The Flexbox Bug That Won't Let Your Panel Scroll: min-height: 0
Your scroll area has overflow:auto, the layout is 100vh, and the whole page scrolls anyway. Blame the automatic minimum size of flex items, and fix it with one line.
Engineering notes
Engineering.
Infrastructure, systems administration, and lessons from the day job.
12published notes
Systems, decisions, and lessons learned.
Context Implementation Lessons learnedLatest notes
Newest firstSecurity Headers on a Static Site When Your Host Won't Set Them
My brand-new blog got an F on a security header scan. Here's why, what actually matters for a static site, and the fixes that work on DigitalOcean App Platform.
The -WhatIf Trap Hiding in ForEach-Object
A dry run that quietly lies to you. Why ForEach-Object's property shorthand returns nothing under -WhatIf, and the one-line fix.
Pushing DNS Servers to Clients with RADIUS Vendor-Specific Attributes
How RADIUS VSAs work, how to add one in Windows NPS or FreeRADIUS to hand out DNS servers, and how to prove your VPN or NAS is actually using it.
Microsoft Intune, Before You Enroll Anything: What It Does and What to Plan
A plain-spoken tour of what Intune actually handles, where it stops, and the identity decisions you want settled before the first device shows up.
Getting devices into Intune · Note 1 ↗How to Enroll a Windows Device in Intune by Hand
The Settings app route into Intune, which of its three options to pick, and why the device might show up as personal when you didn't want it to.
Getting devices into Intune · Note 2 ↗Checklist: Moving a Device from MDE Security Settings Management to Intune
A practical checklist for taking a device that gets its security policy through Defender for Endpoint and enrolling it in Intune without leaving a gap.
Patching Without Fear: Rings, Risk and a Way Back
How I think about patch risk now. Sort updates by blast radius, roll them out in rings, decide what "bad" looks like up front, and know your way back before you need it.
Chasing ClientOtherError in Azure Files: Is It Your SDK or Your Code?
What ClientOtherError really counts in Azure Files metrics, how to find which calls cause it, and what to look for in the client library code making them.
Pushing Configuration Profiles to Devices That Are Already Deployed
How to build a configuration profile in Intune, roll it out to machines that are already in people's hands, and confirm it actually landed.
Defender for Endpoint vs. Intune: Who Actually Manages the Device?
Onboarding to Defender for Endpoint and enrolling in Intune are two different things, and you almost never have to offboard one to get the other.
What Get-WindowsAutopilotInfo Actually Does (and How to Use It Today)
The hardware hash script behind Windows Autopilot, explained. Upload straight to Intune with -Online, or export a CSV when the device can't reach the tenant.
Getting devices into Intune · Note 4 ↗