Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
GnarlyCharlie4u
Sep 23, 2007

I have an unhealthy obsession with motorcycles.

Proof
So I showed a coworker the ADMT utility and he tested it on my user account to move me from one domain to another under the same forest.
Except, he also managed to migrate every group I was a member of, including 'Domain Users' and the groups that control ERP access, file share access, VPN access (including another group for MFA) and a slew of other groups that are only slightly less important.

I've been here 8 years so I have accumulated a *lot* of security permissions.

I now have a VERY healthy respect for that tool. :stare:
I also learned a new lesson: if you link someone documentation, they absolutely will not read it.
THANK gently caress they all transferred back with no issues. Everyone who was a member of those groups is once again back in those groups. I do not think anyone noticed.

Adbot
ADBOT LOVES YOU

jaegerx
Sep 10, 2012

Maybe this post will get me on your ignore list!


GnarlyCharlie4u posted:

So I showed a coworker the ADMT utility and he tested it on my user account to move me from one domain to another under the same forest.
Except, he also managed to migrate every group I was a member of, including 'Domain Users' and the groups that control ERP access, file share access, VPN access (including another group for MFA) and a slew of other groups that are only slightly less important.

I've been here 8 years so I have accumulated a *lot* of security permissions.

I now have a VERY healthy respect for that tool. :stare:
I also learned a new lesson: if you link someone documentation, they absolutely will not read it.
THANK gently caress they all transferred back with no issues. Everyone who was a member of those groups is once again back in those groups. I do not think anyone noticed.

Do you need all those permissions? I find myself giving up as much responsibility as much as possible. No I don’t need admin access to quay. No I don’t want zendesk admin. gently caress no I don’t want google admin.

We outsourced basic IT stuff to a 3rd party and I broke azure access so they made me a o365 account. No. Those things are not the same.

E: ugh I still have Okta admin. I need to ditch that poo poo soon too.

jaegerx fucked around with this message at 23:35 on Sep 26, 2023

teethgrinder
Oct 9, 2002

LionYeti posted:

I would compile your CYA Stash, if you have one.
I'm fine. Just feel it is high-time to move on. I was hoping to use this job to move into leadership, but now I just feel I should be applying to director roles elsewhere.

Also if I leave, that would protect my team with one less salary. I have a senior where replacing me would be great for him and the team.

jaegerx
Sep 10, 2012

Maybe this post will get me on your ignore list!


Jiro posted:

After 9 months of rejection after rejection in job hunting, I got my offer letter yesterday and signed today. I finally get to start working in SOC as an Analyst, starting salary of 69k, benefits, fully remote. My birthday is tomorrow I'm not sure I could have asked for better timing.

Thank you so much to the goons that helped me out, I will be forever grateful that y'all helped in getting my foot in the door, and I look forward to working with you.

Nice work Jiro, finding a job in that valley is gotta be rough. This remote or on location down there?

Jiro
Jan 13, 2004

chin up everything sucks posted:

:yotj:

After most of a year of unemployment, I finally landed something. Orientation is remote and then I get to drive onto a military base after orientation is done. Jobs pay rate is poo poo and I'm back doing helldesk, but they put me in for clearance and I figure I can hang around for a year or so until that completes, then either go for a promotion or try for something through clearancejobs.

Congratulations! Also post/name combo is just absolutely perfect. :allears:

jaegerx posted:

Nice work Jiro, finding a job in that valley is gotta be rough. This remote or on location down there?

Fully remote. And yeah I didn't even bother looking for much down here tech related.

jaegerx
Sep 10, 2012

Maybe this post will get me on your ignore list!


Jiro posted:

Fully remote. And yeah I didn't even bother looking for much down here tech related.

You should've joined spacex, imagine Elon sending you out to pick up debris that is full of toxic chemicals.

Jiro
Jan 13, 2004

jaegerx posted:

You should've joined spacex, imagine Elon sending you out to pick up debris that is full of toxic chemicals.

There are more fun ways to get cancer, doing work for him isn't one of them. SpaceX Brownsville is apparently hard up for janitors.

jaegerx
Sep 10, 2012

Maybe this post will get me on your ignore list!


Jiro posted:

There are more fun ways to get cancer, doing work for him isn't one of them. SpaceX Brownsville is apparently hard up for janitors.

You didn't think of the lawsuit

bull3964
Nov 18, 2000

DO YOU HEAR THAT? THAT'S THE SOUND OF ME PATTING MYSELF ON THE BACK.


jaegerx posted:

You didn't think of the lawsuit

Feature of the compulsory Neuralink implant.

Adbot
ADBOT LOVES YOU

GnarlyCharlie4u
Sep 23, 2007

I have an unhealthy obsession with motorcycles.

Proof

jaegerx posted:

Do you need all those permissions? I find myself giving up as much responsibility as much as possible. No I don’t need admin access to quay. No I don’t want zendesk admin. gently caress no I don’t want google admin.

We outsourced basic IT stuff to a 3rd party and I broke azure access so they made me a o365 account. No. Those things are not the same.

E: ugh I still have Okta admin. I need to ditch that poo poo soon too.

Unfortunately I do. Moreso now than ever because I'm the only Engineer who has been here more than a year.
It's not just permissions though, it's groups and distro lists and stuff too.
I'm the only non-break-glass Enterprise Admin account in Entra if that's any indication.

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply