The firewall sees the destination IP of the connection, if that's not in a whitelisted rule then a deny is sent.
Firewall, DNS, and HTTP are filtered independently of each other in my network
From the ICO "If you have doubts about the identity of the person making the request you can ask for more information. However, it is important that you only request information that is necessary to confirm who they are. The key to this is proportionality."
I am 100% that passport request is even worse than ignoring your deletion request here.
From what I understand, you aren't supposed to obtain more PII than you already hold when validating someone's identity.
Auditors are the worst for this, have you ever tried explaining software defined storage to an auditor?
None I've met seem to be able to grasp the concept of it.
Also surprisingly, very few I've met have heard of SCCM!
Something like that should be CR, security write some powershell, get reviewed by Ops, approved, and executed by Ops rather than letting people just do stuff even if it is routine.
But by then it's not too much to just automate the entire thing.
Will do. I'm not on the named list of people that can open cases (public sector bureaucracy) so as soon as I can get one opened I'll email you.
imran@chi.swan.ac.uk is my email btw
Looking forward to finding the other bugs in September :)
Our environment is 2012R2, basically skipped 2016 as it just felt rough, in fact I decommissioned our last 2016 server yesterday.