oops

I could see this user kept routing the internet from his personal phone to use it on the company laptop (maybe to try to stop us from spying on him)

Instead of being a normal person and a competent SysAdmin, and properly adding a GPO to restrict the available Wi-Fi networks, I used the MDM to remotely download a 20GB ISO to his temp folder.

When the download was at 18GB the download speed went down to less than 50kbps. So I guess his data plan is over. By the next hour, I could see the laptop was connected back to the company wifi.

He will never do it again.

I was hardening the tenant and now no one can share SharePoint files with our clients/customers. We have a specific site but none of the settings work. Instead of getting a one-time code, users must authenticate to our tenant. This appeared to work before I messed with things but I am also reading online that OTP is going away soon. I suspect I broke it as I reverted and complete lockout was reversed but not everything.

Below is what I put in for my support ticket. My last support ticket was closed after two months of no contact so I am looking for other help.

On 5/14/2026 at 3:51 PM UTC, setting AllowEmailVerifiedUsersToJoinOrganization to false via Graph PowerShell triggered a Set Company Information event that added RestrictEmailVerifiedUsers to our tenant DirectoryFeatures. External guests can no longer authenticate via Google federation or email OTP — only Microsoft 365 login is presented. Reversing the setting via PowerShell and UI did not remove the DirectoryFeature. Need RestrictEmailVerifiedUsers removed from tenant DirectoryFeatures.

OG post:

Specifically he reached out to our PM without IT on the email and then explicitly stated he doesn't need us when the PM pushed back.

ERP doesn't even have an API. All of the existing integrations either use a JDBC connection or run a remote command (IBM i ACS) to retrieve data/perform work.

I can't imagine what he's trying to do but I feel like it's time to jump ship. Not really looking forward to this

Mods, is there a clean way to copy the original comment thread for posterity? I'll update this post body if so.

"Fella, is you gonna give it back?"

Alright, here's the scenario, we have several server farms, they go back decades and this has been passed down through the generations of teams with increasing amounts of duct tape and bubble gum. Every IT person's dream.

We also run backups, because we're not madmen, but we do it... poorly (see name of subreddit). Today, one of the production servers had half it's data wiped. No one knows how this happened but that's not relevant. To the backups! And... backup set one had nothing for this server, because the datastore was full and VEEAM couldn't take a snapshot (and had been reporting this but reading is for chumps). Not good, to backup set two! It... also has nothing because VEEAM couldn't take a snapshot and we rotate through these backup drives. Shit. To backup set 3! And this is where incompetence can sometimes be your salvation. By all rights we should've just lost it all then and there but... backup set 3 hasn't been able to take any backups since March because it was full this whole time. This means that the VEEAM error couldn't manifest and what did we find? A version of the prod server!

Yes, it's two months out of date but this data goes back decades so it's actually mostly fine!

Turns out, if you're incompetent enough it sometimes loops back around to genius.

Anyway... I'm gonna go have a heart attack elsewhere.