Title card: Renewing a Cert From Behind a Residential ISP

Renewing a Cert From Behind a Residential ISP

A service’s cert I don’t use much had expired. Turns out certbot had been failing twice a day for months and nothing said a word. Port 80 is blocked on my home line, so HTTP-01 was never an option. Wrote up the fix, and hand rolled some alerting.

Title card: Raising the Copilot Standards to Pester 6.1

Raising the Copilot Standards to Pester 6.1

Pester 6.1 shipped, so I checked my Copilot standards against an install instead of the release notes. Four claims no longer held. Two aren’t in the announcement at all, and one example from the release notes doesn’t actually run.

Title card: Rolling my own ssh-copy-id for Windows

Rolling my own ssh-copy-id for Windows

Windows OpenSSH ships everything except ssh-copy-id. VS Code Remote-SSH kept asking for my password, and the documented fix is macOS/Linux only. So I built one: platform detection, idempotent installs, real verification.

Title card: Seeding an Okta Test Tenant When You Only Get Ten Users

Seeding an Okta Test Tenant When You Only Get Ten Users

A fresh Okta trial org is empty. The license caps you at ten active users, so I built a lab where 8 awkward users plus everything Okta doesn’t cap does the work. Seeds in 2 min, tears down safely.

Title card: Keeping Copilot Instructions in Sync Across Repositories

Keeping Copilot Instructions in Sync Across Repositories

Updated my PowerShell Copilot Standards repo and realized every other project was still on the old instruction copies. So I built a GitHub Actions workflow that mirrors them weekly and opens a PR when they drift.

Title card: Why Every IT Administrator Needs This Intune Browser Extension Policy Analyzer

Why Every IT Administrator Needs This Intune Browser Extension Policy Analyzer

Browser extension policy in Intune is spread across blocklists, allowlists and forced installs, and nothing shows you the combined result. So I wrote an analyzer that does.

Title card: Upgrading My Home Lab: From Dying Synology to NetApp JBOD with Proxmox 9

Upgrading My Home Lab: From Dying Synology to NetApp JBOD with Proxmox 9

My Synology’s RAID controller died, so I replaced it with a 24-bay NetApp DS4246 JBOD running under Proxmox 9. HBA choice, cabling, ZFS pool layout, noise, and what I would do differently.

Title card: Beyond Basic Secrets: Building a Universal PowerShell Secret Management Module

Beyond Basic Secrets: Building a Universal PowerShell Secret Management Module

One PowerShell module that talks to SecretStore, Azure Key Vault, AWS Secrets Manager, Bitwarden and CredMan through the same commands, so hybrid environments stop needing five different scripts.

Title card: From Plain Text Passwords to PowerShell SecretStore: Securing Your AD Test Environment

From Plain Text Passwords to PowerShell SecretStore: Securing Your AD Test Environment

My AD test environment module still had service account passwords sitting in plain text. This adds PowerShell SecretStore for setup, storage and retrieval, without making the lab harder to spin up.

Title card: Active Directory Test Data That Doesn't Suck

Active Directory Test Data That Doesn't Suck

A PowerShell module that fills a lab domain with a thousand-plus realistic users, groups and OUs in about a minute, and tears them back down cleanly when you are done.