We exempt one single break glass account from conditional access, but still enable per user mfa on it. Just to protect us if a conditional access policy goes sideways on us
Most of them are using OneDrive/SharePoint now and some do have connections configured for their larger/consistent clients and vendors, but for so many things they rely so heavily on emailing them. I personally don't think there is a better way around it, which is why I made the post, but getting people to change the way of doing stuff after 25+ years is always an uphill battle. But man these PDFs are getting stupid large.
I don’t know the answer to your verification question off top of my head, but you’ll want to add your business domain to smtp2go verified domains so you can send mail as your business domain.
I came very close to going this direction, but I kind of have the same fear that if I get too invested, what happens if bvoips leadership pisses off the powers that be? Do they have the power to shut them down?
My dr prescribed me klonopin to take prior to coming to the office for my white coat anxiety as well as for flying and I’ve never felt so normal in my life.
Same here, which is a shame because I am a big fan. The dock issues almost have me considering other options. Their servers and NUCs have been rock solid for us however.
Idk the answer to your question, but if your ultimate goal is just to close deals and collect commission, then another option is to see about being a 1099 sales rep for another MSP in your market?
Construction lots of deals like this and they work out really well for the most part. People that want to start an MSP and then realize it's way too much work and investment in time and energy, plus it is a hard industry. They end up doing really well getting 5% of gross revenue generated from the client for life plus spiff.
Before I had staff, I had trialed daybreak virtual staffing and they did a good job of answering calls and opening tickets in syncro. They were quite trainable imo
We had huntress literally call our office and my cell like 15 min after 5 on a friday for a suspected account breach...it was a few minutes after the alert triggered (of course you can't help the MS delay in processing audit logs). All in all maybe 20 minutes real time after the sign in happened? Ended up being false positive, user was going on vacation, had phone off from home then it popped up and signed in from somewhere in central america so.
When you go in, bring in your blood pressure machine too. Some docs want to make sure that your readings are close to their readings to know if your machine is close to theirs.
I struggle with this exact situation. BP was consistently low outside the office, I’d having lightheaded spells when standing. But would he 150+/90 in office
You mention local admin twice but you don't need that. If you have domain or azure admin (depending how the workstations are joined), then you have local admin. You should be gutting and removing their local admin and using your own, if even needed, anyway. We just remove all local admins and use auto elevate if something needs access. Lastly, most RMM runs as ntauth\sys which is full admin and you could use to create more admin as needed on the fly, modify accounts, etc.
I’m going through this right now with an onboarding. The outgoing provider provided exactly zero credentials. The only thing they did do is unlock the domain and give an auth code so we can move to a new registrar.
You could pretty easily build out a table with all of the clients, and all available skus, then do a lookup to show if X client has X sku or nay, in excel or something
I do this but with clients and baseline standards/offerings. Make a cell green when you've completed it for that client; all cells green means you have everyone up and going on whatever change you were rolling out.
We're getting this for all our clients, it's a quality update. Need to jump into recovery and remove the quality update and that fixes it. We're just trying to get to the bottom of it now and figure out what changes. Not great at all! Also trying to work out if it's hitting both 10 and 11.
Clearlyip support is good, however I’ve had nothing but problems with outages or downtime for clearly cloud customers. Though I have one client who has hosted freepbx with their sip and they’re been fine.
I hear ya. Do you do all inclusive support though? I’m hesitant to quote a flat month rate for support without knowing more in depth what I’m dealing with.
Not the person you asked, but we do it similarly. We quote it based on the information we do have and explain that pricing may change after onboarding if anything unknown is discovered.
MS i believe recommends the breakglass account being exempt from CAs but we don't do it, too paranoid.
We exempt one single break glass account from conditional access, but still enable per user mfa on it. Just to protect us if a conditional access policy goes sideways on us
They won’t like the answer but it’s not emailing large files, email sharepoint/onedrive links instead
Most of them are using OneDrive/SharePoint now and some do have connections configured for their larger/consistent clients and vendors, but for so many things they rely so heavily on emailing them. I personally don't think there is a better way around it, which is why I made the post, but getting people to change the way of doing stuff after 25+ years is always an uphill battle. But man these PDFs are getting stupid large.
I agree with you on all counts.
If I use smtp2go instead of the built-in email system in Syncro, do I still need to verify a domain within Syncro? And what would that domain be?
I don’t know the answer to your verification question off top of my head, but you’ll want to add your business domain to smtp2go verified domains so you can send mail as your business domain.
Yes, that’s how we do it.
The bar is so low in our industry if you can answer the phone and actually do what you say you are doing, you are in the top 1% of MSPs out there.
It’s true. I had a customer tell me we were the best IT company they’ve ever had and I feel like all we’ve done and is always pick up the phone lol
We were talking to a rather snarky prospect and she asked some tough questions:
It’s funny because there’s some days I dwell on my competitors out MSPing me, but then I remember shit like this lol
If you like 3cx as a product and comfortable with it I recommend bvoip. We migrated our system to bvoip which we get through pax8 now. Has been great.
I came very close to going this direction, but I kind of have the same fear that if I get too invested, what happens if bvoips leadership pisses off the powers that be? Do they have the power to shut them down?
On a scale of 1 to 10; exactly how high are you right now?
Yes
Such a rotten fate. I love it too. Its not a high, its feeling fuxxing normal. Thats what not having crippling anxiety feels like. Lol
My dr prescribed me klonopin to take prior to coming to the office for my white coat anxiety as well as for flying and I’ve never felt so normal in my life.
Can’t cancel if they just keep on charging anyway
Disable your credit card. How hard can it be.
Yep
Same here, which is a shame because I am a big fan. The dock issues almost have me considering other options. Their servers and NUCs have been rock solid for us however.
I’m dealing with a dock issue as we speak actually.
I have been using wavlink dock. Amazon link
That’s actually one I’m having issues with.
Idk the answer to your question, but if your ultimate goal is just to close deals and collect commission, then another option is to see about being a 1099 sales rep for another MSP in your market?
Construction lots of deals like this and they work out really well for the most part. People that want to start an MSP and then realize it's way too much work and investment in time and energy, plus it is a hard industry. They end up doing really well getting 5% of gross revenue generated from the client for life plus spiff.
If an arrangement popped up like this for me, I’d seriously consider it.
How do we watch it on there?
I connected my laptop to tv via hdmi and streamed it that way
Before I had staff, I had trialed daybreak virtual staffing and they did a good job of answering calls and opening tickets in syncro. They were quite trainable imo
We had huntress literally call our office and my cell like 15 min after 5 on a friday for a suspected account breach...it was a few minutes after the alert triggered (of course you can't help the MS delay in processing audit logs). All in all maybe 20 minutes real time after the sign in happened? Ended up being false positive, user was going on vacation, had phone off from home then it popped up and signed in from somewhere in central america so.
Similar story for me, attempted sign in and huntress alerted within 15 minutes or so and had blocked sign in, was around 9pm on a weeknight
When you go in, bring in your blood pressure machine too. Some docs want to make sure that your readings are close to their readings to know if your machine is close to theirs.
I struggle with this exact situation. BP was consistently low outside the office, I’d having lightheaded spells when standing. But would he 150+/90 in office
Yeah, breaking the management portion of a cloud firewall is unacceptable.
In my case it keeps interrupting connection of the connected clients, are you seeing that?
Yes, in my case the firewall will not pass traffic when it is in this state.
What was your solution? Just roll back to the second most recent firmware?
We were early adopters of the 365 MDR and it’s come a long way in my opinion.
You mention local admin twice but you don't need that. If you have domain or azure admin (depending how the workstations are joined), then you have local admin. You should be gutting and removing their local admin and using your own, if even needed, anyway. We just remove all local admins and use auto elevate if something needs access. Lastly, most RMM runs as ntauth\sys which is full admin and you could use to create more admin as needed on the fly, modify accounts, etc.
I’m going through this right now with an onboarding. The outgoing provider provided exactly zero credentials. The only thing they did do is unlock the domain and give an auth code so we can move to a new registrar.
You could pretty easily build out a table with all of the clients, and all available skus, then do a lookup to show if X client has X sku or nay, in excel or something
I do this but with clients and baseline standards/offerings. Make a cell green when you've completed it for that client; all cells green means you have everyone up and going on whatever change you were rolling out.
Yep that’s exactly how we handle onboarding as well.
Did you read this?
I did not see that, but after I went back into the settings I now see it, so we should be good. Thanks
Just to make sure I understand what you’re offering. You’re wanting to offer freelance project hands to other MSPs who may need assistance?
Hello yes that is correct.
Shoot me a dm with your info and I can give you a rundown
We're getting this for all our clients, it's a quality update. Need to jump into recovery and remove the quality update and that fixes it. We're just trying to get to the bottom of it now and figure out what changes. Not great at all! Also trying to work out if it's hitting both 10 and 11.
What KB?
Clearlyip support is good, however I’ve had nothing but problems with outages or downtime for clearly cloud customers. Though I have one client who has hosted freepbx with their sip and they’re been fine.
I hear ya. Do you do all inclusive support though? I’m hesitant to quote a flat month rate for support without knowing more in depth what I’m dealing with.
Not the person you asked, but we do it similarly. We quote it based on the information we do have and explain that pricing may change after onboarding if anything unknown is discovered.