u/Thin-West-2136

We've recently had an AD audit which has reported that accounts have unconstrained Kerberos delegation.

A number of these are SQL accounts. The delegation setting has appeared due to setting an SPN on the account as follows:

contoso\SQLS0003
MSSQLSvc/server01.contoso.com,MSSQLSvc/server01.contoso.com:1433

If I want to change this to constrained delegation, do I just go into the account properties and set:

"Trust this user for delegation specific services only" Use Kerberos

And select the account itself as a delegated object?

Hi,

My patio area outside has weeds growing between the slabs. I've started to grout this using a multipurpose white mix from Wickes, but:

1. It's slow work due to mixing time and ensuring the grout is neatly pushed into the small gaps between slabs.

2. It leaves a thin white film\powder on top of the slabs, looking messy.

What are my alternatives, is there a tube of outdoor white silicon or similar I can simply use to fill the gaps and still have a nice looking finish?

https://preview.redd.it/5cn0tininxch1.png?width=955&format=png&auto=webp&s=825733f1ae436562e5f5d36317d2b55d458b1946

Hi

As a higher rate tax payer, I'm completing a self assessment to claim back tax on my sipp contributions. I'm confused and surprised by boxes 1 and 2:

1. Payments to registered pension schemes (also known as PPR) where basic rate tax relief will be claimed by your pension provider (called 'relief at source'). Enter the payments and basic rate tax:

2. Total of any 'one-off' payments to registered pension schemes included in the 'Payments to registered pension schemes where basic rate tax relief will be claimed by your pension provider' box:

I've made a few individual payments (no direct debits) into my sipp. Do I just enter the same number for both boxes at gross (e.g. £10K transferred from my account = £12,500 gross figure).

Thanks

We're going away for a few days and I need to buy my youngest a tablet to keep her entertained. My eldest (6) has an Amazon fire HD tablet 10 inch with an Amazon kids subscription.

I'm looking to buy one of the below:

Pritom Kids Tablet 7 inch - £50

Amazon fire HD 8 kids pro - £90, 8 inch screen so probably OK

Amazon fire HD 10 kids - £199, bigger screen, but seems pricey for a 3year old

I work in IT so am happy to spend a little time configuring a device if needed.

I'm not sure whether just to spend £200 and get one that should last a few years or just buy a cheap one for now and maybe upgrade in a year or so...

Any recommendations?

Hi

We have 2 entra ID tenants. One tenant (tenant A) is well managed via a Joiners, movers and leavers process, the other is not, let's call it an unmanaged tenant (tenant B). We have accounts in both tenants using shared usernames prefixes

(e.g jsmith@contoso.com matches jsmith@contoso1.com )

I want to run an automated process which checks whether a match is found between the tenants and if not, then disable the account and remove it from groups in the unmanaged tenant.

Here's my plan for dealing with this:

In Tenant A

- Create an Azure automation account and give it permissions to read the local directory

- Create a new Credential within the Automationa Account using ID and secret from of "Entra-JML" (Tenant B below)

- Create a PowerShell run book with my matching logic and actions to disable

In Tenant B

- Create a new App Registration "Entra-JML" (supported account types in any organisational directory)

- Provide "Entra - JML" with graph API permissions "User.ReadWrite.All" and "GroupMember.ReadWrite.All"

- Create a new 2 year client secret

- Note App ID, secret and tenant ID

Is this a reasonable approach? Note my organisation has no willingness to spend money or make investments in 3rd party tools to do this.