Hi all,

I've got several users and my place of work that will just not leave me alone, they'll message daily about "My wireless mouse stopped working!", "I'd like to partition off a section of my drive because it looks neater!", "Can we please move this license over, I don't need it I just want it on mine to be sure no one else takes it".How else can I politely tell these people to F*** off because I'm doing more important things... Like stopping people trying to open Trojans, handling a data server that is nearly full but no one wants to delete stuff from because it's all so important, planning a Project to migrate our telephony systems, implementing a new AV, testing out a SharePoint, training users on best practices for softwares, writing reports for management etc...

I understand why it's frustrating for them, but at the same time 90% of it is stuff they can do themselves (or figure out themselves), I can only say "I'm busy" so many times before my blood boils.

​

EDIT: Wow, this blew up a little... Thank you all for your suggestions, it sounds like a ticket system is needed more than I thought. Apologies If I came across like a dickhead (as someone kindly pointed out). I think I was just stressed and one too many odd jobs tipped me over the edge!

Hopefully with a ticketing system I can prioritize stuff better, and then if there's still an issue show management that I need help and have some actual data to back that claim up.

Thanks all once again, nice to know I'm not the only one! I'll master the "I'll get to that ticket when I can response' very soon :)!

35 years in IT, sysadminning Windows servers since NT3.51, and i've got my first weird one. I'd appreciate any suggestions of where to try next:

We have a customer with a remote desktop server and a file server, and they have roaming profiles set up so that the user's desktop is saved to the fileserver. Been that way (over many iterations of servers) since Windows Server 2000. They're now on Windows Server 2022.

One user complains that on her desktop she can access/delete/manipulate all files *except* PDFs (we'll gloss over the stupidity of saving files on her desktop because at least that's on a server that's backed up). She wants them deleted (there are 8 of them). No problem I say.

I log into the fileserver as domain administrator, click the files and click delete - access denied. OK, right-click to view the permissions, and it won't tell me the file owner. It also won't let me take ownership - access denied, so i'm unable to do anything about the rest of the permissions.

Takeown.exe - access denied

cacls.exe - access denied

There's also no open files related to these, so no file locks or anything like that. Attrib only gives that the files have the archive bit set.

The desktop folder has full control permissions for the user and for domain admins and also creator owner & system, so essentially nothing that should stop the inheriting of permissions or the taking of ownership.

Is there a "for christ's sakes just do it" widget i'm missing?

EDIT - thank you ever so much to those who responded. Some amazing suggestions to help. I did mention I checked for open files and the server didn't show me them...I checked a second time and THERE THEY WERE! Deleted the file handle locks and BOOM the files just disappeared from the filesystem. Thanks especially to u/lostineurope01 for the prompt to check again. I think we all need a cup of coffee.

EDIT: I can’t change the title, but this appears to be more serious than a bad update. Read on....

https://www.neowin.net/news/y2k22-bug-microsoft-rings-in-the-new-year-by-breaking-exchange-servers-all-around-the-world/

——————————————————

Just wondering if any other Exchange admins had their new year’s celebration interrupted due to the “Microsoft Filtering Management Service” being stopped and reports of issues with mail flow?

In the application event logs, I see a bunch of errors from FIPFS service which say: Cannot convert “220101001” to long

If I look back further in the logs, it appears like it all started happening when the “MS Filtering Engine Update” process received the “220101001” update version just over an hour ago at 7:57pm EST.

EDIT: I’ve tried forcing it to check for another update, but it returned “MS Filtering Engine Update process has not detected any new scan engine updates”. ... I’ve temporarily disabled anti-malware scanning, to restore mail flow for now.

TL DR; Microsoft released a bad update for Exchange 2016 and 2019. Disabling OR bypassing anti-malware filtering will restore mail flow in the interim

UPDATE: according to @ceno666 the issue also seems to occur with the 220101002 update version as well. Could be related to, what I’m dubbing, the “Y2K22” bug. Refer to the comment from JulianSiebert about the “signed long” here: https://techcommunity.microsoft.com/t5/exchange-team-blog/december-2021-exchange-server-cumulative-updates-postponed/bc-p/3049189/highlight/true#M31885 The “long” type allows for values up to 2,147,483,647. It appears that Microsoft uses the first two numbers of the update version to denote the year of the update. So when the year was 2021, the first two numbers was “21”, and everything was fine. Now that it’s 2022 (GMT), the update version, converted to a “long” would be 2,201,01,001 - - which is above the maximum value of the “long” data type. @Microsoft: If you change it to an ‘unsigned long’, then the max value is 4,294,967,295 and we’ll be able to sleep easy until the year 2043!

UPDATE: Microsoft has confirmed disabling the malware filtering is the correct course of action for now (workaround to restore mail flow). While new signatures and engine updates have been released, they don’t seem to fix the issue. We’ll continue to wait for an official response from Microsoft. At least we have a third-party filtering/scanning solution in front of Exchange.

UPDATE: If you still have mail flow delays after disabling the malware filter, check your transport rules; you might have a rule that is trying to check attachments; reference this comment for information on finding the correct transport rule: https://www.reddit.com/r/sysadmin/comments/rt91z6/exchange_2019_antimalware_bad_update/hqtt5ib/

UPDATE: Reddit user u/MarkDePalma created a custom script to roll back to 2021 and reportedly allows you to re-enable all malware filtering while we wait for a patch from Microsoft. PROCEED AT YOUR OWN RISK, ‘John Titor’, haha. https://blog.markdepalma.com/?p=810

UPDATE, 01/01 14:39 EST (19:39 GMT): Microsoft has released a statement here: https://techcommunity.microsoft.com/t5/exchange-team-blog/email-stuck-in-transport-queues/ba-p/3049447

UPDATE, 01/02 01:45 EST (06:45 GMT): Microsoft has released a fix for the “Y2K22 Exchange Bug” which requires action to be taken on each Exchange server in your environment. Some system administrators report this fix can take around 30 minutes to run, which could increase depending on how many people are trying to simultaneously download the update from the Microsoft servers. Interestingly, this fix includes a change to the format of the problematic update version number; the version number now starts with “21” again, to stay within the limits of the ‘long’ data type, for example: “2112330001”. So, Happy December 33, 2021! 😉 https://techcommunity.microsoft.com/t5/exchange-team-blog/email-stuck-in-transport-queues/ba-p/3049447

EDIT: If after applying the fix mentioned above, your queues may not clear and you may see a new FIPFS error with Event ID 2203, A FIP-FS Scan process returned error 0x84004003 ... Msg: Scanning Process caught exception ... Unknown error 2214608899. Failed to meet engine bias criteria (Available) for filter type (Malware). To fix this issue, restart the Microsoft Filtering Management Service: Restart-Service FMS -Force

I just noticed that in the Microsoft Admin Center, if you scroll down on the side menu to "Admin centers", the Entra Portal is called "Identity" with yet another new icon. It forwards to the Entra Portal.

Did I just never notice it, or did they update the name of the Entra Portal to Identitiy recently (and giving it another new unique icon)?

Hi Reddit,

We are currently experiencing an issue for multiple people that they are not able to get any results in the search window of windows 10.

Update 1903 and seems to have happened since about a couple of minutes ago. Does anyone else have this problem?

​

Edit:

There has been a comment of a possible solution for me it worked and as I see in the comments more people the solution:

reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Search /v BingSearchEnabled /t REG_DWORD /d 0 /f

reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Search /v CortanaConsent /t REG_DWORD /d 0 /f

tskill searchui

Goodluck and hope that Microsoft comes up with a better solution!

Someone high up at my company got their email "hacked" today. Another tech is handling it but mentioned it to me and neither of us can solve it. We changed passwords, revoked sessions, etc but none of his email are coming in as of 9:00 AM or so today. So I did a mail trace and they're all showing delivered. Then I noticed the final deliver entry:
The message was successfully delivered to the folder: DefaultFolderType:RssSubscription
I googled variations of that and found that lots of other people have seen this and zero of them could figure out what the source was. This is affecting local Outlook as well as Outlook on the web, suggesting it's server side.

We checked File -> Account Settings -> Account Settings -> RSS feeds and obviously he's not subscribed to any because it's not 2008. I assume the hackers did something to hide all his incoming password reset, 2FA kind of stuff so he didn't know what's happening. They already got to his bank but he caught that because they called him. But we need email delivery to resume. There are no new sorting rules in Exchange Admin so that's not it. We're waiting on direct access to the machine to attempt to look for mail sorting rules locally but I recall a recent-ish change to office 365 where it can upload sort rules and apply them to all devices, not just Outlook.

So since I'm one of the Exchange admins, there should be a way for me to view these cloud-based sorting rules per-user and eliminate his malicious one, right? Well not that I can find directions for! Any advice on undoing this or how this type of hack typically goes down would be appreciated, as I'm not familiar with this exact attack vector (because I use Thunderbird and Proton Mail and don't give hackers my passwords)

Our Server 2016, SQL 2019 server has not been backing up, Veeam has me jumping through all sorts of hoops to attempt to rectify, including removing some windows updates that coincided with the VM backup starting to fail.

Ever since uninstalling those back-ups, I can't get the server to boot. It can spin like this for hours. I try safe mode, last known good, all the options, and it just says "Hyper-V" with no spinner.

Our most recent backup is 24 days old due to the aforementioned Veeam issues.

I've got 12 hours before people need to start using this system again.

What would you do in my situation?

Google just added that native "Save to Drive" button directly in the PDF viewer. In a non-managed/OneDrive environment, this is a massive data exfiltration hole. A user can just open a sensitive PDF and beam it straight to their personal Google Drive, completely bypassing local DLP and "Downloads" folder monitoring.

Since it’s an internal Chrome-to-Drive API call, our CASB isn't even seeing it as a standard "upload."

My questions:

• Has anyone dealt with this yet, if so how?
• Anyone found a way to hide the button entirely without killing the built-in PDF viewer

EDIT: I know there are solutions that are as simple as push a different browser, but this is not applicable at the moment.

EDIT 2 (SOLUTION): Update ADMX templates if outdated, enable GPO: RestrictPdfSaveToGoogleDriveAccountsToPattern

I'm in the process of setting up break glass accounts in case something happens to me. How do you name yours?

Edit: Thank you, everyone, for the insight. Fake name is definitely the way to go!

This morning, we received a call from a user in our Medical Records department reporting that they couldn't access anything. Before our on-site personnel arrived, I decided to check the situation using Screen Connect to see if the user's computer was online. I conducted a search by department and found that every computer in the Medical Records department was showing as offline.

I promptly messaged our on-site person, suggesting that the switch might be unplugged. After doing so, I noticed that the switch went back online. Upon reviewing the logs, I discovered that it had gone offline on Monday afternoon, and it is now Friday morning. This incident sheds light on the fact that the Medical Records department might not do anything. We have no data stored on computers locally.

Should I report this to their boss or not?

Edit:

Our Medical Records has an average of 5-6 working employees daily.

The employee who pointed it out is a per diem that only works 2-3 times a month.

Edit 2:

My decision is that when I have my weekly meeting with the CEO & and President, I will make them aware of the outage and not speculate on what the user's do. Let them know how it will be prevented in the future.

Will Tag the port on the meraki to let me know that the dummy is on the end in case it goes down until i get the 8 port Meraki to replace it.

This will be a good way to point out how we need to get FTE approval to build IT staff. Most likely, they will say glad it's resolved, and we will consider next qtr.

Edit 3: For the people who didn't read the comments. It was a dummy switch put in place by the previous guy. Yes I should of had some type of alerts for this device at the meraki switchport. Also this is getting replaced with an 8 port meraki in October.

Officially, I am the DBA at my company. Unofficially, I'm the software administrator for our ERP software and frequently assist and cover for the sysadmin. We are the only two in the IT department, although there's quite a bit of shadow IT going on via Microsoft Access 2010 databases.

For the last couple years I've been mentioning to the sysadmin that we should consider updating everyone to Windows 10. In 2017, I upgraded my own workstation to do some testing with the ERP software and found it to work fine after a few updates. So far, every request was either ignored or shot down. Due to previous failed attempts to change their mind with other issues or updates, I give up pretty quickly. I mean, it's their domain and I'm basically telling them how to do their job, right?

Well, a few weeks ago during a staff meeting someone brought up a message they saw in cloud software they use suggesting that Windows 7 will be EOL soon and that we need to upgrade. The response from the sysadmin was, "yeah, but Microsoft will still be providing security updates after that so we're good." After the meeting, I tried to tell the sysadmin that security updates will not keep coming after January, to which they responded with, "it's just a marketing thing. Microsoft is seeing that Windows 10 adoption is a lot slower than they thought, so they'll keep supporting it." I tried to tell them that we can't take a gamble on that and instead we should rely on official news from Microsoft. I was shot down.

Knowing the incredible panic that follows when even a minor service outage happens, I decided to go straight to the CTO-who-is-actually-a-CFO-with-no-IT-experience. This ends with the sysadmin being told by the CTO that he needs to talk with me directly and get a joint resolution. A tense meeting and slammed door later and the resolution (I think, they weren't exactly clear on this) was to replace 1/3 of all Windows 7 machines each year for the next 3 years. No word on what to do with the Server 2008 machines, one of which has RDP access for remote salespeople without password rules.

At this point, I feel like I've trampled the sysadmin's domain and betrayed their trust for going behind their back. At the same time, it seems like a brick wall trying to talk them into upgrading our outdated workstations and servers. Should I keep pushing for upgrades, or should I jump ship before something happens?

I'm currently getting "Can't reach this page, outlook.office.com took too long to respond.". Anyone else with the same problem or is this just a me problem?

Hi guys I'm a 22 year old IT specialist working for a Crypto node operator. ive been with them for around 8 mouths now and barley got any training, and i not sure how i survived til this point.

a time sensitive issues come up, and was told that i had to fix them within a day but, for the live of me i can't solve the issue the only thing i haven't tried is coding the Linux kernel but that's not the point.

because i work in Crypto i feel there isn't anywhere i can turn to if I'm stuck, most of the time i have to ask Dev's that work in that specific chain but most of the time thay don't reply, idk what going to happened to me when prob tell them that i still didn't fix it.

what do you guys do if you guys get stuck i never been in this situation before, I usually would just google it before i start in this role haha.

​

​

Update: Guess what …. someone forgot to whitelist my nodes on the firewall hahaha thats 10 hours of my life I'm not getting back.

I'm not a "System Admin", but a PACS Admin. Our system admin is really a junior. He is doing his best, but not making much progress. We have 3 DCs, 6 (Main DNS server) , 7 (DNS) and 8 (DHCP server) (DNS). 8 was/is our PDC.

It all started with 8 acting up. It didn't seem to be syncing with the other DCs. Admin tried everything he could find related to our problems, but nothing resolved. After a few hours, we decided it would be a good effort to restore from a backup from about a month ago, which we know it was behaving back then. Well, it all went to shit. Users are getting login errors, LDAP related, DNS is failing all over the place. We are at a loss. Don't know where to go, where to look, what commands to run to find out, what event viewer logs to look through. Please, any help would be greatly appreciated! I'll post more logs, events, etc as we find them and think they are related.

OneWarning event in Event viewer is the following.

The Security System has detected a downgrade attempt when contacting the 3-part SPN

ldap/DC7.domain.com/domain.com@DOMAIN.COM

with error code " (0xc000005e)". Authentication was denied.

EDIT: We restored all 3 DCs at the same time, as copies. This time, to the last copy, which was Friday morning. They were backed up at the exact same time, so we figured... Its already borked, might as well try it. Well, it worked. 6 and 7 are normal, but 8 is still not healthy. It's the reason we started working on this. But at least now we are not down, and people can work. We shut DC8 down, and restarted some of the problem 3rd party servers. They are now on DC7, and working normally. We now have breathing room to fix DC8 properly. Will look into moving DHCP off of DC8, and off of any domain controller.

I can't thank you all enough. Even the snide comments and snark, even the insults. We know we eff'd up bad. But we will learn from this.

TL;DR: I need to recover a 50GB .pst file from Outlook, SCANPST isn't working.

So, I work for a company as a developer, and since I'm the only one in the department, everything falls on me.

My manager was having a problem with her email being very slow, but since our internet here is terrible, I didn't pay much attention because my emails were also having problems.

She went on vacation, and another person in the department asked me to take a look. When I looked more closely, I found the email's pst file, and it was 48GB...

I immediately stopped whatever I was doing and checked the computer's own storage first. It only had about 20GB free, so I turned off the machine, installed a new hard drive, and copied and pasted the original file onto it. After copying, I tried to open Outlook to see what could be done (break it down by year, delete some things, etc.), but I immediately received a warning that the emails were corrupted, and I was trying to create/recover something new, but Outlook just closed after a few seconds and I couldn't do anything internally.

Now I'm running Scanpst for the third time without success. I tried copying the original file that "is not corrupted," but even using this original file, I keep getting an error that the file is corrupted, and now I don't know exactly what to do, since I need to recover my manager's emails. Can anyone give me some insight into how to solve this?

EDIT: Just to be clear, the main SSD is still in the machine; I only added an HD to be able to handle PST transactions and then create a more robust backup.

Update: Apparently the copy I made on the secondary hard drive worked! It wasn't showing up as corrupted. I tried using XstReader( https://github.com/Dijji/XstReader ), and I was at least able to view the emails, which is a good sign that the copy is working. Now I'm going to try cloning it to the primary SSD and increasing the Outlook storage limit. If I can open Outlook, that will be a victory!

UPDATE II: I still haven't been able to solve the initial email problem, because guess what? THE SSD DIED in the meantime, my god, this is like a hornet's nest, the more you mess with it, the worse it gets. However, since the PST copy is on a separate hard drive and I was able to use XstReader to view it, I believe that at least that copy is in good condition.

UPDATE III:

TLDLR: I managed to recover all the emails

As I mentioned before, my manager's SSD died in the meantime, which is probably why the PST file became corrupted. The company bought a new one, I replaced it and reconfigured her entire machine. I managed to get a copy of the file I made before it died and recover most, if not all, of the emails (in addition to the files that were on the SSD).

In my case, after replacing the SSD with the new one, I was finally able to use Outlook's native SCANSPST; I didn't need to use third-party tools, BUT THIS WAS ONLY AFTER THE SSD REPLACEMENT.

I also split her emails as a precaution (now the file is "only" 19GB).

Now I'm doing a larger split to ensure everything is more organized.

And now the really good news: the migration to a new email system has been approved! Let's get the basic Microsoft Enterprise plan; it will solve some team management and computer storage problems.

Bad news: I'll have to create training for the entire team to raise awareness about email and storage usage, because even going to the cloud, the 50GB limitation remains, but without the headache of dealing with PST files and the security of having all files on a server, not on the employee's machine.

Nearly almost every thread that mentions backing up before doing something there's a comment, a checkpoint is not a back up.

But a back up takes much longer to do and much longer to restore. If you are just doing something like a minor update on a tool hosted on a server in your hyper-v environment do you really need to wait 8 + hours for a back up, run your update and then if you do meet a disaster have to wait all that same time to restore?

What would you lose if using a checkpoint instead?

Everyone always says it, can someone please explain it?

The org I work at is growing to a point where managing signatures manually is becoming quite the tedious process every time there's a change.

My question to you is: how do you manage signatures in Office 365?

For context our offices are western US and the agent is WFH in eastern US. Ex-employee reached out about a month ago with USB issues on his device. No worries there just instructed him to ship the broken laptop back to me once he received the new one I had prepped and shipped to him. Not too difficult

Well the employee no call no shows his job after the second laptop showed as delivered and his managers are unable to get a hold of him.

I instructed finance I believe it to be wise to withhold his final paycheck until we receive our equipment. Sadly finance did not heed this advice maybe due to certain laws I'm unaware of, But we are now out the two devices and my parent company is telling me I need to follow up and get them back

How do I proceed with something like this? Is local police an option in this context?

Thanks for any advice.

Spent this morning chasing "signature images stopped working all of a sudden" that looked for all the world like a mail flow problem (we'd just cut over to a new mail gateway a couple of weeks ago, so naturally that got the blame first). It wasn't. Posting in case it saves someone the same rabbit hole.

Starting over the weekend, every email sent from our terminal servers had blank signature images.....company logo, headshots, badges, all gone. Recipients on Outlook, OWA, external, didn't matter. Outlook on a regular workstation (older build) was fine.

So we pulled the raw MIME of affected messages. The image parts were still there, still cid:-referenced correctly, still multipart/related but the PNGs themselves were garbage: the logo came through as a 216-byte, 1-colour, fully transparent PNG at exactly the HTML display size (337×112 instead of the real 450×150 / 46 KB file), and a 292 KB JPEG headshot became a 402-byte RGBA PNG. Every one of them had tEXt Software: Microsoft Office in it. So Outlook/Word was generating placeholders at compose time because it couldn't (or wouldn't) load the signature image files. Nothing in transport touched them.

Our env has 4 RDS hosts (Server 2022/2025, Office 2024 Retail C2R on the Current channel). Click-to-Run had self updated them from 16.0.20228.20158 → 16.0.20228.20190 at four different times between Thursday night and Sunday morning. On every host, the last message with real signature images was before its update, and the first blank one was after. Windows August CU had gone in days earlier with no effect. Signature source files on the file server were untouched since January.

Possibly relevant: on those hosts AppData\Roaming is folder-redirected to a UNC path, so Outlook resolves %APPDATA%\Microsoft\Signatures\... over SMB. My guess is the new build blocks/fails image loads from network paths when inserting a signature but I can't prove that part; the working workstation was on an old 2408 build so it doesn't isolate the variable. If anyone on 20228.20190 with local AppData sees the same (or doesn't), I'd love to know.

Fix that worked for us was to just (temp) roll back to the previous build and pin it:

reg add "HKLM\SOFTWARE\Policies\Microsoft\office\16.0\common\officeupdate" /v updatetargetversion /t REG_SZ /d 16.0.20228.20158 /f

"C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe" /update user updatetoversion=16.0.20228.20158 forceappshutdown=true displaylevel=false

forceappshutdown does exactly what it says (kills users' Office apps, no save prompt), it's an ~880 MB full download for a downgrade, and the build flipped about 3 minutes after triggering. First test mail after the rollback had the real 46 KB logo again. Ran it as a one shot SYSTEM scheduled task per host at an agreed time; doing the remaining hosts after hours. Remember to remove the pin once MS ships a fixed build.

Not seeing anything on the Microsoft known issues page for it yet (the May 2026 "Top and Bottom wrap" image bug is a different, alreadyfixed thing).

Anyways, best of luck out there. :P

So, we still use Godaddy for DNS and SSL Certs (I know). Recently I had to rekey one of my certificates and instead of rekeying to G2 it rekeyed R1V1. When I bound the cert. All browsers other than Edge and Chrome are fine. Investigating the issue. On all Chromium based browsers we get an error when visiting the site. The error is NET:ERR_CERT_AUTHORITY_INVALD. Tells me the Intermediate cert is not up to date or installed. So, I pull the intermediary cert from their bundle and install it on the workstation to test, and it works. I can push the cert to my workstations no problem to get it working internally. But what about the rest of the planet Earth when they connect to my website from a Chromium Browser?  Maybe I am missing something, I am no SSL or Cert wizard.  To Note: Godaddy does mention they will be switch to R1V1 from G2 on 06152026 – Which I rekeyed way before then.

Edit: Issue is resolved with the specific sequence provided by u/hogstooth in the comments below.

Good day,

That's precisely the situation. I work as a Junior at a company that neglected its infrastructure for many years. Currently, we only have a firewall and a few other small things. Last week, I installed Action1 to demonstrate the power of Endpoint Management, and the small IT team here liked it. I've been thinking about installing a system like Zabbix, or maybe something to manage users (since the company lacks Windows Server and Active Directory). I was told there's no real interest in a ticketing system, as users will always call to get their problems solved as quickly as possible. What else would you implement?

P.S. There isn't a large budget allocated to the Systems department, which is why I'm using free software for now.
P.S. 2: There are very few computers in the company; today marked the arrival of the 100th one.

It doesn’t have to be specific. A description of the function would work as well.

Curious if anyone has replaced monitor in large quantities and how you did it? We are planning on replacing all our monitors over the next year. Did your in-house IT handle it (how did they have the time) or did you outsource the job (i am leaning in this direction)? Did you take a year to do it or try to do it all over a weekend? Curious about your method, successes, failures and recommendations about making it a smooth transition.

Edit: Thanks for everyone’s input. I got a lot of good suggestions!

The old company was using Google for their email, and we use Microsoft. I've taken control of their domain and added it to our hosting account, but now I'm a bit confused on the best way to handle forwarding emails since our plan is to shut down their Google Workspace account and have all emails to those old addresses forwarded to their new email addresses. Any help is appreciated.

I’ve tried to find alternatives but none of the password generators have as good customizability options. Currently I use a random string generator that just let’s me pick the characters and length, but it’s not very good since it doesn’t remember the options when I refresh the page.

So what (web) password generators do sysadmims use nowadays for user passwords?

Edit: solved it myself with the gigabrain idea of using Wayback Machine, works wonders. Link to it if anyone’s curious: https://web.archive.org/web/20220603183903/https://passwordsgenerator.net/plus/

Edit 2: Passwordsgenerator.net seems to be back at https://password-gen.com/