Pushing DNS Servers to Clients with RADIUS Vendor-Specific Attributes
How RADIUS VSAs work, how to add one in Windows NPS or FreeRADIUS to hand out DNS servers, and how to prove your VPN or NAS is actually using it.
Troubleshooting notes · Note 1 ↗EXPLORE THE NOTEBOOK
Tech.
Notes from the command line, the workbench, and the vintage computer shelf.
172published notes
Every note in Tech
Newest first · 11 / 15
CRT Shaders on the Steam Deck: Setting Up Mega Bezel in RetroArch
The RetroArch settings, install steps and preset picks for the Mega Bezel Reflection Shader on a Steam Deck, so old games get their scanlines and a glowing TV frame without tanking performance.
The emulation bench · Note 3 ↗
Microsoft Intune, Before You Enroll Anything: What It Does and What to Plan
A plain-spoken tour of what Intune actually handles, where it stops, and the identity decisions you want settled before the first device shows up.
Getting devices into Intune · Note 1 ↗
How to Enroll a Windows Device in Intune by Hand
The Settings app route into Intune, which of its three options to pick, and why the device might show up as personal when you didn't want it to.
Getting devices into Intune · Note 2 ↗
Checklist: Moving a Device from MDE Security Settings Management to Intune
A practical checklist for taking a device that gets its security policy through Defender for Endpoint and enrolling it in Intune without leaving a gap.
Getting devices into Intune · Note 7 ↗
Dell Precision T7500: A 96GB, 24TB Upgrade Plan for an Old Workstation
My upgrade plan for a dual-Xeon Dell Precision T7500, with 96GB of ECC RAM, an LSI SAS/SATA controller and two 12TB drives, plus the one cabling detail I'd double-check.
The retro workbench · Note 10 ↗
Setting DNS Client Settings on Domain Controllers with PowerShell (and Why Loopback Goes Last)
Point each domain controller at a partner DC first and itself (127.0.0.1) last, the way Microsoft recommends, across all your DCs in one pass.
Keeping Active Directory tidy · Note 7 ↗
Finding and Disabling SMBv1 Without Breaking the Scanner
Audit who still talks SMBv1 to your machines, then switch it off for good, with one script and three modes.
PowerShell craft · Note 6 ↗
Installing MS-DOS 6.22 and Windows 3.1 on a Gateway 2000 486, From Floppies
How I got MS-DOS 6.22 and Windows 3.1 onto an old Gateway 2000 486 from a stack of floppies, including the two problems that ate most of the afternoon and the config files I ended up with.
The retro workbench · Note 12 ↗
Skip Dell Boot Password Prompts During Maintenance with Password Bypass
Turn on Dell's Password Bypass so patch reboots don't sit at a power-on password prompt all night, then turn it back off when you're done.
Dell BIOS passwords, without the pain · Note 4 ↗
Patching Without Fear: Rings, Risk and a Way Back
How I think about patch risk now. Sort updates by blast radius, roll them out in rings, decide what "bad" looks like up front, and know your way back before you need it.
Windows Update, untangled · Note 1 ↗
Take Control of Explorer's Preview Pane with PowerShell
List the preview handlers installed on a PC, see which one each file type uses, and point extensions like .log, .ps1 or .json at the handler you want.
File wrangling · Note 5 ↗