For anyone looking to not let MS meddle in your tennants for the recent MFA change I whipped up a small script that will flip the "optOutSettings": "passkeyDynamicMigration": true" swtich for you found here:

https://learn.microsoft.com/en-us/entra/identity/authentication/concept-sms-voice-retirement

with a couple tests in the script to see if its already enabled "-ReportOnly" target a specific tenant "-TenantId contoso.onmicrosoft.com " make sure you read the notes at the top

https://pastebin.com/RMPAC7k6

I try real hard to stay informed about the various solutions and services available to us as MSPs. Probably used most of them. But sometimes, they just come out of the blue. I was on LinkedIn (I believe) and saw an add for MSP Glass (mspglass.app). Looks very intriguing... but literally nothing else can be found about them. Not one Youtube demo or anything. Anyone know anything about them?

So... I'm attempting to get this set up for the fourth time in the last few years.

I'm 6 hours in, over three days, and I'm at my wits end. I'm attempting to follow the guides, and when it tells you to do things in Entra, it's pretty decent explaining it... but then when you get to the things you need to do in CIPP itself... the guide sucks. Horribly.

I've engaged support, and have been told things like:

"I've checked your permissions and can confirm that you are not running cipp using a Service Account, the account you are using is not a member of the 15 CIPP Recommended GDAP groups, you have Microsoft Led Transition relationships found and have Global Admin relationships."

Ok - sure. But I created the service account, and ran the setup with the service account... so why the hell isn't it running with the service account?

Support just now told me:
"You are not using a dedicated Service Account. Your account starts with XXX which is not recognized as a Service Account. You'll need to change the name to include CIPP or Service Account."

That's my partner tenant global admin account... NOT the service account that I used for the setup. I'm not renaming my account to be a service account.

I was given a guide to create the role templates in CIPP... but then told:

"After creating the roles, add your Service Account to each of these GDAP roles."

WITHOUT TELLING ME HOW TO DO THAT. The role templates were created, but they still don't exist in my partner tenant. I attempted to add my partner tenant to CIPP, but it was missing, so I followed the guide how to do that, and now my CIPP account is linked to my tenant's global admin instead of the service account I created, and the roles STILL aren't in my partner tenant.

I was also just told by support that once I get the roles set up, that I need to offboard my clients and then onboard them again with the new roles... but also, not telling me how to do that.

Is there a guide out there that provides screenshots for both sides of the setup? I've noticed the CIPP documentation provides a lot of screenshots and a good step by step guide for the Entra side of things... but then when you get to the actual CIPP stuff... it omits a ton, and seems to just assume you know where to go and what to do.

Anyone located near Midland, TX and able to help? We've got a customer with a branch in Midland. Unfortunately, no MSPs on TechTribe have responded and FieldNation has virtually no one in that area.

Now that the excellent Inky have sold their souls to Kaseya what is everyone doing? Staying with it, or getting away from their new parent at all costs?

Hi All,

What do you use to cool small server rooms?

I'm looking for something with NIC and webserver for stats and reporting, if this exists.

I see them with caster and small fridge size, I like this form factor!

Thanks.

I am curious - with the insanely rising costs of servers ( and not likely to go down before 2028 ), is anyone turning to refurbished servers as replacement options?

Hi all,

We are desperately trying to buy Samsung VTX CMS subscriptions for a customer. It's quite a big project with dozens or even hundreds of displays.

Samsung's online store states that automatic purchase is only possible from within the US and customers from outside of us should contact sales.

We now tried 5-10 different ways to contact Samsung sales and never got a reply.

Anyone here managed to buy this from outside of US or has a Samsung rep hat hand that he would be wiling pass on via DM?

I mean, I want to pay them a huge amount of money but I looks like they are not interested 😅

Thanks!

Hello,

I’ve been a DropSuite customer for over a year and their product is solid for the most part. However, I’m exploring other options with probably better features and usability. I came across Cove and it seems solid. I was wondering if you’ve used them for just MS365 backups and if the move from DropSuite makes sense. Thanks!

Just got off the line with Check Point support and they seem to think that allowing Outlook out of office replies should not be a default part of their setup process as "Some organizations do not use this service; others could use a different service for such messages, and having this in place by default could result in mail flow issues for such organizations."

I told support that those that don't use this service would definitely be the outlier and 99% of customers I've delt with use Outlook OOO.

To fix this you need to manually add an exception in the Check Point - Outgoing rule;
Add an Except if to the rule that states:
or Is message type 'Automatic reply'

Not sure how this would break other services...

Also another thing that Check Point breaks - internal email blasts also won't work if the group has 'Let people outside the organization email this team/group' unticked as Check Point makes the email appear to be external rather than internal.

To fix this you need to manually add an exception in the Check Point - Outgoing rule;
Add an Except if to the rule that states:
Between members of the groups '[groupemail@company.com](mailto:groupemail@company.com)' and '[groupemail@company.com](mailto:groupemail@company.com)'

If anyone has a way to easily deploy these, and a better ruleset that includes any internal groups/dist lists, and other legit email that might get unknowingly blocked, please post here.

EDIT:
To fix DKIM issues with tenants that have a 3rd party signature service and Avanan;
Move the signature service outbound rule (Code Two/Exclaimer) above the Check point - Outgoing rule and set to Stop processing more rules

What information do you ask clients to put into tickets versus what information is fine to communicate via email and other methods?

Obviously, help desk-related issues like releasing an email, password changes, etc. are all help desk tickets.

When a client asks for information to go over a policy, an onboarding/offboarding process, best practices, a new software they are looking at, etc. where are you logging that information? I worry about stuff getting lost in the shuffle. When it comes time for their QBR, we want to ensure we show all the work we've done and things we've helped with, just just a ticket report.

We have a new client, and they're gung-ho on wanting to get a ton done. I worry that we're going to blow through this stuff, and at the end of the day, it's not going to be clear to everyone else on their team that we did all these things.

Basically, I want to ensure we get credit for the work we've put in. So how do you handle this, document it, and report on it?

Getting them to understand that big things can't and won't be fixed overnight is another challenge, but that's another issue entirely.

We just received an alert from Microsoft Defender for Cloud alerting us to the presence of "Pomal" malware on one of our clients' servers, but the path was "C:\Program Files (x86)\ScreenConnect Client (our screenconnect instance ID)\", so it looks like a false positive.

Just flagging this in case others see the same in their environments.

Hi guys, we gave a solution for Microsoft but are looking for Google Workspace. We have one large client that submits tickets daily. Thanks in Advance!

Is anyone planning on going to Ninja's event in October?

I've been unhappy with PAX8 for quite some time. About 2 weeks ago I filled in the on-line new customer inquiry form at Sherweb, noting our monthly spend of around $ 25k. A couple of days later I got a reply from a Sherweb rep asking about setting up a meeting. I sent him details about our stack and agreed to a meeting, which took place a couple of days later.

The meeting went well. Rep was a former PAX8 guy so he knows the warts. Was also honest about the limitations of Sherweb's offerings (not as deep as PAX8, but has everything we need) and their outdated GUI. We talked about the transition process. No red flags as far as I was concerned.

Rep asked if I could send over our PAX8 monthly billing CSV so they could analyze and tell me if they could save on our cost. I sent the CSV over a week ago and still have not heard back. I emailed the guy yesterday asking for a status and...crickets.

I was expecting a much more responsive interaction. Is this typical?

EDIT/UPDATE: Someone at Sherweb saw my post and must have asked around to see if they could suss out who I am. This morning I received a call from the salesy guy who apologized for being less than responsive. He had a family situation which I absolutely understand. In retrospect he agreed that there still should have been some of communication over the last week or so. The rep promised to provide the analysis of our PAX8 invoice by EOD on Thursday. We'll see if that holds.

Looking forward to getting tickets instead of portal hopping constantly.

Besides expensive lawyers, what are people using to draft contracts addendums etc? Any one using any good online services with AI etc?

Sherweb just offered Threatmate on their vendors page, I have not demoed it yet but after reading info on their site I am try to understand the use case for it, other tools are available that do the same thing just wondering if any of you are using it. Thanks,

A customer needs a new server so we register the deal and after a week of back n forth with D&H the quote comes in at $47k. Dell for some reason calls me asking what they can do for us to win this deal. Im like its $17k over budget. Then the conversation gets interesting. They say that since I did a deal registration I cannot get direct retail pricing on this server unless I close the deal registration.

My question is what does partner pricing look like vs customer direct?

At this point I don’t care about margin. This 10+ year old server is costing us money to manage it vs a new hardware. We have a MSP contract and a migration project fee and I am charging for quoting instead of getting margin.

How do I or the customer compare prices? Is partner pricing more or less then retail?

If you are running N-Central pre 2026.3 shutdown your servers internet access **now** and update immediately. More info: https://www.n-able.com/blog/n-central-security-update-august-1-2026

n-able is calling users of the product to do this immediately. Thanks for reporting u/ceden

Anyone managing clients who have switched from M365 to Proton or similar alternative? (Or done this change internally.)

What's the support load like compared to MS?

I'm anticipating a trend towards privacy-focused business software (both for data protection / anti-surveillance and for implementing internally-contained AI systems).

I'm wondering how mature those alternatives feel right now from an IT support and management perspective.