The UniFi gateway could resolve my Protect console's DirectConnect hostname, but Windows DNS returned NXDOMAIN. An AD-integrated conditional forwarder fixed it for both consoles.
Read the note →
win-acme couldn't renew an Exchange certificate, claiming there wasn't enough memory. There was RAM available — the useful clue turned out to be an October Windows Server update and an RPC workaround.
Read the note →
Duo was configured, the user was registered, and Entra still wanted Microsoft Authenticator. A look at the policies applying to the sign-in uncovered an easily missed difference between requiring MFA and requiring an...
Read the note →