r/sysadmin • • 3m ago

General Discussion Three months of running internal IT with an AI agent: about 20% of my week is still real work

• Upvotes

I'm the only internal IT person at a company of about 165 people (M365, Intune, around 55 SaaS tools), and for the last three months I've run most of the daily work through a self-hosted AI agent that's wired into our stack via MCP.

It does the read-only digging on every ticket, prepares onboarding, offboarding and license changes, and answers plain how-to and hardware questions directly. Anything that changes a system still waits for my explicit yes, and that's enforced in the agent harness, not just in the prompt.

My rough estimate is that about 20% of my week is still real work, the rest is reviewing and saying yes or no. Curious if anyone else here runs something similar, and where you draw the line on what an agent may do without approval.


r/sysadmin • • 22m ago

Question Dell PowerEdge R610 – iDRAC6 has an IP address but is completely unreachable. Is the controller faulty?

• Upvotes

Hi everyone,

I recently bought a used Dell PowerEdge R610 and have been trying to get the iDRAC6 remote management working, but after like 2 hours of trial and error I'm running out of ideas.

iDRAC6 is enabled and obtains an IP address via DHCP. It currently shows an address in my local network but I cannot access it through a browser or ping it.

I have also configured the Lifecycle Controller through the Unified Server Configurator (USC). Its network interface has a separate IP address, and that address responds to ping successfully. However, this does not help me access the iDRAC6 web interface.

Things I've already tried:

- Enabled and disabled DHCP and checked the iDRAC network settings.

- Tried the available NIC selection modes: Shared, Shared with Failover LOM 2, and Shared with Failover All LOMs.

- Connected network cables to all four onboard Ethernet ports.

- Disabled VLAN.

- Performed a complete power drain by disconnecting both power supplies and holding the power button for at least 10 seconds.

- Reset the iDRAC configuration to factory defaults, but the attempt failed with “Failed to reset to default values.”

- Initially, the server displayed “iDRAC6 not responding. Rebooting.” After the power drain, that particular error stopped appearing.

- The Lifecycle Controller can now retrieve the iDRAC configuration, and the iDRAC displays an IP address, but I still cannot reach it.

I also noticed a BIOS battery warning in the system event log, although I'm not sure whether that is related.

My questions:

  1. Does this sound like a failed iDRAC6 controller, or could it still be a firmware or network configuration issue?

  2. Is there a reliable way to recover or reflash the iDRAC6 firmware on an R610?

  3. Is there anything else I should check before assuming the hardware is faulty?

I'd really appreciate any suggestions. I've tried quite a few things already, and I'm not sure what to do next.

Thanks!


r/sysadmin • • 1h ago

Question What tool do you use to validate/burn in brand new servers?

• Upvotes

Received three bare metal servers recently and the manufacturer self test tools keep crashing after half a day of running.

It's been a while since I had my own usb for testing servers so what live bootable or otherwise do you normally use to automatically perform testing?

Manufacturer of said equipment is of no help.


r/sysadmin • • 1h ago

Microsoft Open MS Office files in Office Online with a simple double click - NOW POSSIBLE!

• Upvotes

I dug around the internet for a solution and couldn't find anything worth diving into. Even the one "paid" solution (Files App) that I read might be able to do it, didn't seem like it could when I tested it and it also would be a pain to deploy at any scale but your own computer.

So I did what any developer minded IT person would do and dug through open source solutions, still nothing but one for the completely wrong OS (https://github.com/bewithdhanu/office-online-bridge-macos). This project gave me the idea to try porting the same work around to Windows. I sort of did it. Basically the same idea but used the existing "View Online" function from the context menu and wrote a PowerShell script to execute it. The script was then improved with an exe wrapper to make it more user friendly.

I am pretty surprised this solution hasn't been made before, but here it is now!

https://github.com/Fireant456/M365-Bridge

It is bundled with an installer that can be deployed silently. Only requirement (at the moment) is that your files you are attempting to open must be in a OneDrive synced folder. If they are not an error will tell you they need to be. I might work to add automatic handling of uploading files to a temporary OneDrive directory and writeback to the original location in order to seamlessly handle non-synced file editing, but I don't require that in my use case. Happy to take pull requests if anyone wants to give it a shot.

Would love any feedback. Enjoy!


r/sysadmin • • 3h ago

Situation: Choosing between 2 IT jobs

0 Upvotes

Job A: IT Specialist, $35/hr
Contract, 6+ months. The recruiter was vague about extension ("there's a possibility"), with no specifics.
Hands-on tech work supporting Macs and Windows (I did a similar role for 7 months and enjoyed it)
Would sometimes have to travel to a client site about 1.5 hours each way, and I'd pay for the transit pass myself. The recruiter was vague on how often.
Other days at an office in my city, which I'm fine with
First told I'd be the only technician, then told someone else is there too. Still unclear who covers when I'm absent.
1-hour technical interview, and a polished, client-facing environment (VIP/white-glove support)
**Job B: Service Desk, $29/hr**
Close to home, short commute
Recruiter confirmed it becomes permanent after 6 months
Likely less stressful, and it's the type of work I'm used to
Lower ceiling, and I'm not excited about service desk long-term
**The trade-off:** About $1,000 more per month and better career experience (Job A) vs. confirmed stability, a short commute, and less stress (Job B).
**My questions:**
Which would you take?
How much weight should I give a vague "possibility of extension" from a recruiter?
Is vague communication about travel frequency a red flag, or normal for contract roles

Also. Help desk job is hybrid


r/sysadmin • • 3h ago

Need help with authentication design

1 Upvotes

I have created smallstep + keycloak.
So i thought I could create keycloak for handling SSO to our users through oidc and that I could use smallstep to generate shortlived certs for users so they can ssh to any server without having to create an user account. I have realised thats not the case with smallstep

I need to create an ldap directory but the thing is I have introduced 2 servers already that needs to be maintained and now I need to add an openldap server + ldapaccount manager server + sssd. So I do not have to create 50 users everytime I add an server.

Should I have just used AD? Feels like my design is bad.


r/sysadmin • • 4h ago

Anyone gotten a B300 Lead Time from SuperMicro in the last 30 days?

1 Upvotes

Trying to get clarity from the source because I’m getting figures all over the place.


r/sysadmin • • 4h ago

Testing

0 Upvotes

Test


r/sysadmin • • 6h ago

Inspect your memory carefully. Customs border inspection destroyed 14 x 64GB ECC memory modules with a box cutter.

250 Upvotes

The cut a hole into the box with a box cutter, deep enough to go through the cardboard, through the plastic memory tray, and scored the pins on 14 modules in a tray of 25. Thankfully they didn't "inspect" the other two memory trays. 56/68 modules survived the trip.

https://imgur.com/a/1XerHh0


r/sysadmin • • 6h ago

The startup internal tool trap

1 Upvotes

We had a working inventory management setup at my last company, built on Airtable. Did the job for about a year and a half. Our ops lead decided we needed "full control" because it was getting expensive, so we spent three months having a contractor build a custom version. Within six weeks of launch, the warehouse guys were back to texting stock counts to the ops lead because the tool double-counted returns and nobody trusted it. We quietly went back to a paid setup.

Then this year, different job, same conversation. We're about 40 people, paying for inventory management, a CRM and support tools, and the idea was to replace the whole lot with one app. Inventory first, then sales and support, all working with the same data instead of moving things between systems.

This time the argument was "we can build it with Codex." Which, honestly, sounded reasonable to me too. Fewer subscriptions, no upgrading Airtable plans because we'd hit a record limit, and we could change things ourselves instead of waiting on a vendor. I just didn't want to repeat the warehouse situation.

Then we started listing what this thing actually needed. Warehouse staff should be able to update stock without seeing everything sales can see. Support needs customer history, but probably shouldn't be able to change every field in it. Someone needs to know who changed a number when it looks wrong. Then there's SSO, removing access when people leave, and checking that the permissions actually hold up outside whatever buttons we've hidden in the UI.

Suddenly we're discussing how to build and test our own permissions system before we've even replaced the inventory tool. Codex might help us write it, but somebody still has to check it, maintain it and deal with the consequences when it's wrong. None of that was in the original "look how much we'll save on subscriptions" conversation.

So I started looking at databases and app builders that already had those pieces together. We wanted one place to build our own workflows, with permissions, audit logs and login handled, rather than another project just to make the first project safe to use.

We ended up deciding to try Jet Admin because it connects to Airtable and has permissions, audit logs and SSO built in. We can start with the data we already have, test the inventory workflow, and work out the database move separately. Obviously, keeping Airtable underneath doesn't make its bill disappear. But it lets us try the app before moving everything and committing sales and support to it too.

Now we're back to considering a paid platform after starting this whole thing to get rid of paid platforms. I'm fine with that if it saves us months of rebuilding the boring stuff. I just wish we'd included that work in the comparison from the beginning.

Has anyone actually managed to replace inventory, CRM and support with one in-house app? Where did you draw the line between building it yourselves and paying for the parts you didn't want to maintain?


r/sysadmin • • 11h ago

Anyone Switch from MaaS360 to InTune?

6 Upvotes

Not sure if this is allowed, but we currently use MaaS360 to manage iOS devices. It is expensive and the support stinks. Otherwise, it works for us.

I have been thinking about moving to InTune for a few different reasons. Cost - for us, InTune would be about 50% cheaper, and to have things on one platform.

Wondering if anyone else out there has made this switch and, if so, do you regret it or have any suggestions?

It is hard to really compare platforms. I am going to try a trial but that is going to take some effort to get up and going.

Thanks,


r/sysadmin • • 14h ago

Question KB5127648 causing “Someone else is still using this PC” message

24 Upvotes

Anyone else getting reports from users on Windows 11 24H2 Enterprise that after getting this month’s cumulative update, whenever they restart or shutdown, they get presented with the message below?

“Someone else is still using this PC. If you restart now, they could lose unsaved work.”

We’ve confirmed that there are no other users on these laptops and I am able to reproduce it too.

Uninstalling KB5127648, the message goes away. Reinstalling it makes it come back.

We are advising users to ignore it, but the false positive message is definitely making people feel uneasy.

I’m curious if anyone has some insights and are seeing the same thing in their environment. Thanks!


r/sysadmin • • 15h ago

Anyone else having trouble with Lenovo servers?

7 Upvotes

I haven't really seen any posts about this but it seems to be affecting a lot new servers we've deployed over the last couple of years. I have a feeling I'm going to be spending the rest of my day dispatching Lenovo hardware techs.

https://datacentersupport.lenovo.com/us/en/products/servers/thinksystem/sr250v3/7dcl/7dclcto1ww/jz018e0b/solutions/tt4152


r/sysadmin • • 16h ago

Question Zebra EU RED

2 Upvotes

We have several Zebra printers at our company. We’re based in Europe, and due to legal requirements, all logs are disabled by default and must be enabled using a script. We’ve set up our script so that everything is enabled and Protected Mode is disabled.

The problem is that the first printer has different passwords than all the others. So my question is, is this a problem? Will I ever need the passwords I set again once I’ve opened all the protocolls?


r/sysadmin • • 17h ago

If, Cisco [or insert your vendor here] releases a 9.8 CVE, nobody panics, because it's all 'part of the plan.' But when I say that Fortinet has one, well then everyone loses their minds!" -Joker who works in InfoSec

180 Upvotes

Disclaimer: The goal of this post is not to bring the pitchforks out and talk about CyberSecurity vendors and their security based on CVEs. No, I do not think Cisco is an insecure company and I do think they are doing a great thing for the community by being up front, disclosing and fixing vulnerabilities discovered in their products.

This is in direct reference to the following post in r/sysadmin about 2 weeks ago:

https://www.reddit.com/r/sysadmin/comments/1wwlgqq/todays_reminder_that_every_security_appliance_is/

You will notice in this post that I made one of the top comments to bring awareness to the lack of attention that is given to CVEs when it is a non-Fortinet product. Well, it just happened again.

Cisco released a 9.8 CVE for their Secure Mail appliance on October 14. The details are available at the following link:
http://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp

The content in this is important but irrelevant to my point. In the release of this vulnerability, there are only 4 mentions (by my search of "CVE-2026-76519") of this:

https://www.reddit.com/search/?q=%22CVE-2026-76519%22&cId=3d232678-6f60-4ffb-940a-de3665695be1&iId=6d9cd08d-e00c-46e4-bae4-638f39723fe0

If you do a search of the FortiMail CVE, you will see there are 17 mentions.

https://www.reddit.com/search/?q=%22CVE-2026-104286%22&cId=0e04f247-a490-4114-a405-b6ccfac473ce&iId=fd67515e-4b1e-44cd-bc8f-a4bc68fb59f2

And within some of these posts, you will see the "insecure CVE brigade" coming in force.

Now I know some time has elapsed over the results of this search, but they all happened within 4 days of each other while the vast majority of these mentions happened within 2 days (the same time period was this Cisco search).

All that being said, my point is that it is very interesting that the same level of coverage is not being extended even when on paper, the two vulnerabilities being compared look very similar. Also, you would think it is more coverage worthy when a second critical CVE was found in the same product within the same month.

Putting on my tin foil hat, I will say, I believe there are other powers at work (besides just the goal of sharing information) to target certain vendors for whatever reason to paint them in a worse off light than others.

However, the important piece in all of this, is to reiterate that the companies who are transparent about CVEs and actually fix them, are the ones who deserve the trust of protecting the digital assets we need to secure.

Thank you for coming to my TED talk.


r/sysadmin • • 18h ago

Threat notice BeyondTrust

24 Upvotes

Sharing a critical threat notice for those using BeyondTrust. It's a critical improper origin validation vulnerability in Remote Support that has been confirmed as actively exploited by a suspected China-nexus nation-state threat actor, ARMORY CASTLE since August 2026. Here's their advisory for reference BeyondTrust Advisory: https://www.beyondtrust.com/trust-center/security-advisories/bt26-05


r/sysadmin • • 18h ago

Question Is Trusted Tech a Too good to be true situation?

11 Upvotes

Can someone let me know why trusted tech is so cheap and if they’re legit? Wondering if this is a too good to be true situation or if its actually good. 

Not trying to talk bad or good about them, just legit wondering. My grandpa always said “If its too good to be true, it’s a lie!” And I aint tryna get lied to lol. Thanks for any help given in advance, I know I can look up reviews but Reddit is my best friend


r/sysadmin • • 18h ago

Skykick Breach Immediate action required

175 Upvotes

EDIT: More Skykick enterprise apps being exploited https://www.reddit.com/r/sysadmin/s/M6iilUpoJl

Skykick, the SAAS backup and migration tool now owned by Connectwise (May be called Connectwise Cloud backup) has been breached and active exfil of tenant data is ongoing, disable the Entra enterprise application immediately and check your logs for the IP here. Check for skykick access from previous MSPs.

https://www.reddit.com/r/msp/s/ieagdCmOBb

The IP in your logs doesn't necessarily mean exfil has started as they seem to be mass scanning tenants presumably for high value targets but exfil has been confirmed already in some tenants.

IP: 144.172.64.128

APP ID: 506e08f9-6e9a-4da4-942b-a099a03644ae

Other skykick app IDs are below (there are more than listed below so do a manual check), no reports of access on these but threat hunt. Check the APP ID and not the Object ID on the enterprise app.

2399d300-6fca-4e6a-a686-399fefe75b83 fc2bedd5-450f-4d3c-a2e5-96d2465574d6 ccd0fb86-b4b4-48f1-a3c4-28bd1baeae6e 7441fd5e-1d54-4465-8e18-8f5208c48256 0de14c77-b9b0-4137-9360-34878a929827 2568dd75-4f97-46c4-9235-ff6bcb68557c

This one is also skykick but not mentioned in the title. "0365 Backup Self Service - Customer Access" 59c003ad-130e-4c4c-9796-f0c13cbd7952

Report of suspicious activity with the app making changes to permissions 2 days ago, see comments on the Reddit link above

Keep an eye on activity for activity related to any CW app to be safe.

Legal is involved as they say no backup data was accessed - because they accessed your live data directly. Disingenuous. https://www.connectwise.com/company/trust/advisories


r/sysadmin • • 19h ago

Am I Getting Fucked Friday, October 16th, 2026

16 Upvotes

Brought to you by r/sysadmin Trusted VAR: u/SquizzOC with Trusted Telecom Broker u/Each1Teach1x27 and u/Necessary_Time Trusted VAR in Canada

Happy to answer in the thread or via PM if you don't want to post details like service locations publicly.

This BI-WEEKLY thread is here for you to discuss vendor and service provider expectations, pricing, and quotes for network services, licensing, support, deployment, and hardware.  

Required Info for accurate answers:

• ⁠Part Number
• ⁠Manufacturer/vendor
• ⁠Service Type and Service Location (DM Service Location)
• ⁠Quantity (as applicable)

All questions are welcome regarding:

• ⁠Cloud services, security, configurations, deployment, management, and migrations
• ⁠Storage vendor options, alternatives, details,
• ⁠Software licensing: This includes Microsoft CSPs
• ⁠Connectivity, single-site, and multi-location. DIA, Broadband, 5G, datacenter connectivity, site serviceability checks for fiber/broadband
• ⁠Voice services, SIP, UCaaS, Contact Center, POTS (Analog line) replacement
• ⁠Network infrastructure - overlay software, segmentation, routers, switches, load balancing, APs
• ⁠Security, access management, firewalls, MFA, cloud DNS, layer 7 services, antivirus, email, DLP


r/sysadmin • • 21h ago

Alternatives to EfficientIP SOLIDserver for ISP DNS/IPAM with Anycast?

5 Upvotes

We've been using EfficientIP SOLIDserver for over 20 years. EfficientIP recently informed us that support for our perpetual licenses will end in August 2027. Their replacement subscription quote triples our annual cost (a 200% increase), with no protection against further increases at renewal.

We're evaluating alternatives and would appreciate recommendations from others with similar environments.

Our requirements include:

  • Recursive and authoritative DNS with geographically distributed BGP anycast (currently three nodes, expanding to five).
  • IPv4/IPv6 IPAM, including customer allocations and reverse DNS management.
  • Self-hosted deployment on our own infrastructure.
  • Reliable commercial support, strong APIs, and predictable long-term licensing costs.

We're considering Micetro, PowerDNS with NetBox, and BIND/Unbound-based solutions, but are open to other options.

Has anyone migrated away from SOLIDserver or operated these alternatives in an ISP anycast environment? Particularly interested in reliability, IPAM integration, migration experience, and ongoing costs.

Appreciate any firsthand experience or recommendations.


r/sysadmin • • 21h ago

New onboarding

0 Upvotes

I have got a 6 week contract with a company that is turning this into a full time position if everything goes well. My first task is to onboard a client, I have 20 years experience and have migrated from a MSP to internal support but never a msp client. Is this a difficult task, any insights, or anything to help me with this first project? I have the know how and I believe I can do it just the first time :)


r/sysadmin • • 23h ago

Claude for Intune iOS mobile app now available!

0 Upvotes

r/sysadmin • • 1d ago

Question - Solved Did KB5127648 (Win 11 25H2) break RSAT for anyone else or am I special?

18 Upvotes

Basically the title - nobody in my small team can use RSAT tools (any of them, from ADUC to WSUS) on their management workstations immediately after the 2026-10 CU reboot. I'm just wondering if it is something we're doing in combination with network security or if it was just another F-U from MS.


r/sysadmin • • 1d ago

Microsoft D’un coup Windows bloque les impression

0 Upvotes

Bonjour, aujourd’hui, les pc du domaine ne veulent plus imprimer sur un copieur récemment installé sur le réseau mais fonctionnel depuis environ 15 jours. Windows réclame d’installer le pilote mais à besoin des identifiants admin.

C’est moi l’admin du domaine, j’ai rien touché depuis l’installation. Bien sûr ça arrive quand je ne suis pas sur place… j’ai zieuté le serveur d’impression, c’est bien le pilote que j’avais installé qui est configuré sur le copieur.

Une idée ?

Merci !


r/sysadmin • • 1d ago

Akamai EAA / GPA Client failing Device Posture check ("No configuration found for Device Posture")

0 Upvotes

Hey everyone,

Running into a frustrating issue with the Akamai Guardicore Platform Agent (GPA / EAA client) on macOS.

Whenever I authenticate via our IdP (whr.login.go.akamai-access.com), the client authenticates successfully, but the Quick Test in Diagnostics fails at the Configuration Check stage with this exact error:

"Access - No configuration found for Device Posture - User needs to login to a Device Posture enabled IdP"

Because of this, my application list remains blank and internal routing to specific subnets fails. I've tried resetting authentication, force-syncing client config, checking macOS local network permissions, and switching the default browser to Chrome, but the posture token/profile still won't seed.

Has anyone run into this specific device posture block on macOS? Is this strictly an MDM/EPMS policy assignment issue on the Akamai control center side, or is there a local cache file I need to clear?

Any tips would be greatly appreciated!