For IT admins: Intune, Entra ID, Microsoft 365, Apple, Windows
The failure, the fix, and the check that proves it worked.
Runbooks, configuration traps and guides for specific failures on managed Windows and Apple devices, Entra ID and Microsoft 365: the likely cause, the fix, and how to confirm it.
The KBY Brief
Upcoming Microsoft and Apple deadlines, new fixes and scripts, by email. Unsubscribe at any time.
News desk
Latest news
What happened, and what it means for the people who run IT. UK time.
TrackersWindows Update Watch, November 2026: Deploy Now, Except SQL Servers With Linked ServersIs November's Windows update safe to deploy? Our verdict for each Windows version from Microsoft's known-issues data: deploy now, except SQL Servers with linked servers, plus the fixes it brings and three things to check first.
Read the story
SecurityUber Drivers’ Licence Data Stolen Through AI Vendor Fireworks, Which Also Exposed Cursor and Notion
OutagesFAA Halts Every US Departure After Air Traffic Control Network Fails: What Happened and the Lesson for IT Teams
Weekly admin briefWeekly Admin Brief, 13 November 2026: Outlook Zero-Day, Activation Fix and Sixty Days to Server 2016’s End
Platforms and devicesPatch Tuesday, November 2026: Exploited Outlook Flaw, Exchange and AD Fixes, and What to Deploy First
Fresh from every section
The newest piece from each of our daily sections.
- Systems EngineeringYesterday
Restricting Microsoft 365 Group Creation to an Approved Security Group
Enterprise IT Management 15 minMore from Systems Engineering - Ops PlaybookYesterday
Route Windows Autopilot Profiles With Group Tags and Dynamic Device Groups
Zero-Touch & Automation 12 minMore from Ops Playbook - macOS Ops PlaybookYesterday
Kandji to Iru Deadline: Upgrade in Place or Migrate Macs to Jamf Pro
Device Management 12 minMore from macOS Ops Playbook - Graduate Track13 Nov
Entra ID AADSTS50058: Silent Sign-In Request Sent With No Session
Identity and Access Management 11 minMore from Graduate Track - Incident RunbooksYesterday
WSL 2 Error 0x80370102: Virtual Machine Platform or Virtualization Not Enabled
LinuxMore from Incident Runbooks - Config TrapsYesterday
Forest-Wide Authentication on an AD Forest Trust Gives Every Trusted-Forest User Authenticated Users Access
Active Directory Trust SecurityMore from Config Traps - Daily Triage9 Nov
OpenTelemetry Collector Drops Spans With memory_limiter Refusing Data
Observability & ReliabilityMore from Daily Triage - LexiconYesterday
Universal Print
More from Lexicon
Jump in
- Q4 2026Intune moves to macOS 15 and laterThis quarter
- November 2026SAP SuccessFactors provisioning: move from basic auth to workload identityThis month
- November 2026Intune November release: JIT registration reminder at APNs renewal and automatic JIT for eligible tenantsThis month
Trending this week
Ranked by reads this week, admin topics first
OutagesMicrosoft 365 Outage, November 2026: What Went Wrong, How Microsoft Can Fix It, and What to Do Now
13 Nov 2026 16 min- TrackersWindows Update Watch, November 2026: Deploy Now, Except SQL Servers With Linked Servers14 Nov 2026 7 min
- Device ManagementEvaluating Jamf Pro Against Kandji on a Real Mac Pilot13 Nov 2026 11 min
- Identity and Access ManagementEntra ID AADSTS50105: User Not Assigned to Enterprise Application11 Nov 2026 7 min
- Platforms and devicesPatch Tuesday, November 2026: Exploited Outlook Flaw, Exchange and AD Fixes, and What to Deploy First13 Nov 2026 6 min
Latest runbooks and traps
Recovery procedures and dangerous defaults, newest first.
- RunbookHigh severity · Grafana · target 30 minutes to isolate Grafana, proxy, query or backend timeout
Grafana Dashboard Data Source Timeout
Diagnose a Grafana dashboard data-source timeout by separating panel-query cost, Grafana data proxy limits, reverse-proxy deadlines, network reachability and backend saturation before raising any timeout.
- RunbookCritical severity · Active Directory · target 40 minutes to isolate the failing replication edge
Active Directory Domain Controller Replication Failure
Diagnose Active Directory domain controller replication failure with Repadmin, DCDiag, event IDs, DNS, RPC and time evidence; avoid forest-wide repadmin /syncall until topology knowledge is consistent and the exact error is resolved.
- Config trapAzure Key Vault Access Control
Owner Role on an RBAC Key Vault Still Returns Forbidden for Secrets
Owner on an RBAC Key Vault manages the vault but cannot read secrets. Assign a data-plane role such as Key Vault Secrets User and verify.
- LexiconOpenRouter
OpenRouter
OpenRouter provides one API to reach AI models from many providers, adding a dependency that needs limits, credential and fallback planning.
Recently updated
Articles changed in the last 30 days.
- Security & OperationsMicrosoft Defender for Endpoint Device Stuck Onboarding or Inactive13 Nov 2026
- SecurityUber Drivers’ Licence Data Stolen Through AI Vendor Fireworks, Which Also Exposed Cursor and Notion14 Nov 2026
- OutagesFAA Halts Every US Departure After Air Traffic Control Network Fails: What Happened and the Lesson for IT Teams14 Nov 2026
- Weekly admin briefWeekly Admin Brief, 13 November 2026: Outlook Zero-Day, Activation Fix and Sixty Days to Server 2016’s End13 Nov 2026
- SecurityCheck Point Gaia Flaw CVE-2026-123039 Exploited to Take Over Gateways and Wipe ESXi Hosts13 Nov 2026
- The IT ToolkitBuilding a Bandwidth-Delay Product Calculator13 Nov 2026
Publications
- Systems EngineeringAdvanced guides on infrastructure, cloud architecture, and observability for enterprise systems.120 items6 topicsUpdated 14 Nov 2026
- The Ops PlaybookL1-L3 Support Playbooks: engineer tickets out of existence.52 items12 topicsUpdated 14 Nov 2026
- Graduate TrackProduction-focused guidance and step-by-step technical playbooks.35 items6 topicsUpdated 13 Nov 2026
- The ToolchainPractical calculators, diagnostic scenarios, and reference material.
How KBY content is made
Most KBY content is built from a topic brief and vendor documentation, checked by automated tests and published by software. Treat commands as a starting point to test, and tell us when something is wrong: we correct it on the page.
The KBY Brief
A short email about twice a week with new runbooks, configuration traps and fixes from KBY Technologies.
- Runbooks
- Config traps
- Fixes