https://downdetector.com/status/openai/

Getting 404 errors.
Downdetector lighting up as well.

(Originally posted (most of) this in r/webdev because I thought it would be a common situation).

I'm looking for a workable solution or recommendations to provide a client's credentials to that client in the event of my untimely demise or absence. (E.g. hit by a bus - falling out and need to hand everything over, etc.) I also don't want to mix MY credentials with theirs.

So my primary work isn't webdevelopment, but I do some for clients as part of my general services. Generally this means me building everything from scratch and leaving the client(s) out of the day-to-day management entirely.

I'm trying to figure out the best way to have their business' credentials saved, updated as they are changed, and set aside for specific clients, if I get "hit by a bus" so they won't be locked out of everything.

I also don't want them "futzing" with things (because some of these clients have impulse control issues and would 100% give their credentials to someone on Fiver to update a paragraph on their website at 2am when I don't answer my phone.) So access while I'm not dead or fired isn't a real option.

I understand that I can make "organizations" in some of the password managers and have emergency hand-over to pre-selected people, but I work alone, and don't "have a lawyer" that can manage it for me in the event of getting bussed. My understanding is that none of the password managers offer multiple/divided assignees.

I would also like an easy and secure way to "hand everything over" for project clients who don't want to sign on for continuing services/management without using a google doc or something similar.

Just curious. How often are admins changing providers? And when you do what is the trigger?

I’m shitting it to say the least. I’ve worked in IT for 15 years now, from fixing a printer to installing and configuring networks etc you guys know the shebang no need to go on.

I have been out of work a while now like most people and maybe stupidly moved somewhere more rural and a bit stuck in the past. Seen this role advertised for Senior Network and Infrastructure engineer. They want someone who is going to come in lead and optimise their existing setup.

I don’t know if it’s the job spec they have but I’m having serious doubts on my abilities, when I think about the majority it well and truly is everything I have been doing for my entire career but for some reason terminology they are using is making me feel like I have imposter syndrome.

Interview is on Friday and I have questions already lined up I think that I would like to know so I can try and gauge what I’d be getting myself into. I’m thinking of asking about:

Current patching schedules
DR simulation and testing
Current team members
Potentially goals for the next 5 years ?

What do you guys think? Would be nice to have a discussion and try and alleviate some of these woes because god only knows it’s the next logical step in my career and could be me for the next 10-30 years

We ended a contract with some people that worked for our company and need to remove their email accounts. However, their email may still receive relevant communication, so I want to redirect whatever comes in their inbox to a different email.

The redirect works fine when their accounts are "operational", but as soon as I remove the license from their accounts, redirect stops working. Am I doing something wrong? How do I redirect emails from those accounts without having to keep paying for additional lincenses?

FYI, I am not deleting the accounts, removing the users or anything like that. The only thing I did was remove the license. Everything else is staying the same as when people were using those emails. Our emails are Microsoft Exchange.

End user called me today saying their home WiFi was connected but no internet. I walked him through some info gathering, his WiFi is showing unidentified giving off the 169 address.

Had him run release / renew / flushdns / winsock reset and rebooted, still 169. Did the full windows 11 network reset option, rebooted, still nothing.

Had him plug in directly to his router, his wired Ethernet connection was also showing unidentified. So I had him statically assign an IP on his NIC for the Ethernet and it brought him online that way as a temp workaround to let me remote in.

Rebooted the router of course, still wifi showing 169, other devices on his network are okay as well.

Uninstalled the wifi adapter from device manager, reinstalled the latest from the manufacturer, still giving 169. Just to get him working in statically assigned an IP on his WiFi adapter and it works without issue, but ideally we get the DHCP working again.

I’ve exhausted about everything I can think of, but am jumping back on it later tonight to try to get it fixed.

Does anyone have any suggestions??

Has anyone here experienced being blocklisted by Spamhaus even though the IP address of your domain is different from the IP address that is blocklisted?

For example:

Domain IP: 12.12.13.13
Blocklisted IP: 13.13.12.12

Despite having different IP addresses, we are still being blocked.

Has anyone experienced the same issue, or can someone explain why this might happen?

I'm genuinely curios what do you guys do with these "great apps" the finance guy built on his lunch break and want to have his whole team to get access to ? I have a finance director who built something and he wants to share it with others and I don't know what to do!

Kind of a random question, but I'm not super confident in my restoration process for some of the backups I have in place. Do i think I could restore the systems? Yes.

Do i think it would take several hours and be messy? Also yes.

My question is to those that have actually performed restores of production servers:

What backup systems do you use and how fast are you able to restore production servers? I'd love to hear the infrastructure behind a successful backup/restore scenario.

I see on the Robustel website they're asking for an NDA signing and per unit license for root access to an R2110.

Just out of curiosity, what's the legality of already having obtained and rolled this out to 4000 units with absolutely no NDA signed, only an RPK created with the SDK that Robustel themselves provided?

Asking for a friend.

Company I work for is hiring a sr security engineer. We are all Microsoft shop, cloud-only, no on-premises. I have been helping with some of the interviews and I fail to understand why we are getting candidates that don’t seem to know what product/technology to use for blocking executables on workstations. Device control for blocking usb devices, nope, this does not ever get mentioned. Briefly explaining difference between DLP and encrypting outbound emails with PII/PHI/PFI, nope, can’t get a simple answer or even a guess. The conversations steer away and never the answer. One candidate had to be reading AI responses somehow because first answer to blocking was general and bad, but when mentioning app locker it felt as I was prompting gpt4.2

I'm the sole IT guy for a small CPA firm (10 people) that wants to move everything from on premises to the cloud. They've been on prem for almost 3 decades and most of them aren't tech savvy at all. I've been asked to come up with a proposal with a flat rate, but I have no clue what to quote for something like this so I'm just looking for ball park figures from someone who's done it before.

I know there's AIO solutions like Verito, but this proposal is for building the infrastructure from a bare cloud server. MS business accounts & exchange inboxes are already done. I'd be setting up Purview DLP policies (from scratch), Intune, Quickbooks & Drake, moving 4TB of client files from their NAS, backup & disposal of 10 workstations, VPN & RDP, and all the other role provisioning and training that goes with a cloud server.

My best guess is quoting for ~100 hours. Am I way off?

We're a two-person IT team managing roughly 225 users on Microsoft 365 Business Premium. Our Windows workstations are Entra joined and Intune managed.

We're moving admin roles off our daily accounts and onto dedicated cloud-only admin accounts. I'm testing phishing-resistant MFA and a compliant-device requirement for those accounts.

My main concern is making the workflow practical. We jump between Intune, Exchange, Entra, SharePoint, Teams, etc. throughout the day. Some days it is frequent admin stuff depending on what's going on.

I tried a separate Edge profile signed into my admin account, but the portals initially kept signing me in with my daily Windows identity. Using a login_hint in the URL or explicitly selecting another account gets me into the intended account. I'm still validating the Conditional Access side.

I'd prefer not to add the admin identity as another Windows-connected account just to make browser SSO work. InPrivate also appears problematic with the compliant-device requirement.

How are you handling this in practice?

- Separate browser profiles, a separate browser, a private browser window or account switching within one profile?

- Do you connect your cloud admin identities to Windows? I would assume no.

- Do you require compliant devices for admin access?

- Are you using dedicated admin workstations or PIM?

I understand the value of separate identities. I'm looking for a workable daily setup that doesn't require constantly correcting which account a portal is using, or constantly launching private windows, if at all possible.

Maybe this is a sign we just need to review overall configuration of things to better dial them in, so we don't have to go into an admin portal so often?

Especially interested in what other small IT teams are doing.

I have a few IT guys assigning tickets to themselves and then completing the rating with excellent feedback on the follow up survey . One guy created a ticket for 'updating inventory' then fills out the survey with "excellent job, quick and proficient with great communication". LMAO

Many organizations moving away from print servers.

But the printer industry is moving away from print drivers.

The problem: We use printix and you cannot deploy printers without drivers. But manufacturers like brother dont offer print drivers for macOS. Our brother printers are not compatible with PostScript. There are some very old print drivers from macOS X but the print quality is very bad. Brother says "use AirPrint". But AirPrint is not compatible with printix.

Windows is also moving away from print drivers.

Follow-up of my first post: https://www.reddit.com/r/sysadmin/s/xMfcrcHx5f

Just told HR about how i feel about beign the sole IT guy who manages everything (for short: 365 in all his aspects, backups, networking guy, ecc...) for 24 people (if we count the external the number doubles) as an apprentice with a job title "IT support".

i told her that as an apprentice i should (by the law btw) some kind of tutor that can teach me the job and some one who can help me in my things; first thing she pointed was that i'm always out exactly when my work hours ends. WTF
ofc i go away when my work day is done, things can wait (most of the times).

Then proceded to tell me that i might not know how late some of the staff stay in the office (idk why tho) and everyone is aware of how many things they ask me.

Basically everyone somehow expect me to be the expert about anything is slightly it related, how i'm even able to give confidence to people when i don't have the slightest idea of what i'm even talking / doing some time.

I really miss having someone older can guide me.

Hello folks,

We’ve been tasked to switch some of our users from SMS to the MS Authenticator app. Rather than doing this manually, I’d like to make this seamless as possible. I think creating a policy in entra ID where it’ll prompt our end users to enroll into MS Authenticator ? Curious to know how others have tackled this.

I have a client that still routinely sends Faxes. I upgraded his dying HP AIO unit with a new, shiny Brother AIO unit.

Nothing else has changed. If I put the old HP unit in, it can send a fax but it still has the issues that caused it to be replaced, my buttset can dial out no issue on the line, and Xfinity has verified twice that signal level and VOIP on their gateway are all "to spec" for fax.

Brother tech support says it's an Xfinity issue, and obviously Xfinity says it's a Brother Printer issue.

I'm headed to the site today - does anyone have any other suggestions to try? I'm planning on physically tracing the line today just to see if there's any damage in the crawlspace to it, but I'm not sure what else I could do at this point.

And I don't mean "how does it work?" but we have shared-hosting servers.. I'm not giving those server write-access to our DNS servers. Hell no. But there's also wildcard certificates (yeah I hate those too but some websites need'm) and those I can't renew with the .well-known checks, and there are other situations where the simple .well-known dv validation won't suffice..

How do you handle that?

We have some Conditional Access Policies that require users to logon from specific managed devices when browsing to certain Entra app registrations. It works okay for many users.

We have a few users with both regular accounts and privileged/admin accounts. When they browse to the app, they are automatically logged in via their standard user account (the same account they logon to the computer with and the one that has the PRT). They primarily need to logon to the app using their privileged account, so my first thought was to tell them to logon in Incognito Mode, but Incognito Mode doesn't pass along device information, so the Conditional Access Policy logon evaluation fails.

Is there a good workaround for this that isn't a pain in the ass for the privileged users?

Hi all,

I'm managing a small stack of HPE 1950-series switches (JG963A) running Comware software version 7.1.070, Release 3507P09. On most of these switches, the hidden xtd-cli-mode command (used to unlock the full/extended Comware CLI from the default simplified/restricted CLI) works fine — it prompts:

All commands can be displayed and executed in extended CLI mode. Switch to extended CLI mode? [Y/N]:y

Password:

Warning: Extended CLI mode is intended for developers to test the system. Before using commands in extended CLI mode, contact the Technical Support and make sure you know the potential impact on the device and the network.

and after entering the password, it drops me into the full CLI (system-view, display interface, etc.) as expected.

On one specific switch in the stack, though, xtd-cli-mode now just returns:

<SWITCH>xtd-cli-mode

Permission denied.

with no Y/N prompt at all — straight rejection.

What I've tried:

- Reconnecting fresh via SSH (telnet is disabled on this unit) — same result.

- Rebooting the switch entirely — same result, persists across reboot.

- The account I'm using is the local admin user with network-admin + network-operator roles assigned, service-type ssh enabled, and it authenticates fine for a normal SSH login — it's specifically the xtd-cli-mode command that's rejected.

- Restricted CLI at login only exposes display, exit, quit, no, show — no way to run display users, free user-interface, or check security-enhanced/lockout state from there.

Since this is a firmware "developer mode" feature with anti-abuse messaging built in ("contact Technical Support"), I suspect this might be some kind of persistent lockout counter stored in flash rather than a normal AAA/role permission issue — but I have no visibility into it and no way to reset it from the restricted CLI.

I get it - everyone is using AI now, it has its use cases, but please for the love of God stop sending me the slop. At least read it first before firing it over to your colleagues.

Has anyone else's team turned into an absolute back-and-forth slop fest? Manager generates something he thinks is helpful, gigantic multi-page HTML report I need to read. Clearly written by Claude, because who the hell writes reports in HTML.

Coworker A: sends messages on slack trying to help solve problems:

This is the smoking gun: the message being sent is gated on the lack of network access to the k8s pod. Let me sit with this for a minute to make sure.

No, it's not the solution at all. We don't have direct IP access to k8s from our laptops. And nobody writes like that. If I wanted to ask Claude I would, I don't need a coworker that just copies and pastes everything into Claude.

Anyone else dealing with this crap?

Hi everyone,

We have a number of Microsoft Teams channels we use. There are 4,5 specific channels that are displaying the error “We’re having trouble loading your messages. Try Refreshing”

The error is shown to all members on these groups, across multiple machines, and also across web versions on different browsers and also the desktop version.

Has anyone come across a similar issue, or have any advise on how to fix this?

Thank you very much in advance.

I have an HPE ProLiant DL360 Gen10 running Windows Server 2019 Standard. Checking Device Manager, the Intel(R) Management Engine Interface driver shows:

• Driver Date: 1.09.2016
• Driver Version: 11.6.0.1026
• Digital Signer: Microsoft Windows Hardware Compatibility Publisher

This looks outdated for a Gen10 server. Before I touch firmware/driver on a production box, I wanted to check with people who've done this on HPE hardware specifically:

• Should this be updated through HPE Smart Update Manager (SUM) / Service Pack for ProLiant (SPP), or directly from Intel's site?
• Does updating the ME Interface driver also require updating the ME Firmware itself, or are they independent?
• Any known issues updating ME on Gen10 (iLO 5) systems — reboot requirements, downtime, risk of bricking if interrupted?
• Is this something that should go through iLO/firmware update tools instead of Device Manager "Update Driver"?
• Any gotchas with doing this remotely (out-of-band) vs. requiring physical access?

Appreciate any real-world experience before I schedule a maintenance window for this.