cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Core Infrastructure and Security Blog
Options
4,892

To AAD Join or Not … That is the Question

Michael Hildebrand on May 27 2022 05:50 AM
Some discussion around Hybrid Join vs native AAD Join for Windows PCs as we go further on the journey of endpoint modern...
1,166

Semi-Automate ConfigMgr Firewall Settings

jonasoh on May 23 2022 02:29 AM
If you are looking for a way to further strengthen your ConfigMgr security posture, this article might be helpful.
2,186

Azure Monitor: Expanding the Out-of-the-Box Observability for your IT Infrastructure

Bruno Gabrielli on May 16 2022 12:00 AM
How many times have you found yourself in the need of monitoring a custom KPI? How many times did you need to react to a...
2,077

Introduction to Network Trace Analysis Part 0: Laying the Groundwork

WillAftring on May 09 2022 12:00 AM
Nearly all modern applications use the network to some degree and knowing how your specific technology interacts with th...
17K

Passwordless RDP with Windows Hello for Business

parobinson on May 04 2022 03:36 PM
Get a Passwordless RDP experience and admin consoles using Windows Hello for Business with dual enrollment
2,554

Removing Duplicate Device Objects from Configuration Manager with PowerShell

Chris Vetter on Apr 25 2022 04:25 PM
Learn how to remove duplicate objects from you Configuration Manager environment easily and quicky with a little PowerSh...
4,011

Move Azure VM to a New Virtual Network Subnet Using Terraform

wernerrall on Apr 18 2022 12:00 AM
Sometimes you create a server in Azure and only find out afterwards you need to change the Virtual Network is resides in...
5,114

Configure IE Mode in Edge with Microsoft Endpoint (Intune)

rlpcarvalho on Apr 11 2022 12:00 AM
With the Internet Explorer 11 desktop app retirement announced for next June 15, 2022, many customers started asking for...
4,332

A Starting Point for Monitoring Azure

edzonca on Apr 04 2022 01:00 AM
A little journey on the three pillars of Monitoring Azure!
3,840

When Is True Not Equal To True?

PaulHarrison on Mar 21 2022 06:51 AM
An investigation of homoglyphs, their impact on code, and how to detect them.
3,549

Seamless Onboarding Cloud Native Win10 PCs to MDE Using MEM

absharan on Mar 14 2022 08:33 AM
This blog will help you understand step-by-step process for onboarding cloud native Win10 PCs to Microsoft Defender for ...
4,661

Defender Definition Updates with MECM - Part 1 - Learnings from the Field

Stefan Röll on Mar 07 2022 01:48 AM
Defender Updates are getting updated multiple times per day. If you have a lot of Distribution Points, slow links or oth...
3,412

Quickly Estimate Replication Time for Azure Migrate Virtual Machines

wernerrall on Feb 28 2022 09:00 AM
When you need to migrate servers to the cloud, estimating transfer time can be difficult. There is a formula we can use ...
3,718

Secrets from the Deep – The DNS Analytical Log – Part 5

EJansen on Feb 21 2022 12:04 AM
Eric Jansen here to discuss the seemingly mysterious, but extremely useful DNS Analytical Log. In Part 5 of this series,...
6,055

How to Find Azure Resources with Public IP Addresses

wernerrall on Feb 13 2022 11:00 PM
Creating Resources in Azure is so simple for IT teams these days but finding all the public endpoints that could be visi...
4,227

Private AKS and ACR Using Private Endpoint – Part 2/2

HoussemDellai on Feb 06 2022 03:33 AM
To add security to their environments, customers uses private AKS and ACR. They leverage Azure Private Endpoint to secur...
5,869

Private AKS and ACR Using Private Endpoint – Part 1/2

HoussemDellai on Jan 30 2022 04:33 AM
To add security to their environments, customers uses private AKS and ACR. They leverage Azure Private Endpoint to secur...
14K

Azure Identities and Roles Governance Dashboard At Your Fingertips

hspinto on Jan 24 2022 12:00 AM
I am writing about Azure Identities and Roles and how the Azure Optimization Engine can help you gain better visibility ...
35.4K

Windows 10 or Windows 11 GPO ADMX - Which One To Use For Your Central Store?

hewagen on Jan 16 2022 11:08 PM
Windows 10 and Windows 11 use different Administrative Templates for their Group Policy Objects. In you on-premise Activ...
4,841

Azure Monitor: Audit Your Azure and Non-Azure SQL Server

Bruno Gabrielli on Jan 10 2022 12:00 AM
Most of you probably know that SQL Server is capable of auditing security related information, such as access to a given...
6,656

How to Remote Assist Autopilot Deployments with Quick Assist

rlpcarvalho on Jan 03 2022 12:00 AM
How many times do we need to support remote users when they are installing a Windows 10/11 computer with Autopilot? Prob...
24.3K

Recurring Active Directory Checks

PaulHarrison on Dec 28 2021 10:38 AM
Check your Active Directory environment for common mistakes automatically.
5,136

Azure Update Management (Log Analytics Agents & Automation Accounts)

wernerrall on Dec 19 2021 11:00 PM
Start patching servers as soon as possible using a single Update Management Solution deployed on a single Log Analytics ...
12.1K

Forward On-Premises Windows Security Event Logs to Microsoft Sentinel

Paul Bergson on Dec 16 2021 03:16 PM
There is no need to load an agent on every device to capture the Windows Security Event Logs from your on-premises Windo...
3,862

Azure Virtual Desktop, ADFS SSO | The Case of the Trailing Slash

Daniel Carroll on Dec 13 2021 09:48 AM
I will share a recent case to help break down the AVD ADFS SSO login process and to help isolate configuration issues
782K

Using Azure Bicep to Deploy SQL MI into an Existing Virtual Network

RobertLightner on Dec 06 2021 06:45 AM
Azure Bicep is a domain-specific language (DSL) that uses declarative syntax to deploy Azure resources. In this article,...
3,889

PowerApp Meets MECM: Modern Software Deployment

Fabian0402 on Dec 02 2021 12:13 AM
If you are looking for a new way to improve your Software Order (IMAC) processes this could inspire you Collect(col_Soft...
4,149

Simple and Central Azure Virtual Network Management Using the New Azure Virtual Network Manager

EricLong on Nov 30 2021 01:20 PM
Manage connectivity and security controls across Azure virtual networks easily and at scale with Azure Virtual Network M...
9,572

Use Azure Logic Apps to Notify of Pending AAD Application Client Secrets and Certificate Expirations

Russ Rimmerman on Nov 29 2021 07:51 AM
Are you challenged with keeping up with all your Azure Active Directory Enterprise Application client secrets and certif...
3,683

Fixing Mobile Devices in Non-Compliant Status – MEM

John_Barbare on Nov 21 2021 09:10 PM
In this blog, we will fix mobile devices in non-compliant status in MEM.

Latest Comments

Marrkku
in To AAD Join or Not … That is the Question on May 27 2022 09:45 PM
I’d like to see improvements in the portal profile reporting and better views to manage conflicts. For example, a single customisable view showing all “settings” enabled with a “parent policy” column. I’ve inherited a tenancy and troubleshooting profile conflicts right now is too time consuming. Als...
1 Likes
Ryan Pertusio
in To AAD Join or Not … That is the Question on May 27 2022 03:43 PM
Thanks Michael for a great post! We've ripped off the band-aid and we'll go full AADJ. We'll see how that works for us. Remaining gaps:Large gap: Machine-based kerberos auth: This issue you mentioned above is critical to the Microsoft Network Policy server (RADIUS) servers that provide our users con...
0 Likes
rgmorato
in To AAD Join or Not … That is the Question on May 27 2022 01:18 PM
Hi @Michael Hildebrand . I have 120 sites, on a WAN FULL MESH network, each with at least one WDC and one MEMC Distribution Point. Each site has its own internet output via a dedicated local link (the vast majority are only 10Mbps). How to solve the problem of internet link for Windows update, appli...
0 Likes
carlos_petrosino
in Microsoft 365 Password Expiration Notification Email Solution for On-Premises AD Accounts on May 27 2022 12:01 PM
DomAnnicette I did exactly as the article, but it didn't work... I don't know what else to do, can you help me?
0 Likes
Jerry Devore
in Decrypting the Selection of Supported Kerberos Encryption Types on May 27 2022 10:58 AM
Great catch Shnitzel! - I have made the table corrections. Shaz_Blog - Once logging confirms tickets are no longer issued with RC4 you will want to use the "Configure encryption types allowed" policy to remove RC4 support for all domain members and not just the domain controllers. After a Windows de...
0 Likes
We support Ukraine and condemn war. Push Russian government to act against war. Be brave, vocal and show your support to Ukraine. Follow the latest news HERE