as has an on prem SharePoint server. We're going to migrate the last site from on prem to online.

They have a pretty simple "intranet" site. Clients wants this migrated as is. To mimic the intranet we made a new site with two subsites. The subsites in classic mode is just what we need, so that's covered.

Now we only need one of the subsites to be the default site for this site.

Is this possible and if so..how?

I have a gen2 cloud key where i can logon to, but can't manage the network.

The network status keeps "starting".

I've searched and found a solution where you need to

- systemctl unmask unifi.service 
- Service unifi start 

But that doens't fix the issue.

We have a PFsense in the office connected to 100mbit fiber. All is working fine except audio and video in a Microsoft Teams meeting when users are connected to OpenVPN.

Most users are working from home and use VPN to access company resources. We route all traffic over VPN when connected to have some control.

We have traffic shaping in place with Codel queue management. We can't seem to get audio and video to work normally. Even when we disable to route all traffic over the PFsense, people who are connected to VPN still have the same issues.

To have a normal Microsoft Teams meeting they need to disconnect VPN but by doing so also disconnect from office resources.

​

Anyone with

Hi,

I was wondering if it is possible to remote control a Windows 365 instance from a global admin account.

I want to whiteglove the instance and need to install some legacy Windows apps. I can't use Autopilot or intune for this, so I want to briefly remote control the instance.

Wondering if this is possible in anyway. The Windows 365 instance doesn't show up in Endpoint manager under device -> Windows 365.

We have a client with a Dreambox Pro and we need to switch WAN1 to WAN2 and vice versa.

I know the "trick" where you need to add an additional IP to the WAN to be able to save the settings. Wan1 is all fine, but now I get the issue when saving Wan2 and I can't get it resolved.

So what I did was set WAN2 to DHCP (it's normally static), added IP to WAN1 and changed the LAN setting to use the mock up IP as wan. Changed WAN1 with the correct settings and switch WAN cables fysically. Changed the LAN settings back.

WAN1 is now online with the correct IP.

Now I go to WAN2 settings and want to enter the old WAN1 IP. At this point I'm stuck. The old WAN1 ip isn't used in any firewall rules, VPN c

Hi,

Anyone know of a rugged case for the Surface Laptop 4 15" ?

I've found an Urban Armor case that fits the Laptop 3 & 4, but it seems only available in 13,5" Need something to make the Laptop 4 field service proof.

Client with four printers at the office location and I want to add them automatically to Azure AD/Intune joined devices. I tried to go for universal print. So a virtual server is in place, printers added but most printers are simply "incompatible". One is a normal MFP and works fine. The other 3 are label printers (brother and zebra) and I can't get them to print on labels. All universal print printers assume normal paper sizes.

So need a different solution. Since there is a virtual server available, I thought to utilize that. Share the printers and add them (powershell maybe). But since it's a standalone server I can't seem to authenticate the azure AD users. And even when I can, I would

Like the title says, i'm looking for a way to disable the pin option in Windows Hello for Business, but keep the Biometric sign in options.

In InTune i can enable, disable or not configure Windows Hello, but when enabled i can't seem to disable the pin. I know Microsoft thinks the pin is secure and even prefer it, but we just want is disabled.

So ..is this possible and if so .. how?

Hi all,

I have an issues on which i hope you can assist.

Situation is as follows:

Central cloud based PFSense with IPSEC site-to-site tunnels to Unifi (Dreammachine Pro). IPSEC tunnels are working. When i openVPN to the PFSense i can't reach any devices at the office locations (over the ipsec tunnels).

I've tried adding rules to the PFSsense (both ipsec and openvpn have allow all rules) and also rules on the Unifi side. But i can't seem to get it to work.

What am i missing?

I want the OpenVPN user(s) to be able to reach devices at either Office1 or Office 2 (or both)

- From OpenVPN i can reach 10.0.0.x network.

- From 10.0.0.x i can reach 192.168.3.x and 192.168.6.x

- From OpenV