Author: rzomerman

Azure VM Reservations

Azure Reservations are a good way to reduce your cloud costs. Reservations are available for SQL, Databricks, storage Virtual Machines, and many other services. But in this topic I will be looking into Virtual Machines only. The reason for that is that these (although amongst others) are a; the most used, b; can be exchanged […]

Read more

Offline AD Domain Join for Azure Files

The URL: Windows Virtual Desktop for the enterprise – Azure Example Scenarios | Microsoft Docs explains a bit on how the integration with Azure Files and Active Directory can be accomplished. However, it does not highlight the creation of the AD object to represent the storage in your Active Directory. So a short post on […]

Read more

Azure Stack HCI & Host Guardian Service

It’s been a while between posts, but I promise this will be interesting to Hybrid Infrastructure Admins that also want to have secure VM’s. As almost usual, the supportability of the described solution here is not yet proven, but I hope it will be soon. This post will describe how to deploy shielded VM’s onto […]

Read more

Windows Virtual Desktop – Require MFA – icw Duo Security

MFA for WVD, doesn’t that already exist through Azure AD conditional access? Yes, it does, but its limited to certain scenario’s. With the Azure AD MFA WVD access, you only need to MFA once in order to access any desktop published through WVD. Which got me thinking: what if I want to request an MFA […]

Read more

WINDOWS VIRTUAL DESKTOP – BUILING YOUR IMAGE AUTOMATED (III)

In our previous post we talked about the scripts that can install applications and set settings automatically without even login-on to the system. In this post we will see how we can use those scripts in a JSON file, together with the Azure Image Builder. Within the JSON file we specify which OS we want, […]

Read more

WINDOWS VIRTUAL DESKTOP – BUILING YOUR IMAGE automated (II)

In these last and future posts we will be building an image with the Azure Image Builder. The Image builder takes a standard OS (from the marketplace or your image gallery) and runs a number of scripts against that image fully automated. In this post goes into creating those scripts that the customizer can use […]

Read more

WINDOWS VIRTUAL DESKTOP – Builing your Image (I)

In this post we will build our own image to be used with WVD. Apart from using the Deploy Microsoft 365 Apps by using Remote Desktop Services guide to install Office 365, we will also install Teams (optimized for WVD), Visual Studio Code, set some preferences and copy those to the default profile before optimizing […]

Read more

F5 – LDAP – Active Directory Lightweight Services

Some people have had some trouble with the F5 demo I posted about where we can inject additional HEADERS based on an external LDAP store. While this post specifically goes into setting up the LDAP store for that, it can also be used for any Active Directory LDAP deployment. First let’s start with a standard […]

Read more

DataWiza – Secure Hybrid Access done right

As you might have noticed, the last few posts are all about identity and the so called Secure Hybrid Access solutions. This one fall under that same category and is not sponsored by, but I did get a test account from them…. Active Directory or any identity store is usually used as the primary source […]

Read more

AZURE AD – EXTERNAL IDENTITIES (IV) Advanced flowS

In all our previous posts we had the user sign-up flow take control of the actual creation of the user in Azure AD. The problem with that flow is that if we want to add the user to a group or perform other functions on it (like adding additional attributes) we would have to reply […]

Read more