Live data from Hacker News

My daughter's school took over my personal Microsoft account

jeffgeerling.com

471–480 of 490 posts

Re: My daughter's school took over my personal Microsoft account

#471

Some what related just last week someone from my company's IT department contacted me about adding my work MacBook to some Microsoft spyware scheme so they could start administering it and he was very stricken when I didn’t want to do it. At start he tried go get me on board with carrots like being able to print - an activity I haven’t performed in over five years. And it ended with “this is our policy” I told him th…

As somebody who worked in IT before and who had to wrestle a bit with policy in the past - I recommend you don't see your work MacBook as your "own computer". Because it's not. The company shouldn't restrict you from doing your job and reasonable and competent IT departments know which users needs what access (including root access) to perform their role, but they do also have a duty to the company and its equipment…

>Try and see it from their perspective.

Just no. Our IT department is 100% Windows focused. I can't get help to anything that isn't "a Windows problem". I can't get ports open in the network, I can't get simple things like mosh to work, because again it is not "a Windows problem", so I am not going to let them screw my perfectly fine machine with some Windows bloat ware there is a reason why no one is dev is running Windows.

This actually is a hill I am willing to die on. If I can't use my machine how I see best then I can start accepting any of the interview offers my spam folder is full of.

Re: My daughter's school took over my personal Microsoft account

#472

Earlier quoted context omitted.

I had the same problem recently. Just ended up buying a new computer just for work stuff. They pay me a lot so I can afford to buy M1 Air which is still really really fast. Is it ecological? No. But the compliance beast must be fed. So fine.

If an employer requires device registration (MDM etc), they should provide the hardware.

Even then what is the purpose? Say IT department closes VPN to some Windows proprietary solution. I am just going to get a laptop from work that only runs the VPN and pipe my actual working machine through that laptop.

This is exactly the kind of waste we should get rid of, but sadly this is exactly what we get by offshoring IT into India where people just do exactly what some consultant tells them to do without any critical thought if it is appropriate or not.

Re: My daughter's school took over my personal Microsoft account

#473

I added my daughter's school account in Teams on my phone so I could submit her homework. Later, I filled out my taxes in Excel and saved them. It had uploaded them to my school's default OneDrive shared folder. It never asked me if I wanted to use that account as my default, and never told me it had changed accounts. It took me 10 minutes of non-sensical "file is locked" messages before I could delete my private dat…

If you're on Android, Microsoft Authenticator shows accounts that are registered with the Android system. To remove one, in Android itself go to Settings / Passwords & accounts.

Re: My daughter's school took over my personal Microsoft account

#474
post #108

Am I the only one who uses browser profiles to separate my personal browsing from work or other organizations I'm a part of? When I mention this approach to people they give me a strange look like I'm crazy. In Chrome you just create a new profile for each identity you have. If you're opening random incognito windows or using different browsers all the time to log in with different identities, you should be creating…

We don't know exactly why the account got taken over, but I doubt using the browser login would have prevented this (school azure taking over whatever microsoft account was logged in).

Also, Google tracks you across all websites once you login to the browser (even if you don't use google login on them). If they weren't tracking you, using the browser profiles would be great.

Re: My daughter's school took over my personal Microsoft account

#475

Earlier quoted context omitted.

Kodi has YouTube? YT was the only reason I didn't just set up a Pi 4 or whatever. Already got one LibreELEC system for the home theatre, but wanted YT for the "daily driver" TV display. I assumed any YT plugin for Kodi would be persistently behind API changes and often not working, etc... is my assumption wrong? Would be great to hear if so haha

You need to setup your own set of API keys (fairly easy) but it canl break for a week or so at a time when YT make changes that need updates for but it's reasonably rare (one every couple of years).

I've never added API keys and it mostly works fine, need to retry a link sometimes (youtube a/b testing things I guess?) and I imagine it can't play age-gated videos.

Re: My daughter's school took over my personal Microsoft account

#477
post #294

Earlier quoted context omitted.

My son has a personal Windows 11 Lenovo laptop and he is signed in with his personal Microsoft account. The laptop went away for repairs because the touchpad no longer worked. When it returned, it turned out they replaced the main board so the bit locker keys needed to be entered again. These are typically stored in your Micsosoft account only they were nowhere to be found. Some help article on the MS website explain…

All this discussion makes me glad I'm sticking to local logins for the Windows devices I still have to use. Once that option is gone, I guess that's the end of Windows on my devices.

Or use a back-up im not being sarcastic. People with Macbooks have the same issue.

Re: My daughter's school took over my personal Microsoft account

#478
post #330
post #294

Earlier quoted context omitted.

All this discussion makes me glad I'm sticking to local logins for the Windows devices I still have to use. Once that option is gone, I guess that's the end of Windows on my devices.

Yup, Microsoft can't even keep straight their account management, yet they are insisting on depreciating the local-only accounts. I strictly use the local-only setup. I'm sort of OK if they still leave a relatively trivial backdoor to do this, but if they ever flat require an online account, I'm out, hard. This is partially due to wanting to avoid the hassle and management of yet-another-forking-online-acct-IDGAF-abo…

The internet was not designed to deal with money, or security. The internet is designed strictly for information transfer from one place to another with extreme efficiency.

At that, it still excels and is no mistake. The problem is all the people using it for money.

Re: My daughter's school took over my personal Microsoft account

#479
post #291

Earlier quoted context omitted.

saved in the browser

Yeah, I realize it was just a continued session, but that's exactly what I mean. For things like password changes or privilege changes, there should always be a mandatory re-auth to make sure it's not someone else at keys. This is pretty much just best practice. When's the last time you could change your password without entering the original, short of a re-verification via email? Same idea here.

>a mandatory re-auth

which, if the persons password is saved in their browser, would pass through to the website, granting a re-auth.

Post reply on HN