Am I Getting Fucked Friday, October 10th 2025

Brought to you by r/sysadmin 'Trusted VAR': u/SquizzOC with Trusted Telecom Broker u/Each1Teach1x27 for Telecom and u/Necessary_Time in Canada

PMs are welcome to answer your questions any time, not just on Fridays.

This weekly thread is here for you to discuss vendor and carrier expectations, software questions, pricing, and quotes for network services, licensing, support, deployment, and hardware.  

Required Info for accurate answers:

* Part Number
* Manufacturer/vendor
* Service Type and Service Location
* Quantity (as applicable)

All questions are welcome regarding:

* Cloud Services - Security, configurations, deployment, management, consulting services, and migrations
* Server configs and quote answers
* Storage Vendor options, alternatives, details, and selection
* Software Licensing - This includes Microsoft CSPs
* Network infrastructure - overlay software, segmentation, routers, switches, load balancing, APs…
* Security - Access Management, firewalls, MFA, cloud DNS, layer 7 services, antivirus, email, DLP….
* User gear - Usually, you should buy the quote you have unless the quantity is +50 units
* POTS line replacements
* Single site and multi-location connectivity – Dedicated internet access, Broadband, 5G LTE, Satellite, dark fiber, Ethernet services
* Voice services- SIP, UCaaS,

https://redd.it/1o33jzi
@r_systemadmin

I Triggered a State Investigation into Microsoft (Update)

https://www.trevornestor.com/post/update-on-my-case-against-microsoft

A while back I posted my article regarding the internal problems at Microsoft, and my complaint about the company, and received a lot of support across platforms from those both still inside the company and outside of the company who have been impacted by Microsoft's recent culture and morale crisis amid widespread corruption, wrongful terminations, and layoffs at the company.

However, the Redmond and Sysadmin subreddits seemed... different. I'm not sure if there are bots astroturfing or what, but after my initial post due to the number of Microsoft supporters in these subreddits I decided to take it down. Well, I regret that and decided to post an update to double down instead.

For all of you sysadmins out there frustrated by Microsoft's nonfunctional support, I'm there with you.

https://redd.it/1o36jre
@r_systemadmin

Law firm asking for access to user's mailbox

One of our users is suing someone for personal stuff not related to our company, and they unfortunately used their work email for communications about the deal. It sounds like the law firm representing our user has requested access into their work mailbox via a tool called "Forensic Email Collector" by Metaspike.

Doing some research, it looks like it's a legit tool and all, but I've yet to have a situation where the firm wants active access to a mailbox in order to run searches. User sent over a screenshot of them being blocked from authorizing the enterprise app, so at least our security settings are doing their job.

Has anyone encountered this before? How was it handled? I'm currently thinking about saying no and running the searches/export myself with the tools already in 365.

Edit: I should have mentioned, I'm the IT director for this company but also handle some sysadmin tasks when I have free time. Mostly just curious if this is how people are handling litigation holds these days. I will be looping in legal, though.

https://redd.it/1o37e00
@r_systemadmin

Next level phishing

So first one I've heard about tangentially. Wife works in finance. One of the firms they work with got the usual text bit hey I'm tied up I need you to wire some money. Yeah, we need to talk to you. And now they're on a video call. It's the appropriate person's face, their voice, perfectly convincing. Said person was home sleeping at the time. They sent the wiring instructions to the bank and it was only caught because it trigged institution guardrails. If not for that, the money would be gone. So this has resulted in another round of training reminding people to follow procedures, no debate. And the procedures have been beefed up because what was perfectly reasonable a few years back is inadequate now.

Anyone looking at the AI space could see it coming but it's wild when you see it happen. About the only good to see of this is conventional blackmail is out the window. "Oh, you have pictures of me cheating on my wife and you'll send her copies. Do you have any of me with bigfoot and kidnapping the Lindberg baby, too?"

https://redd.it/1o36q6n
@r_systemadmin

Apple Business Manager Finally Allows Restrictions on what Apple IDs can sign to devices

In Apple Business Manager, there is now an option under Access Management > Apple Services > "Apple Account on Organization Devices." If you choose "Managed Apple Accounts Only," it will only allow people to sign into a Apple device with an iCloud account that managed by that ABM. I have confirmed it works! And the option exists in multiple ABMs. Personal account no longer allowed!

https://imgur.com/a/xay9sRx

I can't find any documentation on this anywhere. The only mention of this I can find of this on the internet is on the "Learn More" page for that setting.

This has always been a battle. Is it finally solved? Looks like it. But maybe it has always been there? I don't care! I'm happy to find it! (But if it always has been, feel free to mock :) )

(Note: I'm aware of the pros and cons of this. Just never was an option before that I found)



https://redd.it/1o37sg0
@r_systemadmin

Do you monitor/alert on Windows OS free disk space? What are your thresholds?

As Windows Updates grow in size, I'm trying to figure out what is the minimum free space (in GB) a Windows device should have (either Server or Client). I want to say I've seen issues with updates when having less than 10GB free. Was thinking of monitoring for 15GB or less, but that seems excessive. Thoughts?

https://redd.it/1o31fbz
@r_systemadmin

Gloating a bit bc I got promoted out of helpdesk!!!

Don’t have too many people to celebrate with and I figured you guys would appreciate this. I FINALLY GOT OUT OF HELL DESK!!! 7 years I was in helpdesk and FINALLY I got promoted after being at this place for 6 months! I’ll finally get my hands on tech deeper than just end user support! I’m a freaking engineer now man!!!

If you’re stuck in helpdesk listen to this: take the time to think through the problem, recreate it and if you can’t figure it out when you escalate it show ALL of your documentation, screenshots, and what you’ve tried. AND MAKE SURE TO ASK QUESTIONS AND OFFER TO GET IN DEEPER ON THE TECH WHEN YOU CAN!! Look for the opportunities to get more technical, and if you don’t feel valued where you are, start looking for another place. This isn’t the 50s anymore and respect is a 2 way street! Know your worth!! IM A FREAKING ENGINEER HAHAHA!!!

https://redd.it/1o3enpp
@r_systemadmin

ARM laptops with SCCM?

We recently got one of the Qualcomm Snapdragon X Elite laptops, specifically the Dell XPS 13 9345 and we're evaluating feasibility in our existing environment.

When imaging with SCCM, drivers seem to install and update just fine, but when using Dell Command Update alongside embedding the Qualcomm Chipset drivers into the WinPE image, there are two drivers, specifically a Qualcomm camera driver and a Qualcomm USB driver that will not install no matter what we try. They show as unknown drivers in Device Manager. Dell's image doesn't have this issue and ripping the drivers from their image doesn't seem to fix the problem either. Dell Command Update finds no missing drivers, but everything on the laptop seems to work fine? Anyone else have driver issues with these laptops?

Also, for those that have it, how do you handle print drivers? Do you use the Microsoft type 4 drivers? We're thinking we might use IPP for situations in which users are using the ARM laptops. The problem with the print drivers is none of the vendors seem to even support ARM64 as an architecture at all and Microsoft doesn't have any sort of conversion layer like they do for applications unless I'm misunderstanding it.

https://redd.it/1o3bwbb
@r_systemadmin

Passkeys vs passwords how's the rollout going for you

We've been testing passkeys internally and while logins are smooth integration’s a mess Some apps support it perfectly others fail when syncing across browsers or devices Legacy systems are the biggest blocker Users like the idea but get lost switching devices Curious how others are handling rollout and adoption in 2025 fully moved or still stuck in hybrid mode

https://redd.it/1o3gpf2
@r_systemadmin

Building new domain controllers, whats stable?

I am replacing 2016 domain controllers. I built new 2025 ones, but that was a big pile of hot mess and disruption. Between them booting with their NLA showing public/private and not domain and Kerberos issues, they are useless. I thought it was just an update that caused the issues but here we are months later and they are still a problem. I isolated them in a non-existent site waiting for windows updates to fix the problems but that was just a waste of time, they need to go.

So, 2019? 2022? XP? NT? Whats stable and not just a production environment beta (....alpha) test?

https://redd.it/1o3f9xp
@r_systemadmin

I knew it was going to happen, but not this soon

I knew this day was coming, but not as soon as it did. This past Wednesday, there was an early meeting called by the IT Director of the US. I knew it wasn’t going to be good news. The announcement: all field IT in the US and abroad will be transitioned to a 3rd party by January 2026. Effectively eliminating 1000 + positions in the field and upper management. All deskside, networking, IT servicedesk, procurement, etc. That was a kick in gut. They offered a small severance package which is helpful, but still a shock. I’m now updating my resume on the hunt for the next gig. Wish my luck.

https://redd.it/1o3j0t7
@r_systemadmin

M365 Apps unexpectedly closing - PSA SOPHOS USERS!

Hi all,

Just wanted to share this in case it helps anyone else who’s been pulling their hair out over the same issue.

For months, I was dealing with a strange problem where Microsoft 365 apps (Word, Teams,Excel, New Outlook, Classic Outlook, etc.) would randomly close with no error message. It wasn’t a crash — the apps would just silently close while in use.

I tried everything:

Repairing Office (both Quick and Online repairs)
Reinstalling M365 completely
Updating Windows and Office to the latest builds
Disabling all add-ins
Checking Event Viewer (nothing useful)
Testing under different user profiles

Nothing worked — until I found the real culprit using Process Monitor: Sophos - Application Control.

We have an application policy set to allow apps, and in the Sophos Central portal everything looked fine — the apps show as allowed. However, on the affected machines I checked the following registry key:
Computer\\HKEY_LOCAL_MACHINE\\SOFTWARE\\Sophos\\EndpointDefense\\PolicyConfiguration

REG_SZ: app_control_blocked_app_list

If that key contains a bunch of apps you never manually blocked, there’s your problem.

You can confirm by checking the Sophos Endpoint Defense log:

C:\\ProgramData\\Sophos\\Endpoint Defense\\Logs\\SSP.log

You’ll likely see entries like this which correspond with the time of your app closures:

A Cleanup: Process (random string) with Path C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe has ended.

Once I reset the policy, the reg key list cleared and all M365 apps started working normally again. This is the first week in months were my users have been crash free.

I've logged this issue with Sophos for diagnosis and I suggest you do the same.

Hopefully, this saves someone else hours (or days!) of frustration.

https://redd.it/1o3i03a
@r_systemadmin

Is transitioning to Edge worth the blowback?

I understand what the technical transition looks like, but I’m not looking forward to the pushback, ticket increase, and general griping when “take away Chrome.” Several people have told me that Edge doesn’t work, but can’t give me an example of why they think that.

For those have gone through it—do thr benefits outweigh the blowback?

Context: I’ve been leading IT at an SMB (~100 employees) for about a year now. Staff are generally great, but they HATE change. I’m working on tightening up our Microsoft environment so, for a variety of reasons, I think sense to move the org to Edge.

https://redd.it/1o3xes6
@r_systemadmin

Are these ISP internet prices in Vietnam normal?

Hey all - I’m helping set up ISP internet connection for a factory in Vietnam and the quotes we’re getting seem really high.

500 Mbps dedicated line: USD $51,000/year
100 Mbps dedicated line: USD $21,000/year

This is for a stable, business-grade connection (not shared), but still feels steep compared to other regions. Does anyone have experience with business internet pricing in Vietnam — are these numbers typical, or are we getting overcharged?

Thanks in advance for any insight!

https://redd.it/1o3u6by
@r_systemadmin

I don't want to do it

I know I'm a little late with this rant but...

We've been migrating most of our clients off of our Data Center because of "poor infrastructure handling" and "frequent outages" to Azure and m365 cause we did not want to deal with another DC.

Surprise surprise!!!! Azure was experiencing issues on Friday morning, and 365 was down later that same day.

I HAVE LIKE A MILLION MEETINGS ON MONDAY TO PRESENT A REPORT TO OUR CLIENTS AND EXPLAIN WHAT HAPPENED ON FRIDAY. HOW TF DO I EXPLAIN THAT AFTER THEY SPENT INSANE AMOUNTS ON MIGRATIONS TO REDUCE DOWN TIME AND ALL THA BULLSHIT TO JUST EXPERIENCE THIS SHIT SHOW ON FRIDAY.

Any antidepressants recommendations to enjoy with my Monday morning coffee?


https://redd.it/1o42j9x
@r_systemadmin

How would you handle this?

Hello Everyone, this may be off topic. But, keen to know how would you handle this kind of situation.

Background: I am responsible for managing a low code no code platform, especially governance and security. Placed the DLP policies. I do few consultation work but mainly on Admin Side.

Problem: My manager is seems too focused on innovation, and not much with governance or security. An example, is asking me to allow certain connector to be allowed in the blanket DLP policy. The blanket policy ensures most connectors are blocked to minimized data sharing risks.

I ended up doing it, instead of having users follow the right process of having their own environments and DLP.

Most recent, he asked a colleague to add a user to have access to our dedicated environment for our team, which all or most connectors are allowed. I had to reach out to the user and explained the need of dedicated DLP.

He’s more on development and automation side, and no Sysadmin.

I understand that discussing it, would be next options, and we did. But, I wonder, how come he ended up just letting a colleague add a user to that dedicated environment.

Open for any thoughts, and any possible long term approach to address this dynamics?

https://redd.it/1o41ceb
@r_systemadmin

Is Master image, Golden image, Winpe & Adk worth learning?

I just started my IT learning journey, I was wondering if any of these concepts are worth learning and are still used today?

https://redd.it/1o43eio
@r_systemadmin

Am I a system administrator or something else?

So I started originally as tech support for linux systems. Then learned Ansible and Bash to automate some tasks, learned more in depth linux and kernel, did documentation and release notes (lazy devs wouldn't make them so I just got fed up and started making it myself). Then started doing network and VPN configuration. Now I use APIs to integrate different platforms into a central system, setup promethus and grafana, make python noscripts to automate asset management using public endpoints and APIs.

Lately got my CCNA, AZ-900 and on track to get azure administrator next week.

Now I know noscripts are arbitrary and different companies have different ideas of what each noscript mean but I was just curious to see what others think? Do i fit into sysadmin or other roles and noscripts?

https://redd.it/1o47klc
@r_systemadmin

hi, where do I start!!

hey, so im a high school junior interested in IT. i want to be a systems administrator, cloud engineer or anything similar. as of right now, i'm pretty much stumped and i'm close to graduating soon too.

i originally wanted to be a software engineer, but it just wasnt for me, so i thought about systems admin and cloud computing.

i have a few questions im going to put below:
- how do I start? im just lost on where to begin, and need actual advice from someone who knows what they're doing
- is systems admin a solid job?
- do I need a degree? if so, which should I go for.
- is there anything else I should know?

anything is helpful, and thank you to anyone who took the time to answer!


https://redd.it/1o47by5
@r_systemadmin

Highest ROI Certs to Get? Studying while applying to places.

Just finished a BS in Cybersecurity. Currently have: A+, Net+, Sec+, CySA+, PenTest+
ISC2: SSCP Associate
Don't have experience and I know experience is king, but while I'm applying to places, I might as well work on something.
Career-wise, I want to work my way through help-desk, sysadmin and then maybe cloud computing down the road.

What are the best ROI certs for knowledge and resume?
Should I get CCNA, AWS SA, or a Microsoft cert?

https://redd.it/1o49kiv
@r_systemadmin

I was a dumb and naive contractor. I got my first "burn" out of it!

I am a 23 yr old ms365 admin consultant (contractor), and this was one of my first projects with live data and real users. I have the foresight now to realize I was not only very dumb but very naive, so lessons learned. I need the cold water splashed on me, maybe that'll whip me into shape or something. I am anonymizing the ppl and org bc its very easy to pin me down on this lmao

I need to vent and get some perspective. I just went through an insane week managing a client’s Microsoft 365 migration that turned into a full-blown corporate rescue mission. I feel betrayed and undervalued, but maybe I’m overreacting? Here’s the story.

Friday: Project Kickoff

· Received the project to migrate the KrustyKrab from a popular hosting company hosted Microsoft environment to a new, standalone tenant.

· The explicit goal: avoid data loss, especially emails and data.

· Immediately began work, spinning up the new tenant and identifying the critical first step: defederating the domain from hosting company

Saturday & Sunday:

· Worked through the weekend, attempting technical workarounds to advance the domain verification.

· Temporarily succeeded in populating users into the new tenant, proving the method was sound enough, it was exactly how I did the past migration jobs I did.

· Discovered that this hosting co's migration team does not work on weekends. All progress was automatically reverted by the hosting co's automated systems later that night.

· Realization: The project was already blocked by a third-party process outside of my control. No amount of weekend work could bypass this gatekeeper lmao

Monday: The Wait

· Formally engaged with hosting co's migration team now that it was a business day.

· The standard 5-7 business day waiting period for the domain release began, I let the owner know and got a go ahead.

Tuesday: The Catastrophe

· The client's domain and website expired mid-migration.

· The domain was snatched by a third-party, predatory domain host.

· I became the primary point of contact for the crisis, personally negotiating between the hosting co and the other company to recover the stolen digital asset. It dwindled down to HC says XYZ has it, XYZ says HC has it. I go back to HC and they're like "oh my bad ur right we have it after all, its only been x time so sure u can renew it, its gonna cost u $$$ to get it back tho"

· After intense back-and-forth, hosting co agreed to release the domain upon renewal.

· Late that night, I coordinated with the company owner to facilitate an emergency payment to renew the website domain.

· Simultaneously, I executed a Business Continuity Plan:

· Recognizing a multi-day outage was now inevitable, I used my own money ($65) to purchase a domain with the same name just different extension domain or something similar as an emergency lifeline and was told by cio that it will be reimbursed, i felt trust and did it because I didnt want downtime and needed to get things under control asap.

· I began comprehensive data preservation, exporting all user mailboxes to PST files and backing up company data to my local machine to create a guaranteed lifeboat.

Wednesday:

· I continued to work, building the temporary operational environment on the new different extension domain to ensure business continuity. all while waiting for the domain to come back to ownership but also get the ticket rolling again about a release.

Thursday:

· I built a fully functional, temporary IT environment in the new tenant to avoid downtime

· I created temporary user accounts, assigned M365 licenses, and manually restored all company email from the PST backups (which was painstaking and done one by one)

· Result: The company experienced ZERO data loss(!) and ZERO business downtime. They were fully operational on the temporary system until verification.

· I communicated clearly that this was a temporary phase. Historical Teams data would not return due to tenant limitations and we would need to get a 3rd party involved or manually