Practical technology help for homes and small businesses, from someone who knows how to make it work. Based in Martinez, serving Contra Costa County.
Practical IT guides, cheatsheets, and references from Jeremiah Ellington, drawn from more than 20 years of IT work in public sector and higher education.
Practical guides for homeowners, homelab builders, IT pros, and small businesses, written by Jeremiah Ellington, an IT professional with more than 20 years of experience. Each guide says who it's for, what software versions it covers, and when it was last reviewed.
What the 3-2-1 backup rule really means, how backups differ from sync, how to set recovery goals, and how to build and test a backup plan that survives disk failure, theft, and ransomware, for homes and small businesses.
Windows 11 (Windows 10 reached end of support on October 14, 2025), current macOS, Linux, NAS devices, and Microsoft 365. Tool features as documented on the review date · Updated
How a dependable network fits together: routers vs. firewalls, switches, VLANs, Wi-Fi, PoE, guest networks, firewall rules, DNS, remote access, and monitoring, with plans for homes and small offices.
Vendor-neutral. Command examples: Cisco IOS XE 17.x (Catalyst 9300 documentation), FortiOS 7.6 and 8.0, Windows 11, Linux and macOS. The Cisco and FortiGate examples are checked against vendor documentation, not tested on equipment. · Updated
The settings that matter most when a small office runs on Microsoft 365: admin and emergency accounts, MFA, email authentication, shared mailboxes, sharing, backups, onboarding and offboarding, plus a short Exchange Online PowerShell toolkit.
Microsoft 365 Business Basic, Business Standard, and Business Premium (cloud-only tenants). Checked against Microsoft Learn documentation on 2026-10-27, not tested in a live tenant. Exchange Online PowerShell module 3.10.1 or later on PowerShell 7.6 or Windows PowerShell 5.1 · Updated
Plan, build, and run a single-node Proxmox VE homelab: hardware, storage, networking, installation, VMs vs. containers, backups, and security, plus the mistakes to avoid.
Proxmox VE 9.x (9.2 current on 2026-10-27; Debian 13 based); single node. Commands and settings checked against Proxmox VE 9.x docs, not lab-tested on a 9.2 host · Updated
A prioritized security checklist for small businesses without IT staff: MFA, password managers, updates, endpoint protection, backups, email security, admin accounts, remote access, logging, incident response, and vendor security.
Small businesses using Windows/macOS computers and Microsoft 365 or Google Workspace; guidance aligned with CISA, FTC, and NIST resources current on the review date · Updated
Domains, DNS, security certificates (TLS), and every kind of hosting explained in plain terms (shared, managed WordPress, VPS, managed cloud, static, and React/Next.js platforms), with a decision framework, honest cost and lock-in notes, and recommended setups for common small-business situations.
Provider plans and documentation as published on 2026-10-24; WordPress 6.x for WordPress-specific notes · Updated
Network and broadcast addresses, usable host range, wildcard and binary masks for any IPv4 address and prefix, with correct /31 and /32 handling and a subnet split helper.
Runs in your browser · nothing you enter is sent or saved
Convert a subnet mask or prefix to a Cisco wildcard mask, or check any ACL address and wildcard, including noncontiguous ones, and test which addresses it matches.
Runs in your browser · nothing you enter is sent or saved
Practice subnetting without a chart: enter an IPv4 address and prefix, then reveal the interesting octet, increment, block, network, broadcast and usable range one step at a time, or test yourself on random questions.
Runs in your browser · nothing you enter is sent or saved
Where Microsoft's own settings turn Copilot off in Word, Excel, PowerPoint, OneNote and Outlook, what each setting covers, and where it can't be turned off, as of October 30, 2026.
Word, Excel, PowerPoint and OneNote for Microsoft 365 on Windows, and Word, Excel and PowerPoint for Microsoft 365 on Mac, signed in with a personal Microsoft account; Outlook's Copilot setting on Android, iOS, Mac, the web and new Outlook for Windows; Copilot formula suggestions in Excel for Windows and Excel for the web. As described in Microsoft's support pages on 2026-10-30. Checked against documentation only, not tested in an account · Updated
What to keep out of an AI chatbot, how personal and work accounts differ, the privacy settings Claude, Copilot and Gemini document, and where to check ChatGPT's, as of October 29, 2026.
The personal and work versions of ChatGPT, Claude, Microsoft Copilot and Google Gemini, as described in each vendor's public documentation on 2026-10-29. Checked against documentation only, not signed in and not tested in any account · Updated
What a TLS certificate is and how a browser or server decides to trust one: key pairs, signing requests, the subject and SAN, key usage, chains to a trusted root, validity, revocation, and where the certificate fits in the TLS handshake.
Vendor-neutral: X.509 v3 certificates (RFC 5280), service identity (RFC 9525) and TLS 1.3 (RFC 8446). Let's Encrypt details re-checked on 2026-10-29. Checked against the RFCs and vendor documentation, not lab-tested · Updated
How Group Policy works in a single Active Directory domain: local and domain policy, processing order, filtering, the Central Store, backup and restore, troubleshooting, and the change-control habits that keep a policy change from becoming an outage.
Active Directory domains and Windows clients on currently supported Windows Server and Windows versions; check your version's documentation where noted. Checked against Microsoft Learn and the Microsoft Security Baselines on 2026-10-29, not lab-tested. · Updated
OpenSSL commands for reading certificates, requests, CRLs and PFX files, checking a chain, matching a key to its certificate, and testing a live TLS server with s_client, organised around four everyday jobs.
OpenSSL 3.5 LTS on Linux or macOS. Checked against the OpenSSL 3.5 manual pages (docs.openssl.org/3.5) on 2026-10-27, not run against a live server; other 3.x releases may differ in detail · Updated
The Windows tools for finding, checking, requesting and installing certificates, organised around four everyday jobs: renewing a server certificate, fixing an untrusted chain, moving a certificate to a new server, and publishing a template on an AD CS issuing CA.
Windows Server 2016 to 2025 and Windows 11: certutil, certreq, certlm.msc and certmgr.msc; the PowerShell Cert: drive in Windows PowerShell 5.1 and PowerShell 7.6 (the -DnsName, -EKU, -ExpiringInDays and -SSLServerAuthentication filters need 5.1 or 7.1 and later); the ADCSAdministration module on an enterprise issuing CA. Checked against Microsoft Learn on 2026-10-27, not lab-tested · Updated
How these guides are made
Checked against official documentation. Every guide lists its sources, the software versions it applies to, and when it was last reviewed.
Reviewed by a person before publishing. Drafts go through technical and editorial review. Nothing is published just because it was written.
Honest about recommendations. Some links can earn me a commission, and they're labeled when they do. Non-affiliate options are included when they're the better fit.