For IT admins: Intune, Entra ID, Microsoft 365, Apple, Windows
The failure, the fix, and the check that proves it worked.
Runbooks, configuration traps and guides for specific failures on managed Windows and Apple devices, Entra ID and Microsoft 365: the likely cause, the fix, and how to confirm it.
The KBY Brief
Upcoming Microsoft and Apple deadlines, new fixes and scripts, by email. Unsubscribe at any time.
Jump in
- Q4 2026Intune moves to macOS 15 and laterThis quarter
- November 2026SAP SuccessFactors provisioning: move from basic auth to workload identityThis month
- November 2026Intune November release: JIT registration reminder at APNs renewal and automatic JIT for eligible tenantsThis month
Trending this week
Ranked by reads this week, admin topics first
Security & OperationsMicrosoft Defender for Endpoint Device Stuck Onboarding or Inactive
7 Nov 2026 12 min- Enterprise IT ManagementFixing Double-Hop Kerberos With Constrained Delegation23 Jul 2026 13 min
- Device ManagementKandji vs Jamf Pro: Choosing an Apple MDM With a Safe Pilot10 Nov 2026 9 min
- Identity and Access ManagementEntra ID AADSTS65001: User or Admin Has Not Consented to App10 Nov 2026 11 min
- Zero-Touch & AutomationAutopilot Device Shows Profile Not Assigned: Find the Cause10 Nov 2026 11 min
Latest runbooks and traps
Recovery procedures and dangerous defaults, newest first.
- RunbookHigh severity · Grafana · target 30 minutes to isolate Grafana, proxy, query or backend timeout
Grafana Dashboard Data Source Timeout
Diagnose a Grafana dashboard data-source timeout by separating panel-query cost, Grafana data proxy limits, reverse-proxy deadlines, network reachability and backend saturation before raising any timeout.
- RunbookCritical severity · Active Directory · target 40 minutes to isolate the failing replication edge
Active Directory Domain Controller Replication Failure
Diagnose Active Directory domain controller replication failure with Repadmin, DCDiag, event IDs, DNS, RPC and time evidence; avoid forest-wide repadmin /syncall until topology knowledge is consistent and the exact error is resolved.
- Config trapAWS Identity
Resetting an IAM User’s Console Password Leaves Access Keys Active
A console password reset does not revoke IAM access keys. Learn how to find, deactivate and replace them safely.
- LexiconRedis
Redis
Redis is an in-memory data store used as a cache, database and message broker, where memory limits, eviction and persistence need deliberate…
Recently updated
Articles changed in the last 30 days.
- Enterprise IT ManagementMicrosoft 365 Group Licensing: Fixing MutuallyExclusiveViolation10 Nov 2026
- Enterprise IT ManagementSurviving the Final Domain Controller Cutover10 Nov 2026
- Enterprise IT ManagementCutting SCIM Deprovisioning Latency in High-Volume Pipelines10 Nov 2026
- The IT ToolkitBuilding a Redis Memory Fragmentation Ratio Tool10 Nov 2026
- Enterprise IT ManagementPreventing DNS Split-Brain in Hybrid Azure/AD10 Nov 2026
- Tech FundamentalsReading SMART Attribute Thresholds Before Failure10 Nov 2026
Publications
- Systems EngineeringAdvanced guides on infrastructure, cloud architecture, and observability for enterprise systems.112 items6 topicsUpdated 10 Nov 2026
- The Ops PlaybookL1-L3 Support Playbooks: engineer tickets out of existence.44 items12 topicsUpdated 10 Nov 2026
- Graduate TrackProduction-focused guidance and step-by-step technical playbooks.32 items6 topicsUpdated 10 Nov 2026
- The ToolchainPractical calculators, diagnostic scenarios, and reference material.
How KBY content is made
Most KBY content is built from a topic brief and vendor documentation, checked by automated tests and published by software. Treat commands as a starting point to test, and tell us when something is wrong: we correct it on the page.
The KBY Brief
A short email about twice a week with new runbooks, configuration traps and fixes from KBY Technologies.
- Runbooks
- Config traps
- Fixes