Do you need box.com 3rd party backup solutions

As a company with 40 employees we use box for all of our cloud file storage. They obviously have backup systems in place. Is it important to do a 3rd party backup additionally or not critical since they do offsite backup? If you would recommend what companies do this?

https://redd.it/1q1czng
@r_systemadmin

How are you dealing with enshittification of Windows 11 in the business world?

Update: Thanks, all, for the discussion. I'm glad that, in the enterprise, there are tools to escape this trend that Microsoft has taken to exploit the consumer.

On the home front, I appreciate the tips for tuning Win 11 Pro using tools such as:

https://schneegans.de/windows/unattend-generator/

to get around Microsoft's schenanigens, but I still worry that some changes could be silently reverted by a Windowsupdate. I will give it a try on a VM to see what happens.

One final thing: With some disappointment, I see that there is still a percentage of sysadmins who show hostility to those who aren't as skilled as they are. Back in my day, people like that gave us a bad name.

Maybe that's because I dared to venture into an area (this sub) I am no longer qualified to be in. Still, I would advise those who so badly want to be superior that a kinder attitude could be better. At least it worked well for me.

\---------

As a long-retired junior sysadmin, I'm curious about how you are all dealing with how Windows, especially Windows 11, has gone into the crapper lately with Microsoft's heavy-handed and relentless push to milk more money from its users.

I'm talking about things such as:

1. shoving AI down our throats
2. push towards no local accounts
3. pushing its One-Drive service via incessant notifications to backup our PC to it
4. ads in the start menu
5. mining our data and search queries/results (I'm not sure who to blame for this exactly but I suspect Microsoft has a hand in it)
6. general bloat

Due to the ending of support for Windows 10 and the perverse direction of some applications vendors to support only Windows 11, I needed to move to Windows 11.

I am trying to counter Microsoft's attempts to pretty much ruin my PC by:

1. switching to Linux where I can (primary desktop, travel laptop)
2. reducing all of the above by using Windows 11 IoT Enterprise LTSC for the few PCs that need Windows 11 (photo editing PC (Capture One doesn't work with Linux), wife's PC (TurboTax needs Win 11)).

But in the business world, you usually can't do #1 and #2 would get you into trouble with Microsoft.

How are you dealing with the state of Windows in 2026?

https://redd.it/1q1bc6o
@r_systemadmin

New Version KRBTGT Password Reset Script Released

FYI: the newest version of the KRBTGT Password Reset noscript has just been released!

Wanna try it out? Get it here: https://jorgequestforknowledge.wordpress.com/2026/01/01/powershell-noscript-to-reset-the-krbtgt-account-password-keys-for-both-rwdcs-and-rodcs-update-8/


Any feedback/comments? Please use https://github.com/zjorz/Public-AD-Scripts/issues

https://redd.it/1q1htit
@r_systemadmin

I made a game where you're the sysadmin for the Elder Gods. It's called I.T Never Ends and it's free on itch

I've been working on **I.T Never Ends**, a card-based game where you play as a long string of unfortunate system administrators and IT technicians at a megacorp that's been taken over by Lovecraftian entities after what seems to be some sort of apocalypse. The company is still running. The tickets are still coming in. HR is now a sentient hive mind, and they're very concerned about your PTO balance. I really want to share it with [r/sysadmin](https://www.reddit.com/r/sysadmin/) since, well, that's literally who the game is about.

**The premise**

You seem to be a human working at IT Corp? Your job is to resolve support tickets, except your "users" are mix of Gary from sales, Timmy the intern, Sarah the Lead Engineer and Reality-Bending Horrors and middle managers who may or may not exist in linear time. You swipe left or right on tickets, try to keep four metrics balanced (Productivity, Morale, Budget and Entropy), do minigames, performance reviews, firewall drills and IM messages with coworkers who send you unsolicited cat pics.

**Some actual tickets from the game:**

* "The printer on floor 7 is printing documents from next week. Please advise."
* "My monitor is showing me. Not my screen. Me. From behind."
* "The new hire in Accounting doesn't cast a shadow. Is this a dress code violation?"
* "I keep receiving emails from myself dated 1987. I wasn't born until 1994."
* "The hold music is speaking to me specifically. It knows things."

**Some of my favorite endings:**

* The Singleton: "The database merged everyone into one employee. You are Steve. Everyone is Steve. Steve is very productive."
* The Eternal Standup: "The team has achieved perfect alignment. They never sit. They never work. They only update. They are a monument to process over product."
* The CLI Revolution: "You realized GUIs were a mistake. The company now sells pure ASCII experiences. Revenue dropped 99%, but the purity is unmatched."
* Meeting Eternal: "You became Meeting Room B itself, trapping employees in pointless meetings for all eternity. The agenda is never ending."
* Optimized for Wellness: "HR removed everything that made you unhappy. They also removed everything that made you... you."
* Union Representative: "You became the ambassador between humans and the Vending Machine Collective. In return, no machine in any building you enter ever eats your dollar again."
* Cosmic Quack: "Joined the Cosmic Duck Fleet. IT support across the galaxy awaits. Your first ticket: the Andromeda Galaxy's WiFi is down."

**The game has:**

* 1500+ unique tickets/story cards
* 70+ different endings (from "became the Stapler King" to "transcended reality")
* Branching narrative paths involving murder mysteries, time loops, and the Archive (IT's version of purgatory)
* Minigames (because sometimes you need to defrag a possessed server)
* A cast of coworkers who are varying degrees of cursed

I'm hoping to get as much feedback and eyes on as possible before launching on Steam in May, so there's a completely free to play build on itch here:
[https://dadbodgames.itch.io/it-never-ends](https://dadbodgames.itch.io/it-never-ends)

It requires no sign up or anything like it. All I ask is that you report back somewhere if you like/hate the thing and why.

Would love to hear what you think, and if you've got any real tickets that sound like they belong in a horror game, I'm always looking for inspiration. Some of the stuff I've read on this sub is already halfway there.

https://redd.it/1q1ie6c
@r_systemadmin

Please take a freshmen level accounting course at your local community college.

From the cost center threads, to some of the usual attitudes you see in IT.
There is a complete lack of understanding as to how their organization actually functions.
Please for your own careers take a financial and managerial accounting class, the two freshmen level classes at your local community college and your career and understanding of your organization will improve.
I think the clarity gained from this will really help you all. Without some fundamental understanding expect to never be taken seriously nor to “have a seat at the table” in your organization.

Edit- Udemy, YouTube and Coursera work! But please gain some fundamental business understanding

https://redd.it/1q1jkaw
@r_systemadmin

Microsoft Defender, SentinelOne and others detecting N-ABLE N-central's 'software-scanner.exe' as malicious

https://www.reddit.com/r/cybersecurity/comments/1q1fxss/defender_just_decided_nable_is_malware_for_anyone/

https://www.reddit.com/r/msp/comments/1q1jdjg/defender_detecting_ncentral_softwarescannerexe_as/

VT submission:
https://www.virustotal.com/gui/file/aeeb08c154d8e1d765683d399f9c784f2047bac7d39190580f35c001c8fe2a17

Previously detected by Defender, no longer. Flagged by SentinelOne as well based on reports but not reflected by the VT analysis.

https://redd.it/1q1l7q8
@r_systemadmin

Windows Server patch that isn't patching...

Have a Server 2022 system whose December patch isn't fully 'patching'. By this, I mean it shows up as a list of patches in the list of installed updates, BUT it doesn't show an installation date. It shows up in other ways, but not that.

As such, ACAS scans are showing all previous patches including the December 2025 patch as not being present.

This patch has been removed and installed several times. (Reboots included between patches to the best of my knowledge.) Has anyone seen this before, if so what resolved the issue?




https://redd.it/1q1o5dc
@r_systemadmin

I need some advice on a document about the state of the state of the IT, how it was before, what I have done this year and what I have planned for 2026 as well as the authority and governance that IT needs

Hi everyone!

I have a written a document for the upper management at my company on exactly what was the state of IT was when I first came, what I have done since I am there, what supplementary budget I need for 2026 as well as the authority and governance that IT needs to function properly.


Basically:

The company needs to clearly state that every IT request must go through the ticketing systems I have put in place, but people always come to me, just for me to say to them to send a ticket.
The company needs to give IT the power to manage every software/subnoscription and to be an admin on it. For the moment there are always some subnoscriptions that I don't manage, and it is a horror to troubleshoot problems without admin access.
I have listed the project that needs to be done to secure the company properly, with their risks if it isn't implemented, the loss if a breach happens because of it, and how the C-Suite could be held accountable for it.
Other projects that would be nice to have but it is not necessary

For the moment, the CEO asked me to put a risk (1 to 9) and priority (1-9) to every project for 2026. I have given that list to him that list and normally he should come back to me next week about which et want me to implement.

The thing is, I know that this company doesn't take cyberthreat seriously; they said that they are not a big company so hackers don't target them. But for me, that is not true; every company is a target, even smaller ones. For reference, we are 32 employees for the moment.

For the moment, when the CEO comes back to me, I will ask him to sign a paper with the list of implementations that he will not implement and that he recognizes that he will take responsibility for it. For me, it is the way to show that I have clearly stated the risks that we currently have and that he takes accountability if something goes south.

So what else can I do?

https://redd.it/1q1q95v
@r_systemadmin

KQL between dates in purview

Might be better off in a Microsoft centric community but the knowledge here is pretty deep so I'm taking my changes.. Mods can remove if needed.

KQL is a somewhat logical language but when MS puts it's hands on it..
Nothing makes sense..

I need to run a query, both Purview and Defender between two dates..

So

where timestamp {TimeRange:start} AND {TimeRange:end}

would be logical but nooooo..

Any ideas?

https://redd.it/1q1t1hf
@r_systemadmin

Weekly 'I made a useful thing' Thread - January 02, 2026

There is a great deal of user-generated content out there, from noscripts and software to tutorials and videos, but we've generally tried to keep that off of the front page due to the volume and as a result of community feedback. There's also a great deal of content out there that violates our advertising/promotion rule, from noscripts and software to tutorials and videos.

We have received a number of requests for exemptions to the rule, and rather than allowing the front page to get consumed, we thought we'd try a weekly thread that allows for that kind of content. We don't have a catchy name for it yet, so please let us know if you have any ideas!

In this thread, feel free to show us your pet project, YouTube videos, blog posts, or whatever else you may have and share it with the community. Commercial advertisements, affiliate links, or links that appear to be monetization-grabs will still be removed.

https://redd.it/1q1utbi
@r_systemadmin

Anyone dealing with Start Search breaking on 24H2/25H2

Just curious on this. Fleet of approx 2k machines. All on 23H2 E, but started moving some to 24H2/25H2 E.

I've noticed that a few machines after upgrade, and even a few with a fresh image, have had the start menu search break.

It seems to be user profile specific, but I cannot for the life of me find a fix beyond re-imaging and hope it doesn't happen.

Even removing the user profiles from the device and re-adding them doesn't fix search for the specific users affected.

None of my 23H2 E installations are affected. All are domain joined locally.



https://redd.it/1q1vv1k
@r_systemadmin

Intel I210 NICs Completely Invisible on Supermicro Motherboard

I've just tried to install Proxmox on a new X11SCH-LN4F motherboard, and the network interfaces (Intel I210s) were unable to be found, and the installation failed as a result. It turns out they are completely invisible to the system. They are not listed under "Hardware" in the IPMI, and they do not show up after running `lspci`. I've tried updating the BIOS and trying the same thing on another OS by installing Debian 13. I got the same result each time, and now I have no idea what's going on.

How can I fix this? This is beyond frustrating, and I have never seen anything like this before. Has anyone had similar issues? I'd appreciate any help.

https://redd.it/1q1wo3p
@r_systemadmin

How much to be paid working emergency christmas day?

Hey all,

Got an emergency call and worked from noon Christmas day until 3am the 26th to deal with ransomware as the sysadmin. How much would you expect? Based in Midwest with a 1 year old and 4 year old while I was hosting.

Business has no real policy on what that type of pay is.

https://redd.it/1q1x712
@r_systemadmin

Scheduling Tasks and Linux

I’ve been doing this for quite some time now starting with VMS then various Unices such as Solaris, HP-UX, Tru64, Irix, and AIX. Then a mixture of Unix and Linux systems including BSD type systems such as OpenBSD and FreeBSD but mostly Red Hat and similar.

So I’m reasonably familiar with Cron.

Three jobs back was my first time in a strictly Linux environment. Still an Ubuntu and CentOS mixture (and my first official usage of Ubuntu). Previous job same thing. Current job all Ubuntu.

One difference with the current job though. The previous systems admin, who was a mixture of interesting stuff and WTF stuff (clearly not coming from an Operations type environment based on some of what he did), actually set up systemd timer tasks vs using cron.

Since there was no documentation when I got here, it’s taken several months before someone casually mentioned, “oh, the last guy set up a systemd task for this process” and I started poking around.

It’s basically a replacement for Cronjobs. This guy has a timer task that every 30 minutes runs a shell noscript. That’s all it does.

So of course, first off, create your bloody documentation or we’ll curse your name unto the 7th generation. And second, if you’re coming from Unix (or Linux if you’re used to Cron), do a check of /etc/systemd/system to see what extra bits are running.

Note to the mods, I see a Linux flair but not a Unix flair. Awwwww

https://redd.it/1q1yuy4
@r_systemadmin

CEO retired. How do you politely say "no" without burning a bridge?

The president/CEO of my company retired about 2 months ago. He's called me at least once a week since for help with his iPad, computer, personal email, etc. and now I feel like I might be personal tech support for life.

This guy founded the company I work for. His name is literally on the building. I feel like I owe the guy a lot. He's always been extremely appreciative of my work which I value more than almost anything else because it hasn't always been the case in my career. The business he built helped put a new truck in my driveway and food on my family's table for 5 years. He's approved multiple large raises and said "absolutely" without hesitation when I asked for a promotion. He's signed his name to hefty bonus checks every Christmas (some 5 figures). He's friends with all the other execs (some of whom I have done some side work for) and I will be seeing him at company social events for as long as I'm here.

Do I just bite the bullet, and accept that I'll have to help him with his shit occasionally? Or is there a point to set some boundaries? If so, how do I do so without offending him or burning any other bridges.

https://redd.it/1q207sq
@r_systemadmin

Is your AD Forest/Domain on Functional Level 2025?

If not do you have a plan to get there? Side-question, do you run Windows Server Core for AD functions?

I found it quite humerus that Azure Connect requires full GUI.

https://redd.it/1q1zs2g
@r_systemadmin

Canon multifunction unit - Scan to Email using OATH2 (Microsoft)

I'm looking at setting this up and so far am unable to do so.

The scanner will connect to smtp.office365.com over TLS and scan just fine. However, going through the instructions for setting up an enterprise app in 365 and then instructions for setting up the Canon gives me "Could not connect to the server" on the Canon.

Canon's documentation indicates to use the following URL:

In \[Microsoft Entra ID Authorization Server Endpoint\], enter the URL address of the authorization server.

https://login.microsoftonline.com/<tenant>/oath2/v2.0

In <tenant>, enter \[common\], \[consumers\], or \[organizations\] according to the usage environment of the machine.

This URL doesn't appear to be valid anymore from what I can see.

The address that the Microsoft documentation I was following was this:

https://login.microsoftonline.com/common/oath2/nativeclient

That's what I used for the redirect URI of the enterprise app, so that's what I put in the copier. However, I get the error that it can't connect to the server.

Is there a different server that's used for this than smtp.office365.com? Or is there something else that would be going wrong?

https://redd.it/1q239a2
@r_systemadmin

Dell R720, inaccessible boot device after maintenance

I recently did a maintenance to a dell r720 server. Everything went well, I applied new thermal paste to the cpu, cleaned fans etc and booted to windows without any issues. A week after the maintenance I found the server powered off (possibly due to power outage) and as I tried to boot into windows I received a bsod with stop code inaccessible boot device leading to the recovery environment after reboot.

It has an SSD raid 1 with two Samsung drives and an Hdd Raid 10 with 5 hard drives.

I have attempted the following to recover it but so far I had no luck:

1. Switched from AHCI to RAID under SATA settings in BIOS and back again

2. Confirmed UEFI boot setting

3. Replaced the CMOS battery

4. I ve run fixboot, rebuildbcd, recreated BCD from usb, DISM cleanup revertpendingactions, none of those worked

5. The raid configuration utility reports no issues and their state is optimal

I have an external drive with snapshots but I would like to avoid restoring as I am not entirely sure if it related to hardware or software.

Any suggestions?

https://redd.it/1q21b3z
@r_systemadmin

If you're asking for help, you need to make it easy to help you

If you're asking me for help, do the leg work to make completing your request easy. It's common decency and it's professional.

I can't imagine ever going to anyone for help and just dumping every aspect on that person. It's completely unprofessional. If I go to someone for help - I've gathered the information and done all pre-work so all the person I'm going to needs to do is their piece. They don't need to reach out to Johnny for information x, they don't need to coordinate y. I've already done those things.

An exec submitted a request on Christmas Eve just before I was logging off on two contractors' behalf and she needed it ready by the start of business on 1/1. I completed the request because the holiday shrunk everyone's availability and I wanted to pad time in case of anything unexpected.

I send this exec something they can literally copy and paste in an email to the contractors. It's two steps - Go here, then do y.

This exec responded today asking if I can meet with the contractors to go through the steps on Monday. Which annoyed me because it means she hadn't even emailed them yet and it's two steps. Send them the instructions I gave you, if they have questions or an issue, have them reach out... It's that easy. There's no need to schedule a meeting.

The kicker is - I agreed to meet with them on Monday and she immediately says, "Great, go ahead and schedule a meeting with them and coordinate all of the details."

These are your people and you're asking for my time... You coordinate the meeting, look at my calendar and put a time on there. Don't ask me to do every little aspect of this. Own your end...

And it's disrespectful to my time. Why did I make it a point to get it done on Christmas Eve if you weren't going to send out the information

In the end, I just emailed the contractors the instructions and told them to reach out with questions or issues and more information would come Monday on the remaining two pieces I cannot complete.

https://redd.it/1q26dkw
@r_systemadmin

Purchased a single Windows 10 Pro ESU License from CDW but can't see License. CDW says it's me.

I'm not an IT professional but I know enough to usually figure out what I need to do but I'm at a loss in this situation.

We have a Windows 10 Pro computer we want to provide ESU updates to. I created a O365 account and set up a free trial just to create the account because apparently I need an O365 to purchase a Windows 10 ESU license for a computer connected to a domain.

The CDW agent said he connected the license to my account but I can't see the license because I need to create a sub account that has access to view licensing because apparently even the admin account is blocked from seeing that? So I did that, I assigned all roles I could find related but I still can't see the license.

I came across this information while trying to figure out what to do,

"A partner or seller who assigns you a role during the contract creation process."

https://learn.microsoft.com/en-us/microsoft-365/commerce/licenses/manage-user-roles-vl?view=o365-worldwide

I'm at a loss at what to do, is it possible the CDW agent that has been helping me skipped a step in creating a role for me to view the license?

I have reached out to CDW several times and they say I need to set up an account to view the volume licensing but I'm at a loss.

Can someone with experience dealing with this tell me if I'm missing something or did CDW miss something?

https://redd.it/1q29ayn
@r_systemadmin

What’s going on with Fortinet lately? It feels like every week there’s another critical CVE..

Anyone else concerned about the recent Fortinet CVEs?

https://redd.it/1q2bl3r
@r_systemadmin