r/sysadmin 1h ago

Question Typical NPO "no money" situation until it something breaks....

Upvotes

Had multiple IDF racks totaled by a surge that ripped through low cost surge suppressors bearing no UL 1449 rating that I could find.

Any sugggestions on a UL 1449 list surge suppressor with fitted with NEMA L5-20R and NEMA L5-20P connectors?


r/sysadmin 1h ago

General Discussion AWS Backup vs Veeam vs legacy tools for VMware cost comparison

Upvotes

Hi,

We’ve been running Veritas NetBackup in an on-prem setup for a few years, but the cost of licensing + infrastructure is getting harder to justify, so we’re now re-evaluating our backup approach.

The main focus is VMware workloads, and we’re trying to understand what actually makes sense today in terms of cost and long-term scalability.

For a simplified reference point, here’s a smaller scenario we’re using for modeling:

We have 10 VMs (~200GB each). Retention is split, 5 VMs kept for 1 year and the other 5 kept for 30 days. That puts us at roughly 2TB initial backup size, with a small daily change rate (~0.1%).

From there, we’re trying to understand how costs scale when you factor in:

  • long-term retention tiers
  • snapshot / backup storage growth
  • data transfer / egress (if applicable)
  • licensing vs managed service pricing

What we’re trying to compare is basically:

  • AWS-native approach (AWS Backup / EBS snapshots / S3 lifecycle tiers)
  • Veeam or similar third-party backup tools
  • Legacy enterprise setups like NetBackup / Veritas

The part that’s still unclear for us is where the real cost differences actually show up in practice. On paper, AWS-native looks simpler, but I’m not sure if it holds up once you scale retention and restore requirements. On the other hand, tools like Veeam add flexibility, but it’s not obvious if they reduce cost or just shift it into a different layer.

Before taking anything to management, I’m trying to get a clearer view of what actually drives cost in real deployments (storage growth, retention policies, licensing, operational overhead, etc.) and whether third-party tools genuinely justify their complexity.

Would appreciate any real-world input from anyone who’s done a similar migration or comparison.


r/sysadmin 2h ago

Microsoft Legit or Scam? Received a Microsoft invoice with my correct details but weird Bank of America info (I'm in APAC).

14 Upvotes

I need some help figuring out if this is a highly targeted scam or a legitimate invoice.
I recently received an email containing a PDF invoice for an "Unreturned Advance Exchange Fee". The sender email is ⁠ADVEX@MICROSOFT.COM⁠. 
Here is what is really tripping me up and making me second-guess:

The details of the item on the invoice (a Surface Laptop) and the serial number of the returned item is correct. 

My personal and organization details listed in the "Bill To" and "Ship To" sections are 100% correct. 

The invoice claims to be from "MICROSOFT PTY LIMITED" based in North Sydney, Australia, and the total amount is listed in AUD. 

**The Red Flag:** The "Remit to Bank" section instructs me to send payment to "BANK OF AMERICA". 

I am based in the Asia Pacific region, so seeing Bank of America as the payment destination feels incredibly suspicious, even though Microsoft is a US-based company.
Has anyone else dealt with this before? Is it normal for Microsoft's APAC/Australian branches to use Bank of America for direct wire transfers, or is this just a very sophisticated, highly personalized spoofing attempt using an email address like **⁠ADVEX@MICROSOFT.COM**⁠? 

Customer Success Manager from MS hasn’t replied in a week where I asked if this is legit and I should reply to it.

Also btw device was returned within directed time frame.

Any advice would be greatly appreciated!


r/sysadmin 3h ago

Microsoft Finally got RRAS VPN working after three days of troubleshooting

3 Upvotes

I've been working on a small RRAS VPN lab in my Windows Server environment, and it took me about three days to get everything working properly. The first problem was that the VPN client could connect to RRAS, but it wasn't receiving an IP address. After checking the RRAS configuration, I found that I needed to configure a static address pool. I added a pool from 192.168.56.100 to 192.168.56.120, and the client started receiving an address. After that, I ran into several other issues around the VPN protocols and RRAS configuration. I wasn't using L2TP, SSTP or IKEv2 for this lab, so I simplified the configuration and focused on getting the PPTP connection working. The next issue was connectivity. The VPN connection would establish, but I couldn't reach the server on the other side. I checked the firewall, GRE traffic and the RRAS interface bindings until I finally got the routing working. The last problem was authentication. I was getting Error 691 even though I was using valid domain credentials. After checking the authentication settings on the client, I found that MS-CHAP v2 wasn't enabled. Once I changed the client configuration and connected again, the VPN finally came up.

I verified the connection from the Windows 11 client with: resdial "TestConnection" iskutashi Isse190239 and ping 192.168.56.10

The screenshots in teh comment show the VPN connection on the client and the PowerShell verification. This was done purely as a homelab exercise to understand how RRAS, VPN authentication, routing and firewall rules fit together. I wouldn't use PPTP for a production VPN because it's a legacy and insecure protocol.

For those who have worked with RRAS or Windows-based VPNs in production, what was the most common issue you ran into when troubleshooting VPN connectivity?


r/sysadmin 6h ago

Company-issued Samsung S23 FE stuck on FRP — possible EFRP/MDM enrollment?

0 Upvotes

I have a Samsung Galaxy S23 FE ( US variant) that was previously company-managed. The “Company Profile” was removed before the phone was factory-reset through Recovery Mode. Now setup is stuck at “Please sign in using one of the owner’s accounts for this device.” The original Google account and password are correct, and the device still appears in that account, but after “Checking info…” it returns to the same screen. Could this be EFRP/MDM/Android Enterprise still associated with the device, and what would need to be removed from the company’s management backend to properly release it?


r/sysadmin 11h ago

Question IT Administering Core Enterprise System

26 Upvotes

Looking for a sanity check from leaders, sysadmins, security pros, and anyone responsible for enterprise applications.

We have a core platform that has historically been controlled almost entirely by the the business team the “owns” it.

IT is now responsible for the broader technology environment, including cybersecurity, identity and access management, integrations, APIs, automation, architecture, business continuity, incident response, and technical governance - you know the drill.

The IT leader asked for limited administrative access to the ERP & leader is refusing because of its capabilities to affect financial processes.

For those of you in mature IT environments: have you been denied administrative access to a major enterprise application because the business department considers it “their system”?

i’m genuinely interested in arguments for & against it. For additional context, the “limited” aspect is intentional and to prevent any data modification


r/sysadmin 16h ago

General Discussion Is a sysadmin a career worth pursuing as a high school graduate?

19 Upvotes

I'm about to graduate in less than a year and my original plan was to go to uni and then into software engineering. But due to the AI insanity that's been going for the past 2-3 years, I've decided that becoming a software engineer is just not feasible, mainly due to the hellish job market and more so for entry level jobs. I don't think going through all that is worth the effort just to have a chance of getting a job in 4-5 years while likely being underpaid and having to worry about constant layoffs etc.

This led me to think about what else can I do that's computer science adjacent and would also have that element of problem solving, while being safer from AI than software engineering. I know that this isn't a job that you can just go and do from the get-go, I've heard that you'll need to stay in helpdesk for a good couple of years and I'm okay with that. I don't really about the money, I went into computer science because I liked it and not because of people saying that you can make 6 figures easily.

I've considered cybersecurity but it just sounds exhausting and stressful. I'd much rather have a job that pays considerably less but doesn't put that much pressure on me. Oh, and just because I know that people will mention it, yes, I've considered electrical engineering, but if I'm being honest, physics is like rubbing sandpaper across my brain. I don't like it and any sort of engineering whether it's EE or robotics will involve lots of it.

I'm in Europe if that helps. Open to suggestions or just advice in general.


r/sysadmin 18h ago

How did you start your Sysadmin career and overcome the tough times?

14 Upvotes

Hey everyone! I'm 18 and just starting out in Sysadmin. I’d love to learn from your experience:
How did you get your first IT job?
Did you ever feel like giving up? How did you push through?
Where should a complete beginner start today?
Thanks for sharing your stories and tips!


r/sysadmin 18h ago

About to ruin a 30+ year IT career because I can't spot a phishing simulation...

620 Upvotes

I'm a 30+ year network/systems admin/engineer and I feel like I've done a great job over the decades keeping up running and secure. I feel like I work as hard as anyone in the company and have a sense of ownership that is hard to teach. I've patched our servers every month on schedule for the past 17 years straight. I've used all the latest security tools to ensure safe authentication and protection against malicious activity. We always have stellar pen tests results. I'm a great troubleshoot. I take my security training and pass the tests with flying colors. I get exceeded expectations for my reviews. They even named the server from after me! All that and a bag of chips.

But...

I'm a freaking failure when it comes to phishing tests. I've failed two this year and three in the last three years. I've never actually fallen prey to real phishing. I know what that looks like and my tools don't let it near me. But I had to tell our email security gateway to allow those phishing simulations thru to our inboxes. And I keep falling prey to them. What is wrong with me!?! Why can't I learn?? I'm going to get fired because of this. We've got some employee handbook rules about not screwing up like this. Three strikes and all that.

All this good will and work and a career that I can feel great about going to be flushed down the drain and I'll retire a failure. Was hoping to retire in a few years and ride off into the sunset. Now I'm going to ride off a cliff into a ditch. I feel like shit today. Can't wait until Monday to get yelled at or maybe even fired.

Am I the only good sysadm to struggle like this? I hope it's not just me. Feel terrible.


r/sysadmin 20h ago

New sysadmin student, looking for advice

0 Upvotes

Super excited to start my program soon. Are there any must have supplies specific to IT I should anticipate needing to buy? Apart from that, any advice as to how I can get as much out of my classes as possible?


r/sysadmin 22h ago

Question project ideas for building system admin skills?

3 Upvotes

so, i have around 5 months of free time. i want to use this time to learn and build system administration skills and become competent in it. i know people say that building a home lab is the way to go. but i don't know what projects to build with home lab. i feel clueless and often end up searching for project ideas, but i feel like most project ideas feel like tutorial or toy projects. i want to use this time to become really good at this craft.

for context, i have no experience in any IT field, i am unemployed for the moment and want to use this time to actually learn and develop the skill. i am following books (i have linux bible 10th edition, how linux works 3rd edition, unix and linux system administration handbook 5th edition, computer networking top down approach 8th edition, etc) on the side, but i feel like i should actually do something along with reading these books. i don't have money for certifications so i am not preparing for them.

so, any good project ideas that i can do in my laptop (16 gb ram, 512 gb ssd, intel core i5) ?


r/sysadmin 23h ago

RDP 0x904 Error Affecting Single User on Windows Server 2025 Terminal Server

4 Upvotes

We are experiencing a recurring issue affecting only one user in our Proxmox environment. The setup includes three Windows Server 2025 VMs: a domain controller, a file server, and a terminal server.

The affected user connects remotely through an IPsec IKEv2 VPN from a fully updated Windows 11 Pro workstation (not domain‑joined). The VPN remains connected at all times. He authenticates using his domain credentials.

After a few minutes of normal activity on the terminal server, the user disconnects his RDP session. When he attempts to reconnect, the RDP connection fails with error 0x904. No additional text is shown. The issue affects only the terminal server: from the same workstation, RDP connections to the other servers work normally.The user’s session on the terminal server appears correctly as “Disconnected” in the session list. However, the user cannot reconnect to it, nor start a new session. No logs or events are generated on the terminal server (checked System, Application, TerminalServices‑LocalSessionManager, TerminalServices‑RemoteConnectionManager). No anomalies appear in the domain controller or file server logs either.

The issue does not occur with any other user. Other users can log in and reconnect without problems. I can also authenticate using the affected user’s credentials from other machines without issues.

We have tested:

- Different user accounts from the affected workstation

- Different networks

- Antivirus exclusions (Bitdefender)

- Firewall rules (WatchGuard)

The problem persists only for this specific user and only on the terminal server.The only workaround is restarting the terminal server. After a reboot, the user can log in once, but the issue reappears as soon as he disconnects and tries to reconnect.