Category: Uncategorized

  • Why does ADFS, WIA and Kerbeos work togethere?

    Google search for ADFS and Kerberos, will tell you ADFS uses Kerberos Constrained Delegation, in order to validate your credentials, so there is kerberos authentication between ADFS and your Domain Controllers. Windows Integrated Authentication (WIA) or true SSO, is when you sign-in without entering your credentials. But why does it only work from inside your local […]

    Read more
  • Intune fails to Upgrade Windows from 1709 to 1803

    Intune fails to Upgrade Windows from 1709 to 1803

    Azure AD Joined Windows 10 devices with Intune Enrollment can have Intunes Software Update manage Windows Update, and perhaps the device image from your vendor is 1709 and you need Intune to upgrade devices to 1803 in order to become compliant. A very easy task to configure in Intune, but we have been struggling for […]

    Read more
  • Intune testing with Virtual Machines

    Intune testing with Virtual Machines

    Testing Windows 10 Compliance policy and configuration policies, and Update Rings using Virtual Machines, because I didn’t have the necessary thick clients yet. Of course I would need to test them too, but using virtual machines is a good way to learn about Intune’s Mobile Device Management of Windows 10 clients. What kind of challenges did […]

    Read more
  • Why I choose Apple Watch?

    Why I choose Apple Watch?

    I like a classic watch, and for that reason I didn’t find any smartwatch or training associate worthy my money. To be honest, I was ready to purchase a Samsung Gear S3 Classic, because it is the closest smartwatch to a classic watch, and I came across articles saying it could now work with iPhone […]

    Read more
  • Setup Error during pre-reqs for CU8 to Exchange 2016

    Setup Error during pre-reqs for CU8 to Exchange 2016

    Due to an unknown error when accessing Outlook Web Access (did not affect ECP) in CU4, we decided to upgrade to CU8. Also note that Microsoft will only support you on the two latest CU for Exchange, so they don’t care that much what isn’t working if you haven’t followed the updates. During the pre-reqs […]

    Read more
  • Improved Select-AzureRmSubscription

    Improved Select-AzureRmSubscription

    Are you managing multiple subscriptions with a single corporate account? I sometimes work with customers that uses multiple subscriptions in Azure, but uses the same Azure Active Directory, so you can atleast access them all from one account. I searched the Internet and found this simple way of selecting the subscription from a list: #Get […]

    Read more
  • Set HomePage for Azure AD Application Proxy applications

    Set HomePage for Azure AD Application Proxy applications

    I want to address the situation when you would like to publish a web service, but the endpoint isn’t at the top level of the web site or the endpoint you publish uses sources from other subsites at the same, but different level as your endpoint. So if you try to publish the endpoint, the […]

    Read more
  • Apply tags to resources using policies

    Apply tags to resources using policies

    For consistance in filtering your billing, you should take advantage of tags added using policies. Small organizations can use it to filter out cost related to different applications, and larger organization to divide the billing into different business areas. Policies can currently only be viewed in the Preview Portal of Azure, but will soon be […]

    Read more
  • Change SMTP Domain for Teams

    Change SMTP Domain for Teams

    Office 365 Teams is built on Office 365 Groups, which include a “shared mailbox” for the members, allthough Groups mailboxes are not the same according to Exchange Online. Default all these mailboxes get the tenant domain customname.onmicrosoft.com, and I don’t see why anyone would want that, but as long as you can use the global […]

    Read more
  • Azure Custom Role – Join VM to vNet

    Azure Custom Role – Join VM to vNet

    Alot of companies need to address their security by avoiding to much permissions and as a consultant I don’t want to have more permissions then I need to get the work done. Here is how we use PowerShell to extract up to date permissions from Azure. Get-AzureRmProviderOperation “Microsoft.Resources/*” | FT Operation, Description Extract to a […]

    Read more

Ehlo!

I am Roy Apalnes, a Microsoft Cloud Evangelist working av Sopra Steria. Main focus in Microsoft Security and Endpoint Management, with a bigger picture in mind.

Featured Posts