Microsoft Azure

Azure – Direct access to Azure Shell on the browser

As you may know, Microsoft has added access to Azure Shell (either PowerShell or Bash) directly from the portal; giving you the possibility to run shell commands directly from the web browser (see http://blog.hametbenoit.info/2017/09/27/azure-powershell-in-azure-cloud-shell-now-in-preview/) Now, you can have access to the same without logging on to the Azure portal – just go to https://shell.azure.com/ If […]

Azure – Direct access to Azure Shell on the browser Read More »

Azure AD – Pass-Through authentication account lockout

When you use Azure AD Pass-Through authentication, your users are getting authenticated against your on-premises Active Directory when accessing cloud services (same way if you were using Federation, except this requires less infrastructure). So, knowing that (you are authenticating against your on-premises AD), what happen if an attacker is trying to gain access to your

Azure AD – Pass-Through authentication account lockout Read More »

Azure – You can integrate Azure monitoring with your ITSM

The general availability of the IT Service Manager Connector (ITSMC) has just been announced. You can now integrate Azure monitoring with your ITSM, like ServiceNow or System Center Service Manager, to automatically generates ticket and notification from your ITSM tool. More details on the pricing available here https://azure.microsoft.com/en-us/pricing/details/monitor/ and the documentation to integrate your ITSM

Azure – You can integrate Azure monitoring with your ITSM Read More »

Azure – Azure Backup integrated with VM creation process

Azure Backup is now being integrated with the virtual machine creation process. This means you can immediately apply a backup policy when creating your virtual machine on Azure. When you create a new virtual machine you will have the ability to define the backup policy; the option will be available when setting up the virtual

Azure – Azure Backup integrated with VM creation process Read More »

Azure – You can evaluate your Conditional Access before testing

Setting up Conditional Access on Azure can be a little bit tricky and may result in loosing access to the resource. Off course you can (and should always) test the configuration before putting into production, but even then this is time consuming. Now, you can evaluate your Conditional Access configuration before testing it with the

Azure – You can evaluate your Conditional Access before testing Read More »

Azure – Another security problem with Azure AD Connect

It has just been published (December 12th, 2017), a new potential security hole in Azure AD Connect (at least version 1.1.649.0, the advisory bulletin does not specify the impacted version(s)) which could leads the Azure AD Connect service account with insufficient restriction when Azure AD Connect automatically creates it. See the advisory bulleting available at

Azure – Another security problem with Azure AD Connect Read More »

Azure – Launch of the Azure Migrate preview

This has been announced at the Ignite Conference earlier and in private preview for quite some time now. Today, Azure Migrate is launched in public preview – everybody can try it to migrate on-premises VM’s workloads to Azure VM’s. To start using Azure Migrate to help you identify if a workload can be migrated to

Azure – Launch of the Azure Migrate preview Read More »

Azure – Get notified when an Azure incident impacts you

You already know you have access to the Azure Health Dashboard to have a look on all your Azure resource and if there is any incident or advisory. But this is more a reactive situation than pro active. You can now create a service alert to be notified immediately when an incident occurs. To create

Azure – Get notified when an Azure incident impacts you Read More »

SCCM – Update – Create Azure AD Joined device collection

You may have already read my post on how to create an SCCM device collection to get Azure AD Joined devices (https://t.co/uJ5eBAtutT). This post is an update, so you can now forget the first one. With one of the latest SCCM update (sorry did not notice earlier – but at least the last update 1710)

SCCM – Update – Create Azure AD Joined device collection Read More »

Azure – Group Based Licensing bug

As you may already know you can use security groups to automatically assign licenses to users member of the groups. Keeping in mind this feature is still in preview (so basically beta), there could be some glitch and here is one… So you setup a universal security group synced to Azure AD and then use

Azure – Group Based Licensing bug Read More »