For IT admins: Intune, Entra ID, Microsoft 365, Apple, Windows
The failure, the fix, and the check that proves it worked.
Runbooks, configuration traps and guides for specific failures on managed Windows and Apple devices, Entra ID and Microsoft 365: the likely cause, the fix, and how to confirm it.
The KBY Brief
Upcoming Microsoft and Apple deadlines, new fixes and scripts, by email. Unsubscribe at any time.
Jump in
- Q4 2026Intune moves to macOS 15 and laterThis quarter
- November 2026SAP SuccessFactors provisioning: move from basic auth to workload identityThis month
- November 2026Intune November release: JIT registration reminder at APNs renewal and automatic JIT for eligible tenantsThis month
Newest articles
Newest first, admin topics first
Zero-Touch & AutomationAutopilot Device Shows Profile Not Assigned: Find the Cause
10 Nov 2026 11 min- Enterprise IT ManagementMicrosoft 365 Group Licensing: Fixing MutuallyExclusiveViolation10 Nov 2026 11 min
- Device ManagementJamf Pro Stale Last Check-in: Diagnose and Restore Macs9 Nov 2026 10 min
- Endpoint and Device ManagementTracing an Endpoint and Device Management Problem with Microsoft Intune9 Nov 2026 14 min
- Application LifecyclemacOS pkg Installed by MDM Shows Success but App Is Missing8 Nov 2026 11 min
Latest runbooks and traps
Recovery procedures and dangerous defaults, newest first.
- RunbookHigh severity · Grafana · target 30 minutes to isolate Grafana, proxy, query or backend timeout
Grafana Dashboard Data Source Timeout
Diagnose a Grafana dashboard data-source timeout by separating panel-query cost, Grafana data proxy limits, reverse-proxy deadlines, network reachability and backend saturation before raising any timeout.
- RunbookCritical severity · Active Directory · target 40 minutes to isolate the failing replication edge
Active Directory Domain Controller Replication Failure
Diagnose Active Directory domain controller replication failure with Repadmin, DCDiag, event IDs, DNS, RPC and time evidence; avoid forest-wide repadmin /syncall until topology knowledge is consistent and the exact error is resolved.
- Config trapAWS Identity
Resetting an IAM User’s Console Password Leaves Access Keys Active
A console password reset does not revoke IAM access keys. Learn how to find, deactivate and replace them safely.
- LexiconRedis
Redis
Redis is an in-memory data store used as a cache, database and message broker, where memory limits, eviction and persistence need deliberate…
Recently updated
Articles changed in the last 30 days.
- Enterprise IT ManagementFixing Double-Hop Kerberos With Constrained Delegation10 Nov 2026
- Security & OperationsMitigating MDM Certificate Rotation Storms9 Nov 2026
- Tech FundamentalsReading SMART Attribute Thresholds Before Failure10 Nov 2026
- Enterprise IT ManagementZero-Downtime SAML Certificate Rotation10 Nov 2026
- Software ArchitectureEdge-Side Includes: Composing Micro-Frontends10 Nov 2026
- Systems EngineeringDebugging Write Skew Under Serializable Isolation10 Nov 2026
Publications
- Systems EngineeringAdvanced guides on infrastructure, cloud architecture, and observability for enterprise systems.112 items6 topicsUpdated 10 Nov 2026
- The Ops PlaybookL1-L3 Support Playbooks: engineer tickets out of existence.43 items12 topicsUpdated 10 Nov 2026
- Graduate TrackProduction-focused guidance and step-by-step technical playbooks.31 items6 topicsUpdated 9 Nov 2026
- The ToolchainPractical calculators, diagnostic scenarios, and reference material.
How KBY content is made
Most KBY content is built from a topic brief and vendor documentation, checked by automated tests and published by software. Treat commands as a starting point to test, and tell us when something is wrong: we correct it on the page.
The KBY Brief
A short email about twice a week with new runbooks, configuration traps and fixes from KBY Technologies.
- Runbooks
- Config traps
- Fixes