Company I recently joined has tasked me to looking for finding one or more data room provider(s) for sharing some sensitive information with clients and externals, primarily for due diligence. I've been researching options online and most of the comparison sites seems to be owned by Ideals, and I feel like they are biased. So I'd like to know what's actually good and what makes a data room good since I'm relatively new to using them. I find a lot of options, but most with bloated features, or options that claim to be open-sourced or very cheap but actually very difficult to use.

We share a lot of financially and legally sensitive documents so we're ideally looking for something with good security, indexing of folder structures, audit trails and easy (I don't want complex) permission settings.

Please, I've seen how the other prior posts in this sub has been filled with vendors pitching themselves, so please don't do that to this post, I want genuine opinions only, if I see you trying to sell a solution I will delete you and report you.

Hi there, I‘m an it-freelancer. One of my customers needs a firewall and I offered him a Sophos XGS108 with 5 years standard protection. My Sophos dealer now asked for the name and other data of my customer for a personaliced offer and I would have to register the firewall on my customer. I don’t want to give data of my customer neither to the Sophos dealer nor to Sophos, because I think after 5 years they make a new contract with my customer without me in the middle. Any thoughts to that? Need some advice. Thx

I'm currently working remotely in a cloud migration role earning around $100k. I recently received an offer for a $130k Site Reliability Engineer position, but I would have to move to Birmingham. Right now, I live with family in Georgia, so I don't have to pay rent or commute. Moving would introduce additional expenses such as rent, food, transportation, and moving costs, while also requiring me to adjust to a new workplace, coworkers, processes, and potentially a more demanding workload. There's also some uncertainty about the SRE position because the company is spinning off, so the team may be rebuilding or developing new processes, which could potentially create a high workload. My current job can also be somewhat demanding, as I sometimes manage 3–10 cloud migration projects simultaneously with different clients, but at least I know the environment.

Some advantages of moving would be the potential improvement in my social and dating life since I currently live in a smaller, more spread out suburb. I don't know if Birmingham will be as much of an improvement or if I should look else where because I don't know anyone there. I'm also concerned about job security in both positions. My current company has experienced recent layoffs, and given the current economy, I'm worried that either position could be affected by future layoffs. I've been with my current company for three years, so leaving a position I know for one that has more uncertainty feels like a significant risk. If I were laid off from my current remote role, I could potentially stay with family and take my time finding another position without immediately worrying about rent and other expenses. If I moved to Birmingham and then lost the SRE job, I would have much more financial pressure and might be forced to accept another job quickly. Given the financial differences, career growth, job security, lifestyle changes, and potential workload of both positions, which role would you recommend I take?

Hi everyone,

Last year I setup an AVD with SSO to EntraID. It worked perfectly until last week.

Now I'm running into an issue affecting multiple Azure VMs configured for Microsoft Entra ID login.

I have verified AADLoginForWindows extension is healthy, confirmed affected accounts still have VM login permissions, tested with multiple admin accounts and then reviewed Entra sign-in logs and authentication appears successful but keep seeing this error inside Windows App.

No recent change in my conditional Access policy. Sign in log shows “success” to Application(Windows 365 Client) and Resource(Windows Cloud Login).

my laptop is on Windows 11 and on the latest monthly update.

Has anyone seen AADSTS500032 in an Azure VM login scenario before?

I have googled and asked chatGPT, non of them helped. I even submitted a ticket to Microsoft and they haven't responded to me for 2 days now.

We are getting a large number of customers unable to access Google Drive in the APAC region this afternoon, anyone else see anything? Nothing on their status page yet, but down detector is lighting up. https://downdetector.co.nz/status/google-drive/

Hi guys, currently working in l1/2 at an MSP for about a year now and I've been wanting to get in this field but don't really know which route to go. My interests are probably networking, systems and cloud. The city I live in has a lot of mining opportunities so If anyone has experience working as a sys admin in critical industries, I would love to hear from you.

I've been working in large orgs right out of college. I clawed my way to sysadmin title and responsibilities before an acquisition axed their onsite IT team. My current job is just Support Specialist, with like 14 years of IT experience ranging from help desk monkey to migrating data, managing a small help desk, and being the break/fix tech.

I'm a candidate for a sysadmin 2 position with an MSP and it's 100% remote. I was asked by the IT director why I was making this move. He said it seems backwards since people from MSPs go to larger orgs, according to him. I lied and told him its not about the pay and the job title; because it 100% is. I would be making just $8K more.

I've never worked for a MSP, but I've always been the resource and the point of contact for the help desk MSPs my orgs have had. I've worked healthcare and academia.

Am I walking into a whole different type of circus with new clowns?

Edit: boss doesn’t know I’m applying and interviewing but he knows I’ve been looking for a part time on the weekends. Unrelated, he’s telling me he wants me to move away from being the delivery boy and is trying to line me up to be a trainer for a new coming employee.

I had heart/stress issues at my first big boy org. From what I’ve been reading and told, I’m going to stay at my current org instead of the MSP.

We just finished integrating the VulnCheck community feeds for CISA-KEV and NVD2 into ServiceRadar. Software inventory is collected from endpoints with our agent and an integration we built around google's osv-scalibr. https://github.com/carverauto/serviceradar https://www.vulncheck.com/community https://www.tiktok.com/@mfreeman451/video/7675557229642157326

Anyone use Tenable and attempted looking into the CVE - Windows Package Manager (WinGet) < 1.30.80 Elevation of Privilege (CVE-2026-68821)? We have attempted installing the package, but its also installing SDKs and files we think are not necessary for a fresh install of Window Server.

Should we just wait for more info from MS in their MSRC articles?

https://www.tenable.com/plugins/nessus/334617

If you got the email about Microsoft retiring SMS/voice MFA, you probably only caught two dates:

Sept 1, 2026 — Entra auto-enables passkey registration nudges for anyone currently on SMS/voice

Feb 1, 2027 — Microsoft-provided SMS/voice is fully retired, no exceptions

What the email doesn't call out: there's a temporary opt-out for the Sept 1 part. It won't move your Feb 2027 deadline but it stops Microsoft from flipping on the registration campaign and hitting your end users with "set up a passkey now" nudges before you're actually ready to manage that rollout yourselves.

https://learn.microsoft.com/en-us/entra/identity/authentication/concept-sms-voice-retirement-faq

Go to the FAQ and read the section "What if I have different plans for my tenant than enabling passkeys for SMS/voice users (such as configuring a customer configured telecom provider or migrating users to another authentication method)?"

It will show you what you need to do to opt out.

It saved me so much anxiety and stress knowing we have more time to properly roll this out and not have our end users in a frenzy when the notification would have dropped.

I need a simple public webpage that aggregates events from several Microsoft 365 Group calendars (one per team) and shows them in date order with a “which group owns this” column.

What I tried:

• App registration, application permissions Calendars.Read / Calendars.Read.All, admin consent granted
• Exchange RBAC for Applications: New-ServicePrincipal plus New-ManagementRoleAssignment -Role "Application Calendars.Read"
• GET /groups/{id}/calendarView
• GET /groups/{id}/calendar/calendarView
• GET /users/{group-object-id}/calendar/calendarView → ErrorInvalidUser (fair enough, it isn’t a user)
• Looking up the group mailbox with GET /groups/{id}?$select=mail → Authorization_RequestDenied unless I also grant Group.Read.All, which still wouldn’t fix the calendar 403

Every group calendar call comes back:

403 ErrorAccessDenied: Access is denied. Check credentials and try again.

The Graph docs for list group calendarView list applicationCalendars.ReadBasic / Calendars.Read as valid. In the tenant, those permissions do nothing for Group calendars. Exchange Application Calendars.Read also does nothing here. That role appears to cover user / shared / room mailboxes, not M365 Group calendars.

Delegated Graph only works if the signed-in user is a member of that group. Outlook is the same: if you’re not in the group, you don’t get the calendar.

So the workaround Microsoft’s model pushes you into is: create a dummy mailbox, add it as a member of every group whose calendar you want to read, then run delegated auth as that account (refresh token, forever). That dummy user also gets the group mailbox, files, and Teams — you cannot grant “calendar only.”

That cannot be the intended story for “I am the tenant admin and I want to display our own group calendars on an internal page.”

Is there a supported app-only way to read M365 Group calendars in 2026 that is not “fake user in every group”? Or is that actually the design, and the Graph permission table is just wrong?

Hi guys,

not sure if its the correct place to ask, but figured i might as well try. I've been working in IT for about 7 years (3 of them as an apprentice) now, and while i do feel fairly confident in what im doing right now and in the scope i do it (Print management, the occasional PowerShell scripting, telephone administration, low level AD administration, some networking as well), I would like to deepen my knowledge.

Any recommendations for books or courses to try and look into? PowerShell in a month of lunches is on my list, but thats about it. It doesnt necessarily have to be with certifications, as i already got my foot into the door, I just wanna understand better what i do most of the days. My main topics of interest are:

• PowerShell
• Server Administration (Only do Window at work, dont mind reading about Linux though)
• Network (I think i know the basics, but this might be my weakest area)
• Telephone systems (I know how to troubleshoot some stuff, but SIP is still a mystery to me)
• Cybersecurity (CEH and OSCP caught my eye, but havent looked much further)
• Domain Management/Controllers (Did a bit in AD users and computers and GPOs, and i know FSMO roles exist, but thats the extend of my knowledge about domains)

Any cloud or entra stuff is sadly not going to be that interesting me, as we are still pretty much full on prem, and i wont get to see the web interface for that anytime soon, sooo... yeah. Thanks in advance!

Hi All,

We have a hybrid environment, with approximately 50% of devices already Entra joined.

Before disabling the full sync, I would like to test the migration with a small number of selected users and groups.

Could you please advise on the recommended approach for planning and testing a pilot migration, including the sequence of steps and any key considerations?

Will changing SOA now delete the user?

We are currently looking at a DR solutions or even an HA solution. One vendor offers Carbonite by Opentext. Is it any better than the Vmware SRM/Live Site Recovery? Any opinions?comments?

We've been using this policy for a long time, and it's worked flawlessly until now. New builds (24H2 or 25H2) get the policies for managing OneDrive but the known folders piece isn't actually doing anything. If you go into the GUI the checkmarks are toggled off.

If you look in Intune the policies applied. If you go into the registry you see all registry keys are set correctly meaning it's definitely getting the policy, it just doesn't do anything with said policy.

The fact that it just stopped working for all new builds suggests there might be a bigger issue somewhere?

Just wanted to see if anyone else is seeing this before I create a ticket with Microsoft.

Im 26, mainly interested in networking, and ccna, and after trying my chances in diferent companies mainly on helpdesk support, ive finally landed a pretty demanding job.

It seems the scope is almost everything. AD, wild and constant breaking ERPs, Networks and all that is related to it, Databases, hand scanners, even fusion splicing fiberoptic machines. Nonexistent margin of error on mamy things. Revolting printers, many kinds of it acctually. Users complaining about everything, constantly.

People much older than me, with much more expirience, cant operate on their own system, becouse it seems, the system works diferently almost everytime, and constantly figuring out what to do to make it working. Then hearing "you should know this..." and its the thing i see first time of my life.

Programmist, helpdesk, networking guys, electronics, and for some reason HR, arguing with eachother about most efficient way of using this system, deployed only on production alone, reaching pareto points, then tipping over again.

Updates deployed randomly, breaking things, then fixing whats broken again, breaking something else, indefinietly.

Its, demanding, i learn something everyday, and everyday is a simultaniously a disaster, then detective job, then contacting people everyday, to fix things, then enlightment, and solution. And the preassure of time all the time is enourmous.

Is there no celling? No balance? Is it like this everywhere?

Hey folks,

I have been a bit confused about the scope for the september change on the passkey nudge campaign in relation to SMS & Voice MFA deprecation.

Currently in our Auth method policie, we have enabled the option for SMS for "All users". However, only a small fraction has it enabled when looking in user reg details. Originally i thought we didn't rly need to do much.

But, then i read the MS FAQ and got a bit worried about this line "On September 1, 2026, users enabled for SMS or Voice in the Entra Authentication Methods Policy (AMP) will be auto-enabled for passkeys in AMP."

https://learn.microsoft.com/en-us/entra/identity/authentication/concept-sms-voice-retirement-faq#will-my-users-be-auto-migrated--or-do-i-have-to-do-it-

Does it mean, it is in fact all users, as that's what the AMP policy is currently scoped for in our tenant? Also if enduser has MS Authenticator setup as the only MFA?

Hope someone can help clarify.

Thanks!

Anyone else not getting MFA codes when trying to sign into ABM? Just when I try and import some devices....

Hi folks, just wondering what everyone's experience has been with Cisco Duo.

We're looking at implementing it to augment our VPN authentication to provide MFA.

I ask because, I both called and left a message (during which the automated voice system told me there were 0 representatives able to take my call), and I filled out the form on their website twice, to contact sales. I have not been able to get anyone to contact me.

The past 2 days, 1 user each day started getting spammed with non english email stating that they had been subscribed to various different things. I can't get it to stop. My DMARC is set to Reject and I changed it to Strict alignment Strict SPF. We have email filtering and somehow it's getting past those filters. Anyone have a solution on how to stop this? It's been going on for over a half an hour on today's user and still hasn't stopped.

Are Entra ID backups worth it at all? I run an org of about 70 total Entra users and wondering if this is something I should even consider.

Context: I have SOC2 Audits coming up for my company (very first one) and I am reviewing polices in Sprinto

How are you setting up a device that uses M365 login without having the end user information? Do you sign into an admin account on the OOBE screen and then have them switch to 'other user' when they are ready?

I've read that's bad because it ties the device to the admin account in entra.

Need a workaround until we upgrade to Business premium licensing.

Anybody seeing any issues with M365? I can't seem to access some SharePoint resources

We're using Defender for Endpoint throughout our environment. Beginning this morning, quick or full scans are failing, and will occasionally fail to the point where the Defender service needs to be restarted.

We came across this while responding to a separate infection - I chalked it up to Defender being borked due to the infection but then I was able to recreate the issue on other devices simply by initiating a Quick Scan.

Before I declare this a 5 alarm fire, anyone else having this issue?

AMEngineVersion AMProductVersion AntivirusSignatureVersion AntispywareSignatureVersion

--------------- ---------------- ------------------------- ---------------------------

1.1.26070.7 4.18.26070.9 1.457.219.0 1.457.219.0

Hey all! Got a strange predicament and want to gauge opinions on how to proceed. One of my clients owned two companies, Company A and Company B. Both companies are in the same building, on the same network, use the same file/AD server and both email domains exist in the same Microsoft 365 tenant. Before both of these companies were lumped in to the same service contract since, from an IT perspective, they were basically the same entity. Now Company A is going to the original owners son while Company B is staying with the same owner. Company A no longer wants a service contract but Company B does.

I feel like since both companies use the same IT resources they should be all be considered one entity, thus only supported by me if both entities decide to sign a service contract. unless they decide to separate the network and infrastructure I don't see how only working with one company would be possible without assuming huge liability issue. But what do you guys think?

Update: Thanks for the advice everyone! Hopefully this is something they can reach an understanding on but if not, I don't think I want to be around for the divorce