On 10 September my UDM’s WAN port renegotiated to 100 Mbps and stayed up. No alert fired, and the house sat at 178 ms for hours. I traced it to a cable and wrote a poller to catch it next time.

One VM running qBittorrent was pulling about 98% of my WAN traffic. I capped it in qBittorrent, shaped the WAN with Smart Queues and aimed a UniFi throttle at it. Only some of those limits bind today.

I sent a query from my IoT VLAN to 8.8.8.8 for a name only my Pi-hole knows, and Pi-hole answered. Then I went after the encrypted DNS paths a port 53 redirect can’t touch.

One allow rule on my IoT VLAN hadn’t passed a packet in two months, and it took two fixes to find out why. This is the rule set, the test I ran from inside the VLAN, and the two holes it found.

In August I moved my UDM Pro to UniFi’s zone-based firewall and left it alone for two months. When I read the policy list back, three rules pointed at a machine that stopped being Plex a while ago.

On October 19 I found a Message Center post: Entra stops honoring layout CSS in company branding on October 26. The news listed ten properties. Learn lists 58, display included, so I built a scanner.

My Widget detection exits 0 with nothing on stdout, so Intune installs the app, can’t find it and reports 0x87D1041C. This index maps each portal symptom to the IntuneScriptLab command behind it.

REM-RETURN-EXIT has run hourly for three weeks, and its probe file holds 168 records, all detections. My validation kit deploys experiments like it to Proxmox VMs and reads them back.

My uptime detection returns 1 at script scope, so it exits 0, and its runtime test passes. The static check fails it on line 5. IntuneScriptLab’s gate and Pester assertions put both in a pull request.

I run Invoke-ScriptAnalyzer -Severity Error with IntuneScriptLab’s rules loaded, and every Intune record disappears, Errors included. The wrapper puts those rules in PSScriptAnalyzer’s own pass.