u/gingerjackuk

Interested

Nice, where is this?

Did you manage to make any progress on this? Facing the same issue at the moment.

I love the chocolatey concept but this public repo question is what would make me uncomfortable about using for clients in a corporate environment.

In addition to what others have said, when Chrome first landed mainstream, it blew Firefox and IE out of the water for end user speed/performance, so it quickly became a favourite, and many stuck with it.

How are people choosing to handle this if they are the losing party? Normally we go with a clean cut term of relationship where possible at an agreed date, but it seems like we now might have to continue the billing relationship for far longer with clients that have moved to another provider?

Did not know that was a thing! Will definitely be giving race route a go next time. Thanks!

Yes, 7 minutes late unfortunately, so I ran around the field next to it waiting for people to move to the start line 🙂.

Got out early and completed my first ever half marathon distance run with parkrun in the middle, pretty chuffed.

Thanks to all for the tips on running in mud last week, much firmer under foot this week so no problems.

thanks for the pointers!

Thanks for the info, that is definitely helpful. For (3), how do you find the “grippy” areas? If it’s grassy/leafy/muddy/smooth mud, which are you preferring?

To the point around having an adopted practice since Windows XP; IT moves fairly fast, and best practices evolve. You are doing a disservice to your company and clients if you are not keeping those practices under regular review.

Doing something a particular way "because someone decided it was the best way 20 years ago" is not a great place to be. So having this question raised is a good opportunity to do some research and make a call based on the facts.

To the SentinelOne point specifically, as others have mentions, SentinelOne has the capability to control the Windows Firewall. As others have also said, it's perfectly fine to manage Windows Firewall directly via GPO etc, however we have found that it makes more sense to manage via SentinelOne since we are then able to have a centralised view and approach, and in general any changes will push far quicker and more reliably via SentinelOne than they will via GPO or another means. Is there any downside to managing via S1?

As the previous post mentioned, better to investigate first why it is failing so often. That’s not normal.

In terms of getting it back up and running, if it’s local consider a powershell script that starts it for example.

You will likely need additional licensing, and generally speaking there are two ways of dealing with this.

With Conditional Access policies, and SharePoint controls, it’s possible to block upload and download of files.

For a more comprehensive approach, as you mentioned you would need to leverage AIP which allows for full document rights management/protections.

Another vote for this. Solve a problem you actually have. Seems like you’re looking for a solution without explaining any problems.

Would also recommend Patrick Lencioni’s podcast - At the Table with Patrick Lencioni

In the Strava app settings, you can connect it with Apple Health. Then when you complete a run that you’ve tracked using the watch, you get a notification in Strava app with import button.

Where is this? Nice run

We are just trying Business initially as the environment is all cloud, and frustratingly there is the dependency of hybrid join for enterprise.

My provisioning was failing without that user account existing. Be sure to check AAD sign in logs (interactive and also non-interactive tabs) for any CA failures.

Also for reference I logged a ticket for my issue and it took them about 1.5 weeks for the initial response.

In case it helps someone else, this all came down to Conditional Access for me.

​

1. For the very first user that spins up a W365 in your organisation, you need to relax CA. Mainly, it's the MFA challenge that will cause the issue, but it's easiest just for the provisioning process to make sure CA is excluded for the account.

2. If the first phase is successful, the account CloudPCBRT gets created in AAD.

3. The piece that caused us issues after that, was that the CloudPCBRT account is then responsible for handling parts of the registration process when you spin up or reset a W365 machine. So whilst you can put your original user account back to normal CA policies, you need to then ensure that CA does not interfere with the operations performed (device provisioning - AADJ, Intune enrolment etc) by the CloudPCBRT account.

Are you running Conditional Access in your tenant?

Following the below, found that the account CLOUDPCBRT is missing. Case open for 24hr so far with no response.

https://docs.microsoft.com/en-us/microsoft-365/admin/setup/troubleshoot-windows-365-business?view=o365-worldwide

Per the troubleshooting it seems like we are missing the account that should’ve been created in AAD. Case logged with ms.