/Recent content on IT AdminHugoen-usSun, 27 Sep 2026 00:00:00 +0000/posts/post-9/Sun, 27 Sep 2026 00:00:00 +0000/posts/post-9/<p>Guests themselves don&rsquo;t need P1 assigned, but the policy won&rsquo;t do anything until the tenant has P1 active for its own members.</p> <p>Enforcement is currently soft, not hard. Microsoft doesn&rsquo;t technically block Conditional Access from working if you&rsquo;re short on licenses — Entra ID processes connections that require multifactor authentication no matter if the account has a premium license — but Microsoft has started surfacing warnings about it: tenants are now seeing informational messages in the Entra admin center flagging that some Conditional Access policies are protecting more users than their current licensing entitlements allow, though this is not a precursor to billing and there&rsquo;s no automated enforcement yet.</p>/posts/post-7/Sun, 27 Sep 2026 00:00:00 +0000/posts/post-7/<p>A lot of Microsoft 365 &ldquo;security&rdquo; starts with an upsell: Defender for Office 365, Entra ID P1, P2, the Worksuite. But a large share of the highest-impact hardening is already included in the subscription you pay for — it&rsquo;s just switched off by default. This post is a practical, no-extra-cost checklist: what&rsquo;s free, what it actually does, and the commands to verify it.</p> <p>Companion reading: <a href="/blog/post-6/">PowerShell + Microsoft Graph — Connection &amp; Command Reference</a> covers the PowerShell/Graph setup used in the verification commands below.</p>/posts/post-8/Sun, 27 Sep 2026 00:00:00 +0000/posts/post-8/<p>If your fleet is more than one machine, it&rsquo;s probably more than one distro. Mine is: Ubuntu LTS boxes, Debian, Fedora, and — the interesting one — XCP-ng hypervisors. The goal is simple: one control node, a handful of playbooks, and the ability to answer two questions at any time: <em>what updates are pending?</em> and <em>are these hosts fully patched?</em></p> <p>This post builds the whole system from zero. Every file and command is copy-pasteable. The hostnames and IPs below are made up — swap in your own. At the end there&rsquo;s a list of the quirks that actually cost me debugging time, so you can skip my detours.</p>/posts/post-6/Sun, 27 Sep 2026 00:00:00 +0000/posts/post-6/<p>A practical reference for connecting PowerShell to Exchange Online and Microsoft Graph from Linux (Fedora), plus the exact commands used during the SUSF admin MFA registration and legacy auth hardening project.</p> <hr> <h2 id="one-time-setup-on-fedora">One-Time Setup on Fedora</h2> <h3 id="install-powershell-7">Install PowerShell 7</h3> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>sudo dnf install powershell </span></span></code></pre></div><p>If not in Fedora&rsquo;s repos, add Microsoft&rsquo;s repo first:</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>sudo rpm --import https://packages.microsoft.com/keys/microsoft.asc </span></span><span style="display:flex;"><span>curl -sSL -o /etc/yum.repos.d/microsoft.repo https://packages.microsoft.com/config/rhel/9/prod.repo </span></span><span style="display:flex;"><span>sudo dnf install powershell </span></span></code></pre></div><h3 id="launch-powershell">Launch PowerShell</h3> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>pwsh </span></span></code></pre></div><h3 id="trust-psgallery-first-run-only">Trust PSGallery (First Run Only)</h3> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-powershell" data-lang="powershell"><span style="display:flex;"><span>Set-PSRepository -Name PSGallery -InstallationPolicy Trusted </span></span></code></pre></div><hr> <h2 id="connecting-to-exchange-online">Connecting to Exchange Online</h2> <h3 id="install-module-once">Install module (once)</h3> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-powershell" data-lang="powershell"><span style="display:flex;"><span>Install-Module -Name ExchangeOnlineManagement -Scope CurrentUser </span></span></code></pre></div><h3 id="connect">Connect</h3> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-powershell" data-lang="powershell"><span style="display:flex;"><span>Import-Module ExchangeOnlineManagement </span></span><span style="display:flex;"><span>Connect-ExchangeOnline -UserPrincipalName itadmin@yourdomain.onmicrosoft.com </span></span></code></pre></div><p>Uses a browser/device-code sign-in flow.</p>/posts/post-1/Mon, 04 Apr 2022 05:00:00 +0000/posts/post-1/<p>Nemo vel ad consectetur namut rutrum ex, venenatis sollicitudin urna. Aliquam erat volutpat. Integer eu ipsum sem. Ut bibendum lacus vestibulum maximus suscipit. Quisque vitae nibh iaculis neque blandit euismod.</p> <p>Lorem ipsum dolor sit amet consectetur adipisicing elit. Nemo vel ad consectetur ut aperiam. Itaque eligendi natus aperiam? Excepturi repellendus consequatur quibusdam optio expedita praesentium est adipisci dolorem ut eius!</p> <h2 id="creative-design">Creative Design</h2> <p>Nam ut rutrum ex, venenatis sollicitudin urna. Aliquam erat volutpat. Integer eu ipsum sem. Ut bibendum lacus vestibulum maximus suscipit. Quisque vitae nibh iaculis neque blandit euismod.</p>/posts/post-2/Mon, 04 Apr 2022 05:00:00 +0000/posts/post-2/<p>Nemo vel ad consectetur namut rutrum ex, venenatis sollicitudin urna. Aliquam erat volutpat. Integer eu ipsum sem. Ut bibendum lacus vestibulum maximus suscipit. Quisque vitae nibh iaculis neque blandit euismod.</p> <p>Lorem ipsum dolor sit amet consectetur adipisicing elit. Nemo vel ad consectetur ut aperiam. Itaque eligendi natus aperiam? Excepturi repellendus consequatur quibusdam optio expedita praesentium est adipisci dolorem ut eius!</p> <h2 id="creative-design">Creative Design</h2> <p>Nam ut rutrum ex, venenatis sollicitudin urna. Aliquam erat volutpat. Integer eu ipsum sem. Ut bibendum lacus vestibulum maximus suscipit. Quisque vitae nibh iaculis neque blandit euismod.</p>/posts/post-3/Mon, 04 Apr 2022 05:00:00 +0000/posts/post-3/<p>Nemo vel ad consectetur namut rutrum ex, venenatis sollicitudin urna. Aliquam erat volutpat. Integer eu ipsum sem. Ut bibendum lacus vestibulum maximus suscipit. Quisque vitae nibh iaculis neque blandit euismod.</p> <p>Lorem ipsum dolor sit amet consectetur adipisicing elit. Nemo vel ad consectetur ut aperiam. Itaque eligendi natus aperiam? Excepturi repellendus consequatur quibusdam optio expedita praesentium est adipisci dolorem ut eius!</p> <h2 id="creative-design">Creative Design</h2> <p>Nam ut rutrum ex, venenatis sollicitudin urna. Aliquam erat volutpat. Integer eu ipsum sem. Ut bibendum lacus vestibulum maximus suscipit. Quisque vitae nibh iaculis neque blandit euismod.</p>/posts/post-4/Mon, 04 Apr 2022 05:00:00 +0000/posts/post-4/<p>Nemo vel ad consectetur namut rutrum ex, venenatis sollicitudin urna. Aliquam erat volutpat. Integer eu ipsum sem. Ut bibendum lacus vestibulum maximus suscipit. Quisque vitae nibh iaculis neque blandit euismod.</p> <p>Lorem ipsum dolor sit amet consectetur adipisicing elit. Nemo vel ad consectetur ut aperiam. Itaque eligendi natus aperiam? Excepturi repellendus consequatur quibusdam optio expedita praesentium est adipisci dolorem ut eius!</p> <h2 id="creative-design">Creative Design</h2> <p>Nam ut rutrum ex, venenatis sollicitudin urna. Aliquam erat volutpat. Integer eu ipsum sem. Ut bibendum lacus vestibulum maximus suscipit. Quisque vitae nibh iaculis neque blandit euismod.</p>/posts/post-5/Mon, 04 Apr 2022 05:00:00 +0000/posts/post-5/<h1 id="n8n-setup">n8n Setup</h1> <blockquote> <p>Created: 2026-06-02 | Status: Running (systemd managed)</p></blockquote> <h2 id="overview">Overview</h2> <p>n8n workflow automation server deployed on Fedora workstation via Podman, managed by systemd for auto-start on boot.</p> <h2 id="access">Access</h2> <table> <thead> <tr> <th>Item</th> <th>Value</th> </tr> </thead> <tbody> <tr> <td>URL</td> <td><code>http://192.168.75.16:8081</code></td> </tr> <tr> <td>Version</td> <td>2.22.6</td> </tr> <tr> <td>Image</td> <td><code>docker.io/n8nio/n8n:latest</code></td> </tr> </tbody> </table> <h2 id="container-details">Container Details</h2> <table> <thead> <tr> <th>Item</th> <th>Value</th> </tr> </thead> <tbody> <tr> <td>Container name</td> <td><code>n8n</code></td> </tr> <tr> <td>Port mapping</td> <td><code>192.168.75.16:8081</code> -&gt; <code>5678</code> (LAN-only)</td> </tr> <tr> <td>Data directory</td> <td><code>/home/itadmin/projects/n8n/data</code></td> </tr> <tr> <td>Running as</td> <td>Root (<code>sudo podman</code>)</td> </tr> <tr> <td>Timezone</td> <td>Australia/Sydney</td> </tr> </tbody> </table> <h2 id="systemd-service">Systemd Service</h2> <p>Auto-start managed by systemd service file.</p> <table> <thead> <tr> <th>Item</th> <th>Value</th> </tr> </thead> <tbody> <tr> <td>Unit file</td> <td><code>/etc/systemd/system/n8n.service</code></td> </tr> <tr> <td>Local copy</td> <td><code>/home/itadmin/projects/n8n/n8n.service</code></td> </tr> <tr> <td>State</td> <td><code>enabled</code> (starts on boot)</td> </tr> <tr> <td>Restart policy</td> <td><code>on-failure</code></td> </tr> </tbody> </table> <h3 id="management-commands">Management Commands</h3> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>sudo systemctl status n8n.service </span></span><span style="display:flex;"><span>sudo systemctl restart n8n.service </span></span><span style="display:flex;"><span>sudo systemctl stop n8n.service </span></span><span style="display:flex;"><span>journalctl -u n8n.service -f <span style="color:#75715e"># live logs</span> </span></span></code></pre></div><h2 id="environment-variables">Environment Variables</h2> <table> <thead> <tr> <th>Variable</th> <th>Value</th> </tr> </thead> <tbody> <tr> <td><code>N8N_HOST</code></td> <td><code>192.168.75.16</code></td> </tr> <tr> <td><code>N8N_PROTOCOL</code></td> <td><code>http</code></td> </tr> <tr> <td><code>N8N_LISTEN_ADDRESS</code></td> <td><code>0.0.0.0</code></td> </tr> <tr> <td><code>N8N_SECURE_COOKIE</code></td> <td><code>false</code> (LAN-only, no TLS)</td> </tr> <tr> <td><code>TZ</code></td> <td><code>Australia/Sydney</code></td> </tr> <tr> <td><code>GENERIC_TIMEZONE</code></td> <td><code>Australia/Sydney</code></td> </tr> </tbody> </table> <h2 id="authentication">Authentication</h2> <p>n8n v2.x uses built-in user management (no Basic Auth middleware). Create an owner account through the web UI on first login. API access requires an API key generated in Settings.</p>/pages/privacy-policy/Mon, 01 Jan 0001 00:00:00 +0000/pages/privacy-policy/<h4 id="responsibility-of-contributors">Responsibility of Contributors</h4> <p>Lorem ipsum dolor sit amet, consectetur adipiscing elit. Purus, donec nunc eros, ullamcorper id feugiat quisque aliquam sagittis. Sem turpis sed viverra massa gravida pharetra. Non dui dolor potenti eu dignissim fusce. Ultrices amet, in curabitur a arcu a lectus morbi id. Iaculis erat sagittis in tortor cursus. Molestie urna eu tortor, erat scelerisque eget. Nunc hendrerit sed interdum lacus. Lorem quis viverra sed</p> <p>pretium, aliquam sit. Praesent elementum magna amet, tincidunt eros, nibh in leo. Malesuada purus, lacus, at aliquam suspendisse tempus. Quis tempus amet, velit nascetur sollicitudin. At sollicitudin eget amet in. Eu velit nascetur sollicitudin erhdfvssfvrgss eget viverra nec elementum. Lacus, facilisis tristique lectus in.</p>