Tech by Jeff

Get-NetNeighbor: The Cmdlet You Underuse

Thu, 27 Aug 2026 20:50:32 +0000

Ping and ipconfig answer at layer 3. Get-NetNeighbor reads the Windows neighbor cache - the state machine, nine scenarios, and an audit script.

Knowing What Breaks Before You Turn Off RC4

Mon, 24 Aug 2026 21:09:56 +0000

Configuration audits show what an account may use. This module reads 4768 and 4769 events to name the clients that stop authenticating without RC4.

WMIC Is Gone. Here Is What To Use Instead

Thu, 20 Aug 2026 19:37:24 +0000

WMIC is gone from Windows 11 and no longer a Feature on Demand. The Get-CimInstance replacements, the parsing traps, and a scanner to rank the work.

Conditional Access: Outcomes, Not Verdicts

Tue, 18 Aug 2026 20:57:37 +0000

Use the Entra What If API from PowerShell to see who a Conditional Access policy actually blocks before you enable it - one verdict, not thirteen rows.

Renewing a Cert From Behind a Residential ISP

Sun, 16 Aug 2026 01:48:57 +0000

Port 80 blocked by your ISP? Switch certbot from HTTP-01 to DNS-01 for wildcard renewals, and add alerting so silent failures stop going unnoticed.

Raising the Copilot Standards to Pester 6.1

Thu, 13 Aug 2026 18:50:55 +0000

Four Pester 6.1 claims in my Copilot standards no longer hold. What changed, what the release notes missed, and one documented example that doesn't run.

Rolling my own ssh-copy-id for Windows

Mon, 10 Aug 2026 16:51:09 +0000

Windows OpenSSH ships no ssh-copy-id. A PowerShell replacement with platform detection and idempotent key copying, ending Remote-SSH password prompts.

Seeding an Okta Test Tenant When You Only Get Ten Users

Sun, 09 Aug 2026 00:24:24 +0000

Okta trial orgs cap you at ten active users. How to build a useful test lab with 8 awkward users plus the objects Okta doesn't limit. Seeds in 2 minutes.

Keeping Copilot Instructions in Sync Across Repositories

Mon, 03 Aug 2026 14:00:46 +0000

A GitHub Actions workflow that mirrors copilot-instructions.md to every repo weekly and opens a PR, so your standards don't drift out of sync.

Why Every IT Administrator Needs This Intune Browser Extension Policy Analyzer

Sun, 19 Oct 2025 20:57:05 +0000

A PowerShell analyzer that pulls Edge and Chrome extension blocklists, allowlists, and forced installs out of Intune and reports what's really applied.

Upgrading My Home Lab: From Dying Synology to NetApp JBOD with Proxmox 9

Mon, 11 Aug 2025 17:03:07 +0000

Replacing a dead Synology with a 24-bay NetApp DS4246 JBOD on Proxmox 9: HBA choice, cabling, ZFS pool layout, noise, and what I'd do differently.

Beyond Basic Secrets: Building a Universal PowerShell Secret Management Module

Thu, 07 Aug 2025 22:09:01 +0000

One PowerShell module that works with SecretStore, Azure Key Vault, AWS Secrets Manager, Bitwarden, and CredMan - same commands, any secret backend.

From Plain Text Passwords to PowerShell SecretStore: Securing Your AD Test Environment

Wed, 06 Aug 2025 14:45:05 +0000

Get service account passwords out of plain text in your Active Directory test environment using PowerShell SecretStore: setup, storage, and retrieval.

Active Directory Test Data That Doesn't Suck

Mon, 04 Aug 2025 23:25:14 +0000

A PowerShell module that populates a lab domain with 1000+ realistic users, groups, and OUs in about a minute, and cleans up after itself properly.

Testing Security Functions with Pester: A Real-World Example

Fri, 01 Aug 2025 16:00:01 +0000

A real path traversal validation function tested end to end with Pester: test patterns, edge cases, and coverage that hold up in enterprise code.

Understanding Orphaned SIDs in Active Directory

Wed, 30 Jul 2025 21:57:50 +0000

Deleted AD accounts leave SID references behind in ACLs. A PowerShell approach to finding orphaned SIDs at scale, with batching, logging, and tests.

Github

Sat, 28 Jun 2025 17:54:00 +0000

Modernizing Your Active Directory: A PowerShell Solution for Kerberos Encryption Migration

Fri, 27 Jun 2025 23:27:07 +0000

Kerberoasting thrives on RC4. How to inventory encryption types across your domain and automate the RC4 to AES migration without breaking auth.

Blue/Green Deployment for Patch Management

Wed, 18 Jun 2025 02:56:08 +0000

Applying blue/green deployment to Windows patching using PowerShell classes: zero downtime, instant rollback, and a practical use case for classes.

Transforming PowerShell Development with GitHub Copilot: Enterprise Standards and Custom Instructions

Mon, 02 Jun 2025 21:44:45 +0000

Enterprise PowerShell standards as Copilot custom instructions, so generated code matches your style, error handling, and testing rules every time.

PowerShell AST or "How I Stopped Looking for that Curly Brace"

Fri, 30 May 2025 03:34:03 +0000

Use the PowerShell AST to find unused functions, map dependencies, and navigate 1500-line scripts without hunting for a missing curly brace.

Part 3: Deploying CIS Benchmarks at Scale with Systems Manager

Tue, 27 May 2025 15:14:52 +0000

Push CIS benchmarks to hundreds of Windows servers with Systems Manager and DSC, plus CloudWatch dashboards and scheduled maintenance windows.

Part 2: Making Sure Systems Manager Actually Works and Logs Are Sent to CloudWatch

Sun, 25 May 2025 02:40:39 +0000

Why your Windows instances never appear in AWS Systems Manager, how to fix the SSM agent and IAM role, and how to get DSC logs into CloudWatch.

Part 1: Getting Started with PowerShell DSC and CIS Benchmarks in AWS

Sat, 24 May 2025 03:25:39 +0000

Start automating CIS benchmark compliance for Windows Server in AWS with PowerShell DSC: the setup, the prerequisites, and stopping config drift.

What You Should Know About Managing OneDrive in 2025

Fri, 16 May 2025 22:29:19 +0000

OneDrive administration notes from the M365 Community Conference: sync controls, retention, storage limits, and the settings most admins miss.

Migrating to Microsoft 365

Mon, 12 May 2025 17:16:22 +0000

Free trials, guided pilots, and no-cost Microsoft migration assistance for companies with 150+ licenses: what's available and how to use it.

Learning Resources

Mon, 05 May 2025 23:13:19 +0000

This a collection of resources I have leveraged.

Using an MCP agent to query Entra with natural language.

Thu, 03 Apr 2025 00:35:00 +0000

Set up the Lokka MCP server in VS Code and pull tenant data from Microsoft Graph with plain-English questions instead of hand-written Graph calls.

Remove OneDrive sites in bulk

Mon, 27 Jan 2025 19:59:20 +0000

A client wanted OneDrive gone entirely. The PowerShell cleanup to remove OneDrive personal sites in bulk without leaving orphaned data behind.

RSS feeds to Discord channel using FeedCord

Sun, 22 Dec 2024 21:37:02 +0000

Run FeedCord in Docker to push RSS headlines straight into a Discord channel: config, container setup, and a cleaner alternative to email digests.

24H2 and Recall

Wed, 23 Oct 2024 01:54:53 +0000

Get-FeatureInfo lists Recall on 24H2 machines that don't have it. What the DISM output actually means and how to check whether Recall is present.

Getting latest Windows updates in Autopilot devices

Mon, 23 Sep 2024 19:16:00 +0000

Microsoft delayed the built-in option, so here's how to patch Windows during Autopilot enrollment using a required application in Intune.

Using Entra to log into an application without SAML/OAUTH/OIDC

Fri, 20 Sep 2024 18:00:39 +0000

Password-based SSO in Entra lets you launch and sign into legacy web apps from My Apps when the app supports no modern auth protocol at all.

Setting up SSO with Entra and Proxmox (OIDC)

Wed, 18 Sep 2024 18:00:41 +0000

Configure Proxmox VE to authenticate against Microsoft Entra ID over OIDC: app registration, realm settings, and mapping users to permissions.

Setting up SSO with Entra and Portainer (OAuth)

Mon, 16 Sep 2024 18:19:09 +0000

Configure Portainer to authenticate against Microsoft Entra ID using OAuth: app registration, redirect URIs, and team mapping for your homelab.

Homepage for your Homelab

Wed, 11 Sep 2024 18:00:13 +0000

Set up the Homepage container as an at-a-glance dashboard for your self-hosted services: widgets, service discovery, and Docker configuration.

Portainer for your Homelab

Mon, 09 Sep 2024 18:00:07 +0000

A step-by-step homelab guide to Docker and Portainer, plus reaching the Portainer UI securely over Tailscale instead of exposing it to the internet.

Information for Microsoft Licenses in tenant

Fri, 06 Sep 2024 18:00:38 +0000

Use Microsoft Graph PowerShell to list every license in the tenant and who has it, including whether assignment is direct or inherited from a group.

PowerToys new Workspaces feature

Thu, 05 Sep 2024 18:00:51 +0000

A quick look at the PowerToys Workspaces feature: capturing a set of open apps and window positions and relaunching the whole layout at once.

Framework Laptop Setup Thoughts

Wed, 04 Sep 2024 18:00:16 +0000

Thoughts on setting up a new Framework laptop: assembly, driver quirks, what went smoothly, and whether the repairability trade-offs hold up.

Tailscale for Pi-hole

Mon, 02 Sep 2024 18:00:35 +0000

Use Tailscale's free tier for split DNS, HTTPS certificates, and reverse proxy access, with Pi-hole as the proof of concept for the whole setup.

About this site

Fri, 30 Aug 2024 16:20:33 +0000

This is a blog maintained by me, Jeffrey Stuhr, where I attempt to document some tech related things whether it’s in a professional aspect or at home. For work it’ll probably be Microsoft related - Azure, Entra, M365, powershell, graph, VS Code, or on-prem AD/SCCM. For home all bets are off as whimsy and shiny things attract me. Maybe someone will find this useful. Thank you!

Coming soon

Fri, 30 Aug 2024 16:20:32 +0000

Jeffrey Stuhr writes about Microsoft cloud administration, PowerShell automation, Active Directory, and homelab projects at Tech by Jeff.