🔒 Patreon Special

IT Pros: exclusive shows await you on Patreon, focusing on the more challenging aspects of running your practice and working with clients and employees.


680: Microsoft Retires SMS/Voice MFA, Salesforce SSO Headaches, and SOC 2 Realities

Sam and Joe discuss Microsoft’s plan to retire Microsoft-provided SMS and voice calls for MFA, with key dates of Sept 1, 2026 (users on SMS/voice are automatically enabled for passkeys and nudged to register) and Feb 1, 2027 (blocking enforcement for users whose only MFA is SMS/voice, no opt-out), noting paid/customer-managed telecom options and the need to warn clients, address legacy per-user MFA vs conditional access, and handle shared accounts via shared mailboxes or passkey-sharing tools. Sam recounts a prolonged Salesforce SSO/MFA issue worsened by poor vendor documentation and misleading AI guidance, ultimately tied to a Microsoft KB update. They then cover partnering with Fuji for client SOC 2 compliance support, emphasizing evidence, audits, costs, and ongoing maintenance, plus how cyber-insurance questionnaires drive security improvements. The episode also touches on residential support cases, Vision Pro support challenges with DRM blocking screen mirroring, and show wrap-up.

00:00 Show Kickoff

00:17 Microsoft MFA SMS Retirement

00:44 Key Dates and User Impact

03:28 Authenticator Backups and PSAs

04:40 Legacy MFA Cleanup Challenges

07:36 Conditional Access Licensing Risks

10:12 Shared Accounts and Passkeys

12:21 Salesforce MFA SSO Headaches

13:25 AI Missteps and Vendor Docs

17:50 SOC 2 Help from Fuji

21:23 SOC 2 Costs and Maintenance

22:49 Easy Buttons and Real Audits

26:27 Cyber Insurance Questionnaires

27:53 Partnering for Expertise

29:07 Cyber Insurance Foot in Door

30:31 Apple Store Referral Win

31:01 Lightroom Migration Pitfalls

34:31 Blocked Contacts Mystery

38:04 Email Search and User Training

40:02 Supporting Vision Pro Clients

47:28 Amazon Returns and Exceptions

50:24 Wrap Up and Callouts

679: New OS, Old Problems

In this episode of Command Control Power, the hosts discuss early experiences with the macOS 27 “Golden Gate” beta, noting it feels snappy and stable but breaks QuickBooks, leading one host to keep QuickBooks on a headless Mac mini running macOS 26. They cover upcoming Apple Intelligence features, including AI-assisted file renaming, Safari profiles and AI-suggested tab grouping, page-change notifications, and Apple Passwords’ potential to automate password changes (which appears incomplete in testing). The conversation compares Apple Passwords with 1Password, explains passkeys with client-friendly metaphors and technical points, and notes issues caused by multiple password tools. They also review AirPods Pro 3 fit and changes, discuss hearing-aid functionality on AirPods Pro 2/3, and share troubleshooting tips for Splashtop permissions and an Apple Mail send bug tied to “check spelling before sending.”

00:00 Show Kickoff

00:08 macOS Golden Gate Beta

01:47 Safari Tab Groups

06:18 Apple Intelligence Highlights

08:39 Passwords Auto Change

17:48 Passkeys Explained

24:01 Passkey Pitfalls

26:33 AirPods Pro 3 First Impressions

26:47 Better Fit Out of Box

27:07 Why Upgrade AirPods

28:08 Lost AirPod Find My

30:10 Sound Signature Debate

31:25 AirPods at Loud Venues

33:03 Hearing Aid Potential

37:00 Remote Setup iPhone Mirroring

42:08 Splashtop Permissions Trick

44:42 Fuzzy Mic Trend Rant

46:50 Apple Mail Send Bug Fix

49:17 Next Episode Teasers Wrap

Best of CCP - 342: Accruing Technical Debt

Sam Valencia, Jerry Zigmont and Joe Saponare discuss working with Apple technology and clients. Drawn from their combined experience of over 20 years in the Apple Consultants Network, thaey discuss technical support issues both with the technology and working with clients.

677: Beyond the Surface: Network Tools and Cloud Security

The hosts discuss several network and security topics, starting with UniFi’s new “Device Supervisor” feature under Power and Resiliency to monitor device heartbeat and automatically recover silent devices, plus UniFi’s move from UniFi Server to UniFi OS Server that may require a migration and re-adoption, pushing remaining sites off a Mac mini to cloud management. They revisit ethernet surge protection and grounding for outdoor cameras and consider alternatives like rack grounding, DIN rails, grounding rods, or using a sacrificial outdoor switch with fiber uplink. They mention Speedify for bonding multiple cellular/Wi‑Fi connections. The conversation shifts to email security: Microsoft’s “impossible travel” detection and API reporting versus Google’s weaker reporting, alongside odd Google reauthentication/password-change loops and MFA fatigue leading to a Google account breach. They cover deploying Claude Enterprise in healthcare with BAA needs and using Microsoft Purview/Defender to block pasting PHI into Claude, then discuss risks of fake password prompts, password managers (1Password vs LastPass), and end-user security training.

00:00 Show Kickoff Banter

00:04 Jerry Well Photo Story

01:10 UniFi Device Supervisor

02:49 UniFi OS Server Migration

03:55 Keyboard Noise Side Quest

04:32 Ethernet Surge Protection

07:17 Lightning Grounding Rods

10:40 Speedify Bonded Cellular

15:06 Impossible Travel Alerts

17:38 Google Reauth Loop Mystery

22:12 Microsoft vs Google Security

23:19 Admin Portal URL Changes

23:49 MSP Learning Curve

24:30 Claude Enterprise in Healthcare

26:06 Audit Logs and Retention

28:12 Purview Defender DLP Demo

29:31 Licensing and Requirements

32:23 Defender on Mac Explained

33:34 Spotting Fake Password Prompts

38:20 Password Managers and MFA Pitfalls

42:23 LastPass Breaches and Risks

44:53 User Training and Future Protections

47:45 Closing Thanks and Support

676: OS 27 Support, Siri AI, and the New Backup Reality

The hosts discuss early impressions of iOS 27 on an iPhone 15 Pro Max and interest in Siri AI on newer iPhone hardware, plus Apple’s macOS 27 compatibility list ending Intel support while continuing support for 2020 M1 Macs, which they estimate could extend security updates to roughly 2029. They debate device lifespans for home and business, note iOS 27 supports iPhone 11, and consider how Siri AI’s on-device, voice-first, screen-aware approach could change form factors and competition. A cautionary story highlights lost Quicken 2016 data due to missing backups and limitations of iCloud Drive and Backblaze, including Backblaze’s cloud-sync folder controversy and retention/restore issues, while Carbon Copy Cloner’s option to temporarily download cloud-only files is raised. They recount multiple Migration Assistant failures resolved by re-wiping and redoing the migration, identify a client complaint as Stage Manager, and briefly cover testing the UniFi 5G Max cellular backup with AT&T and a low-income T-Mobile-based SIM option.

00:00 OS 27 First Impressions

01:13 macOS 27 Compatibility Shift

02:34 M1 Macs Longevity

05:34 Upgrade Cycles and Siri AI

08:30 Siri AI and Voice Future

10:50 AI Hardware Beyond Phones

13:05 Quicken File Lost

15:09 Backblaze Cloud Sync Fallout

23:24 Carbon Copy Cloner Workaround

26:54 Backup Strategy for Workstations

28:20 Migration Assistant Stalls

29:24 Migration Keeps Dropping

30:36 iCloud Backup Wish

31:25 Thunderbolt Reset Fix

32:55 Fallback Migration Options

33:59 Why Did It Fail

34:59 Sam’s Reboot Mystery

36:56 Backups and Backblaze Rant

40:21 Stage Manager Diagnosis

42:48 Settings Menu Weirdness

46:26 UniFi 5G Max Testing

50:18 Wrap Up and Goodbye