Auditors are the worst for this, have you ever tried explaining software defined storage to an auditor?
None I've met seem to be able to grasp the concept of it.
Also surprisingly, very few I've met have heard of SCCM!
Something like that should be CR, security write some powershell, get reviewed by Ops, approved, and executed by Ops rather than letting people just do stuff even if it is routine.
But by then it's not too much to just automate the entire thing.
Will do. I'm not on the named list of people that can open cases (public sector bureaucracy) so as soon as I can get one opened I'll email you.
imran@chi.swan.ac.uk is my email btw
Looking forward to finding the other bugs in September :)
Our environment is 2012R2, basically skipped 2016 as it just felt rough, in fact I decommissioned our last 2016 server yesterday.
Just got around to implementing AD accountExpures checks in the few places where it's ignored.
Sad to see "There is no plan today to sync password expiration state (or disabled or lockout state, for that matter) from on premises AD to AAD" when finding out what others do
So I get you're supposed to put Packetbeat on application servers but it turns out it works just as well on your routers, just deployed it to all of our routers :) #elasticsearch
Monday off to a good start, some light code review when...
Why pay for not 1 (Jira) but 2 (Gitlab) bits of project management software to track software issues when you can use EXCEL AND STORE THE SPREADSHEET IN THE GIT
Why are people like this?
The way the mirrors work mean all the mirrors running behind it would need a trusted certificate for security.debian.org
However, do try deb.debian.org as that works differently, "deb deb.debian.org/debian-securi… stable/updates main contrib non-free"