Auto-Documenting DSC v3 Drift and Compliance with DSC-DocsGenerator (CIS Example)
Introducing DSC-DocsGenerator — a PowerShell module that runs dsc config test against a DSC v3 YAML configuration, parses the JSON output, and produces a com...
Posts by Tag
- IaaC 6
- M365 5
- Automation 5
- PowerShell 4
- Security 4
- Intune 3
- Azure 3
- Guest 3
- Shell 3
- VirtualMachine 3
- Bicep 3
- DSCv3 3
- MDM 2
- Licences 2
- Office 2
- Access 2
- Collaboration 2
- Code 2
- WinRM 2
- ADConnect 1
- Policy 1
- Sensitive 1
- Protection 1
- Groups 1
- Sharing 1
- External 1
- GAL 1
- CrossTenant 1
- EntraID 1
- Network 1
- DSC 1
- AzureDevOps 1
- Pipeline 1
- CIS 1
- Compliance 1
- Reporting 1
- AzureArc 1
- IaC 1
IaaC
Deploy and Configure a Windows VM with Bicep and DSC v3
End-to-end walkthrough: provision an Azure Windows VM with Bicep, install DSC v3 via a Run Command extension, store DSC YAML documents in Azure Blob Storage,...
Setting Up WinRM HTTPS Listener with DSC v3 and PowerShell
This post shows how to automate a secure WinRM HTTPS listener configuration using Microsoft DSC v3. The solution combines native DSC v3 resources — Registry,...
Microsoft DSCv3 build and deploy classic resources ActiveDirectoryDSC
This blog post explores how to use Microsoft Desired State Configuration v3 (DSC v3) to build, deploy, and manage infrastructure while reusing classic PowerS...
Using the Microsoft Azure Bicep Graph Extension to Create Security Groups and Assign Roles in an Azure Landing Zone
In large, multi-subscription environments, such as Azure Landing Zones, managing identity and access at scale is a constant challenge. Security groups are a ...
Bicep Microsoft Entra (Graph) Extension - GA
The Microsoft Entra (Graph) Bicep Extension allows you to provision and manage Microsoft Entra ID (formerly Azure AD) resources using Bicep, extending Infras...
M365
Microsoft 365 Add Shared Contact to user personal mailbox for phone caller identification and more.
Run by Azure Automation account PowerShell script that will add to user personal mailbox contact and update contact. You can distribution contacts to users b...
Microsoft 365 Global Private Access Setup and replace classic VPN.
Private Access is new solution that allow to access internal resources, it replace classic VPN with identity-centric Zero Trust Network Access (ZTNA).
AD Connect migration error on Out sync rules
How to handle error caused by Out synchronization rules in migration process, with attributes mapping: AttributeFlowMapping’s specified target attribute ‘ext...
Microsoft 365 Setup Lab Environment for M365 and Intune with free custom domain names
Microsoft 365 Setup Lab Environment - Create your own Lab with custom domains setup or prepare new tenant for you company. In this article we will go through...
[EN] Azure Active Directory License assignment base on groups.
[EN] Azure Active Directory License assignment base on groups - keeping licenses assignment for user in organization when we have different variants and leve...
Automation
Azure Storage Account how to setup policy for object replication blobs between multi tenant for more then 10 blobs.
Setup object replication policy for 10 to 1000 blobs between two storage account in different tenants.
Microsoft 365 Add Shared Contact to user personal mailbox for phone caller identification and more.
Run by Azure Automation account PowerShell script that will add to user personal mailbox contact and update contact. You can distribution contacts to users b...
Microsoft 365 Graph synchronization GAL to SharePoint Online List across multiple tenants.
Microsoft 365 Graph synchronization GAL to SharePoint Online List accross multiple tenants.
SharePoint Online - Guest access to site or OneDrive will expire automatically after period of time.
SharePoint Online - New Guest expire policy that will remove access for guest account after period of time form SharePoint Site and OneDrive.
Intune (Endpoint Manager) - How to deploy Office templates and keep them up to date (recurring).
Intune (Endpoint Manager) - How to deploy Custom Office templates and keep them up to date. Templates are often store on some file share from where computer ...
PowerShell
How to Use DSC v3 Resources for Azure Arc and What Options Can Be Configured
How to use DSC v3 resources for Azure Arc, what configuration options can be set, and practical export and set examples for Microsoft.Azure.Arc/AgentConfigur...
Azure Storage Account how to setup policy for object replication blobs between multi tenant for more then 10 blobs.
Setup object replication policy for 10 to 1000 blobs between two storage account in different tenants.
Microsoft 365 Add Shared Contact to user personal mailbox for phone caller identification and more.
Run by Azure Automation account PowerShell script that will add to user personal mailbox contact and update contact. You can distribution contacts to users b...
Microsoft 365 Groups – Sensitive labels assignment for data protection and external sharing.
Microsoft 365 Groups – Sensitive labels assignment for data protection and external sharing.
Security
Deploy and Configure a Windows VM with Bicep and DSC v3
End-to-end walkthrough: provision an Azure Windows VM with Bicep, install DSC v3 via a Run Command extension, store DSC YAML documents in Azure Blob Storage,...
Setting Up WinRM HTTPS Listener with DSC v3 and PowerShell
This post shows how to automate a secure WinRM HTTPS listener configuration using Microsoft DSC v3. The solution combines native DSC v3 resources — Registry,...
Mastering Azure Networking: Best Practices for Building Scalable, Secure Cloud Infrastructure
Discover how to build a secure and scalable Azure network from the ground up. Learn how to start with a simple network for a small company and seamlessly ext...
Microsoft 365 Global Private Access Setup and replace classic VPN.
Private Access is new solution that allow to access internal resources, it replace classic VPN with identity-centric Zero Trust Network Access (ZTNA).
Intune
Intune (Endpoint Manager) - How to deploy Office templates and keep them up to date (recurring).
Intune (Endpoint Manager) - How to deploy Custom Office templates and keep them up to date. Templates are often store on some file share from where computer ...
Microsoft 365 Setup Lab Environment for M365 and Intune with free custom domain names
Microsoft 365 Setup Lab Environment - Create your own Lab with custom domains setup or prepare new tenant for you company. In this article we will go through...
[EN] Intune (Endpoint Manager) - How to start the implementation and what to pay attention to.
[EN] Intune (Endpoint Manager) - How to start the implementation and what to pay attention to
Azure
Azure Storage Account how to setup policy for object replication blobs between multi tenant for more then 10 blobs.
Setup object replication policy for 10 to 1000 blobs between two storage account in different tenants.
Intune (Endpoint Manager) - How to deploy Office templates and keep them up to date (recurring).
Intune (Endpoint Manager) - How to deploy Custom Office templates and keep them up to date. Templates are often store on some file share from where computer ...
[EN] Azure Active Directory License assignment base on groups.
[EN] Azure Active Directory License assignment base on groups - keeping licenses assignment for user in organization when we have different variants and leve...
Guest
Microsoft 365 Graph synchronization GAL to SharePoint Online List across multiple tenants.
Microsoft 365 Graph synchronization GAL to SharePoint Online List accross multiple tenants.
Microsoft 365 Groups – Sensitive labels assignment for data protection and external sharing.
Microsoft 365 Groups – Sensitive labels assignment for data protection and external sharing.
SharePoint Online - Guest access to site or OneDrive will expire automatically after period of time.
SharePoint Online - New Guest expire policy that will remove access for guest account after period of time form SharePoint Site and OneDrive.
Shell
Delegate for Azure ARC least-privilege access for hybrid servers - Custom role
This blog post explains why organizations using Azure Arc–enabled servers should implement least-privilege access through custom roles. It walks through real...
Loging into a Linux Server Connected to Azure Arc Using Entra ID from portal and OpenSSH client
Azure Arc extends the power of Azure to your on-premises and multi-cloud environments. One great feature it enables is logging into Linux servers using Entra...
A Guide to Revoking and Reconfiguring SSH Keys on Azure VMs
In this post, you’ll learn how to securely revoke access to your Azure Virtual Machines by replacing compromised or outdated SSH keys. Whether you’re respond...
VirtualMachine
Delegate for Azure ARC least-privilege access for hybrid servers - Custom role
This blog post explains why organizations using Azure Arc–enabled servers should implement least-privilege access through custom roles. It walks through real...
Loging into a Linux Server Connected to Azure Arc Using Entra ID from portal and OpenSSH client
Azure Arc extends the power of Azure to your on-premises and multi-cloud environments. One great feature it enables is logging into Linux servers using Entra...
A Guide to Revoking and Reconfiguring SSH Keys on Azure VMs
In this post, you’ll learn how to securely revoke access to your Azure Virtual Machines by replacing compromised or outdated SSH keys. Whether you’re respond...
Bicep
Deploy and Configure a Windows VM with Bicep and DSC v3
End-to-end walkthrough: provision an Azure Windows VM with Bicep, install DSC v3 via a Run Command extension, store DSC YAML documents in Azure Blob Storage,...
Using the Microsoft Azure Bicep Graph Extension to Create Security Groups and Assign Roles in an Azure Landing Zone
In large, multi-subscription environments, such as Azure Landing Zones, managing identity and access at scale is a constant challenge. Security groups are a ...
Bicep Microsoft Entra (Graph) Extension - GA
The Microsoft Entra (Graph) Bicep Extension allows you to provision and manage Microsoft Entra ID (formerly Azure AD) resources using Bicep, extending Infras...
DSCv3
How to Use DSC v3 Resources for Azure Arc and What Options Can Be Configured
How to use DSC v3 resources for Azure Arc, what configuration options can be set, and practical export and set examples for Microsoft.Azure.Arc/AgentConfigur...
Auto-Documenting DSC v3 Drift and Compliance with DSC-DocsGenerator (CIS Example)
Introducing DSC-DocsGenerator — a PowerShell module that runs dsc config test against a DSC v3 YAML configuration, parses the JSON output, and produces a com...
Deploy and Configure a Windows VM with Bicep and DSC v3
End-to-end walkthrough: provision an Azure Windows VM with Bicep, install DSC v3 via a Run Command extension, store DSC YAML documents in Azure Blob Storage,...
MDM
Intune (Endpoint Manager) - How to deploy Office templates and keep them up to date (recurring).
Intune (Endpoint Manager) - How to deploy Custom Office templates and keep them up to date. Templates are often store on some file share from where computer ...
[EN] Intune (Endpoint Manager) - How to start the implementation and what to pay attention to.
[EN] Intune (Endpoint Manager) - How to start the implementation and what to pay attention to
Licences
[EN] Azure Active Directory License assignment base on groups.
[EN] Azure Active Directory License assignment base on groups - keeping licenses assignment for user in organization when we have different variants and leve...
[EN] Intune (Endpoint Manager) - How to start the implementation and what to pay attention to.
[EN] Intune (Endpoint Manager) - How to start the implementation and what to pay attention to
Office
SharePoint Online - Guest access to site or OneDrive will expire automatically after period of time.
SharePoint Online - New Guest expire policy that will remove access for guest account after period of time form SharePoint Site and OneDrive.
Intune (Endpoint Manager) - How to deploy Office templates and keep them up to date (recurring).
Intune (Endpoint Manager) - How to deploy Custom Office templates and keep them up to date. Templates are often store on some file share from where computer ...
Access
Microsoft 365 Global Private Access Setup and replace classic VPN.
Private Access is new solution that allow to access internal resources, it replace classic VPN with identity-centric Zero Trust Network Access (ZTNA).
SharePoint Online - Guest access to site or OneDrive will expire automatically after period of time.
SharePoint Online - New Guest expire policy that will remove access for guest account after period of time form SharePoint Site and OneDrive.
Collaboration
Microsoft 365 Graph synchronization GAL to SharePoint Online List across multiple tenants.
Microsoft 365 Graph synchronization GAL to SharePoint Online List accross multiple tenants.
Microsoft 365 Groups – Sensitive labels assignment for data protection and external sharing.
Microsoft 365 Groups – Sensitive labels assignment for data protection and external sharing.
Code
Setting Up WinRM HTTPS Listener with DSC v3 and PowerShell
This post shows how to automate a secure WinRM HTTPS listener configuration using Microsoft DSC v3. The solution combines native DSC v3 resources — Registry,...
Microsoft DSCv3 build and deploy classic resources ActiveDirectoryDSC
This blog post explores how to use Microsoft Desired State Configuration v3 (DSC v3) to build, deploy, and manage infrastructure while reusing classic PowerS...
WinRM
Deploy and Configure a Windows VM with Bicep and DSC v3
End-to-end walkthrough: provision an Azure Windows VM with Bicep, install DSC v3 via a Run Command extension, store DSC YAML documents in Azure Blob Storage,...
Setting Up WinRM HTTPS Listener with DSC v3 and PowerShell
This post shows how to automate a secure WinRM HTTPS listener configuration using Microsoft DSC v3. The solution combines native DSC v3 resources — Registry,...
ADConnect
AD Connect migration error on Out sync rules
How to handle error caused by Out synchronization rules in migration process, with attributes mapping: AttributeFlowMapping’s specified target attribute ‘ext...
Policy
SharePoint Online - Guest access to site or OneDrive will expire automatically after period of time.
SharePoint Online - New Guest expire policy that will remove access for guest account after period of time form SharePoint Site and OneDrive.
Sensitive
Microsoft 365 Groups – Sensitive labels assignment for data protection and external sharing.
Microsoft 365 Groups – Sensitive labels assignment for data protection and external sharing.
Protection
Microsoft 365 Groups – Sensitive labels assignment for data protection and external sharing.
Microsoft 365 Groups – Sensitive labels assignment for data protection and external sharing.
Groups
Microsoft 365 Groups – Sensitive labels assignment for data protection and external sharing.
Microsoft 365 Groups – Sensitive labels assignment for data protection and external sharing.
External
Microsoft 365 Groups – Sensitive labels assignment for data protection and external sharing.
Microsoft 365 Groups – Sensitive labels assignment for data protection and external sharing.
GAL
Microsoft 365 Graph synchronization GAL to SharePoint Online List across multiple tenants.
Microsoft 365 Graph synchronization GAL to SharePoint Online List accross multiple tenants.
CrossTenant
Azure Storage Account how to setup policy for object replication blobs between multi tenant for more then 10 blobs.
Setup object replication policy for 10 to 1000 blobs between two storage account in different tenants.
EntraID
Using the Microsoft Azure Bicep Graph Extension to Create Security Groups and Assign Roles in an Azure Landing Zone
In large, multi-subscription environments, such as Azure Landing Zones, managing identity and access at scale is a constant challenge. Security groups are a ...
Network
Mastering Azure Networking: Best Practices for Building Scalable, Secure Cloud Infrastructure
Discover how to build a secure and scalable Azure network from the ground up. Learn how to start with a simple network for a small company and seamlessly ext...
DSC
How to Use AzureDevOpsDscv3 in Azure DevOps Pipelines
A real world example that uses AzureDevOpsDscv3 to create a project, add a group, and assign users with a repeatable Azure DevOps pipeline.
AzureDevOps
How to Use AzureDevOpsDscv3 in Azure DevOps Pipelines
A real world example that uses AzureDevOpsDscv3 to create a project, add a group, and assign users with a repeatable Azure DevOps pipeline.
Pipeline
How to Use AzureDevOpsDscv3 in Azure DevOps Pipelines
A real world example that uses AzureDevOpsDscv3 to create a project, add a group, and assign users with a repeatable Azure DevOps pipeline.
CIS
Auto-Documenting DSC v3 Drift and Compliance with DSC-DocsGenerator (CIS Example)
Introducing DSC-DocsGenerator — a PowerShell module that runs dsc config test against a DSC v3 YAML configuration, parses the JSON output, and produces a com...
Compliance
Auto-Documenting DSC v3 Drift and Compliance with DSC-DocsGenerator (CIS Example)
Introducing DSC-DocsGenerator — a PowerShell module that runs dsc config test against a DSC v3 YAML configuration, parses the JSON output, and produces a com...
Reporting
Auto-Documenting DSC v3 Drift and Compliance with DSC-DocsGenerator (CIS Example)
Introducing DSC-DocsGenerator — a PowerShell module that runs dsc config test against a DSC v3 YAML configuration, parses the JSON output, and produces a com...
AzureArc
How to Use DSC v3 Resources for Azure Arc and What Options Can Be Configured
How to use DSC v3 resources for Azure Arc, what configuration options can be set, and practical export and set examples for Microsoft.Azure.Arc/AgentConfigur...
IaC
How to Use DSC v3 Resources for Azure Arc and What Options Can Be Configured
How to use DSC v3 resources for Azure Arc, what configuration options can be set, and practical export and set examples for Microsoft.Azure.Arc/AgentConfigur...