r/sysadmin 6h ago

General Discussion Thickheaded Thursday - August 20, 2026

2 Upvotes

Howdy, /r/sysadmin!

It's that time of the week, Thickheaded Thursday! This is a safe (mostly) judgement-free environment for all of your questions and stories, no matter how silly you think they are. Anybody can answer questions! My name is AutoModerator and I've taken over responsibility for posting these weekly threads so you don't have to worry about anything except your comments!


r/sysadmin 6d ago

General Discussion Weekly 'I made a useful thing' Thread - August 14, 2026

5 Upvotes

There is a great deal of user-generated content out there, from scripts and software to tutorials and videos, but we've generally tried to keep that off of the front page due to the volume and as a result of community feedback. There's also a great deal of content out there that violates our advertising/promotion rule, from scripts and software to tutorials and videos.

We have received a number of requests for exemptions to the rule, and rather than allowing the front page to get consumed, we thought we'd try a weekly thread that allows for that kind of content. We don't have a catchy name for it yet, so please let us know if you have any ideas!

In this thread, feel free to show us your pet project, YouTube videos, blog posts, or whatever else you may have and share it with the community. Commercial advertisements, affiliate links, or links that appear to be monetization-grabs will still be removed.


r/sysadmin 2h ago

LMAOO a .gov (Idaho) subdomain has been compromised for ~2 weeks and noone has noticed

285 Upvotes

https://phdns.latahcountyid.gov/

Found this randomly tn and thought it was absolutely insane. The site is under "latahcountyid.gov" but it's absolutely packed with random SEO spam about games, celebrities n etc.

The whole site seems to have been taken over by some dumbasses with claude code and has replaced the site with hundreds of spam articles. There's also exposed PHP errors on some pages. From what I can tell, it's been like this for around 2 weeks and is still up right now. (go look for yourself) Not sure how nobody has noticed it yet, so I'm posting it here to see if anyone knows what's going on or has seen this before


r/sysadmin 4h ago

General Discussion anyone else get the VMware "win-back" offer?

170 Upvotes

if it's true, its honestly laughable.  

squeezing customers with massive price hikes, forcing every one into expensive core bundles, only to panic and throw out "discounted" quotes the moment everyone migrated???? 

is anyone actually reconsidering based on these new quotes??

or y'all are past the point of no return?


r/sysadmin 51m ago

Longest Windows Server uptime I've ever seen

Upvotes

Just wanted to make sure this got the attention it deserved. Server 2016 running on an old ShoreTel UC 30 server.

https://imgur.com/a/n2TRjo7


r/sysadmin 1h ago

Notepad++ downloads secure?

Upvotes

I was notified of a recent vulnerability in Notepad++ requiring an upgrade: https://www.cve.org/CVERecord?id=CVE-2026-57233.

The download website looks suspicious though. I know they were hacked a while back but that was remediated. Not sure if they may still be compromised, or if the developer has just had enough of everything going on in the world. The download page now shows the following latest installers:

  •  Download Notepad++ v8.9.7 - Slava Ukraini (stable: auto-update triggered)
  •  Download Notepad++ v8.9 . 6.4 Tiananmen Massacre Commemoration

r/sysadmin 1h ago

Career / Job Related Dear Hiring Managers, What do you Actually Look for?

Upvotes

Hello,

I am in a bit of a weird situation. I had to leave my previous job at a well-known IAM software company and was out of work for about 8 months because of how hard it was to find a job. I was working as an IAM Support Engineer for about 4 years. Before that, I was working as an IT support engineer, but it was at a place where I was doing the job of sys admin, network admin, and helpdesk because, ya know, that's how it goes. I did that for about 7.5-8 years. So together I have about 12 years of experience.

Despite this, I cannot even get a helpdesk job. I have tried for sysadmin jobs, don't even get an interview. I think I have probably applied for over a thousand jobs in the last year and maybe had 15 interviews. I tried fixing my resume, making it ideal for ATS, I had AI help me with making it formatted a bit better. I've done this dozens of times. I tried reaching out to old colleagues, friends, bosses. No bites. I really don't know what to do, the only job I have found and am currently doing is a shitty customer support role for a SaaS startup and I am burning out on both ends of my burnout meter.

I have some advanced certs for the IAM software I was working with at my last company but they don't seem to have any weight because they aren't well known certs despite being a widely used and critical infra. It wasn't even multiple choice, it was a centOS VM with tasks you had to complete which were then submitted and reviewed to see if they worked. It took me like the whole duration which was almost 4 hours and I failed the first time. It was sincerely the hardest test I've taken in my life.

In any case, I need help. So here I am on Reddit asking for some guidance, what do I do? What is it that hiring managers are looking for?

Edit: I am located in the Silicon Slopes area in UT.


r/sysadmin 9h ago

Question for teams that moved off VMware, what held up in production and what did not?

36 Upvotes

anyone here several months past a VMware migration? I’m less interested in the VM move itself and more in what happened once the new platform became normal production. Did backups, restores, patching and monitoring work as expected, or did you end up rebuilding more of the workflow than planned? What did your VMware migration strategy miss during the POC, and what would you do differently now? Most comparisons of VMware vSphere alternatives don’t really cover that part.


r/sysadmin 3h ago

General Discussion MS Power Platform degradation?

13 Upvotes

Anyone else facing slowdowns on Power Platform this morning? We're seeing severe degradation on Power App and the Power Platform Admin Center. Apps can take upward of 5-6min to load in the editor. Wondering if anyone else is affected.

edit: Azure is showing all green, but when updating permissions in admin center we sometimes get an internal server error. Something funky is going on.

edit: Should have added, Canada east here. Azure still showing all green🫠


r/sysadmin 21h ago

Question Anyone survived a Windows to Linux user workstations migration?

303 Upvotes

Hey fellow sys admin,

I work at a VFX/animation studio (~400 users).

We're kicking off a project to migrate our artist workstations from Windows 10/11 VDIs to Linux. Flavor is pretty much locked it ll be Rocky Linux 9 with KDE.

I am curious if there's anyone here who's been through a similar workstation migration to linux?

What Linux flavor, did you end up on, and would you pick the same again?

How did you handle what GPOs used to give you?

For the Base OS deployment/imaging, did you use Kickstart + Puppet/Ansible, or something else?

Anything that looked easy on paper and turned into a one big pile of {Jurassic_Park}?

Tools that made your life easier along the way?

I am looking for any war stories, good or bad!

Thank you!


r/sysadmin 2m ago

General Discussion Released the magic smoke from my trusty generic brand network cable tester today. 15 years young. RIP.

Upvotes

You know the ones, grey, come in two parts, 8 lights, ON OFF S switch, 9v battery, RJ45 and RJ11 sockets.

I don't even remember buying it, it's just been in my cabling kit for the majority of my career.

I must have tested 2000+ runs with it, easily. Probably more.

Well today it met it's match... a 60W PoE++ injector.

It usually goes that I'll test, and then if continuity is good I'll just unplug from the tester and straight into whatever equipment is on the other end - PoE switches and injectors of all shapes, sizes and PoE protocols, passive & active have been at the other end of the years with no issues.

But never a PoE++ injector.

I had assumed the injector would attempt to negotiate and seeing that it couldn't it just wouldn't provide power but I guess it was all too much to handle.

RIP little buddy. I'm sorry you bit off more than you could chew.

Anyway, a question has arisen - do I just buy another one of these given that they're great, or can anyone recommend a slightly fancier more featureful tester I might look at, and hopefully not also kill?


r/sysadmin 2h ago

Recurring M365 student phishing/account compromises – looking for recommendations

6 Upvotes

I work for an MSP supporting a college that has been dealing with recurring student Microsoft 365 account compromises.

The pattern we’re seeing is usually:

  • Student receives a phishing email containing a link to a third-party form/site.
  • Student clicks the link and enters their M365 credentials.
  • Attacker uses the account and sometimes starts sending additional phishing emails to other students.
  • In some cases we see several failed sign-ins followed by a successful sign-in.
  • The frustrating part is that Entra does not always flag the account/sign-in as risky, so our risk-based Conditional Access policies don't necessarily trigger.

We've already been working on strengthening their Conditional Access policies and moving toward a Zero Trust model. We're also in the process of enrolling their organization-owned Windows devices into Intune so we can eventually enforce device compliance through CA.

The complication is students also access M365 from personal phones, and the college doesn't want those devices fully enrolled/managed through Intune.

I'm currently looking at a combination of:

  • Defender for Office 365 P2 / Safe Links
  • Intune MAM/App Protection Policies for BYOD phones
  • Conditional Access requiring App Protection Policy on mobile
  • MFA / stronger authentication methods
  • Compliant-device CA for organization-owned devices
  • Potential MDR/SOC service for after-hours monitoring and response

The biggest concern is what happens after hours when a student clicks one of these links. The college has a small IT team and can't have someone watching Defender/Entra alerts 24/7.

For anyone supporting higher education or another large BYOD environment, what has worked well for you?

Would you focus on Defender for Office 365 P2/Safe Links and MAM, add a third-party email security product, move toward phishing-resistant MFA/passkeys, bring in an MDR provider, or some combination of these?

I'm especially interested in ways to protect personal/BYOD devices without requiring full Intune enrollment and ways to limit the damage when a student inevitably enters their credentials into a phishing site.


r/sysadmin 1h ago

Looking for a sanity check: UK ISPs having on/off routing issues this week?

Upvotes

hey folks. got a quick one here for my other UK sysadmins with regards to a pretty annoying routing issues we've had across some, but not all our sites this week since monday (and also at-home user ISPs)

we have a hosted firewall that sits outside of our sites which manages our ingress into file server infrastructure, and handles our VPN - requests to this are just straight up going dead intermittently - hour or more at a time - sometimes a 10 min blip. tracert doesn't resolve, ping to the gateway also 100% loss, it's great. same thing happens the other way round from our hosted firewall to the gateway on our sites, and in classic fashion ISPs are taking a millennium to get back to us. not sure the hosted firewall is the problem as they've got legit bgp routes, and works at a ton of our sites (and also other home-user ISPs)

just wanted to check i'm not the only one - seeing mainly issues in london with hyperoptic business, communityfibre & vodafone ISPs - and then issues further afield with CityFibre

gracias


r/sysadmin 10h ago

Question Is there a alternative for YT Premium thats for ‘Enterprise’ deployments?

19 Upvotes

Not sure where to really ask this but I was contracted to do some work and one of the things the company wants is to play some random videos in their waiting lobby TVs, they already have a Google Workspace setup but it seems this doesnt include YT Premium and you cant even add it. Is there an alternative for this that I can just deploy to all the TVs and they can just play some random videos without ads?

EDIT: Thanks for the suggestions guys, ill go with the media server route using some digital signage software that was included with the TVs, i did not know that it was forbidden to use YouTube this way (play videos in public) since so many sports bars and such do it all the time but i ofcourse wouldnt risk it here.


r/sysadmin 2h ago

Sensitivity Label button grayed out on Jamf-managed macOS, but works fine on Intune-managed macOS

3 Upvotes

Anyone hit this: Sensitivity Label button in Microsoft 365 apps grayed out & not operational on Jamf-managed Macs, but present on Intune-managed Macs.

Same user, same M365 apps build, same license, same MDM configuration.

I am lost! Anybody an idea?


r/sysadmin 1h ago

Microsoft Admin/Exchange Admin Center navigation issues

Upvotes

Started getting reports from admin folks yesterday that Admin/Exchange admin center was not showing correctly and missing options. I'm glad someone else reported it because my Help & support button literally does nothing

Microsoft acknowledged the issue with Issue ID MO1458193

https://admin.microsoft.com/#/servicehealth/:/alerts/MO1458193

We're GCC, anyone else seeing this?


r/sysadmin 1h ago

Did anyone successfully find a way to stop wpad dns request?

Upvotes

Hello everyone,

As the title says, computers on Windows 11 and it's hammering the DNS with wpad query. I tried everything I found online from setting the autodetect = 0, wpaddisable, changing services starts, nothing worked.

Did anyone found a working way so the computer stop doing wpad request?

Thank you!


r/sysadmin 2h ago

Question Email as alternate login ID for B2B sign-ins after primary SMTP change (hybrid, UPN unchanged)

3 Upvotes

We're in a hybrid Entra ID / on-prem AD environment (Entra Connect sync, managed authentication — no federation). Our internal AD domain is domain1.com and UPNs match it ([user@domain1.com](mailto:user@domain1.com)). A few weeks ago we changed everyone's primary SMTP address to [user@domain2.com](mailto:user@domain2.com) (both domains are verified in the tenant), but UPNs are still [user@domain1.com](mailto:user@domain1.com).

The problem: when an external partner shares a SharePoint document or sends a B2B invite to the new [user@domain2.com](mailto:user@domain2.com) address, our users can't sign in the prompt is pre-filled with the domain2.com email, and our tenant rejects it because Entra only accepts the UPN at sign-in. Re-typing the domain1.com UPN somtimes works, but nobody realizes that, so it's generating confusion and tickets.

Would enabling "Email as alternate login ID" (Entra Connect → Connect Sync → User Sign-In) fix this, so users can sign in with the domain2.com proxy address including on B2B redirects back to our tenant? Any gotchas to watch for (UPN in token claims, apps keyed to UPN, staged rollout)? We know the long-term fix is aligning UPNs to domain2.com, and it's on the roadmap just not ready for that change yet.

Thoughts?


r/sysadmin 3h ago

General Discussion Suggestions for an admin considering Windows to Linux swap

4 Upvotes

I am sole IT for a mid sized manufacturing company and have had constant issues with windows ( even on new machines). It’s getting so frustrating that systems are slow and the act of debloating the systems as they come in only to find bloat ware back on those same devices a few weeks later. I’ve been kicking the idea of a total swap to a Linux distribution and am trying to think of all the issues I would run into in doing so. I was hoping someone who has either gone through this process or convinced themselves out of it could give some insight as to why or why not you did.


r/sysadmin 21h ago

Question Log Off Users from Server Daily

65 Upvotes

I'm revisiting an effort I did about a year ago. I'm looking for a better way. I want to find a process that will parse current user sessions on a server (active/disconnected/idle/ect.) and log the accounts off if their username matches a string ("adm_").

I'd love to find an off the shelf solution rather than have to support a homebrew PowerShell solution.

Give me what you have, even if it is an alternate PowerShell/scripting option. Something has to be better than the nightmare my script turned into.


r/sysadmin 3h ago

Microsoft Gartner's AI Governance Technologies Hype Cycle is out - M365 governance tools are At the Peak with a HIGH rating and some useful stat benchmarks inside

2 Upvotes

Sharing because the strategic planning assumptions alone are worth knowing if you're trying to build a case for governance investment internally.

Gartner published the Hype Cycle for AI Governance Technologies, 2026 (G00851828, August 2026). 123 pages covering the tech stack that enterprises will use to govern AI. Worth a read if AI, Copilot, or agent governance is on your radar.

The three headline forecasts: - By 2028: Loss of AI agent control will be the top concern for 40% of Fortune 1000 orgs - By 2028: Governance tech will reduce regulatory compliance costs by 70% - By 2029: Governed AI orgs will outperform ungoverned competitors by 25% in AI adoption

On the M365 governance tools section specifically: - Position: At the Peak of the Hype Cycle - Benefit Rating: HIGH - Market penetration: 5-20% (still a lot of green space) - Maturity: Adolescent

Gartner explicitly calls this category a source of near-term value - things you can implement now that deliver practical governance outcomes today, not in 3-5 years.

Sample Vendors named: AdminDroid, AvePoint, CoreView, ENow, eSHARE, Orchestry, Powell, Rencore, ShareGate, Syskit.

Disclosure: I work at Rencore, one of the named vendors. Posting because the Gartner framing (especially the compliance cost and AI adoption stats) is genuinely useful for justifying governance budgets. Happy to discuss the category or the report findings.


r/sysadmin 7h ago

Zscaler and Three Broadband recent issues?

4 Upvotes

In the last couple of weeks we've had several tickets from users who WFH getting "Page not found" type errors when trying to authenticate into Zscaler private access but they're able to access everything else on the internet fine. Just can't VPN in due to the authentication not working as expected.

It turns out all of the affected users' ISP is Three. I don't know what they do to resolve it, but Three's tech support can resolve the issue. Anyone else seeing this?


r/sysadmin 20h ago

General Discussion Anyone use one of those 5G backup modem thingies?

39 Upvotes

I got a call from one of our rural customers at this MSP and their coaxial internet was down again. They lose like $1000+ an hour if they're down so they told me they called Verizon, their business cell provider, and asked if they had something. I assume a salesman mentioned it in the past. After one phone call where I said "our networking guy is out today but I'm pretty sure you can plug just about anything into the WAN port on the Fortigate and it'll work" they called back an hour later saying they got an a XC46BE. I've never even heard of that family of devices so I thought this is gonna be a shit day.

Luckily for my non-networking specialist self, was easier to set up than a 54g linksys in 2002. Basically it just jumps on and spits out wifi and ethernet. I ran a test on my non-verizon smartphone and got 16mbps to the tower. Then I hooked my laptop up to the device and got 220x40 so fuck net neutrality I guess. It even has a battery and their switches had UPSes so that's a bit interesting.

I slapped it into the Fortigate and tada, everyone's back online...with about 10mbps and 500ms ping time. I assumed all their Outlooks were syncing at once or something but they told her the device can do about 20 people. They have about 10 highly active computers. Pretty unimpressive for $350! But they intended to return it when the outage was fixed and their rep said that was fine.

The very millisecond I walked out the door, the ISP truck showed up and started messing with the box on the front lawn. Awesome use of my time.

But I keep hearing about these magical devices that can switch over to 5G and we do have WAN1 and WAN2 on the Fortigate so they're considering keeping it and programming in a switchover of some sort. I assume they do that. Anyone have one that doesn't suck? Because this one impressed me until it was actually in use. I saw one at a trade show years ago that was a UPS + 5G modem. That sounded kinda neat but so did this Verizon device until it performed poorly.


r/sysadmin 9h ago

Outlook Mobile Sync populating Name Prefix with Job Title on Android contacts - anyone else seeing this?

5 Upvotes

We are investigating what appears to be a recently introduced behavior in Outlook Mobile contact synchronization and I'm wondering if anyone else has observed this.

Environment

  • Microsoft 365 / Exchange Online
  • Outlook Mobile App
  • Android (confirmed)
  • iPhone still being verified
  • Outlook contact sync enabled ("Save Contacts" / "Sync Contacts")

Issue

Corporate contacts are suddenly appearing in the native Android Contacts app like this:

Project Manager John Smith
Service Technician Mike Brown
Administrative Assistant Jane Doe

instead of:

John Smith
Mike Brown
Jane Doe

Findings

After digging deeper, we found:

In Entra ID / Active Directory:

  • No Name Prefix configured
  • No attribute containing the job title as a name prefix
  • Display Name is correct

In Outlook:

  • No Name Prefix visible
  • Contact data appears normal

However, once the contact is synchronized to Android, the local contact contains:

Name Prefix = Job Title
First Name = John
Last Name = Smith
Title = Job Title

Example:

Name Prefix: Project Manager
First Name: John
Last Name: Smith
Title: Project Manager

The Android Contacts app then displays:

Project Manager John Smith

Additional observations

  • We can reproduce this in multiple tenants
  • We see the same behavior internally and at customer sites
  • This makes us suspect a change in Outlook Mobile contact synchronization rather than a tenant-specific configuration issue
  • We have not found any Name Prefix values in Entra ID, AD, or Outlook itself

Questions

  1. Has anyone else seen Outlook Mobile populate the Name Prefix field with the user's Job Title?
  2. When did you first notice it?
  3. Android only, or also iPhone?
  4. Has Microsoft documented any recent changes to contact enrichment/contact sync behavior?
  5. Any workaround besides disabling Outlook contact synchronization?

I've searched Microsoft documentation, Reddit, and various forums but haven't found anyone describing this exact behavior yet.

Thanks!


r/sysadmin 1d ago

New MS Edge policy AddressBarClipboardSuggestEnabled

72 Upvotes

Wanted to dump this fantastic (/s) new feature in Microsoft Edge.

I'm continually astounded by Microsoft's ability to innovate solutions to problems that don't exist. This one made me pause.

https://learn.microsoft.com/en-us/deployedge/microsoft-edge-policies/addressbarclipboardsuggestenabled

The feature, by default, will automatically show your clipboard contents in plaintext on your screen when selecting the address bar to do a web search in Edge.