A Maester test of mine printed System.Object[] where a sentence belonged. My README example had been wrong for two months, and 204 passing tests never piped the array once. New post: www.techbyjeff.net/piping-an-ar... #PowerShell #Pester #Maester

Your Function Accepts an Array. Piping One Is Different

A PowerShell function with ValueFromPipeline runs different code when a collection is piped than passed by parameter, and the test that catches it.

techbyjeff.net

Graph still let me create a brand new memberOf dynamic group a week before Entra stops updating all of them. I wrote a read-only PowerShell scanner to find the rest. New post: www.techbyjeff.net/find-membero... #PowerShell #EntraID #Microsoft365

Find memberOf Rules Before November 3

A read-only PowerShell module that parses Entra dynamic membership rules from an export or Graph and finds every memberOf rule before November 3.

techbyjeff.net

google sheets: a rant want to work with a local .csv? that super common thing? first, can't work on it local. save to gdrive, or you install a browser extension that associates it and kinda sorta does that for you.

Cox scored 99.94% uptime for the day my WAN port dropped to a tenth of its speed. UniFi sent no alert. The first report came from a household member who couldn't raid. New post: www.techbyjeff.net/nothing-aler... #Homelab #UniFi #UptimeKuma

Nothing Alerted When My WAN Dropped to 100 Mbps

A UniFi WAN port that negotiates down but stays up trips no alert. A read-only Python poller pushes link speed and latency verdicts into Uptime Kuma.

techbyjeff.net

My surface had the lid closed last night. Supposed to be in standby right? Apparently an update tried to push regardless (personal not mdm joined). Stuck in this screen for 30 minutes so far this morning. Great.

My qBittorrent queue limit was 9. There were 233 torrents downloading. Two settings that each sounded sensible on their own did it, and the cleanup bill was measured in terabytes. New post: www.techbyjeff.net/torrent-vm-t... #Homelab #qBittorrent #UniFi

The Torrent VM That Used 98% of My Internet

What limits a qBittorrent VM on a UniFi network: client rate caps, Smart Queues at 260/25 Mbps, a QoS throttle that no longer binds, and bufferbloat.

techbyjeff.net

Went from one TV around the dinner table to one TV in each room and a smart phone for each person. Not to mention the tablets, e-readers, and laptops/PCs.

Michael Druker 🇨🇦@mdruker.app · 6d ago

Social media loves talking about how everything is getting worse. But what’s something that you’ve seen get _better_ in your lifetime?

I'd scoped my Chrome DoH block to one PC. Then Pi-hole's log showed the bootstrap name resolving 253 times in a week from three other machines, each one about to stop using Pi-hole for good. New post: www.techbyjeff.net/every-iot-dn... #Homelab #PiHole #UniFi

Every IoT DNS Query Goes Through Pi-hole

Redirecting an IoT VLAN's DNS to Pi-hole with a UniFi destination NAT, testing it with dig, and blocking DNS over TLS and the Chrome DoH bootstrap.

techbyjeff.net

eMudhra: it wasn't us it was the HSM ok it wasn't the HSM but a code issue ok it wasn't the code it was a timing issue ok we ignored every process that warned us and pushed the wrong thing y'know what, we're done with being a CA you guys are mean

Nathan Fielder as Batman and he just keeps saying "ok" to the Joker until he fucking kills himself

Tested my IoT VLAN isolation from inside the VLAN for the first time this week. The block rule was fine. The holes were in zone pairs I'd never written a rule for. www.techbyjeff.net/isolating-th... #UniFi #Homelab

Isolating the IoT VLAN Without Losing the Printer

IoT isolation inside one UniFi zone with ordered policies, tested from a Linux network namespace on Proxmox, and an allow rule broken two ways.

techbyjeff.net

As I'm trying to learn a new programming language, AI is prevalent and prohibitive. I just searched what I'd have to import or a general question and it shows me full code telling me what it would do. I want results that show me documentation so I can learn, not pre-filled-in copy/pasta.

Don't vibe code between sets

35 million hits on one UniFi block rule, mostly from a Samsung monitor I only use as a DisplayPort input. The rest of my firewall audit was less funny. www.techbyjeff.net/what-the-uni... #UniFi #Homelab

What the UniFi Zone Firewall Migration Left Behind

Reading a UniFi zone-based firewall back through the controller API two months after migration: unnamed rules, stale IP targets and the hits column.

techbyjeff.net

CAs, PHP, and an iPhone remote vuln? What a wild week

No Google, I do not want to 'take a selfie' for additional verification after entering my password AND using my passkey.

I've been struggling to pick up a new contract after my last ended last year. If anyone has a role: #IAM, #EUC, Cloud/On-Prem Infra, #PowerShell, etc. Please let me know. Able to work remote or on-site in Las Vegas. #RecruitingHell #LookingForWork #Cloud

Learn says a tenant that hasn't used custom sign-in CSS can't start after July 21. I uploaded some to mine anyway. Graph happily took it. The sign-in page had other ideas. www.techbyjeff.net/entra-is-ret... #PowerShell #EntraID

Entra Is Retiring 58 Sign-in CSS Properties, and the First List Had 19

EntraBrandingCss reads company branding CSS from a file or Microsoft Graph and flags each property Entra stops honoring from late October 2026.

techbyjeff.net

My ARM Surface runs Windows 11 Home. I enrolled it with 27 Intune experiments assigned, and it synced eleven times without getting the agent. New post wrapping up IntuneScriptLab. I’m still deciding what my next series or module should be. www.techbyjeff.net/where-to-sta... #PowerShell #Intune

Where to Start With a Broken Intune Script

A symptom-first index to the IntuneScriptLab series, with the places Microsoft's documentation and the Intune agent part ways on real devices.

techbyjeff.net

Chunk 154 of 179 came back from my Intune lab VM with the right length and another chunk’s text. The QEMU guest agent had handed me a different command’s output. New post on the lab behind IntuneScriptLab. www.techbyjeff.net/measuring-th... #PowerShell #Intune #PVE

Measuring the Intune Agent on Three Proxmox VMs

How IntuneScriptLab's validation kit deploys Intune experiments to Proxmox VMs, probes every run, and collects device records next to Graph results.

techbyjeff.net

My Pester suite ran a broken Intune detection the way the agent does, and the test passed. The static check in the same suite failed it on line 5. New post on putting both in CI. www.techbyjeff.net/gating-intun... #PowerShell #Intune #GitHubActions #DevOps

Gating Intune Scripts in a Pull Request

How IntuneScriptLab's gate script, workflow template, SARIF export and Should-* Pester assertions fail a pull request on a broken Intune script.

techbyjeff.net

Invoke-ScriptAnalyzer -Severity Error, on a script with two Error findings from my Intune rules, returned nothing. New post on running Intune script rules inside PSScriptAnalyzer. www.techbyjeff.net/intune-rules... #PowerShell #Intune #PSScriptAnalyzer

Intune Rules Inside PSScriptAnalyzer

How IntuneScriptLab's Intune rules run as PSScriptAnalyzer custom rules: diagnostic records, the per-file cache, settings files and -Severity.

techbyjeff.net

An Intune remediation fixed the issue at 01:37. Graph heard about it at 02:42. New post on auditing the scripts already in your tenant, and on reading run states that arrive late. www.techbyjeff.net/auditing-the... #PowerShell #Intune

Auditing the Scripts Already in Your Intune Tenant

How Test-IntuneDeployedScript, Compare-IntuneDeployedScript and Get-IntuneScriptHealth check deployed scripts, git drift and device run states.

techbyjeff.net

Restart-Service on the Intune agent said it was running. Nothing had restarted, and the next check-in was an hour off. New post on reading the agent's logs as PowerShell objects. www.techbyjeff.net/reading-the-... #PowerShell #Intune

Reading the Intune Management Extension Logs as Objects

How Get-IntuneAgentLog, Get-IntuneAgentTimeline and Export-IntuneAgentDiagnostic turn the Intune agent's logs into entries, timelines and a zip.

techbyjeff.net