Conditional Access: Outcomes, Not Verdicts
A report-only CA policy, and one question: if I enable it, who stops being able to work? What If gave me thirteen rows and no answer. So I wrote a PowerShell module that folds them into one.…
Renewing a Cert From Behind a Residential ISP
A service's cert I don't use much had expired. Turns out certbot had been failing twice a day for months and nothing said a word. Port 80 is blocked on my home line, so HTTP-01 was never an option. Wrote up the fix, and hand rolled some alerting.…
Raising the Copilot Standards to Pester 6.1
Pester 6.1 shipped, so I checked my Copilot standards against an install instead of the release notes. Four claims no longer held. Two aren't in the announcement at all, and one example from the release notes doesn't actually run.…
Rolling my own ssh-copy-id for Windows
Windows OpenSSH ships everything except ssh-copy-id. VS Code Remote-SSH kept asking for my password, and the documented fix is macOS/Linux only. So I built one: platform detection, idempotent installs, real verification.…
Seeding an Okta Test Tenant When You Only Get Ten Users
A fresh Okta trial org is empty. The licence caps you at ten active users, so I built a lab where 8 awkward users plus everything Okta doesn't cap does the work. Seeds in 2 min, tears down safely.…