Mathematica Ken

@IAMERICAbooted Wayfair can make sense the way ordering a well known brand from amazon can - but also has the same downsides. They often give partial refunds that can better than clearance or big sales when things happen.

Lesson learned. I will never buy stuff from Wayfair again. Too much work, sheesh.

@AdamGell Just FYI Ccmexec logs are noisy and error a lot. it can be tough to know what normal and whats not.

@AdamGell reddit.com/r/SCCM/s/KpVIk…

I don't know the CcmExec.log well enough to know if its normal to see a failure and not a reason.

@HaakonWibe Wild this needed to exist to help simplify the process.

Every Intune admin has lost an afternoon to an M365 Apps + Visio + Project + language pack deployment that "almost" worked. Got tired of that, built a toolkit so my team doesn't have to. Three commands to get going, four products covered, 113 language packs for those counting, install/uninstall whatever order you like. github.com/haakonwibe/m36…

@richardhicks @NathanMcNulty Biased cause I helped answer or lived through many of the “gotchas” on this guide before it existed. wiki.winadmins.io/en/active-dire… but thankfully anthonyfontanez[.]com documented it all for the world.

Who has a simple guide to configure Cloud Kerberos Trust for Entra (if such a thing exists). Is it as simple as running a PowerShell command and ensuring you have access to the DCs via VPN or Entra Private Access? cc: @NathanMcNulty

@AdamGell Graph?

API Error: 529 Overloaded. This is a server-side issue, usually temporary. :(

@IAMERICAbooted You mean Agent 365 doesn’t know?

Who can tell me how many agents are connected to your Microsoft tenant and what are they doing? This is a problem I'm going solve.

@IAMERICAbooted @minkeymagik I heard it was changed recently to be more adaptive due to the proliferation of people getting it. Colleague told me they bombed a IGA question and it grilled them like the next 15 questions on it enough to fail.

@minkeymagik I mean, it is good... like when I was new

CISSP 😋

@IAMERICAbooted IMO 80% wont even touch entra in a way that thats easily discernible from user activity.

I'm so glad I don't have to manage Agents in Entra. What a fucking mess this is going to be.

@awakecoding Ahh, kinda similar to venv in python - that has nice use cases.

@MathematicaKen I'm working on a tool to download and install multiple versions of PowerShell side-by-side easily, and I'm now looking into adding more options to install without pulling directly from GitHub. It installs using the zip, by design, not the MSI: github.com/devolutions/mu…

Do you install PowerShell and PowerShell modules in environments with restricted Internet access? If so, what's your current way of doing it? What would be your dream solution?

@IAMERICAbooted @rucam365 I really like small function/task method and will often bounce the function off multiple context refreshes or AIs. I keep hearing good things using the every.to/guides/compoun… method but it’s just overwhelming the output to review.

I use it a lot for scripting and it's amazing. I use it mostly for smaller tasks but these things take me minutes instead of days to weeks now. I wish I could share all the scripts I've made at work. I'll let you know how my system turns out. Plan is to break it up into a lot of small worker tasks and start slowly.

Not a dev. but like most folks in our bubble have been using AI coding agents a ton over last 3-6mo. And I need to ask people who know better than I do: For every take about not having to look at the code anymore, I see another from someone who does look at the code and sees junk. It works, but I assume at the cost of maintainability, performance, and reliability. Is it a case of constantly refining skills, instructions, and agents to achieve code that doesn’t really need human review? Do the models get so good with the laws of scaling we no longer need skills? (every AI coding improvement being Yet Another MD File doesn’t seem right) Or: Are the folks who “just use” whatever’s generated, with no code review, the right ones? Assuming it passes UAT, vulnerability scanning, CSPM, etc. Intuitively this doesn’t seem right, but if it works…? And do you just keep prompting “review the code for inefficiencies” until it taps out? Vibe coding is addictive and I wonder if that’s for the same slot-machine reason as scrolling. Sometimes it’s incredible and nails it, other times it fails miserably so you keep trying: only one more prompt, then i’m good!

@IAMERICAbooted Like when crappycallcentergui.exe updates a config.ini within programdata in its own folder with like username or FQDNs of things when a non priv user opens it?

@MathematicaKen configs that have settings for applications and allows you to overwrite them

Dear developers: please do not put enterprise config files in the ProgramData directory. Thank you, Some Security Person

@IAMERICAbooted Seriously though I really do need to figure out how to run delegated Sharepoint permissions via msal in react otherwise the users might figure out they can RPA Sharepoint with the win-MCP skill or some other mouse/keyboard clicker skill.

@MathematicaKen 😆 🤣 😆 😆 😆 😆 😆 😆

New blog post cooking: How Many Shadow Global Admins do YOU Have?

@IAMERICAbooted It sure would be nice to get paid to prove people wrong instead of having to prove a fix is within scope of needing a compensating control and that we have adequate resources to change.

Im ready to retire and become a full time phisherman for .gov

@acjuelich Kinda like companies only patching vulnerabilities when theres a website and logo.

Everyone talking and asking about securing Intune now, while having no Conditional Access policies, weak Auth Methods, all Admins are GA synced from an on-prem DA account. It's important to think about but don't lose focus. You can't build a strong house without a solid foundation. #MSIntune

@AdamGell Someone’s gotta get things done around here may as well be you.

@MathematicaKen yea me right now

I need some macOS intune troubleshooting experts.

@AdamGell At least it’s something, did anyone else do anything more in-depth?

@MathematicaKen it only looks at like a very small subnet of logs btw github.com/pathaksomesh06…