u/networkn

Looking for a pool hall, good tables suitable for tweens or young teens (with an adult) would be an afternoon or early evening visit.

I have struggled for over a year, to get setup in Standards and Templates the way I want to be able to work.

I've love to see how it's working well in actual practice. I think I understand the theory, but for some reason, despite spending a lot of time on it, there are things that continue to allude me, and I work best if I can adapt from a working example close to what we want.

We have 3 security plans, basic, pro, advanced.

As far as CIPP goes, we want to implement standards in 3 phases. Low, Medium, and High Impact, as the onboarding project progresses.

Some standards don't apply to some customers for a variety of reasons.

We like to proactively communicate changes to customers.

The original plan (before drift templates became a thing) was 9 Templates; Basic-Low, Basic-Med, Basic-High. Prior to putting a customer into say Basic-Low, we would send out an email, explaining what was happening. There was originally intended to be a brief(ish) meeting to discuss standards which might be problematic for the customer, or for whom a standard setting might differ from the default. The intention was, the first time an exception was made, there would be a tenant group created, named after the standard exception, any customer who wanted to opt out of a standard could be added to the group. The issue became the order of specificity, and that when a conflict existed, the date of the Group creation (or last change) was the deciding factor, potentially causing gaps we could not easily identify.

As I understand it, the correct way to do it now is Drift Templates.. Because there can be only 1 drift template per tenant, in order to move a client from Basic-Low, to Basic-Medium, we would need cumulative templates each which contained the standards from the templates below it.

It is not apparent to me if moving a tenant into a new drift template retains their prior exceptions, and if not, there is a fair amount of manual work, likely resulting in some inaccuracy and gaps.

We want this to be as simple, scaleable, and repeatable for our techs who are implementing these plans, ensuring no horrible gaps exist.

I had a MB800 which was pretty much nothing but trouble, but I love the gravity fed smokers and decided to give Masterbuilt a second chance and 8 months ago purchased the MB600. On the whole it's been fantastic, but the controller would never connect to Wifi. Originally it would find the wifi and not connect, but recently I decided to have another go, but now it will find the MB600 but when it starts to show the wifi networks, it either beeps and then shuts down after showing the firmware and model number, or doesn't shutdown but the app shows no available networks. I know there are at least 3 dedicated 2.4Ghz networks in range comfortably, to the grill. I even tried a different antenna befroe giving up and ordering a replacement controller (under warranty).

I have fitted that and am having the EXACT same two issues, except that the controller showed err 3 on screen after what I think what a 875F.

These aren't that complicated,

Any ideas?

We are doing our first deployment of KeeperMSP to a 10 person site.

We have struck an issue whereby the KeeperImport.exe requires admin permissions which the users don't have. We thought we would install keeperimport.exe via our RMM, unfortunately it's not silent, but that's OK.

The issue we are struggling with, is that the import process insists on downloading the file again, then you run the file and paste a code.

This feels clunky and likely to cause friction/support calls.

On a large scale, I can't imagine doing this, so I thought I'd ask how others are handling this?

When I compare the process to installing a new web browser where it asks if you want to import and then just click a button and it happens, it feels like this way is much harder.

Perhaps we are just missing something...

Keen to hear if we can do it more seamlessly.

Keeper has already said they are going to look into making it easier, but perhaps there is something we can do in the meantime.

We run Defender P2 and I get regular defnder notifications around Vulnerabilities which have publically disclosed exploits etc.

The issue I have with these reports, is that we run an RMM which patches us daily, and the data from these reports appears to be out of date. Furthermore there are machines in that report which haven't been active for 30 days or something, and they are 'vulnerable by default'.

I am wondering how we, without investigating every single instance of these reports, know which ones are meaningful to us. Otherwise it's just a case of the boy that cried wolf, and when the wolf actually comes....

TIA for any tips.

We have multiple IPSEC VPN dial up customer sites with SAML.

One of our clients sites, requires NAT to be turned OFF in the Forticlient profile to connect, and all the rest require it ON. Mostly it's the same or similar ISP, NAT in the Phase 1 policy on the Firewalls are set to the same on the two examples I tested, so I don't think it's that.

FortiOS 7.2.13 on a 60F for both.

Any ideas where or how I can figure out why this setting requirement differs between this site and the others?

TIA

I got a brand new 9070XT and plugged it in last night. DDU in safe mode prior and games are buttery smooth. However, on youtube, my videos (3440x1440p screen) are stuttering and jerky sometimes.

I haven't had a problem with youtube in probably 15 years, built in graphics are plenty usually. I tried changing my power profile to balanced, no dice.

It's so weird. Drivers are up to date.

Would love to get that sorted out.

We really like Tailscale but we are struggling to have our clients remain insurance compliant when the insurer asks does your remote access and VPN solutin require MFA.

With a traditional VPN, it's pretty simple, we create a conditional access policy that says with every connection, prompt for MFA.

With Tailscale, this doesn't seem possible. Once you authorise a device to the tailnet, it's pretty much authorised forever.

Is there a fix/workaround/planned development to allow for tighter MFA requirements around connections using Tailscale?

TIA

Hi. I was genuinely surprised to find there is not a dedicated foodie subreddit for Melbourne, so hopefully, this request is OK here.

I am a foodie. I have 7 days in Melbourne starting the end of next week and I haven't been on a dining expedition in Melbourne for a while.

Things I love..

Hyper Seasonal, unique or interesting restaurants. I love degustations, though this trip, I will probably only manage Vue de Monde and a really amazing Omakase. The rest will need to be in the <~100 PP price range.

I don't tend to eat Asian Food when I travel, (Japanese/Asian Fusion being an exception), as I eat a lot of that at home. My fav to date in Melbourne has been Chin Chin.

I'd love a recommendation on a next level Steak Place.

Keen to know places I shouldn't miss. I don't have a car, so a $20 uber or closer would be good from the middle of the CBD.

Is Movida still awesome? What about Taxi Kitchen? Many many years ago, it was amazing. They were one of the original degustation restaurants.

I liked Attica when I went, I'll likely skip it this time.

I love mediterrean, I'd love to find an amazing sandwich place/deli.

I love seafood.

Happy to hear about any recommendations.

I had what I thought was a straight forward easy to manage request from a client with 50 sharepoint sites in their 365 tenant.

All their sites are defaulting to Pacific Time and they want it for our Actual Region (NZ) and timezone.

Searches led me to PNP, but I am concerned using a semi third party communinity driven tool, esp since it seems to want an app registration and admin approval.

We finally found where the defaults for NEW sites are, just need to go back and change the others, ideally without manually having to do it.

I would have thought it was a case of a simple powershell script which enumerated all sites where locationID <> our location and a loop which goes through and changes it on those sites in the list?

This according to google is a known issue, however I can't see anything in release notes or a maintenance fix for it? I am wanting to raise the issue with Fortinet (who I know don't officially support the free forticlient), but presumably do resolve reproducable bugs).

Build 7.4.3.1790

TIA