A zero-downtime server refresh
New ESXi host, RAID 10, fresh VMs, domain-controller cutover by promote/demote, backups test-restored before anything old was retired.
documents
agent-lab: setup and guardrails planned
How the local models are set up in the lab, what the monitor is allowed to see, and how its read-only access is enforced and logged.
documents
agent-workflow: roles, approvals and orchestration planned
What each agent is allowed to see and do, how work passes between them, how approval works for any change, how every step is logged, and what the agents must never touch.
Automating student account provisioning
Scripting student account creation so running the network didn't eat the time I needed for teaching.
Azure foundations for Dynamics 365 migrations
The Azure infrastructure behind Dynamics 365 migrations at Thinkmax, a fresh foundation built per client.
documents
Passwordless logins for a kindergarten class
A teacher logging a class of twenty-one five-year-olds in by hand, every session. I worked it end to end and wrote it up: policy first, then identity, devices, and the people, a proposal they could act on.
Proving WEP wasn't protecting us
Rather than just flag it, I proved our WEP wireless was crackable to make the case for replacing it.
Ransomware, first thing in the morning
A newly onboarded client, a call at 8 a.m. that the files were encrypted. Contained, traced, recovered from the night-before backup, then I closed the holes that let it in.
Running Sage without handing out admin
An app that demanded local admin, students who couldn't have it. I monitored exactly what it needed and granted only that by Group Policy.