InTune Migration PreExisting Identities
For Intune (device) migrations to be successful, two things need to be in place The identities (for those devices) need to be in place already The licensing for the devices…
Storage Accounts and Blob Storage
Step 1 - Creating a NEW STORAGE ACCOUNT Types - Storage accounts are of three types - V2 (most general purpose), V1 (hardly used anymore) and Blob Storage (can only…
Azure Policy Recommended Policies
These are the top recommended policies for most customers. Enforce resource tagging Limit allowed locations Prohibit specific resources deployment ( Public IP addresses) Require Secure Transfer for Storage Accounts Block…
Device Restrictions using Conditional Access Policies in Azure Entra ID
Now, there's a policy that allows you to restrict which devices get into your Azure subscriptions. The compliant devices policy requires you to list CIDR ranges/devices that are permitted. You…
Letting in vendors to your Entra Tenant
Use Case Let in a set of Vendor Engineers into your Azure Subscription (typically with GLOBAL READER permissions) Steps in Entra and in Azure Set up SSO using the vendor's…
P2 licenses – Use Case – SSO Authentication and MFA – no mailbox
Use Case - SSO Authentication and MFA - no mailbox P2 licenses - Cloud Only Authentication (not federated)
Devices versus Apps – Managed by Intune
Intune Can be used to manage both devices as well as applications on the devices. One can configure InTune for JUST application management (and have some other tool do the…
Migration of Azure site-to-site VPN tunnel from one region to another
Option 1 - create a new VPN in the new region Create a new VPN gateway in the desired region Configure the new gateway with the same connection settings as…
Azure Hub Spoke Best Practices
The HUB VNET contains the Firewall Subnet, the Gateway VPN Subnet (which has a SITE TO SITE VPN) and the workload Subnet A. The Spoke VNET contains other workloads in…
Container Networking Security on Azure
For Containers to be assigned IP Addresses (in order to access Azure PaaS services - the storage service), one can use the Container network interface plugin