I was thinking very similar thoughts myself. I'm currently in the process of trying to get exim4 to send DKIM signatures and stuff, so it can talk to all its mailserver friends, and that's pretty tricksy...but at least I don't have to worry about the OS doing its own thing at random and suddenly screwing everything up!Nope, but you've reminded me why I stay a Linux admin, despite considerable Microsoft experience.
One of those days today. Spent the morning working out why Outlook, Teams and One Drive were acting like there was no internet, despite me remoting into the PC. Turns out deep within settings TLS was disabled. Like how does that happen? But at least it was fixed.
I've got another even stranger one. Like really strange. User reports his Outlook calendar isn't working and he can't create appointments in the future. You create one it appears today at the current time. If you create it in OWA it shows in the correct place, but when syncing with the desktop, same behavior, appears today at current time. Checked date, time, region settings on the PC and in Outlook. Online repair of office. Create new profile. Doesn't work.
As there's other small problems I drive to see them and reinstall windows and office. Problem persists. Create a new outlook profile on his PC with my test account which is on a different tenancy. No issues. Create a new outlook profile on my PC with his account details and the problem is there.
Sign in logs in 365 are in GMT, but noticed in Exchange that they are on PST. Bingo. Except the problem isn't affecting any other users on the tenant. WTF?
It's pretty niche, but if anyone has seen anything like this, I'd be really grateful.
Nope, but you've reminded me why I stay a Linux admin, despite considerable Microsoft experience.
I was thinking very similar thoughts myself. I'm currently in the process of trying to get exim4 to send DKIM signatures and stuff, so it can talk to all its mailserver friends, and that's pretty tricksy...but at least I don't have to worry about the OS doing its own thing at random and suddenly screwing everything up!
You made a ticket with MS in the office365 admin panel?
Pays better to right?
I guess at least with MS you just copy them from the portal and paste them to Cloudflaire. But I'm still getting my head around DMARC.
That sounds painful, but maybe worth a shot.
They just fix it fairly quickly. You just need the information they ask for.
Also you should apply for a new job ASAP as you are losing time.
Well I've been very nicely suprised by Sage a few times recently so doesn't hurt to try!
Why a new job? I mean I was looking at Indeed last night after something pissed me off, but I think I'll be in a stronger position when I've more experiance and certs.
Because you seem to have a natural talent for IT and obv you might earn more than 40-45k but it you don’t that is what your current knowledge deserves IMO anyway.
And the sooner you start looking the more likely you are to get an opportunity that suits you.
After all say there are 50 jobs advertised only one might be right for you.
You dont even need to apply just post up your current CV put salary expectations and see what comes in.
I think I said it before your average day is far more IT demanding than mine and I earn in the thirties for handing out mice.
Nah always push as much as you can to get the better role with more cash cos there’s a lot of IT guys out there being paid money for fuck all. I do count myself amongst them.
There is a catastrophic lack of initiative on my first line guys, from the bloke who asked me why a user couldn’t access anything (the machine was disabled) to the ones who’ve pushed back the azure password reset tool “because users didn’t want to give personal emails” to use it.
And that’s just been todays highlights
If you are willing to put the study in, Google things and muck about you can plough away and fake it till you make it.
They just fix it fairly quickly. You just need the information they ask for.
Also you should apply for a new job ASAP as you are losing time.
I sometimes wonder what it would have been like if I'd have ended in a role like that as opposed to here's the keys to the kingdom in the first week. SSH access to the linux servers, domain admin on windows, all the vSphere infrastructure. Try not to break anything.
Funnily enough I was just thinking about self service password resets today and how are they secured? Like if I wanted to get access to your network wouldn't it make sense to target a users home device with crappy security first and use it to reset their password to work? Or do you insist that they have MFA on the personal email before they can use it?
Theres a choice of like a dozen authentication methods in the console, you can force any two. So the insane “5 security questions” or email, or phone number.
We enforce MFA by safe ip, theoretically anyone off site or vpn should be prompted but I’ve been dropping hints that needs tightening up
So I went to do it this morning as my enquires elsewhere yielded also zero results.
It points first to us as the main contact and then to the CSP who the boss switched to buying licenses from last year. The email isn't real and their website is a portal I don't have access to and the boss is on holiday and I can't reach him (and I'm a bit embarrassed to ask about something so "simple")
Ok, I've got the test tenancy so I can have a look, I must have misunderstood. It's not as simple as if they forget their password they get a new temporary one emailed to their personal email, but another form of authentication as well?
I used to love password resets when I started, because I knew I could it and could make friendly chat with the person whilst I did as opposed to sounding stressed. It's probably helped me as much as my tech skills.
I assume that you worked for an MSP who normally buy their own licences from MS.
This should fix your issue anyway.
Time zone settings are incorrect or missing for multiple mailboxes in Microsoft 365 - Exchange
Describes an issue in which time zone settings are incorrect or missing on multiple mailboxes in Microsoft 365. Provides a resolution.learn.microsoft.com
If I understood it correctly.
ETA adjust the command to just change it for the affected user.
Yeah resets were fun but mostly on site when I did them so piece of piss.
You can set it up so it just emails with one I think but there’s options on the portal to make it strict and send the code to unlock and reset password elsewhere - just that added mfa to it.
Apparently some users are upset at putting personal details in - which is just urgh.
Yes I do, but we buy them from CSP now for most clients. My hazy understanding is that MS aren't interested anymore unless your huge, I assume there's a cost benefit to doing it this way. I bloody hope so as the portal you buy them through is a nightmare compared to just doing it through 365.
The sparse results I can find on Google all point to time zone stuff (and maybe it is), but I haven't found it yet and have tried the PowerShell. I do appreciate you looking for me though.
Good luck.
One thing I was confused about.
If you enter three different meetings in different times. Do they all appear at the same time on outlook?
Yeah, it's something I certainly will look at, along with learning more about conditional access. I've done security default for one client, but that's really easy of course, it's just dealing with the users. Some where unhappy about having to have Microsoft Authenticator on their personal phones, but it had come from their boss ,so wasn't my problem. Just after I'd finished MS decided that you could use a text instead for it. On that note I've a tiny amount of sympathy for your first line if they are the ones having to deliver the bad news to awkward users.
Thanks. Yeah, it's fucking weird. Like create an entry and instantly moves to todays date and time.
Thanks. Yeah, it's fucking weird. Like create an entry and instantly moves to todays date and time.
How does it appear in Desktop Teams?
Nuke outlook and start again clean to test it.
How does it appear in Desktop Teams?
On this I would also turn off cached mode in outlook and see how it appears as well.
Oh your TLS sounds like a policy or patch issue. Scrapped old TLS via gpo a few months ago
Disabling TLS 1.0 and 1.1 for Microsoft 365
Describes TLS 1.0 and 1.1 deprecation and disablement for Microsoft 365.learn.microsoft.com
I've reinstalled Windows and the problem persisted. FWIW it's really hard to properly nuke Outlook isn't it?
I've used a test account from a different tenant in a different Outlook profile and I don't get the problem
I even created a new profile on Outlook on my laptop and had him sign in with his details and we get the same problem.
Good question. I don't use the calendar in Teams and so didn't think to check.
I don't think that would make a difference because of what I've already tried, but will have a look.
Archive his inbox and wipe his mail from 365 and start again, reimport the pst of the old mailbox.
This is a big step though
My reasoning is that I think its a display issue. But proof is in the pudding