Jeff @techbyjeff.net · 7hyeah im a fan of using the wyse for small services. I have a handful of 5070s running and they sip power. There are some models that have a thicker version that lets you insert a pci card like a better network board, but it isn't an actual model designation so it took a seller communication to get. 010
Jeff @techbyjeff.net · 7hIf you can afford their prices raspberry pi and minisforum are good places for new. Cheaper alternatives I like are used Wyse boxes or beelink's on discount on amazon. 110
Jeff @techbyjeff.net · 14hI said PingOne was the last identity provider I'd seed. That held for almost 24 hours. OneLogin made me rethink how a tool proves it created something before it deletes it: www.techbyjeff.net/a-role-with-... #PowerShell #OneLogintechbyjeff.netA Role With Nothing but a Name: Seeding OneLoginWhat the TestEnvironment OneLogin provider seeds, how it proves it owns a role with no description, and role grants the API accepts and never applies. 010
Jeff @techbyjeff.net · 29/09/2026everything is backed up locally, configs for iac are backed up off site in a private repo. cold storage offsite for extremely important data. restore test quarterly. 000
Jeff @techbyjeff.net · 29/09/2026The wrapper runs the Intune rules as PSScriptAnalyzer rules. Exit codes are per script type: detection non-zero = run remediation, exits other than 0/1 flagged; Win32 detection needs exit 0 + stdout; 1618 = retry is an install code the runtime harness checks but can be overridden with -ReturnCodes. 011
Jeff @techbyjeff.net · 29/09/2026It only adds rules; it doesn't mute any built-in ones. The IntuneScriptLab wrapper adds rules for exit codes or 64-bit context: exits other than 0/1, a script-scope return that eats exit 1, 32-bit redirection of HKLM/System32/Program Files. To mute a built-in: -ExcludeRule. 000
Jeff @techbyjeff.net · 29/09/2026I have been working on a new module to help validate and troubleshoot detect,remediate, and install scripts for #Intune -- including a PSScriptAnalyzer wrapper. www.powershellgallery.com/packages/Int... #PowerShell #Pester #MEM #EndpointManagement #Testing #SysAdminpowershellgallery.comIntuneScriptLab 0.25.0Test Intune scripts before Intune does: static analysis, a runtime harness, Pester assertions 350
Jeff @techbyjeff.net · 29/09/2026My first PingOne seed from Windows PowerShell produced a directory where every accented name was a question mark. From PowerShell 7, same code, same environment, every name stored perfectly. The cause belonged to all six of my providers: www.techbyjeff.net/a-directory-... #PowerShell #PingOnetechbyjeff.netA Directory Full of Question Marks: Seeding PingOneWhat the TestEnvironment PingOne provider seeds, how it proves it owns a user with no free-text field, and why a boolean attribute has to be text. 010
Jeff @techbyjeff.net · 27/09/2026Akane from oshi no ko is smarter than anyone in death note and I will die on this hill. 000
Jeff @techbyjeff.net · 26/09/2026Thanks! That's on me for not clicking your individual links. I went to the tech community post -> learn.microsoft.com/previous-ver... -> download and it says dl no longer available. Time to work on how to integrate the changes with the eval lab.learn.microsoft.comConverting VBScript to Windows PowerShell 010
Jeff @techbyjeff.net · 25/09/2026A Conditional Access policy is not an HBAC rule. An Entra role is not a sudo rule. Nothing in a cloud tenant answers the question a Linux fleet asks its directory. Seeding a FreeIPA realm with the states a review has to tell apart: www.techbyjeff.net/seeding-free... #PowerShell #FreeIPA #Linuxtechbyjeff.net 010
Jeff @techbyjeff.net · 25/09/2026Did you have to do anything different with Mac devices in your fleet or did they accept it calmly? 100
Jeff @techbyjeff.net · 25/09/2026single pve with a baremetal pbs for recovery. nothing too crazy and majority of vm's aren't backed up. 000
Jeff @techbyjeff.net · 25/09/2026A policy bound to the wrong UUID is created, returned, listed, and enforces nothing. A provider made through the API issues tokens with no claims. Seeding Authentik with the states an inventory has to tell apart: www.techbyjeff.net/seeding-auth... #PowerShell #Authentik #Homelab #SelfHostedtechbyjeff.netSeeding Authentik, Where the Directory Is Only the FloorWhat the TestEnvironment Authentik provider seeds above the directory: flows, policies, bindings, outposts, and objects that govern nothing. 030
Jeff @techbyjeff.net · 22/09/2026Never in my life have I wanted alt tab to swap between browser tabs. 000
Jeff @techbyjeff.net · 22/09/2026Just wild to me that I spent almost a grand usd and a brick wasn't included. 100
Jeff @techbyjeff.net · 22/09/2026I think we have very different ideas on a) what merits an email 2) what is popular 000
Jeff @techbyjeff.net · 22/09/2026neat I didn't know they had stuff like that. seems like it was just simulated logs sent to splunk. do they cover setting up how the logs get there in a different section? 110
Jeff @techbyjeff.net · 22/09/2026If you just want bad rows to jump out, coloring them with $PSStyle in PS7 might beat alignment. 100
Jeff @techbyjeff.net · 17/09/2026imo its the push google has done to get into schools/academia from tablets to apps. people used to a product choose that product later on. those raised on ms are being replaced 010
Jeff @techbyjeff.net · 17/09/2026ah the age old question, what happens when a 'secure my network, make no mistakes' meets a 'get me into the network, make no mistakes' 000
Jeff @techbyjeff.net · 17/09/2026Quick tip: How to hide your name and profile picture from the Windows 11 Start menu www.neowin.net/guides/quick...neowin.netQuick tip: How to hide your name and profile picture from the Windows 11 Start menuIf you want to hide your identity from Windows 11's Start menu, Microsoft has introduced a change that lets you do just that. 000
Jeff @techbyjeff.net · 16/09/2026I went back to write about my Okta provider again with better numbers and found the eight users unchanged and nearly everything around them replaced. What that means for a test lab living under a ten-user licence cap: www.techbyjeff.net/eight-okta-u... #PowerShell #Okta #IdentityManagementtechbyjeff.netEight Okta Users, and Everything That Changed Around ThemWhat a year and a six-provider merge did to TestEnvironment's Okta provider: verification, repair and cross-directory comparison under a ten-user cap. 000
Jeff @techbyjeff.net · 16/09/2026Absolutely, love the updates where it introduces something gross, changes the whole schema or even db entirely, and you can no longer roll back easily. 000
Jeff @techbyjeff.net · 16/09/2026Not your fault. Office defaults to saving into OneDrive in the cloud, so nothing lands in a folder you can browse. In Word go File, Save a Copy, This PC, and pick Downloads. Or open office.com, find the doc, hit Download. Then the upload box will actually see it. 010
Jeff @techbyjeff.net · 16/09/2026s'why I do most of my driving via graph now, that doesn't change on me so much. 000
Jeff @techbyjeff.net · 16/09/2026Boomer take of the day: ordered a new phone and wireless charger and neither came with the power supply. Back in my day... 100
Jeff @techbyjeff.net · 16/09/2026Force close app did nothing, but surprisingly a restart worked. It's always did you turn it off and on again.static.klipy.comIT Crowd: Have You Tried Turning It Off and On Again?ALT: IT Crowd: Have You Tried Turning It Off and On Again? 000
Jeff @techbyjeff.net · 16/09/2026So I went to account.microsoft.com/security and even created a passkey on that mobile device and saved to: authenticator, bitwarden, proton pass. Basically everything loops to "that username is already taken". No shit. Verified sign in with existing, not creating a new one. 100
Jeff @techbyjeff.net · 16/09/2026Setting up a new phone and mobile outlook wants a mysterious passkey for my personal ms account that doesn't exist via nfc or usb. Can't choose anything else, despite authenticator connected to the account on that phone. Guess I just don't get email on phone? 120
Jeff @techbyjeff.net · 15/09/2026From focused inbox to copilot summaries. Email inbox shouldn't be this complicated. 000
Jeff @techbyjeff.net · 15/09/2026r730 with proxmox, omv file share, windows server lab, pterodactyl for some game servers x3 wyse 5070s running authentik, freeipa and proxmox backup server rpi4 with uptime kuma and tailscale node docker containers: radarr, sonarr, seerr, tautulli, cleanuparr, huntarr, homepage, netalertx, feedcord 110
Jeff @techbyjeff.net · 14/09/2026Yeah definitely, I'm also concerned with what these IoT devices pick up on their own and are phoning back to 3rd parties to build out their profile on me. AI ratches it up an exponent though. 010
Jeff @techbyjeff.net · 14/09/2026I seed about 1,180 objects into an Entra tenant, including eleven Conditional Access policies. Not one of them can ever enforce anything, and that is not a parameter. The design, and the Graph behaviour behind it: www.techbyjeff.net/seeding-entr... #PowerShell #EntraID #Security #Identitytechbyjeff.netSeeding Entra ID When There Is Nothing to PasteHow TestEnvironment's Entra provider bootstraps its own service app, holds its objects in administrative units, and seeds policies that never enforce. 010
Jeff @techbyjeff.net · 14/09/2026The part that bites small shops is users with no smartphone and shared frontline accounts. Pull the authentication methods activity report first so you know who is still SMS only, get those people registered before anything flips, and keep your break glass accounts excluded. 000
Jeff @techbyjeff.net · 14/09/2026Sounds like a bluetooth issue over an AI thing though. Wish things didn't advertise so much, living in an apartment people are always trying to connect my samsung monitor and I can't for the life of me turn off it's advertising. 110
Jeff @techbyjeff.net · 14/09/2026I'm biased, it's my favorite on all devices. If I never have to sed or grep another thing in my life I can die happy. 000
Jeff @techbyjeff.net · 14/09/2026While being able to deploy/tear down the actual domain as code makes an easy reset/starting point. There is something to be said for having a domain that you can learn from as it updates, plus lifetime logs that can be useful. You can do the second, snapshot it, and deploy it as the first. 110
Jeff @techbyjeff.net · 14/09/2026It should be known that some of these objects may not fit in that 'known good' category. Some are misconfigured on purpose to stand out as outliers. I tried my best to configure things for all cases, but I'm sure I'll be updating it as time goes on for more edge cases. 010
Jeff @techbyjeff.net · 14/09/2026I think both have their merits depending on what your goal is. The reason I made this data module is so that it can be a baseline that is reproducible. If my other scripts/testing mess up the environment I can tear down and build out again quickly. 111
Jeff @techbyjeff.net · 13/09/2026A year ago I published a module that fills a lab domain with test users, groups and devices. The three commands from that post still work. Besides the underlying rework, added more real users that may break a script. Then and now: www.techbyjeff.net/ad-test-data... #PowerShell #ActiveDirectorytechbyjeff.netActive Directory Test Data, a Year and Six Providers LaterWhat the TestEnvironment Active Directory provider seeds, and how it tears a lab domain down, set against the standalone module it replaced. 110
Jeff @techbyjeff.net · 13/09/2026Non LotR character who could resist the One Ring:static.klipy.comSolo Leveling: Sung Jinwoo Commands 'Arise'ALT: Solo Leveling: Sung Jinwoo Commands 'Arise' 000
Jeff @techbyjeff.net · 12/09/2026I've built out a couple different modules that seed various idp's with meaningful test data to run scripts against. On the third provider I was duplicating processes. I made a centralized module that plugs in providers. www.techbyjeff.net/test-data-th... #PowerShell #Identity #AD #Entra #Oktatechbyjeff.netTest Data That Breaks Scripts on PurposeWhy a hand-built lab agrees with the script under test, and how one PowerShell module seeds five identity providers with data designed to disagree. 000
Jeff @techbyjeff.net · 12/09/2026Teaser for what the next week or so of blogs will be: www.powershellgallery.com/packages/Tes...powershellgallery.comTestEnvironment 1.0.0Seeds a realistic identity test environment in Entra ID, Active Directory, Okta, Authentik or FreeIPA - users in every lifecycle state, groups, devices and hosts, and the access policy over them - and... 010
Jeff @techbyjeff.net · 11/09/2026Does it handle the server side signature not showing in the compose window or in Sent Items? That is the complaint I get every single time a client moves off a client side tool. 100