Azure – Workshops available to learn Cosmos DB

Want to learn Azure Cosmos DB but don’t know where to start? So, you are lucky, free/self learning workshops are available to start learning Cosmos DB at https://cosmosdb.github.io/labs/ The workshop is composed with 4 labs, plus intro and clean up You will need to use a Windows 10 x64 version with the .Net Framework 4.5.1 (or greater) Happy learning

Read More

Azure – New version of the Developer’s Guide is now available

The updated version of the free ebook “Developer’s Guide to Azure” is now available – in PDF, EPub or Mobi. The ebook covers: Chapter 1: The Developer’s Guide to Azure Chapter 2: Getting started with Azure Chapter 3: Securing your application Chapter 4: Adding intelligence to your application Chapter 5: Working with and understanding IoT Chapter 6: Where and how to deploy your Azure services Chapter 7: Microsoft Azure in…

Read More

Azure – Azure Security Center playbooks

4 new playbooks to demonstrate Azure Security Center capabilities are available. With these 4 playbooks you can demonstrate/evaluate Azure Security Capabilities to protect your Azure resources against virus attack, SQL injection, DDoS on public IP or cross site scripting. You can deploy the playbooks from the following URL to your Azure tenant: Virus attack playbook – https://aka.ms/ASCPlaybooksVAttack – deploys 2 virtual machines, OMS and associated network resources. One of the…

Read More

Azure – You can now convert/migrate virtual machine with unmanaged disks to managed disks

If you are using Azure Virtual Machine and have configure it to use unmanaged disks, you can now migrate to managed disks without having to delete and recreate the virtual machine. The below list gives you some good reason to move to managed disks: Scale your application without worrying about storage account limits Achieve high-availability across your compute and storage resources with aligned fault domains Create VM Scale Sets with…

Read More

Azure – You can choose Basic or Advanced options for NSG when creating a virtual machine

When you create a virtual machine on Azure using the Azure portal, you can now choose between Basic or Advanced when setting up the Network Security Group (NSG). The Basic option let you select which default ports (HTTP, HTTPS, RDP, SQL…) to allow (keeping in mind that this/these port(s) will be exposed to the internet) while the Advanced option lets you select or create your very own Network Security Group…

Read More

Azure – You can run (predefined) commands from the portal

I just found it but apparently it has been there for few weeks already; you can run predefined command from the Azure portal to the Azure virtual machine. The predefined commands you can execute are: RunPowerShellScript to executes a PowerShell script; the script must be saved in the virtual machine EnableRemotePS to enable remote PowerShell EnableAdminAccount to checks if the local Administrator account is disabled, and if so enables it…

Read More

SCCM – You can now use Azure ARM when deploying Cloud Management Gateway and Distribution Point

With the latest update for System Center Configuration Manager (SCCM) Current Branch (build 1806), you can now select and use Azure Resource Manager (ARM) when deploying Cloud Management Gateway (CMG) and/or Cloud Distribution Point (CDP); this should now be your preferred option for such deployment. Using the SCCM Console, go to the Administration workspace and reach the Cloud Services\Cloud Distribution Points or Cloud Services\Cloud Management Gateway section to create the…

Read More

SCCM – You can now use your cloud management gateway for content distribution

With the latest release of System Center Configuration Manager (SCCM) Current Branch (build 1806), you can now use your cloud management gateway to distribute content. Previously you had to deploy 2 separate cloud roles: the cloud management gateway AND the cloud distribution point. To enable this option, go to the Administration workspace and reach out the Cloud Services\Cloud Management Gateway section Then edit (or create if you do not have…

Read More

SCCM – Improvements for Azure AD Joined devices managed by SCCM

You may already be aware that the introduction of Azure Active Directory (Azure AD) integration with System Center Configuration Manager (SCCM) starts reducing the certificate requirements. Well, this integration has been updated (with the current release – build 1806 – this is still a preview) to allow Azure AD Joined devices managed by SCCM to communicate using HTTP with the SCCM environment through the cloud management gateway To implement this…

Read More

Azure – Azure Management Groups is now available

A new capability feature has been released on Azure: Azure Management Groups. This new capability will help you managing and organizing your Azure subscriptions while ensuring compliance and governance is properly applied. By using Azure Management Groups you can now reduce the workloads and risks associated with user assignments; like granting access to multiple subscriptions to a user or ensuring users have appropriate permissions while reducing the complexity of the…

Read More

Intune – Third party certification authorities is now supported for SCEP

One of the important security management responsibilities of Microsoft Intune is the ability to issue certificates to devices using the Simple Certificate Enrollment Protocol (SCEP). Starting today, Intune now supports third party certification authorities for SCEP – starting with Entrust as first CA. Support of Active Directory Certificate Services is still supported of course Below an high level diagram explaining how SCEP works with Intune (courtesy Microsoft) To setup the…

Read More

Azure – An updated interface for Azure AD Roles management

The Azure Active Directory Roles configuration blade has been updated to provide more details and management option for Azure AD Roles. Connect to your Azure administration portal (https://portal.azure.com) or Azure AD administration portal (https://aad.portal.azure.com) and reach out your Azure Active Directory blade or Then reach out the Roles and administrators blade At first sight it does not seems to had some changes but it has been updated; first, if you…

Read More

Azure / Office 365 – You can now use your Microsoft Authenticator mobile app for SSPR (preview)

The Self Service Password Reset, available with Azure AD and Office 365, has been updated to let your end-user use the Microsoft Authenticator mobile app when using the Self Service Password Reset (SSPR). First you need to enable this new capability from your Azure AD portal (https://aad.portal.azure.com/) or Azure portal (https://portal.azure.com) and reach the Password reset configuration blade Then go to the Authentication methods blade and enable the Mobile app…

Read More

Azure – New version of Azure AD Connect available for autoupgrade

If you have configured your Azure AD Connect (the directory synchronization tool for Azure AD and Office 365), a new version (1.1.880.0) has been made available. This version solves the issue with Azure AD Connect Health agent running 100% CPU – which was (incorrectly?) reported to be related to the Framework update. Also part of this update support for Windows Server 2019 Essentials and GA (general availability) of the integration…

Read More

Azure – Azure AD Conditional Access sign-ins reports in preview

You may already be aware of this security feature called Azure AD Conditional Access helping you protecting and securing access to your resources published through Azure AD. A new capability to this feature has been added (in preview) to provide a better reporting and troubleshooting capabilities: Azure AD Conditional Access Sign-Ins Report To start using it, logon to your Azure AD administration portal – either from the Azure portal (https://portal.azure.com)…

Read More