Reddit Sysadmin – Telegram
TeamViewer: Upgraded whether you like it or not. Enjoy your ‘missing out’ benefits.

So I got this gem from TeamViewer today:

>“In the next two weeks, you’ll be upgraded to the new TeamViewer Remote interface. This is a free and automatic switch. No action is required to enjoy the benefits.”

Translation: We’re flipping the switch whether you like it or not.

I’ve apparently been “missing out” by using the product I already paid for.
They promise a “familiar interface” (aka: it’s going to look different and you’ll hate it).
You can roll back… but only “for a limited time.”
Of course, they sprinkled in the buzzword salad: “AI, Intelligence, Global Search, Device Dock.”

Nothing says customer-first like telling me I’m missing out on features I never asked for, then strong-arming me into the “future of TeamViewer.”

https://redd.it/1npb7cq
@r_systemadmin
How strict should security be in early stage startups?

My devs use whatever SaaS tools they want. Marketing has 12 Chrome extensions.
Finance uploads spreadsheets into free tools. Should I clamp down now or let it slide until we scale?

any recommendations?



https://redd.it/1npbbgf
@r_systemadmin
MFA for all users

Quick question, how does everyone handle mfa for users in 365.

What I mean is, there are users who never leave the office and as such don't have a corporate mobile do you require these users to enable mfa on personal devices.

We have a ca policy that blocks sign ins for these users from outside the network but I feel we should still some how get these users enrolled in mfa. Just wondering what are options are

https://redd.it/1npk7lt
@r_systemadmin
WTF is wrong with Ninja One's Sales Team

Seriously, these clowns are really pissing me off. Am I the only one? They kept leaving me voicemails at work for months, spamming emails, it was driving me nuts.

Finally, one of these clowns called me on my personal cell phone (I have no clue how they got it) after work hours. I ended telling the guy to never call this number again. I was pretty pissed and obviously upset but the guy kept pushing. I told him I wasn't interested in a sales pitch and if we wanted anything we would contact them.

But this clown kept pushing anyway and told me he wasn't sales and he just wanted to invite me to see a demo. At that point I just blew up at the guy. Point blank asked him "do you think I'm that fking stupid? A demo for what? A product that you want to sell me." And this ass kept going "I'm not a sales person" at which point I finally hung up.

It blew me away how hard this guy kept pushing. I was simultaneously curious to see if/when he would get the message and back off, but clearly after explicitly telling him multiple times he still wouldn't stop.

Today rolls around and the new entry level tech who started 3 weeks ago gets a phone call from guess who? Ninja Fking One. And here's the bonkers part: he goes by a nickname and doesn't use his legal name. It's not on any of his emails or any accounts.

But he picks up on speaker phone and the woman on the other end says "hey <nickname>, how are you doing today?" She then says she's from Ninja One and she interested in talking to him about the services they offer. At that point I yell over at him "fk those guys. Don't talk to them, hang up."

Honestly I thought about putting all of the email blocks and phone blocks in place before, but after I chewed out the first guy, no one had heard from the until today. I'm going to be talking to the CIO tomorrow to clear putting the blocks in place, but seriously: fk these guys.

I get sales people are trying to make a living like anyone else, so generally I'm super polite with them but these guys are really, really screwing the pooch here. When you get the "no", it means "no". I will never use nor recommend Ninja One products ever.

https://redd.it/1npt7k4
@r_systemadmin
It's not you, dockerhub is down

I’ve been fighting this for like an hour thinking I'm crazy before I realized dockerhub is just down right now. So, FYI!


https://www.dockerstatus.com/

https://redd.it/1nps6p1
@r_systemadmin
If you're in Canada and you've been losing your mind over random mailboxes failing to load, my ticket with MS just got an incident opened

https://admin.cloud.microsoft/#/servicehealth/:/alerts/EX1158764

Thought I was going insane this past week with OWA bricking mailboxes on a daily basis..

https://redd.it/1npmxrm
@r_systemadmin
Office remodel - IT department being moved to center of office

They are remodeling our office, and we are losing our individual cubes ... the new layout will be open concept and all groups of 4 desks with low dividers. To make matters worse, they have moved the IT department right in the middle of the office. We will have one 14 foot table "shared space" to work on units shared between 3 of us.Also we are going from a 20 foot by 10 foot storage room to a closet to lock all stock up. We can't work in the server room they say because it has an inert gas fire suppression system installed.

I'm really dreading being out in the open, trying to build and repair PCs while every one walks by my desk. I don't understand why we can't be in a locking room.

So how do I make the open concept work? At this point I would prefer to be in the factory part of our building and just wear steel toes everyday.

https://redd.it/1npta1z
@r_systemadmin
AI-driven policy management in SASE?

We’re re-evaluating our SASE stack and considering AI-driven policy management to reduce firewall rule sprawl and alert noise.

On paper, AI that suggests rule cleanups or group alerts sounds helpful. In practice, I worry about trust, unintended blocking, and how change control works at scale.

We’re mid-sized with cloud workloads and hybrid staff. Our pain points:

* Too many overlapping firewall rules
* SOC buried in low-signal alerts
* Slow change approvals

Has anyone deployed an AI policy in a SASE platform? Did it actually reduce noise and speed up response times?

https://redd.it/1npvq8j
@r_systemadmin
Microsoft EOL issues. Some servers behave bad

We moved our mailservers to a new IP range about 36 hours ago, and added new IPs to a connector, But we forgot SPF. Added 24 hours ago. All involved DNS records do have a TTL of 300 (seconds, 5 minutes).

Some mail servers like

AMS0EPF000001B1.mail.protection.outlook.com (10.167.16.165) DB5PEPF00014B8D.mail.protection.outlook.com (10.167.8.201) AM3PEPF0000A796.mail.protection.outlook.com (10.167.16.101)

are still misbehaving, but I feel more mails are getting through. I do get SPF failures, meaning it uses 24h+ old DNS records with a Time-To-Live TTL of 5 minutes.

When can I expect Microsoft to do correct DNS lookups, in accordance with RFCs, respect TTL, and thus not fail mails with DKIM errors ?

This looks like really really bad programming at Microsoft. Possible developers with no knowledge at all about DNS trying to cache DNS. (For that there is only one real solution - Run a local caching DNS, like we all did on Linux before Exchange knew about SMTP. Easy, no secondary codebase to maintain, tested and stable)

I can't find the big "clear-cache across all Microsoft EOL servers" button anywhere.

Received-SPF: Fail (protection.outlook.com: domain of ourdomain.com does
not designate 1.2.3.4 as permitted sender)

https://redd.it/1npy0eb
@r_systemadmin
Internal PKI vs Cloud PKI

Hoping to get some hivemind ideas on a good approach to managing certificates in the modern day. Our current scenario is that we have about 1k endpoints, all fully intune managed. Clearpass NAC using EAP-TLS certificate auth to provide network access, and NDES to enroll SCEP certificates for our devices.

The PKI servers (1x issuer, 1x NDES) are domain joined - but the AD domain is now largely only performing user sync to AAD and providing a management layer for the server infrastructure (\~60ish servers).

To put it lightly, we have never been particularly good at managing ADCS. The templates are a complete mess, permissions are applied directly to a bunch of templates - heaps of custom templates for reasons I can't understand. Every pentest has gotten elevated access via cert exploitation, and we patch the hole they used each time but my god there are so many.

Our root cert is a self-signed certificate, and we used it to sign the Issueing CA certificate. The root cert expires in 2028 and I'd like to get ahead of it.


My questions on it are:

1. Should we buy a root cert signed by a trusted authority? This might mean more renewals but would eliminate the need to install a copy of the cert on all endpoints

2. Is it worth just ditching ADCS completely? We want to keep the AD domain, so I'm unsure if ADCS is easy to unwind. which leads to:

3. Since our primary use case for certificates is endpoint authentication for EAP-TLS - is Cloud PKI worth it? Monetarily its a tough sell, the 2 servers cost us $150 per month in azure but licensing cloud PKI will cost \~$2.5k per month.

4. Am I missing anything in the "modern" tech landscape that might solve my use cases? e.g. minimizing infra surface area, ensuring secure network authentication & keeping costs down?



Keen to hear how other people are managing endpoint certs in 2025 :)

https://redd.it/1npxife
@r_systemadmin
A question about VPN and it being secure.

I was listening to a radio phone in this morning - it was one of those where tech experts advise the general public.

One of the questions asked was, "Will a VPN make my e-banking more secure". Straight off the bat, the expert said, "Yes it would because it creates a secure private network between you and the bank". I do concede that the expert then said however you do need to be sure you use a reputable VPN provider.

I'm asking this because I want you to tell me if I'm wrong when I think the answer should be, "No, it doesn't necessarily make you more secure and as long as you're not on public WiFi or unknown WiFi the encryption between you and your bank should suffice.".



https://redd.it/1nq16rr
@r_systemadmin
What to do when your job has zero mobility?


I’m in a bit of a rut at work and could use some advice.

• I’m one of 2 junior support analysts covering ~5k users. We work a 5-on/5-off shift pattern, handling up to 120 tickets a day when it gets busy (solo on shift).

• A senior analyst joined to share the load, but after 6 months they admitted they couldn’t keep up and pulled out of the rota so now it’s just me + the other junior stuck with all the tickets again.

• I’ve had to completely put my professional development and training on hold because there’s no time outside the ticket grind. I’ve lost out on a really interesting project I was working on.

• I raised it with my boss, but they openly admitted there’s no progression or promotion route here. He also refused to commit to any training courses

For context: I have 2 years HPC experience as a helpdesk technician and a PhD in computer science, but right now I feel like I’m wasting my time in an L1 helpdesk role.

Would you stick it out for stability, or cut losses and start looking elsewhere?

https://redd.it/1nq1o7u
@r_systemadmin
Thickheaded Thursday - September 25, 2025

Howdy, /r/sysadmin!

It's that time of the week, Thickheaded Thursday! This is a safe (mostly) judgement-free environment for all of your questions and stories, no matter how silly you think they are. Anybody can answer questions! My name is AutoModerator and I've taken over responsibility for posting these weekly threads so you don't have to worry about anything except your comments!

https://redd.it/1nq2okf
@r_systemadmin
I tired of LinkedIn recruiters..

They always make me feel not good enough,
I am sysadmin of 8 years and Cloud Consultant for 4 years.. I have good on-prem knowledge and decent cloud skills and a bunch of certifications..

It is like always playing games with them..a typical guess the key word...

"and the word we were looking for was...": MFA
So your IAM skills does not fit..

Or the typical know nothing about IT recruiters fishing wide and just book up interviews to fill their hours..

Rant over.

So how do you handle these subhumans, leeching on your time.
When are you truly enough as an IT Consultant.

https://redd.it/1nq3sfd
@r_systemadmin
Caught someone pasting an entire client contract into ChatGPT

We are in that awkward stage where leadership wants AI productivity, but compliance wants zero risk. And employees… they just want fast answers.

Do we have a system that literally blocks sensitive data from ever hitting AI tools (without blocking the tools themselves) and which stops the risky copy pastes at the browser level. How are u handling GenAI at work? ban, free for all or guardrails?

https://redd.it/1nq58o2
@r_systemadmin
physical tools you can't live without

Hey gang!

i was friggin around re-terminating some jacks at some cubicles the maintenence dept snipped off without asking the other day.... fun

and it got me to thinking about all the tools that have followed me along my career and that i can't live without but then i see other admins and IT people from newer schools that have never touched the things.

so just for some thursday morning jibber jabber, what are some of the tools you got in your tickle trunk that you can't live without or you have taken with you along your career from job to job just because you like to have them? fun to talk about but my current company likes to invest in capabilities so i can add some gems to my war chest based on recommendation :)

I'll start, my 110 punch tool, my tone genny and my netscout - (previously a fluke DTX when i was RUNNING more cable than troubleshooting cable but i was too cheap to re-certify it/ it got old)



https://redd.it/1nq4toh
@r_systemadmin
Do y'all ever roll in late to the office?

Been in IT for a minute now and I've never had any issues with IT comings and goings at any "reasonable" time. I've always had leaders that said, "as long as your work is done, I don't mind when you leave or come in."

Started new gig and boy......they have a hard start time of 8am and end time of 5pm. I was doing some work around the office at one point and still had my backpack and drink in hand and it was around 8:45am when I walked by a C level. I got an email a few hours later stating "if you need accommodations for coming later let us know otherwise start time is..."

What's really irritating me the most is that my days are easily within the realm of 9-12hrs of work at and they say nothing when I have early start times or late days. Even less for weekend in office work. Skipping lunches is a frequent thing here with the current work load I have. I told my direct boss about this but they said that's just the way it is here. Man, that sucked to hear.

Just feels hypocritical to me. Sucks, cuz I get paid pretty decently for the area I think, but this along with a few very strange things I've seen (cameras everywhere, active snooping/watching of said cameras at all times) that have been putting me off this job/office. CEOs got their offices locked up and they've blocked the walk ways a certain way so that they don't see people walk by their office...despite having a whole ass wall where they can't even see out. Some mistreatment of operators...etc etc. Just weird vibes...

Maybe I'm just being a little bitch boy about it but hot damn....I've just never had any leadership give a shit in the past.

https://redd.it/1nq63z2
@r_systemadmin
How do you prove nothing happened?

Does your c-suite freak out every time there is a phishing email or attempted malicious phone call? How do you prove it wasn't a breach on our end?

Someone in our org got a phone call from "the bank" stating they stopped a fraudulent check cashing attempt. The bad actor apparently had valid account and/or user info for our company. Now the C-suite thinks we've been breached, wants a "full analysis", along with a whole slew of other precautions. Initial indications are the bank has the "leak", but how do I prove to them that we are not compromised?

https://redd.it/1nqbgm7
@r_systemadmin
Broadcom only wants to give us 3-year pricing

In the "At least things couldn't get any worse, right?" Department, after significantly scaling back our VM footprint in light of the Broadcom fiasco, we went to renew and the resellers only gave us 3-year pricing even though we didn't ask for it. I asked one of them for 1-year pricing and a reseller is telling us it needs to be escalated up the chain at Broadcom with a "business justification", and warning there will be a 60 - 80% increase next year.

https://redd.it/1nqb9au
@r_systemadmin
AI Acceptable use policy.

I've recently taken initiative to draft a AI AUP for our org after an incident of some proprietary info being uploaded into ChatGPT to do... something, I'm not sure what, this person is gone now.

I haven't determined next steps yet as far as blocking AI services / getting copilot for business / localized generative models...etc.

Just curious how many of you have AI policies in place?

https://redd.it/1nqfx8o
@r_systemadmin
3 requests to help find a file in the past week - WTF

3 different users, 3 different companies altogether. Prior to last week, I had maybe 3 requests in the past 10 years. I'm not even sure what to say anymore.

https://redd.it/1nqi7gk
@r_systemadmin