SysAdmin Weekly

Epizódy

• 051 - What's Actually in Our Homelabs (and Why) 03.07.2026 1h 27min

  The hardest part of running a home lab in 2026 is not building it up; it is being honest about what earns its place.Andy is joined by returning guest and member of the SysAdmin Weekly community, Clay Tamam, a working SysAdmin over in the Netherlands, for a real tour of what is actually sitting in their labs: the hardware, the hypervisors, the services they use every day, and the reasoning behind each choice. Andy explains why he tore a four-node Kubernetes cluster down to five VMs on a single Debian box, Clay walks through building a rack from scratch on a practical budget, and both of them dig into what current memory and hardware prices are doing to the hobby. It closes with the Graveyard: the gear and services that got powered off, and why pruning is an important part of the discipline.## Chapters00:00:00 - Welcome and a Returning Guest: Clay from the Netherlands00:07:20 - News React: A US Firm's Bid for the Dutch DigiD Infrastructure00:15:21 - News React: An AI-Assisted Hack Hits US Festival Ticketing00:18:11 - Nerd Hour: Scoping AI Agents and Building a Lab From Scratch00:24:29 - Main Topic: What Is Actually in Our Home Labs00:25:15 - The Hardware: Andy's Pared-Down Single-Box Lab00:31:25 - The Hardware: Clay's From-Scratch Rack Build00:45:52 - The Foundation: KVM vs. Proxmox00:56:33 - The Services That Earn Their Keep01:02:37 - Self-Hosting, the Plex Price Hike, and Leaving Discord01:13:57 - Learning Goals and the Graveyard01:24:19 - Local Inference and the Urge to Panic-Buy01:25:49 - Wrap-Up## Resources / Show Notes- Wired - Researcher used Claude to break Front Gate Tickets: https://www.wired.com/story/claude-helped-a-hacker-find-a-way-to-issue-tickets-to-almost-every-us-music-festival/- NL Times - Netherlands blocks the US takeover of DigiD operator Solvinity: https://nltimes.nl/2026/05/26/netherlands-blocks-us-takeover-digid-operator-solvinity-security-concerns- Security Now with Steve Gibson: https://www.grc.com/securitynow.htm- Proxmox Virtual Environment and Backup Server: https://www.proxmox.com- Forgejo, the self-hosted Git forge (Gitea fork): https://forgejo.org- Tailscale, the overlay mesh VPN: https://tailscale.com- Foundry Virtual Tabletop: https://foundryvtt.com- Plex - New Lifetime Plex Pass pricing: https://www.plex.tv/blog/new-lifetime-plex-pass-pricing/- Jellyfin, the free software media system: https://jellyfin.org- Vaultwarden, a self-hosted Bitwarden-compatible server: https://github.com/dani-garcia/vaultwarden- Framework Desktop: https://frame.work/desktop- Connect with Clay on LinkedIn: https://www.linkedin.com/in/clay-tamam-00b6441b3/- AndyOnTech: https://www.andyontech.com
• 050 - How Do You Run a Blameless Incident Postmortem? 26.06.2026 1h 1min

  A postmortem that ends with a name instead of a root cause wasted everyone's time in the room.Andy and Eric Siron pull from a combined several-decades of incident reviews to break down what a postmortem actually is, what kind of outage earns one, and who really needs to be at the table. The throughline: keep it blameless without making it unaccountable, separate root cause from contributing factors, and remember that the follow-through is the entire point. Whether your postmortem is sixty people in a war room or just you writing a summary for one nervous boss, the discipline scales.## CHAPTERS00:00:00 - Why Postmortems Matter00:01:31 - Welcome and Show Plugs00:04:29 - News React: AI Job Hype Walkbacks, Teams Pain, Oracle Layoffs, AMD Trust00:17:42 - News React: Ubiquiti UniFi OS Max-Severity RCE CVEs00:19:41 - Nerd Hour: Claude Code, Hugo, and Pandoc00:23:36 - The Incident Postmortem Process00:26:40 - What Actually Earns a Postmortem00:29:22 - Who Needs To Be In the Room00:38:49 - Blameless, Not Unaccountable00:46:50 - What Information To Gather00:50:33 - Running the Review00:55:15 - Follow Through Is the Whole Point## RESOURCES / SHOW NOTES- SysAdmin Weekly home and show links: https://www.sysadminweekly.com- SysAdmin Weekly companion newsletter: https://newsletter.sysadminweekly.com- AndyOnTech: https://www.andyontech.com- Project Runspace: https://www.projectrunspace.org- BleepingComputer - Ubiquiti patches three max-severity UniFi OS RCE flaws (CVE-2026-34908, CVE-2026-34909, CVE-2026-34910): https://www.bleepingcomputer.com/news/security/ubiquiti-patches-three-max-severity-unifi-os-vulnerabilities/- Postmortem markdown template (free, CC BY 4.0, version-tracked in the show repo): https://github.com/ProjectRunspace/sysadmin-weekly/blob/main/resources/postmortem_markdown_process_template.md- Pandoc, universal document converter (Markdown to docx): https://pandoc.org- Hugo, the Markdown-driven static site generator: https://gohugo.io
• 049 - How Do Attackers Use Local LLMs to Phish At Scale? 19.06.2026 1h 2min

  Ask Claude or ChatGPT to write a phishing email and it politely refuses; pull the right open-weight model onto your own laptop and that refusal layer simply does not exist in many cases.Andy brings his InfoSecurity Europe session to the show, and Eric Siron joins to walk through how threat actors run local LLMs on their own hardware to generate targeted spear phishing at scale, in any language, with no internet connection and no guardrails. The guys break down what the attack workflow actually looks like, why these capabilities never disappear once a model is downloaded, and where the real defensive line sits. Spoiler: "spot the typo" awareness training is dead, and verification culture plus strong email authentication is what carries the load now.## Chapters:00:00:00 - Cold Open: Local LLMs and Phishing at Scale00:01:37 - Welcome Back and InfoSecurity Europe00:03:55 - News React: Washington Pumps the Brakes on Fable00:06:46 - News React: NY Ghost Gun Printing Law and Google AI Liability00:12:07 - Nerd Hour: Camera Gear and Mac Studio Dreams00:13:27 - Nerd Hour: Building the InfoSec Demo00:15:55 - Show Plugs and Community Links00:17:00 - Main Topic: What Local LLMs Actually Are00:21:23 - The Guardrail Gap: Cloud Refuses, Local Complies00:26:55 - The Demo: 15 Tailored Spear Phishing Lures in 90 Seconds00:30:04 - Why These Capabilities Never Go Away00:32:59 - AI on the Defensive Side00:39:01 - Voice Cloning, Deepfakes, and SPF for Phones00:46:20 - The Low-Tech Deepfake Defense00:47:26 - Why Spot-the-Typo Training Is Dead00:50:09 - Verification Culture and Email Authentication00:54:32 - Common Questions: Legality, Detection, and Adoption01:00:18 - Wrap Up: Stay Safe Out There## Resources / Show Notes:- Ollama, the easiest way to run open models locally: https://ollama.com- Hugging Face, open repository of machine learning models: https://huggingface.co- OpenCode, terminal coding agent that runs against local models: https://opencode.ai- Evilginx, reverse-proxy phishing framework referenced in the demo: https://github.com/kgretzky/evilginx2- SysAdmin Weekly Episode 024 - On-Prem AI with Ollama (Spotify): https://open.spotify.com/episode/1Huz7fy7axxOqjXei1HLI0- SysAdmin Weekly - all show links in one place: https://www.sysadminweekly.com- SysAdmin Weekly Newsletter: https://newsletter.sysadminweekly.com- SysAdmin Weekly GitHub Discussions: https://github.com/ProjectRunspace/sysadmin-weekly/discussions- Project Runspace: https://www.projectrunspace.org- AndyOnTech: https://www.andyontech.com
• 048 - The AI Doom Narrative vs the Data: Layoffs, Energy, and Jobs in 2026 14.06.2026 1h 24min

  The AI doom headlines do not line up with what the actual data says, and that gap is doing real damage. Andy and Eric Siron take a practitioner read on the fear stories: the layoff narrative, the data center energy and water panic, and the executive predictions that office workers are gone in 18 months. They put the WEF Future of Jobs numbers, the hyperscaler nuclear and cooling commitments, and the post-COVID overhiring correction next to the headlines, and walk through what AI looks like at a SysAdmin's keyboard versus what the press would have you believe.Also in this one: Elon Musk's OpenAI lawsuit, Linus Torvalds on AI-generated bug reports clogging the kernel security list, Edge storing passwords in clear text, Eric on the Samsung browser on Windows, and Andy's Forgejo and Restic lab cleanup. Plus listener comments on broken IT job postings and the SCVMM question for Hyper-V shops.---## Chapters00:00 - Introduction to SysAdmin Weekly04:39 - AI Doom and Gloom Narrative07:36 - News React: Elon Musk vs OpenAI10:18 - News React: Linus Torvalds on AI Bug Reports13:36 - Nerd Hour: Exploring New Browsers16:30 - Microsoft Edge Password Concerns19:28 - AI's Impact on Jobs22:20 - The Reality of AI in the Workplace25:39 - AI's Role in Documentation28:28 - Critique of AI Predictions31:41 - Conclusion and Future Outlook34:12 - The Responsibility of Executives in AI Predictions38:16 - The Impact of AI on Job Markets41:42 - Understanding Layoffs in the Tech Industry49:56 - The Future of Jobs in the Age of AI56:00 - Energy and Water Concerns in Data Centers01:00:48 - The Shift in Carbon Neutral Promises01:03:37 - Concerns Over Water and Energy Resources01:05:32 - The Debate on Nuclear Power Safety01:08:40 - Real-World Applications of AI in Sysadmin01:11:12 - The Importance of Honest Communication in Tech01:13:44 - Job Market Realities for IT Professionals---## Resources / Show Notes- The Register - Linus Torvalds on AI-powered bug hunters: https://www.theregister.com/security/2026/05/18/linus-torvalds-says-ai-powered-bug-hunters-have-made-linux-security-mailing-list-almost-entirely-unmanageable/5241633- TechCrunch - A comprehensive archive of 2023 tech layoffs: https://techcrunch.com/2024/05/01/a-comprehensive-archive-of-2023-tech-layoffs/- Crunchbase News - Tech Layoffs Tracker: https://news.crunchbase.com/startups/tech-layoffs/- WEF - Future of Jobs Report 2025, 78 Million New Job Opportunities by 2030: https://www.weforum.org/press/2025/01/future-of-jobs-report-2025-78-million-new-job-opportunities-by-2030-but-urgent-upskilling-needed-to-prepare-workforces/- NPR - Three Mile Island will reopen to power Microsoft data centers: https://www.npr.org/2024/09/20/nx-s1-5120581/three-mile-island-nuclear-power-plant-microsoft-ai- Data Center Dynamics - Google signs nuclear SMR deal with Kairos: https://www.datacenterdynamics.com/en/news/google-signs-nuclear-smr-deal-with-kairos-for-data-center-power/- X-energy - Amazon invests in X-energy to support advanced SMRs: https://x-energy.com/news/amazon-invests-in-x-energy-to-support-advanced-small-modular-nuclear-reactors-and-expand-carbon-free-power/- Microsoft Cloud Blog - Sustainable by design, next-generation datacenters consume zero water for cooling: https://www.microsoft.com/en-us/microsoft-cloud/blog/2024/12/09/sustainable-by-design-next-generation-datacenters-consume-zero-water-for-cooling/- Consumer Reports - AI Data Centers, Big Tech's Impact on Electric Bills, Water, and More: https://www.consumerreports.org/data-centers/ai-data-centers-impact-on-electric-bills-water-and-more-a1040338678/- Forgejo, the self-hosted lightweight software forge: https://forgejo.org/- Restic, fast, secure, efficient backup program: https://restic.net/- SysAdmin Weekly - past episodes referenced are at https://www.sysadminweekly.com
• 047 - Is DNS Over HTTPS Actually Private? What ECH Fixes That DoH Doesn't 01.06.2026 56min

  Turning on DNS over HTTPS does not make your browsing private. The hostname you are trying to reach still leaks in the TLS handshake through the Server Name Indication field, and that is the part most coverage of DoH quietly skips.Andy and Eric pick up where the DNS deep dive in episode 045 left off, this time focused on the privacy half of the problem. The episode walks through why DoH on its own only solves part of the equation, what Encrypted Client Hello (ECH) is doing to close the SNI gap, and which browsers actually support it today. Andy also unpacks Cloudflare's quiet deprecation of cloudflared's proxy-dns feature, what that means for every Pi-hole plus cloudflared setup still in the wild, and the Quad9 plus UDM Pro stack he landed on instead.Also in this one: California's age verification law and the operating system level approach the state landed on, Microsoft Edge keeping decrypted passwords in memory at all times (and Microsoft initially calling it "working as intended"), the Humble Bundle SysAdmin and Linux book bundle that is live right now, and Andy retiring his last Windows machine in favor of Debian.## Resources- SysAdmin Weekly Episode 045 - Why Is It Always DNS? (the prior DNS deep dive referenced throughout this episode): https://open.spotify.com/episode/2oAh0KzE7J2o7NQFJK8Mza?si=D0OO9XwkRb2GQ-hxM9duUA- Cloudflare announcement on the deprecation of cloudflared's proxy-dns feature (November 2025): https://developers.cloudflare.com/changelog/post/2025-11-11-cloudflared-proxy-dns/- Pi-hole, network-wide ad blocking and DNS sinkhole: https://pi-hole.net- cloudflared, the Cloudflare Tunnel client referenced in the proxy-dns discussion: https://github.com/cloudflare/cloudflared- Quad9, the Swiss-based privacy-focused DNS resolver Andy migrated to: https://www.quad9.net- Ubiquiti UDM Pro, which Andy moved his DNS forwarding onto: https://techspecs.ui.com/unifi/cloud-gateways/udm-pro- Microsoft Edge password manager vulnerability, security researcher disclosure from May 4 showing credentials decrypted and held in memory: https://www.bleepingcomputer.com/news/microsoft/microsoft-edge-to-stop-loading-cleartext-passwords-in-memory-on-startup/- Humble Bundle's SysAdmin and Linux book bundle from Packt (live for ~20 days from the recording date): https://www.humblebundle.com/books/ultimate-linux-sysadmin-bundle-books- Andy's prior AndyOnTech post on the state of web browsers, referenced for the Safari and Brave standardization context: https://www.andyontech.com/posts/there_are_no_good_web_browsers_left_and_thats_a_problem/- Encrypted Client Hello, Cloudflare's reference write-up on how ECH works alongside DoH: https://blog.cloudflare.com/announcing-encrypted-client-hello- Apple iCloud Private Relay, referenced as Apple's likely answer to the SNI privacy problem in lieu of shipping ECH in Safari: https://support.apple.com/en-us/102602- California's age verification law and the operating system level approach: https://www.theregister.com/software/2026/03/06/us-state-laws-push-age-checks-into-the-operating-system/4750249- SysAdmin Weekly main site, all episode links and platforms: https://www.sysadminweekly.com- SysAdmin Weekly newsletter, the companion weekly newsletter: https://newsletter.sysadminweekly.com- Contact the show: contact@sysadminweekly.com## Chapters02:29 - Exploring Secure DNS Lookups04:17 - Tech News Reactions08:25 - Microsoft Edge Security Concerns14:58 - Humble Bundle Book Recommendations20:05 - Nerd Hour: Home Lab Updates26:23 - Understanding DNS Over HTTPS and Its Importance30:11 - The Role of Encrypted Client Hello (ECH)36:13 - Rebuilding the DNS Stack: A Personal Journey42:06 - Cloudflare's Changes and Privacy Concerns47:11 - The Future of Privacy and Quantum Cryptography
• 046 - Can Claude Code Help SysAdmins? Scripting, Log Analysis, and the Claude.md workflow 15.05.2026 58min

  The skepticism is earned. Most AI demos are built for developers. Most AI hype is vendor noise. And most SysAdmins have better things to do than adopt another tool that solves a problem they may or may not have.That said: this is Andy putting the grumpy SysAdmin argument aside for an hour to make the honest case for Claude Code in SysAdmin workflows. With caveats. With the parts that still fall short. With a clear line between where it helps and where you should keep your hands on the wheel.The episode also covers a rough few weeks for the Linux kernel: three local privilege escalation vulnerabilities publicly disclosed in quick succession. All local, not remote. Still worth knowing about before your next patch cycle.In this episode:- A rundown of the three recent Linux kernel LPE vulnerabilities (Fragnesia, DirtyFrag, and CopyFail) and what they mean for SysAdmins running Linux in their environments- Nerd Hour: Restic offsite backups via Hetzner storage, Beszel and Uptime Kuma monitoring running on K3S- What Claude Code actually is, and why the CLI-based workflow changes the value proposition compared to chatbot-style AI use- The CLAUDE.md file: the single biggest thing most SysAdmins are missing when they try AI tools. What it is, how to build one, and how it turns Claude into something that actually knows your environment- Practical use cases: script generation with real AD and environment context, incident triage as a thinking partner, log analysis, documentation from terminal history, run book drafting, and YAML/Kubernetes help- Where to stay skeptical: sensitive data, the "do whatever you want" permission mode, and always reviewing AI-generated scripts before running them anywhere near productionThe tool amplifies competence. It doesn't substitute it. That framing is the whole episode.---## Resources and Show Notes### Linux Vulnerabilities:- Fragnesia (CVE-2026-46300): https://www.helpnetsecurity.com/2026/05/14/fragnesia-cve-2026-46300-linux-lpe-vulnerability/- DirtyFrag (CVE-2026-43284 + CVE-2026-43500): https://www.helpnetsecurity.com/2026/05/08/dirty-frag-linux-vulnerability-cve-2026-43284-cve-2026-43500/- CopyFail (CVE-2026-31431): https://www.helpnetsecurity.com/2026/04/30/copyfail-linux-lpe-vulnerability-cve-2026-31431/### Claude Code:- Claude Code Security Documentation: https://code.claude.com/docs/en/security- Claude Code Permissions Documentation: https://code.claude.com/docs/en/permissions### Tools Mentioned:- Restic Backup: https://restic.net- Beszel Monitoring: https://beszel.dev- Uptime Kuma: https://github.com/louislam/uptime-kuma- Hetzner Object Storage: https://docs.hetzner.com/storage/object-storage/- Hetzner Object Storage + Restic Setup Guide: https://docs.hetzner.com/storage/object-storage/howto-backups/restic/### Community:- Friends and Family IT Support Stories on GitHub Discussions: https://github.com/ProjectRunspace/sysadmin-weekly/discussions- Andy's Music TUI Terminal Apple Music Controller: https://github.com/asyrewicze/music_tui### Previous Related Episodes:- SysAdmin Weekly 008 - Getting Started with GitHub Copilot: https://open.spotify.com/episode/2eTtoAgeKEikKeLzYExfOY?si=ySl9Ho7mQ861mHAKiTAQ5w- SysAdmin Weekly 016 - AI Agents for IT Admins episodes featuring Mike Nelson: https://open.spotify.com/episode/7u5T3Tp04EEP0hZRst3KPZ?si=zTpzVTXZR42vle4Gk0-tow## Chapters04:32 - Community Comments and News React07:16 - Linux Vulnerabilities Overview10:08 - Nerd Hour: Personal Projects and Backups13:21 - Exploring Claude Code for Sysadmins16:09 - The Grumpy Sysadmin and AI Adoption19:24 - Understanding Claude Code's Functionality22:35 - Use Cases for Claude Code30:01 - The Importance of Documentation in Sysadmin Work32:52 - Leveraging Claude.md for Enhanced Context37:27 - Practical Applications of Cloud Code in Sysadmin Tasks42:11 - Challenges and Limitations of Cloud Code53:54 - Future of Cloud Code and Its Value in Sysadmin Work
• 045 - Why is It ALWAYS DNS?!? 08.05.2026 1h 16min

  It's always DNS. Every SysAdmin has said it, usually at the worst possible moment. This episode is the explanation for why that joke is only half a joke.Andy and Eric walk through how DNS actually works from first request to final answer: recursive resolvers, root servers, authoritative name servers, TTLs, and caching. From there they get into Windows Server and Active Directory DNS integration, covering SRV records, dynamic registration, and scavenging. The back half covers DNS security: DNSSEC, DNS over HTTPS, Encrypted Client Hello, DNS-based content filtering, and how attackers use DNS for C2 traffic and exfiltration. Throughout, the guys pull from real war stories, including a ticketing system that silently failed every few weeks because one of four DNS servers had a stale record, and a BIND config that refused to load because of a trailing space.---## Show Notes and Resources### News React- Cloudflare DNS filtering tiers: https://blog.cloudflare.com/introducing-1-1-1-1-for-families/- AI token costs exceeding replacement labor costs: https://fortune.com/2026/04/28/nvidia-executive-cost-of-ai-is-greater-than-cost-of-employees/- Claude deleting company data and backups: https://www.tomshardware.com/tech-industry/artificial-intelligence/claude-powered-ai-coding-agent-deletes-entire-company-database-in-9-seconds-backups-zapped-after-cursor-tool-powered-by-anthropics-claude-goes-rogue- Backyard RAM manufacturing: https://www.theregister.com/2026/04/23/youtuber_builds_working_dram/### Nerd Hour- Andy's PomoCLI app: https://github.com/asyrewicze/pomocli### Main Segment Resources- Cloudflare: What is DNS?: https://www.cloudflare.com/learning/dns/what-is-dns/- MXToolbox: https://mxtoolbox.com- DNS over TLS vs. DNS over HTTPS - Cloudflare Learning: https://www.cloudflare.com/learning/dns/dns-over-tls/- Encrypted Client Hello - the last puzzle piece to privacy: https://blog.cloudflare.com/announcing-encrypted-client-hello/### Community- GitHub Discussions: Friends and family IT support stories: https://github.com/ProjectRunspace/sysadmin-weekly/discussions/15.## Chapters12:45 - Understanding DNS: The Final Boss25:49 - The DNS Resolution Process38:43 - Exploring DNS Services and Tools39:45 - Managing DNS: Windows vs. BIND43:36 - Active Directory and DNS Integration48:38 - Dynamic Registration and Scavenging in DNS52:42 - Understanding DNS Record Types54:44 - Common DNS Tools and Their Uses59:28 - DNS Security: Threats and Protections01:06:27 - DNS Filtering and Content Control01:12:36 - Should You Run Your Own DNS?
• 044 - Hyper-V Failover Clustering in 2026 01.05.2026 1h 8min

  Failover clustering is the part of Hyper-V that trips up the most people, especially anyone arriving from the VMware side. In this episode Andy Syrewicze and Eric Siron pick up directly where episode 043 left off: you have standalone Hyper-V running, now what does it actually take to make it highly available in 2026?The guys start with the "why bother" question: Azure Local versus a traditional Hyper-V failover cluster comes down mostly to billing and governance overhead, not capability. From there the conversation moves into prerequisites: shared storage options (Storage Spaces Direct, iSCSI, SMB shares, Fiber Channel), Active Directory integration, and the heartbeat NIC myth Eric has been fighting against since he started seeing outdated Microsoft docs still getting passed around. The bulk of the episode is quorum: what split-brain means, why a two-node cluster needs a third vote, and the practical tradeoffs between a file share witness, a disk witness, and a cloud witness in Azure. Dynamic quorum gets its own explanation, including how graceful node shutdowns allow a cluster to shrink without taking everything offline. They close on the creation experience (PowerShell over Windows Admin Center, period), the gotcha that catches every VMware migrant (creating the cluster and adding VMs as clustered roles are two separate steps), live migration and shared nothing live migration.In the news and nerd hour segments this week: the FCC ban on foreign-made consumer routers (with Netgear already approved as an exception before anyone finished reading the press release), 3D printing of circuitry using microwave-based manipulation now down to the width of a human hair, Tim Cook stepping down from Apple, Andy using Claude Code to build a master index of every topic covered across all 43 episodes and every newsletter edition, and Eric deep in research on a home routing setup built around a mini PC with a separate router component so the internet does not require an IT degree to reset when he is traveling.---## Episode ResourcesSysAdmin Weekly Website: https://www.sysadminweekly.comSysAdmin Weekly Companion Newsletter: https://newsletter.sysadminweekly.comCommunity Discussion Board: https://github.com/ProjectRunspace/sysadmin-weeklyShare Your Family/Friends IT Support Stories (community post): https://github.com/ProjectRunspace/sysadmin-weekly/discussions/15AndyOnTech: https://www.andyontech.comProject Runspace: https://www.projectrunspace.org**Previous episodes referenced in this episode:**- Episode 043: Getting Started with Hyper-V in 2026: https://open.spotify.com/episode/4J77iiMVDWvvf8fshSurAL?si=D1hPaG7eSKiX6uU7UPBL3g- Episode 042: Should SysAdmins Job Hop or Stay Put?: https://open.spotify.com/episode/0o7EMW8JTGDm8rJv7Xu6Pg?si=uv1KIDZwS-y4l0g6yIV8jA- Episode 13: Should Hyper-V Be Domain Joined?: https://open.spotify.com/episode/0KWjIe5xgqZV9XYHuV2UF3?si=oK6XKjJiQ_mvpEEDqY_vyg- Episode 017: Hyper-V Management Story episode: https://open.spotify.com/episode/0rHwIc4U297R7I6KFayhlm?si=oTB7nX3bTgG7xekebnIU5g**Articles referenced in this episode:**- FCC ban on foreign-made consumer routers: https://www.wired.com/story/us-government-foreign-made-router-ban-explained/- What's New with Hyper-V in Windows Server 2025 (Microsoft Docs): https://learn.microsoft.com/en-us/windows-server/get-started/whats-new-windows-server-2025#hyper-v-ai-and-performance---## Chapters03:30 - Tech News Highlights14:38 - Nerd Hour: Personal Projects and Innovations21:02 - Listener Feedback and Career Insights25:54 - Hyper-V Failover Clustering in 202632:56 - Automated Setup and Shared Storage Solutions35:03 - Active Directory Integration and Clustering Best Practices36:55 - Understanding Quorum in Failover Clustering46:15 - Establishing a Failover Cluster: Tools and Processes57:18 - Live Migration and Storage Migration in Hyper-V01:01:14 - Day Two Operations and Cluster Management
• 043 - Getting Started with Hyper-V in 2026 23.04.2026 1h 23min

  Hyper-V has been around since 2008, runs Azure, runs Xbox, and still gets overlooked by shops fleeing VMware/Broadcom pricing. In this episode Andy Syrewicze and Eric Siron go back to basics: what Hyper-V actually is under the hood, why it is still worth your attention in 2026, and everything you need to know to stand it up and run your first virtual machine without losing your mind in the process.They walk through licensing (Standard versus Data Center, OSEs, core-based math, and the very short answer: call your licensing rep), then peel back the architecture to explain why Hyper-V is a genuine Type 1 hypervisor even though it boots into Windows. From there the conversation covers hardware requirements, the virtual switch types that trip up every VMware migrant, storage options, Gen 1 versus Gen 2 VMs (short answer: go Gen 2), Integration Services, and Dynamic Memory. Checkpoints and clustering get flagged as topics that deserve their own full episodes.In the news and nerd hour segments this week: CPU component prices climbing again with Intel and AMD reportedly raising costs by 15% or more, Microsoft announcing plans to rebuild Windows apps natively instead of relying on WebView, the MacBook Neo stirring up comparisons to the original Surface, Eric's week spent patching NetScaler appliances through a critical CVE while fighting Citrix's new licensing model, and Andy's experience standing up a Forgejo self-hosted git forge and putting Claude Code to work as a local repository agent.---## Episode ResourcesSysAdmin Weekly Website: https://www.sysadminweekly.comSysAdmin Weekly Companion Newsletter: https://newsletter.sysadminweekly.comCommunity Discussion Board: https://github.com/ProjectRunspace/sysadmin-weekly/discussionsShare Your Family/Friends IT Support Stories (community post): https://github.com/ProjectRunspace/sysadmin-weekly/discussions/15AndyOnTech: https://www.andyontech.comProject Runspace: https://www.projectrunspace.orgForgejo (self-hosted git forge): https://forgejo.orgClaude Code: https://claude.ai/code**Previous episodes referenced in this episode:**- VMware/Broadcom coverage: https://open.spotify.com/episode/764MqlqHjNimkiAdoWNoRb?si=pLZoVGM9RCivR6iBOW7b0A- Hyper-V management tools episode: https://open.spotify.com/episode/0rHwIc4U297R7I6KFayhlm?si=X_lxLkBDTuejzC_NCsoo2w---## Chapters02:50 - Getting Started with Hyper-V in 202615:25 - Nerd Hour: Personal Projects and AI Tools27:47 - Main Segment: Hyper-V Fundamentals29:06 - The Evolution of Hyper-V31:33 - Understanding Hyper-V Licensing37:53 - Navigating Hyper-V Licensing Complexities41:44 - Hyper-V Architecture Explained56:40 - Getting Started with Hyper-V01:03:45 - Understanding Hyper-V Networking Challenges01:08:45 - Exploring Hyper-V Storage Options01:13:29 - Choosing Between Generation 1 and Generation 2 VMs01:18:34 - Key Features of Hyper-V: Integration Services and Dynamic Memory01:20:50 - Managing Hyper-V with System Center Virtual Machine Manager
• 042 - Should SysAdmins Job Hop or Stay Put? There's a Secret Option C.... 01.04.2026 1h 5min

  Andy and Eric Siron tackle one of the most debated questions in IT careers: do you find a company and stay for the long haul, or do you job hop every few years to chase better pay and new challenges? With over four decades of combined industry experience between them, they've lived both sides of the equation and they make the case that the real answer is neither.In News React, Eric calls out Nvidia CEO Jensen Huang's proposal that engineers should burn through AI tokens worth half their salary as a productivity metric, and Andy flags Intel's announced 10% consumer CPU price hike as the compute consolidation squeeze continues to tighten. Nerd Hour covers Andy's maddening K3S node kernel lockup mystery and Eric's journey from WordPress to Hugo for the Project Runspace site.For our main segment the guys walk through the case for staying long term at a job bringing deep institutional knowledge, ownership of your environment, the satisfaction of building something to your standards along with the real downsides: skill calcification, salary stagnation, and the risk of becoming so embedded you can't leave. Then they flip to the case for hopping. This method typically lands meaningful pay jumps, escaping bad culture, and breadth of experience alongside the pitfalls of being labeled a flight risk, never building depth, and fueling the contract economy. The guys then end the episode with Secret Option C....---## Episode Resources- Nvidia CEO Jensen Huang: Engineers Should Spend 50% of Salary on AI Tokens (CNBC) - https://www.cnbc.com/2026/03/20/nvidia-ai-agents-tokens-human-workers-engineer-jobs-unemployment-jensen-huang.html- Intel (AND AMD!!!) Preparing 15% Consumer CPU Price Increase (PCMag) - https://www.pcmag.com/news/intel-amd-reportedly-set-to-raise-cpu-prices-by-up-to-15-percent- SysAdmin Weekly Website - https://www.sysadminweekly.com- SysAdmin Weekly Companion Newsletter - https://newsletter.sysadminweekly.com- AndyOnTech - https://www.andyontech.com- Project Runspace - https://www.projectrunspace.org- SysAdmin Weekly GitHub Community Discussions - https://github.com/ProjectRunspace/sysadmin-weekly/discussions- SysAdmin Weekly GitHub Discussion: Share Your Family & Friends IT Support Stories - https://github.com/ProjectRunspace/sysadmin-weekly/discussions/15## Episode Chapters00:00 - Introduction to Sysadmin Weekly03:02 - Navigating Career Choices in IT17:59 - The Case for Staying in One Organization34:13 - The Case for Job Hopping34:40 - The Job Hopping Dilemma42:42 - Navigating the Contract Economy47:47 - Finding Your Forever Home in IT58:22 - Advice for Sysadmins at Different Career Stages
• 041 - Is Microsoft Giving Up on Security? - The SFI Leadership Shakeup Explained 25.03.2026 1h

  Andy and Paul Schnackenburg dig into a leadership change at Microsoft that has the security community raising eyebrows. Charlie Bell, the executive vice president of security who championed the Secure Future Initiative, is out and being replaced by a go-to-market sales executive from the Google Cloud. Satya Nadella's announcement focused on selling more security products, with no mention of continuing the SFI's mission. That omission says a lot.In News React, the crew covers the new Microsoft 365 E7 SKU (Copilot, Agent 365, and a $99/user/month price tag aimed squarely at mega-enterprises), and the Iran-linked Stryker wiper attack where hackers compromised an Intune admin account and remotely wiped devices across 79 countries (no malware required). Nerd Hour features Andy's Forgejo self-hosted Git setup and Paul's new electric vehicle.From there Andy and Paul trace the arc from Microsoft's repeated security breaches, to the scathing CSRB report that seemingly forced the creation of the SFI, to what now looks like the initiative quietly losing steam. Included is discussion on Microsoft's pattern of treating security as a profit center, the ethical tension of selling security add-ons for your own platform's vulnerabilities, and what SysAdmins should be watching for as this plays out. SysAdmin Weekly Website - https://www.sysadminweekly.comSysAdmin Weekly Companion Newsletter - https://newsletter.sysadminweekly.com SysAdmin Weekly GitHub Community Discussions - ⁠https://github.com/ProjectRunspace/sysadmin-weeklyAndyOnTech - https://www.andyontech.comProject Runspace - https://www.projectrunspace.orgKrebsOnSecurity: Iran-Backed Hackers Claim Wiper Attack on Stryker - https://krebsonsecurity.com/2026/03/iran-backed-hackers-claim-wiper-attack-on-medtech-firm-stryker/CSRB Report: Review of the Summer 2023 Microsoft Exchange Online Intrusion (PDF) - https://www.cisa.gov/sites/default/files/2025-03/CSRBReviewOfTheSummer2023MEOIntrusion508.pdfRisky Business Podcast (Recommended by Paul) - https://risky.biz
• 040 - Big Tech Owns Your Compute... Should you be Worried? 21.03.2026 1h 29min

  After a brief hiatus, the crew is back! Andy is joined by both Paul Schnackenburg and Eric Siron to tackle a big question: what happens when access to compute becomes a subscription privilege instead of an owned capability?This week's topic goes deep! Big tech bankrolling elections, Bezos pushing rented cloud PCs over owned hardware, a global RAM shortage driven by AI demand. All the ingredients for a dangerous consolidation of compute seem to be in place. The crew explores the erosion of trust in cloud providers, geopolitical implications for non-US businesses, how consolidated AI models could subtly shape reality, the environmental cost of AI data centers, and the growing movement toward cloud repatriation and on-prem infrastructure. There's no silver bullet, but awareness and intentional choices about where we place our trust and spend our money are the first steps.## Episode Resources ##SysAdmin Weekly Website - https://www.sysadminweekly.comSysAdmin Weekly Companion Newsletter - https://newsletter.sysadminweekly.comSysAdmin Weekly GitHub Community Discussions - ⁠https://github.com/ProjectRunspace/sysadmin-weekly⁠VoidLink AI-Generated Malware Framework (The Hacker News) - https://thehackernews.com/2026/01/voidlink-linux-malware-framework-built.htmlGoogle Quietly Removes Net-Zero Carbon Goal Amid AI Data Center Buildout (Tom's Hardware) -https://www.tomshardware.com/tech-industry/google-quietly-removes-net-zero-carbon-goal-from-website-amid-rapid-power-hungry-ai-data-center-buildout-industry-first-sustainability-pledge-moved-to-background-amidst-ai-energy-crisisGoogle Plans to Power Data Center with Fossil Fuels and Carbon Capture - https://theconversation.com/google-plans-to-power-a-new-data-center-with-fossil-fuels-yet-release-almost-no-emissions-heres-how-its-carbon-capture-tech-works-270425Why a Carbon Capture Breakthrough Will/Won't Save Us (PBS Reactions) - https://www.pbs.org/video/why-a-carbon-capture-breakthrough-willwont-save-us-9cmmk0/
• 039 - BitLocker, Key Escrow, and the Microsoft Trust Question 14.02.2026 1h 13min

  Microsoft reportedly handed over BitLocker recovery keys to the FBI as part of a criminal investigation and that raises some uncomfortable questions.In this episode of SysAdmin Weekly, Andy and Eric unpack what actually happened, how BitLocker key escrow works, and why the default behavior in Windows 11 matters more than most users realize.We dig into:- How BitLocker recovery keys get stored in Microsoft accounts without end users knowing - What “key escrow” really means in practice - The difference between consumer and enterprise configurations - The privacy vs. law enforcement debate - Why encryption is meaningless if someone else controls the key - The broader implications for trust in cloud vendors We also discuss the “tyranny of the default,” the quiet shift toward mandatory Microsoft accounts in Windows 11, and what this means for SysAdmins responsible for protecting executive devices and sensitive data.If you manage endpoints, run M365, or care about privacy, this one’s worth your time.And yes… we also manage to cover frozen beach vacations, AI replacing CEOs, SMTP auth drama, and why abstraction always comes back to bite you eventually.## Episode Resources- SysAdmin Weekly Website - https://www.sysadminweekly.com- SysAdmin Weekly Companion Newsletter - https://newsletter.sysadminweekly.com- New SysAdmin Weekly Discussion Boards - https://github.com/ProjectRunspace/sysadmin-weekly/discussions- AndyOnTech - https://www.andyontech.com- Project Runspace - https://www.projectrunspace.org- Forbes Article - Microsoft hands over BitLocker encrypted data keys to FBI - https://www.forbes.com/sites/thomasbrewster/2026/01/22/microsoft-gave-fbi-keys-to-unlock-bitlocker-encrypted-data/- Office 365 for IT Pros article on SMTP AUTH Basic Authentication retirement delay - https://office365itpros.com/2026/01/29/smtp-auth-basic-retirement/- SysAdmin Weekly - 036 - The Hidden Cost of Abstraction in Modern IT - https://open.spotify.com/episode/0B4SfPgTbUlXTzSuJyfiby?si=OOehzhGTSnyda-zTKoW4tA - SysAdmin Weekly - 035 - AI Browser, Chromium Monoculture, and the Future of Browser Security - https://open.spotify.com/episode/0zZDUAtcCJQ74d6zQdKV6N?si=R286nY4UTmaBIULFvArAcg
• 038 - Making Security Decisions Based on Data, Not Fear 30.01.2026 1h 13min

  This week on SysAdmin Weekly, we push back hard on one of the most damaging patterns in modern IT security: making decisions based on fear instead of facts.Security headlines love absolutes: “everything is broken,” “encryption is useless,” “the cloud can’t be trusted.” But in the real world, those claims often fall apart the moment you slow down and examine the actual mechanics behind them. In this episode, we walk through why responsible security decisions must be grounded in verifiable data, not outrage-driven interpretations or half-read articles.We break down how encryption, key access, and lawful access actually work, where trust boundaries truly exist, and why conflating possibility with probability leads to bad architecture, bad policy, and unnecessary panic. Just because something can happen does not mean it is happening and SysAdmins are expected to know the difference.This isn’t an episode about dismissing risk. It’s about measuring it correctly. Understanding threat models. Asking “what evidence do we have?” before rewriting policies, re-architecting systems, or blowing up trust relationships that were never the real problem.If you’re tired of security discourse driven by vibes, doomscrolling, and worst-case hypotheticals and you still believe SysAdmins should be the adults in the room, this episode is for you.## Episode Resources- New SysAdmin Weekly GitHub Discussions Board - https://www.github.com/ProjectRunspace/sysadmin-weekly- SysAdmin Weekly Companion Newsletter - https://newsletter.sysadminweekly.com- Paul's Article About Making Security Decisions Based on Data - https://virtualizationreview.com/articles/2025/12/03/refining-your-cybersecurity-strategy-based-on-data.aspx- YouTube Video From Lars Klint about Australian Bushfires - https://www.youtube.com/watch?v=mNEPSWcOheY- Paul and Amy's Defender + InTune Monthly Training Course - https://www.thirdtier.net/product/defender-intune-continued-learning/- Decipher Podcast Episode on Vulnerability Management - https://www.buzzsprout.com/228511/episodes/18495360-the-future-of-vulnerability-management-with-jeremiah-grossman-and-robert-rsnake-hansen- SysAdmin Weekly - 036 - The Hidden Cost of Abstraction in Modern IT - https://open.spotify.com/episode/0B4SfPgTbUlXTzSuJyfiby?si=OuycyiFISKeKm9HmiimpKw- Project Runspace - https://www.projectrunspace.org- AndyOnTech - https://www.andyontech.com
• 037 - When Incident Response Plans Meet Reality 23.01.2026 1h 13min

  It’s a new year, which means it’s time for every SysAdmin’s favorite activity...... dusting off the incident response and disaster recovery plans that haven’t been touched since the Apollo moon landing.In this episode of SysAdmin Weekly, Andy and Eric dig into why incident response, disaster recovery, and business continuity plans so often exist… but completely fall apart when something actually goes wrong. They talk through what makes a response plan useful versus useless, why roles and decision-making matter more than tools, and how slow human processes can undo even the fastest detection systems.The conversation spans real-world tabletop exercises, ransomware scenarios, MFA bombing, on-call failures, and the uncomfortable reality that many organizations still don’t empower anyone to make business-impacting decisions during an incident. Eric even shares fresh lessons learned from a recent tabletop exercise, including what happens when critical people are unavailable, how communication can fail under pressure, and why “solo warrior” response patterns collapse fast.Along the way, Andy and Eric also touch on Broadcom’s ongoing VMware licensing chaos, cease-and-desist letters, the continued enshittification of enterprise software, and why supply-chain dependency should make every IT pro a little nervous.If you’ve ever wondered whether your incident response plan would actually survive first contact with reality or if you’ve never tested one at all this episode is your wake-up call.### Episode Resources- New SysAdmin Weekly GitHub Discussion Boards! - https://www.github.com/ProjectRunspace/sysadmin-weekly- SysAdmin Weekly Companion Newsletter - https://newsletter.sysadminweekly.com- SysAdmin Weekly Website - https://www.sysadminweekly.com- AndyOnTech - https://www.andyontech.com- Project Runspace - https://www.projectrunspace.org- Bastard Operator From Hell - https://bofh.bjash.com- Continued VMware / Broadcom Drama - https://www.reddit.com/r/sysadmin/comments/1pzp3eo/vmware_now_threatening_outages_to_perpetual/- SysAdmin Weekly - 029 - When Good Tech Goes Corporate - https://open.spotify.com/episode/6tDkgEmzjJQgmBSxCRcDeR?si=31S2s8ATTCuRnach82MUHw- WMI Documentation - https://learn.microsoft.com/en-us/windows/win32/wmisdk/wmi-start-page
• 036 - The Hidden Cost of Abstraction in Modern IT 16.01.2026 1h 15min

  Abstraction has made modern IT faster, easier, and more scalable but it’s also quietly eroding the deep technical understanding that SysAdmins used to rely on.In the first SysAdmin Weekly episode of 2026, Andy and Eric dig into how layers of abstraction stretching from cloud platforms and managed services to Kubernetes and modern software design are changing what it means to be a SysAdmin.The guys explore where abstraction helps, where it actively hurts, and why losing visibility into how systems actually work becomes a serious problem the moment something breaks underneath the hood.Along the way, they connect abstraction to real-world examples: cloud VMs, Microsoft 365, Kubernetes misconfigurations, browser monocultures, Rust’s “memory safe” reputation, and even how modern generations interact with technology differently than those who lived through the pre-cloud era.The episode wraps with practical advice for SysAdmins who want to stay sharp in an increasingly abstracted world while focusing on curiosity, home labs, documentation, and rebuilding deep product knowledge before the defaults fail you.If you’ve ever felt like IT is turning into a collection of black boxes, this episode is for you.Episode Resources- SysAdmin Weekly Website - https://www.sysadminweekly.com- SysAdmin Weekly Companion Newsletter - https://newsletter.sysadminweekly.com- Github Discussions is Coming Soon! - I Promise!- AndyOnTech - https://www.andyontech.com- Project Runspace - https://www.projectrunspace.org- What are IRQs? - https://en.wikipedia.org/wiki/Interrupt_request- Code: The Hidden Language of Computer Hardware and Software - https://www.amazon.com/Code-Language-Computer-Hardware-Software/dp/0137909101- From Mathematics to Generic Programming - https://www.amazon.com/Mathematics-Generic-Programming-Alexander-Stepanov/dp/0321942043
• 035 - AI Browsers, Chromium Monoculture, and the Future of Browser Security 20.12.2025 54min

  This week on SysAdmin Weekly, Andy goes on a (fully justified) rant about the current state of browsers and why it feels like there are no good options left for sysadmins. From Chromium monoculture and browser bloat, to AI creeping into the most trusted piece of software we use every day, this episode breaks down what’s changing, why it matters, and why “just turn it off” isn’t a real security strategy.Along the way, Andy digs into:Firefox’s push toward becoming an “AI browser”Why agentic AI inside browsers introduces serious, unresolved threat modelsReal-world examples of prompt injection and AI-assisted data exfiltrationWhy browser forks are a stopgap, not a long-term escape hatchAnd the question: would a "boring" and "security-first" browser have a place in the market?This is less about tools and more about trust, threat boundaries, and the slow erosion of choice in the browser ecosystem.If you use a browser to manage infrastructure, security, or SaaS platforms (so… all of us), this one’s for you.Episode Resources- Firefox News from Windows Central - https://www.windowscentral.com/software-apps/mozilla-says-firefox-will-evolve-into-an-ai-browser-and-nobody-is-happy-about-it-ive-never-seen-a-company-so-astoundingly-out-of-touch- Browser Market Share Data - https://www.tech2geek.net/most-used-web-browsers-in-july-2025-market-share-statistics/- SysAdmin Weekly: "Good Enough" Software is Ruining IT - https://open.spotify.com/episode/6uUdRBvUHpo15x6h2dXpEO?si=ItOqAFpaT8eS11wHIkBa9w- SysAdmin Weekly: The Importance of Documentation - https://open.spotify.com/episode/6OWL5VPiGx08QMIhpGMFsT?si=z3legxgwQXuehPxT4ix_yA- DNS over HTTPS resources - https://en.wikipedia.org/wiki/DNS_over_HTTPS- Encrypted Client Hello resources - https://blog.cloudflare.com/announcing-encrypted-client-hello/- Comet-Jacking Article - https://thehackernews.com/2025/10/cometjacking-one-click-can-turn.html- SysAdmin Weekly Website - https://www.sysadminweekly.com- SysAdmin Weekly Companion Newsletter - https://newsletter.sysadminweekly.com- Project Runspace - https://www.projectrunspace.org- AndyOnTech - https://www.andyontech.com
• 034 - "Good Enough" Software is Ruining IT (and SysAdmins are Paying the Price) 12.12.2025 1h 6min

  Modern IT feels stuck in a vicious cycle: software ships faster than ever, quality keeps slipping, and SysAdmins are left cleaning up the mess. In this episode of SysAdmin Weekly, Andy Syrewicze and Eric Siron dig into the growing disconnect between developers and operations teams and why “good enough” software has become dangerously normalized across the industry.We talk about brittle releases, missing error handling, forced beta testing in production, and how operational debt quietly drains time, money, and morale. From real-world outages and monoculture risks to AI hype, “vibe coding,” and the slow disappearance of software testing roles, this episode breaks down how we got here and why it’s not sustainable.To be clear, this isn’t a developer-bashing session. It’s a reality check.If software is going to keep the world running, it needs to be treated as a craft again, NOT a content pipeline. And that means shared accountability, better defaults, meaningful error messages, and respecting the people who have to run this stuff after it ships.Episode Resources- Cloudflare Outage - https://www.bleepingcomputer.com/news/security/cloudflare-blames-todays-outage-on-emergency-react2shell-patch/- Satya Nadella Copilot skills challenge - https://www.youtube.com/watch?v=gBcwQaNoP5A- SysAdmin Weekly Website - https://www.sysadminweekly.com- SysAdmin Weekly Companion Newsletter - https://newsletter.sysadminweekly.com- AndyOnTech - https://www.andyontech.com- Project Runspace - https://www.projectrunspace.org
• 033 - Why IT Job Postings Are Completely Broken 05.12.2025 1h 8min

  IT job postings have gotten… weird.In this episode of SysAdmin Weekly, Andy flies solo to take a realistic look at modern IT job listings amongst historic industry layoffs and why so many of them feel disconnected from the actual work SysAdmins do every day.We scroll through real-world postings, talk about unrealistic expectations, role creep, and “unicorn” requirements, and break down how vague or overloaded job descriptions contribute to burnout, churn, and impostor syndrome across the industry.This isn’t a recruiter or HR dunk session. It’s a candid discussion about how job postings act as signals, why those signals are often confusing, and how both candidates and companies can do better by asking the right questions and setting clearer expectations.Whether you’re actively job hunting, passively browsing, or just wondering who exactly these postings are written for, this episode is for you.Episode Resources- Anthropic Report on AI-Enabled Cyber Espionage- IT Specialist Simulator- SysAdmin Weekly - What Makes a Great SysAdmin?- SysAdmin Weekly - Is University Worth it for Aspiring SysAdmins?- Microsoft Learn - Discrete Device Assignment- What are DMARC, DKIM, and SPF?- SysAdmin Weekly Website- SysAdmin Weekly Companion Newsletter- AndyOnTech- Project Runspace
• 032 - Microsoft Ignite 2025: What SysAdmin Actually Need to Know 28.11.2025 1h 25min

  Microsoft Ignite just wrapped and shockingly, it wasn’t only about AI.(Okay, it was mostly about AI.)In this episode of SysAdmin Weekly, Andy and Paul cut through the marketing noise and walk through what actually matters to SysAdmins from Microsoft Ignite’s Book of News. From AI agents showing up everywhere, to Azure resiliency, security posture management, and why massive cloud outages are still very much a thing. This is the practical, admin-focused breakdown you didn’t get from the keynote.We dig into:What Microsoft’s push toward AI agents really means for control, governance, and securityNew Copilot and Azure features that might actually help… and a few that should make you cautiousWhy resiliency keeps failing at scale (and what Ignite quietly admitted about it)How Microsoft is trying to simplify security and management and where the complexity is just shifting insteadThe ongoing reality of cloud dependencies, outages, and shared responsibilityNo hype. No sales pitch. Just two SysAdmins reacting honestly to what Ignite announced and what it means when the slides become production.If you manage Microsoft environments, cloud workloads, or security policies, this one’s for you!Episode Resources- SysAdmin Weekly Website- SysAdmin Weekly Companion Newsletter- AndyOnTech- Project Runspace- Microsoft Ignite Book of News- Paul Schnackenburg on LinkedIn