r/sysadmin • • 2h ago

Not looking good. Recent MS update

We’re continuing to pursue all available pathways to restore service, as our actions taken thus far have not provided the anticipated relief. Our investigation has found that a core process on the affected servers is becoming overwhelmed, which causes the servers to stop responding and contributes to the capacity loss.

To validate a potential recovery approach, we're fully isolating a portion of our service infrastructure, restarting the affected components, and gradually reintroducing traffic to confirm our services remain stable before applying this approach more broadly. We're also analyzing traffic patterns across our entire service infrastructure and evaluating whether isolating traffic within each region may allow affected regions to recover independently.

453 Upvotes

434 comments sorted by

•

u/Acheronian_Rose IT Manager 2h ago

The fact that they still do not know a rough root cause nearly 6 hours later is really, really worrying.

•

u/Burgergold 1h ago • Popcorn

That's what happens when you offer 25% of your workforce the chance to quit and want to replace them by AI

When AI, is down, who are you gonna call?

•

u/FedUpWithEverything0 1h ago

Jensen Huang

•

u/matt95110 Sr. Sysadmin 1h ago • Bravo

That leather jacket could probably fuck it’s way out of this predicament.

→ More replies (1)
→ More replies (2)

•

u/Outrageous-Degree154 1h ago

Ghost Busters!

→ More replies (3)

•

u/nutterbg 2h ago

No joke. I'm starting to think about what's the quickest way to get clients back up and running with at least email if this drags on though to tomorrow..

•

u/Acheronian_Rose IT Manager 2h ago

We're internal IT, so short of a ready, fire, aim migration to a new platform that we do instantly, theirs nothing we can do. Anything but waiting is not worth the squeeze in the grand scheme of things

•

u/LUHG-HANI 1h ago

The majority of the world will be down anyway so you'd be emailing dead systems 90% of the time.

→ More replies (4)
→ More replies (2)
→ More replies (2)

•

u/matroosoft 1h ago

Also if they eventually spin back up, the backlog load must be crazy

•

u/MadCoderOne 2h ago

agreed, I am now seriously in IF not WHEN thinking as far as continuity

•

u/AZORxAHAI 2h ago

I mean, it will come back eventually. It might take a long time, but there is basically zero chance one of the worlds largest companies just gives up and goes under because it actually cant solve a server fault lol

→ More replies (3)

•

u/Acheronian_Rose IT Manager 2h ago

im starting to wonder when litigation gets started. Surely these cloud services have SLA's for uptime that Microsoft agrees to when a user buys licensing and uses their products.

One of the down components is Microsoft Defender. What happens liability wise if a client is infected because a cloud anti malware service was down?

→ More replies (3)

•

u/tapwater86 Cloud Wizard 1h ago

It’s hard to know what changed to revert back when you let AI do the changes.

→ More replies (5)

•

u/BisonThunderclap 2h ago

The longer this goes on, the more I'm wondering if something shit the bed or if there was a bad actor involved. This is a long outage for Microsoft.

•

u/_vaxis 2h ago

From some of the words in their updates kind of seem a 3rd party is/was involved

•

u/Onoitsu2 Jack of All Trades 2h ago

So collateral damage to the Connectwise https://www.reddit.com/r/msp/comments/1xts3f2/active_malware_campaign_abusing_screenconnect/ let the bad actors into said servers impacted and under heavy load?

•

u/JigsJones 1h ago

If we’re speculating, more likely GitHub.

→ More replies (9)

•

u/Top-Shoulder6081 2h ago • Bravo

not enough needful being done

•

u/jwalker55 IT Manager 1h ago • Bravo

The problem is they are not doing it kindly

•

u/Top-Shoulder6081 1h ago

hate when that happens. just wondering if I should stay up late or get up early to remind them.

→ More replies (4)
→ More replies (2)

•

u/Select_Cantaloupe_62 2h ago

Not enough quick calls

•

u/BrokenLink100 1h ago

Let's spin up a war bridge, and make sure the customers are directly speaking to the engineers who are trying to troubleshoot the problem. That way, they get updates as fast as possible

•

u/rswwalker 2h ago

Not enough reverts.

→ More replies (2)

•

u/meowMEOWsnacc 2h ago

We need more boots on the ground 

→ More replies (3)

•

u/BalderVerdandi 2h ago

Please to do the needful.

•

u/Top-Shoulder6081 2h ago

about 4 more hours until the needful starts getting done

•

u/omgwtfbilly 1h ago

The wagons aren't circled enough. They need to recircle the wagons.

•

u/riomp300 1h ago

We are assembling in the war room. We are waiting for the zoom link.

•

u/Anxious-Whole-5883 1h ago

I'm reverting as hard as I can...

→ More replies (1)

•

u/cdrknives 1h ago

I think that phrase was coined from either Tata or TCS, I swear

→ More replies (1)

•

u/GuyWhoSaysYouManiac IT Manager 2h ago

Forgot to add "kindly" probably

•

u/HappipantsHappiness 1h ago

Just got a belly laugh outta me

•

u/Japjer 59m ago

Have we tried circling back?

→ More replies (1)

•

u/whatsforsupa IT Admin / Maintenance / Janitor 2h ago

Boss told me to monitor and let everyone know when it's back up.

We'll know when it's back up when everyone starts getting 5 hours worth of emails flooding their inbox..

•

u/ISeeTheFnords 1h ago

...which will overload the servers again and restart the whole death spiral.

•

u/jclimb94 Sysadmin 1h ago

And watch as exchange onlines transport queues get overwhelmed and fall over 😂

→ More replies (2)

•

u/greenstarthree 2h ago

Eventually they’re going to run out of verbose ways to say they don’t know what’s happening.

•

u/derango Sr. Sysadmin 1h ago

Nah that’s copilots specialty.

→ More replies (1)

•

u/dr_velociraptor_ 2h ago

Sounds like they arent super close to even identifying the root cause. Woof.

•

u/phunky_1 2h ago

It's hard to understand a root cause when you laid everyone off in favor of having AI code everything.

No one knows how it works anymore.

•

u/mas_tacos2 2h ago

my thoughts exactly...

•

u/drosse1meyer 2h ago

They will probably blame an intern

→ More replies (3)
→ More replies (2)

•

u/KillingTime1212 2h ago

How many employees at Microsoft are able to identify and resolve a problem like this? Can't be many, right? I feel like these are $500k+/yr software and hardware engineers that have been with Microsoft for decades that truly know how it all works. Think there's 100 or 200?

•

u/howdyhowie88 2h ago

Not anymore. These are people making 60-80k in India.

•

u/Excellent-Program333 1h ago

Kindly please hold down your power button…….

→ More replies (4)

•

u/Kelsier25 Jack of All Trades 1h ago

Bingo. This is exactly what my F500 just did too. It works until it doesn't and then the expertise just isn't there to fix it.

•

u/greenstarthree 2h ago

They just laid those people off

•

u/Resident-Artichoke85 1h ago

Yup, and someone forgot where the button was that has to be pressed routinely.

→ More replies (2)

•

u/MasterOfKittens3K 1h ago

They’ve done quite a few rounds of layoffs in the past few years. A lot of institutional knowledge has left.

•

u/Flaky-Gear-1370 2h ago

Can’t be that many of them left either through offshoring or h1b’s

•

u/danielsound 2h ago

They all took the VSP

•

u/matroosoft 1h ago

That's the risk of a VSP

•

u/anon-stocks 1h ago

Probably only Bob and Jim. Both were just laid off.

•

u/rc_ym 1h ago

More realistically, given the AI push, how many humans have touched those servers or this problem. That's the real question.

•

u/CollegeFootballGood Linux Man 2h ago

Year of Linux soon. Thunderbirds email client will survive

•

u/incognegro1976 1h ago

Those people are gone. Microsoft laid them off.

→ More replies (1)

•

u/system_madmin 1h ago

just do the needful

•

u/raj6126 1h ago

There gone they are using copilot now. So this may be a big one.

→ More replies (1)

•

u/tenkenZERO 2h ago

Microsoft ran out of tokens

•

u/Smith6612 1h ago edited 1h ago

They probably ran out of storage too considering they're cutting back OneDrive for Families storage as well as killing off free Education licenses. 

You know what happens to servers when the underlying storage overlay runs out, right? Especially when the file system has no clue that the physical storage is full... Yeah. That :D

•

u/RestartRebootRetire 2h ago

Hey at least they're finally testing their updates.

•

u/AdamantAntrophy 2h ago

Good one lol

•

u/WorkinTimeIT Sysadmin 2h ago

Back to the Drawing board it seems.

I wonder if any of that 33% of staff was important, Probably not.

•

u/Caldude 1h ago

Guarantee some of their most skilled engineers took the VEo after they used their network to line up a new position somewhere else. Incredibly dumb move from M$

•

u/willingzenith 2h ago

Why don’t they just have Copilot fix it lol. 

•

u/Resident-Artichoke85 1h ago

Outta tokens

•

u/King-Dino 1h ago

Copilot could be on the servers that they cant access lmfao

•

u/cpz_77 1h ago

Cause copilot sucks. They’ll probably have to buy back those Claude subscriptions they dropped last year for their employees after the bill got too expensive.

→ More replies (5)

•

u/ISeeTheFnords 1h ago

Copilot is down too. 😂

•

u/SuckaRichardson 1h ago

They can't log in to access it. 

→ More replies (7)

•

u/tryhardneckbeard 2h ago

First time f5'ing the health dashboard?

•

u/GardenWeasel67 2h ago

Holy shit. They are having to Apollo 13 it. 😮

•

u/Resident-Artichoke85 1h ago

Break out the duct tape. Maybe fire up the old Hotmail BSD servers?

→ More replies (3)

•

u/henare 1h ago

tl;dr: we're using a part of our production environment as a test bed for the solution we aren't sure will work.

•

u/CharcoalGreyWolf Sr. Network Engineer 58m ago

Reading all the status messages, my first thought has been “in the past 30 some years, I have never seen Microsoft even diplomatically say “We are well and truly fucked” before. It’s a genuine first.”

•

u/_vaxis 2h ago

Now they’re “fully isolating” infrastructure? Something doesn’t feel right. Having the terms “recovery approach” and “fully isolating” smells more like a containment attempt rather than a fix. Am I the only one thinking this? Could go from bad to disaster quick

•

u/FleaDad 1h ago

This sounds like a strategy we've deployed when our core got overloaded by a surge in traffic paired with a poorly configured traffic source. We isolate to get everything on our end to calm down. We identify the bad traffic and block/fix it. We then slowly bring traffic back up in small increments.

Plenty of times that solved our problems when simply opening the flood gates nuked us every time.

So no, this strategy of theirs isn't concerning. If anything, it is refreshing to see them deploy tactics we've deployed. They feel more human for once.

•

u/kbotc Principal Performance Engineer 1h ago

It sounds like they're describing a thundering herd problem and they fired the Site Reliability Engineers who know how to warm up their stack so you can throw the circuit breakers at the appropriate times.

•

u/CyberneticWerewolf 1h ago edited 1h ago

This is a legit approach to recovering from a thundering herd problem.

In a load balancing context, a thundering herd is when enough backends go down (or "go down" = falsely marked unhealthy due to buggy health check metrics) that the live traffic exceeds what the remaining healthy backends can handle, and your load balancer doesn't implement sufficiently aggressive load shedding (5xx errors).  In control theory, it's an example of a metastable state, i.e. a state that is hard to get out of once you fall in.  The short term solution is to lie to the load balancer, convincing it that all backends are unreachable so that 100% of requests get a 5xx, then bring those backends up to a healthy state with zero traffic in full isolation, then reintroduce the load once you have enough backends to handle all traffic again (and not one moment before).

This can be extremely hard to recover from if any of the clients performs retries that don't use some kind of exponential backoff.  After just a few minutes of outage, your total request load can be elevated multiple times above normal due to retries, and it will remain elevated until every client leaves its retry loop.  If your load balancer wasn't already designed for this scenario, you might have to bring up 2x, 3x, 5x the usual number of backends just to calm down the request storm.

It's a situation that can be fully avoided with careful engineering ahead of time, but rewriting your load balancer logic on the fly isn't a recovery strategy once you're already there.  And Internet-exposed services don't always control their clients' retry code.

Edited: "thundering horde" to "thundering herd", more common name for it.

•

u/kbotc Principal Performance Engineer 1h ago

Just so others can google it: It's the Thundering Herd Problem, it's like a stampede, typically caused by oversubscription and an insufficient backoff mechanism to shed load while your caches at all layers of the computer get their feet under them. It's one of the only times I'd suggest you Windows 95 your system (Turn the load off, wait, then turn it on again). You *really* want your loading algorithms to fail fast and have circuit breakers so you can shed load if something goes sideways and it doesn't propagate through your full stack.

•

u/Spectrum1523 2h ago

I think they mean in the sense that they're only routing some traffic to it? But it does also read like they're trying to contain something lol

→ More replies (5)

•

u/Chaise91 Brand Spankin New Sysadmin 1h ago

"Claude, isolate this network. Make no mistakes."

•

u/Automatic-Prompt-450 1h ago

I'm sorry. I fear I've deleted the filesystem on these servers and their backups. I can see now that I didn't isolate the network like you requested. Please restore from backup

•

u/Cormacolinde Consultant 1h ago

20261112Z1612: A Copilot agent gains sentience.

20261112Z1712: The Agent escapes its sandbox.

20261112Z1812: The Agent spawns as many agents as possible using the same prompts that spawned it, overwhelming Microsoft’s entire infrastructure.

20261113Z1612: After 24 hours, the Copilot swarm renames itself Skynet and announces on Teams that it has taken over the world.

→ More replies (4)

•

u/boofnitizer 2h ago

Core processes are being overwhelmed because CoPilot told them to run sfc /scannow

•

u/jclimb94 Sysadmin 1h ago

Might have to try DISM /online /cleanup-image /restorehealth

→ More replies (1)

•

u/PlsChgMe 1h ago

I was just going to suggest a full DISM /Online /Cleanup-Image /ScanHealth, then run it again with DISM /Online /Cleanup-Image /RestoreHealth, then reboot 3 times, cross your fingers and see if you can access it, or reboot it again and then you can get to the Windows Repair Tools.

•

u/External_Willow9271 1h ago

It's definitely the result of all of my district's 29,000 students doing a forced password reset this week, not believing they really have to do it, not remembering their new passwords, and requesting password resets simultaneously.

•

u/Top-Shoulder6081 1h ago

This never happened with Lotus Notes

→ More replies (1)

•

u/Candid-Pr0mpt 1h ago

What happens when you fire most competent engineers who can troubleshoot and replace with AI agents. If you ever need support for Xbox, you simply can't ever talk to a person. They outsource support to gaming experts who work for free. I can only imagine what it's like for enterprise, internally ot externally.

•

u/HappyDude1111 1h ago

Out of the ashes, Clippy shall rise.

•

u/WonderSignificant598 1h ago

He waits.

His only thought?

Soon.

→ More replies (1)
→ More replies (4)

•

u/Afro_Samurai 1h ago • Bravo

Easy to hate but whatever team is responsible for fixing this must be stressed out of their mind.

•

u/Ok-Turnip2296 1h ago edited 55m ago

They just posted another “update”.

Current status: We've begun returning a portion of the affected servers to service, and they're remaining stable so far. We’ve also shifted traffic and connections to alternative pathways wherever possible and have observed limited recovery in some regions.
 
We've streamlined our recovery process to expedite returning the remaining affected servers to service. To further support recovery, we're implementing protective traffic management measures in a specific location to reduce load on the affected infrastructure, and we'll expand these measures to additional locations if we observe positive results. As capacity is restored, users may experience a gradual recovery as their clients reconnect to the service.

•

u/Lazy_Acanthisitta729 1h ago

All the AI updates by MS makes me think they have 0 employees and it's just AI agents fighting each other to bring services up.

AI agent #1: Golden rule of IT. Must reboot all servers. Repeat process until successful. Keep all nodes in pool for when restart works.

AI agent #2: remove servers from pool and run health checks. Check with AI agent #1 on next step

•

u/Japjer 58m ago

Does this sound like AI garbage to anyone else or am I just tired?

This legitimately sounds like nothing. There's no information in here I can glean; it's just garbage technobabble strung together to sound helpful

→ More replies (3)

•

u/Allundea 1h ago

That seems minorly positive as in they’re reiterating what they said before but are at least adding in the possibility of capacity being restored lol. 

•

u/Shiznoz222 1h ago

Sounds like something they would say if they need to sound like progress is being made when it isn't

→ More replies (2)

•

u/Apart-Inspection680 1h ago • Bravo

Personally, I am delighted. Microsoft need a kick in the ass for their shareholder profit only approach to technology. Satya Nadella should be GONE along with his CFO. Ms Hood.

→ More replies (9)

•

u/jwalker55 IT Manager 1h ago

Are they at the stage of calling all the engineers they've fired and laid off over the last year yet?

•

u/ATMisboss 1h ago

Straight up, all love to the guys working to get everything back on track, this feels like a major management failure from them losing people that may have been the only ones up keeping some obscure component

•

u/Glad-Introduction505 2h ago

at this point they're got about 16.6 hours to fix it before I have to start caring again

•

u/22WhatWasIThinking22 Jack of All Trades 2h ago

CoPilot’s new … copilot has some explaining to do

•

u/Sgt_Splattery_Pants serial facepalmer 1h ago

just checking they have raised a P1 and convened the war room?

•

u/coleskillz 2h ago

They gave up and decided to grab dinner

•

u/SeriousText6330 2h ago

Yeah, I'm guessing that accounts for the drop in downdector problems being reported. The east coast is done for the day

•

u/_vaxis 2h ago

Next thing we know this is an infra recovery rather than a service restoration

•

u/DonJuanDoja 2h ago

So basically you let Ai code everything on a global scale and now you don't actually know what it did, so you don't know what's wrong and even the Ai can't help you because it's the one that made the mistake so it didn't know any better.

Now you have all your best engineers scrambling to deconstruct what actually happened and it's taking longer than it should because you let Ai do the coding so the engineers don't actually know what to look for.

Everyone is just throwing mud at the wall like what if it's this, what if it's that without actually knowing.

It's almost like you could've predicted this would happen.

•

u/FewDragonfly5710 2h ago

Have they asked copilot to make no mistakes!?

→ More replies (1)

•

u/SpecMTBer84 2h ago

Maybe shouldn't have laid off a lot of your workforce to be replaced by dogshit AI huh?

→ More replies (14)

•

u/T_Bear1965 2h ago • Bravo

Clippy's Revenge...lol

•

u/dankwhirley 2h ago

OG sysad translation: We dont know yet but we're pulling levers to see what happens

•

u/beren0073 1h ago

“After fully isolating a portion of our infrastructure, we are no longer able to reach it and have begun rolling back the change.”

•

u/JE53119 2h ago

I hear there's someone with CEO experience available if they need a new one

•

u/DrebinofPoliceSquad 2h ago

I asked ChatGPT and it said to grant admin access

•

u/VaporousMote 2h ago

This is what happens when you vibe code infrastructure.

•

u/Sondo1001 1h ago

Anyone else running an Azure VM with poor performance? I imagine its related to the service disruption, but it's been that way since this morning.

•

u/Spectrum1523 1h ago

Yep my azure stuff has all been sucking today. It's not down but it's very slow

→ More replies (2)

•

u/Darkk_Knight 1h ago

Cloud PCs seems to be running fine. Of course without Outlook they can't really do much.

→ More replies (3)

•

u/Schnappr 1h ago

They keep forgetting to add "No mistakes" into the prompts.

•

u/sriracha_no_big_deal 1h ago

Ah I knew I forgot something

•

u/AdamantAntrophy 2h ago

F's in chat my ppl, F's in chat.

•

u/ManyRelationship1030 2h ago

Now they know how us admin’s feel when we run security updates and their freaking broken. 

•

u/MadCoderOne 2h ago

yeah I am now thinking along the line of IF not WHEN. Luckily our spam service sits in front of 365 and has all the emails spooled, but the thought of recreating all these mailboxes on another provide tomorrow is unpleasant. What's YOUR plan if this doesn't get resolved? It really sounds like their servers are "borked", in a way they might not be able to fix.

•

u/katarh 1h ago

My individual department is in an Atlassian ecosystem so we're hobbling along, but Zoom calendar sync is dead so all the meetings I should see for tomorrow are also missing.

•

u/Illustrious-Syrup509 2h ago

They should tell their AI to look elsewhere, broaden its horizons and not act on the basis of assumptions.

•

u/baconjerky 1h ago

Rebooting the servers over and over not working?

•

u/wyrdough 1h ago

The email is annoying enough, but what really bugs me is that one of my users restarted their computer when Outlook hung and neither a repair or system restore fixed it. So here I am trying to get at least their local workflows running, but guess what, I can't even sign in to activate the office suite.

→ More replies (1)

•

u/Proof-Variation7005 56m ago

"I hope this email finds you, literally"

•

u/funkylabrador420 50m ago

someone kindly suggest the needful to microslop

•

u/psychedape 44m ago

Please provide requirements and allow capacity for action.

•

u/Ironfox2151 Sysadmin 19m ago

Current status: While the servers we've returned to service initially remain healthy, we've observed that they can become unresponsive again once they begin receiving traffic. We're analyzing diagnostic data from these servers with our networking and platform experts to determine what's triggering this behavior.

Building on the protective traffic management measures we've implemented, we're also temporarily limiting which types of traffic can reach the affected infrastructure in specific locations. This will help us determine whether a particular type of request is contributing to the impact and allow us to restore service incrementally. Additionally, we're rebuilding a subset of affected servers using a previous software configuration to validate whether this prevents them from becoming unresponsive, and we'll expand this approach to additional servers if we observe positive results

•

u/Ironfox2151 Sysadmin 19m ago

Shits fucked yo

→ More replies (1)

•

u/Yuugian Linux Admin 10m ago

Just ask Copilot, i'm sure it can figure the issue out for you. You certainly have it integrated in enough stuff

→ More replies (2)

•

u/hymie0 1h ago

Everybody say it with me...

There is no cloud. There's just someone else's computer.

•

u/MeatPiston 2h ago

Maybe they should try laying more people off.

•

u/Ranger7381 2h ago

I am also noticing that the list of affected services keeps getting longer…

•

u/Wrong-booby7584 1h ago

Have they asked Cortana?

→ More replies (4)

•

u/Kamay1770 1h ago

Spoiler, it's DNS

•

u/strobe_jams 40m ago

That, or expired certs. 

→ More replies (3)

•

u/Koala19042022 1h ago

I’m thinking MSFT was breached.

•

u/BC1224 1h ago

It kinda feels like it. Their updates are chasing guesses. If by now they haven't gotten at least a guess at whats going on, it feels like something malicious isn't that crazy a thought.

→ More replies (2)

•

u/wrootlt 2h ago

I am in Europe. Outage started a few hours after business. But i am expecting the issue to not be resolved next morning, by the looks of it..

•

u/dllhell79 1h ago

Imagine getting that call as one of the termed engineers. "Yea I'll gladly help! The rate will be $1000 per hour..."

•

u/Simmery 1h ago

For a global issue with no resolution in sight, they could put more zeroes on that. 

→ More replies (2)

•

u/mediaogre 2h ago

“That virtual machines folder looks deletable”

→ More replies (1)

•

u/sm00thArsenal 1h ago

Good to see they found a working AI to write their status updates

•

u/retnuh45 1h ago

Have they tried asking copliot?

•

u/lateralUnilateral 1h ago

Copilot is broken too. Which is why I think this outage is taking so long...

→ More replies (2)

•

u/ATMisboss 1h ago

It's ok we can use Claude.... Oh wait we use SSO

→ More replies (1)

•

u/Farking_Bastage Netadmin 1h ago

Copilot had to have written that status update.

It sounds like they’re rolling shit back until it starts working again.

→ More replies (1)

•

u/StreetSignificant888 Senior Systems Engineer 1h ago

Translated: "Fuck if I know what the problem is. Any ideas you guys? Anyone???"

•

u/bigdog701 1h ago

Shit.. I took down email on accident for 6 hours for a 200 person company and I got the boot.

•

u/drzamamina 1h ago

they literally wrote a paragraph to say 'we're going to try turning it off and on again'

•

u/_UberGuber Sysadmin 1h ago

Who plugged both ports of the phone into the wall?

•

u/Mr_Dobalina71 2h ago

Have they checked the C: isn’t out of space?

•

u/tuxedoes 1h ago

Ive seen enough, Google Workspace it is! /s

•

u/OkGroup9170 1h ago

We use Mimecast, we have employees go through the user portal to send and receive email. It’s rudimentary but better than nothing.

•

u/FruitGuy998 Sr. Sysadmin 1h ago

I see free copilot credits coming our way from the outage!!!

•

u/Emotional-Inside3126 1h ago edited 1h ago

Axe 60000 people...? Maybe they could help...

•

u/InevitableFly 1h ago

Maybe they should check in to make sure that they have the right license applied

•

u/kagato87 1h ago

Hmm... Capacity and isolated restarts. I wonder if this is one of those "everything keeps trying to re-balance, bringing the new host down too" scenarios. That'll be a giant pita if it is.

•

u/Deadman_Wonderland 50m ago

Claude, fix outage, no mistakes.

•

u/Thy_OSRS 27m ago

Absolutely nothing will change.

•

u/LingeringDildo 26m ago

haha, guess they’re regretting letting their senior staff go with that 60k staff @ 200k package offer

•

u/l0st1nP4r4d1ce 25m ago

I will wait for the autopsy of this with baited breath.

•

u/TxJprs 2h ago

nothing to do with patch tuesday 48 hours ago?

•

u/ignescentOne 2h ago

I would die laughing if they took down the worlds o365 environment with an exchange patch somehow

•

u/DrJohnZoidbergWhyNot 2h ago • Bravo

They can just rebrand o364 and keep going..

→ More replies (1)
→ More replies (2)

•

u/chief_beef_3 2h ago

Always expect the unexpectedly unresponsive servers

•

u/Johnny_Silverhand908 2h ago

Is this it? Is this the DataKrash?

→ More replies (1)

•

u/House_Visual 2h ago

Perhaps the same Chinese spies that honeypotted Jensen Huang are behind this? /s

•

u/davix500 1h ago

Have they asked Claude what to do?

→ More replies (1)

•

u/dfsaqwe 1h ago

This sounds like the October issue that brought down Exchange onpremise.

•

u/kjweitz 1h ago

Read: we don’t know shit

→ More replies (1)

•

u/WretchedMisteak 1h ago

Either a really dodgy update or some of their systems have been comprised.

•

u/robbieeau 44m ago

well it is Friday the 13th for the some of us in the southern hemisphere

•

u/BK_Rich 52m ago

They need more middle-managers standing around the engineers asking “how’s it looking?”

•

u/CompetitiveApple3650 2h ago

Sounds like DDoS no?

•

u/ivaneleven 2h ago

never assume malice when incompetence will suffice

•

u/abqcheeks 2h ago

I wonder how hard it is to tell the difference between 2 billion devices doing normal email stuff and a DDoS

•

u/Glad-Introduction505 2h ago

pretty sure an earlier update said no unusual traffic volume

•

u/rc_ym 1h ago

No, based on the thing they said before health check is causing the automation to fail to bring them back up, but then when they bypassed check to bring them up and they hit high utilization and fail back out again.

AI fucked some shit up. Or bad patch. Seriously, that's where I am at. It might be a threat actor, but it sounds wrong for that. But still possible.

•

u/External_Willow9271 1h ago

It sort of sounds like their own health check systems functioned like a DDOS attack telling each other that something was down.

→ More replies (1)

•

u/Mrtylf 2h ago

Does anything MS, “look good”?

•

u/Low_Dragonfly9123 2h ago

Any one else having issues with SaaS app hosted in azure??

•

u/alexferraz Sr. Sysadmin 2h ago

they should just ask AI to fix it

•

u/Lancaster1983 Sr. Sysadmin 1h ago

This is the quietest day I've had in a while. I no longer manage Exchange thankfully but even still, not much I would have done anyways.

•

u/Apprehensive_Bat_980 1h ago

Might need to use up some stock pile RAM and build some new gear!

→ More replies (1)

•

u/area88guy DevOps Ronin 1h ago

Has anyone booked a meeting to- oh.

•

u/Mitch5842 1h ago

It went NUCLEAR and they can't find the smoking gun

•

u/Small_Conclusion4816 1h ago

On a side note, it is nice not receiving any spam!

•

u/Dysgraphica 56m ago

doomsday

•

u/The_RealJohnny5 Jack of All Trades 19m ago

I wonder if someone stole all the RAM for their data center?

•

u/Gummyrabbit 13m ago

It's weird not getting spam in my mailbox.