Google search for ADFS and Kerberos, will tell you ADFS uses Kerberos Constrained Delegation, in order to validate your credentials, so there is kerberos authentication between ADFS and your Domain Controllers. Windows Integrated Authentication (WIA) or true SSO, is when you sign-in without entering your credentials. But why does it only work from inside your local…
Azure AD Joined Windows 10 devices with Intune Enrollment can have Intunes Software Update manage Windows Update, and perhaps the device image from your vendor is 1709 and you need Intune to upgrade devices to 1803 in order to become compliant. A very easy task to configure in Intune, but we have been struggling for…
Testing Windows 10 Compliance policy and configuration policies, and Update Rings using Virtual Machines, because I didn’t have the necessary thick clients yet. Of course I would need to test them too, but using virtual machines is a good way to learn about Intune’s Mobile Device Management of Windows 10 clients. What kind of challenges did…
I like a classic watch, and for that reason I didn’t find any smartwatch or training associate worthy my money. To be honest, I was ready to purchase a Samsung Gear S3 Classic, because it is the closest smartwatch to a classic watch, and I came across articles saying it could now work with iPhone…
Due to an unknown error when accessing Outlook Web Access (did not affect ECP) in CU4, we decided to upgrade to CU8. Also note that Microsoft will only support you on the two latest CU for Exchange, so they don’t care that much what isn’t working if you haven’t followed the updates. During the pre-reqs…
Are you managing multiple subscriptions with a single corporate account? I sometimes work with customers that uses multiple subscriptions in Azure, but uses the same Azure Active Directory, so you can atleast access them all from one account. I searched the Internet and found this simple way of selecting the subscription from a list: #Get…
I want to address the situation when you would like to publish a web service, but the endpoint isn’t at the top level of the web site or the endpoint you publish uses sources from other subsites at the same, but different level as your endpoint. So if you try to publish the endpoint, the…
For consistance in filtering your billing, you should take advantage of tags added using policies. Small organizations can use it to filter out cost related to different applications, and larger organization to divide the billing into different business areas. Policies can currently only be viewed in the Preview Portal of Azure, but will soon be…
Office 365 Teams is built on Office 365 Groups, which include a “shared mailbox” for the members, allthough Groups mailboxes are not the same according to Exchange Online. Default all these mailboxes get the tenant domain customname.onmicrosoft.com, and I don’t see why anyone would want that, but as long as you can use the global…
Alot of companies need to address their security by avoiding to much permissions and as a consultant I don’t want to have more permissions then I need to get the work done. Here is how we use PowerShell to extract up to date permissions from Azure. Get-AzureRmProviderOperation “Microsoft.Resources/*” | FT Operation, Description Extract to a…
I am Roy Apalnes, a Microsoft Cloud Evangelist working av Sopra Steria. Main focus in Microsoft Security and Endpoint Management, with a bigger picture in mind.