Forum Widgets
Latest Discussions
ARM template and how to test it partially
Hi all, If you have a long deployment template and performing that takes 10 - 15 minutes, what would be the best option for troubleshooting the process if that e.g fail at the end? At the moment I'm failing to the Access Denied (I believe so) when the deployment is trying to useARM Function: Reference to get the Key Vault SecretURI. Of course there is lot of different parameters on it to get that information, but the error message is "AccesstoKeyVaultDenied (code:BadRequest)". So far I have not been able get knowledge where the access denied is coming nor what resource that is trying to get. It is possible to manually test those ARM functions somehow, like with PS command? Or is the only option to Enable ARM debugging, and hope the best? It is just a bit hard to wait over 10min to see if the actions has been helpful or (as too often now) not :DPetri-XNov 17, 2024Bronze Contributor26Views0likes2CommentsFunction App Service
Hi, I'm having trouble deploying my Python script to an Azure Function App. Can someone help me troubleshoot the deployment process and ensure the function works correctly? I have followed all the articles available on the internet, I am not able to figure out , where is actual issue?DevendraKumar2Nov 08, 2024Copper Contributor91Views0likes3CommentsCopying template.json from Export Template and deploy in bicep
I have a question, i want to deploy my resources (already created on Azure Portal) on my Azure Dev Ops Repo. My question is: is it legit to take the template.json from Export Template and then convert it into Bicep and then deploy with some changes on Azure Dev Ops? Thank you very much!Solvedakin_kOct 21, 2024Copper Contributor395Views0likes5CommentsAzure VMs Not Applying GPOs Correctly
Hi everyone, Quick question… if my Azure VMs are joined to my domain, they should be applying all my configured GPOs, right? For some reason, my VMs are not applying the GPOs, even after running a GPUPDATE /force. At the moment, I am testing some simple GPOs like: Creating a folder on the desktop Setting the time format to Brazilian (dd/mm/yyyy) Adjusting the timezone to Brasília When I run gpresult /r, it shows that the GPOs are being applied, but for some reason, the VM just doesn’t reflect them. Any idea what might be causing this?experi18Oct 19, 2024Copper Contributor139Views0likes1CommentAZureADSSOACC and AES
I have been auditing event IDs 4768 and 4769 and noticed a few accounts with 0x17. I believe that to be related to RC4. One of the accounts is an AzureADSSOacc account that was created before the year 2020. Will this account use AES if we upgrade the DC to 2025 or will we have to force it?azuserOct 15, 2024Copper Contributor118Views0likes1CommentEnabling Azure Automanage or creating a custom configuration profile currently results in an error.
At the moment, enabling Azure Automanage for a new Azure VM or Arc-enabled server results in the following error: An error occurred while assigning the configuration profile named 'Azure best practices: Dev / Test'. Error details: The operation was not allowed because the subscription is not in a state to support it. Subscription state: -1 Additionally, attempting to create a custom configuration profile results in the following error: An error occurred while creating the configuration profile named 'amcp-prd-arc-infra-01'. Error details: The operation was not allowed because the subscription is not in a state to support it. Subscription state: -1 Has anyone encountered this issue before and found a solution?wmatthyssenSep 30, 2024Copper Contributor283Views0likes1CommentAzure Firewall DNAT not working
I have a typical Hub/Spoke Architecture with Azure Firewall in the Hub, VNEt peerings between Hub/Spoke, route table on Spoke with default route to Firewall in Hub, no NSGs currently applied. I have created DNAT rule for web site running on Windows Server VM (IIS) in Spoke. All as per documented setup e.g. https://learn.microsoft.com/en-us/azure/firewall/tutorial-firewall-dnat. But I cannot connect to the Web site! I have even tried a DNAT rule for RDP exactly as per the article but also not connecting. I can see in the firewall logs the DNAT rule being hit but nothing is getting to the Web Server as verified using packet capture. I have spun up VM in the Hub with a default route to the Firewall and Network rules to allow RDP and HTTPs to the Spoke Vnet. From this machine I can browse to the website and RDP to the Web Server with no issues with and have verified traffic is traversing the firewall OK. What am I missing to get access via firewall DNAT working? Any help/advise, what to try next, how to debug appreciated. Cheers RichRichard_MarderSep 27, 2024Copper Contributor2KViews0likes5CommentsHealth state monitoring for a service hosted on Azure Virtual Machine
I have a virtual machine hosted on Azure cloud, I wanted to add some monitoring on the health state of a service deployed on the VM. I already enabled the health monitoring extension to keep pinging the health URL of the service and return 200 or otherwise when the service is down. It shows green "Healthy" or yellow "Unhealthy" on the VM's overview page, which is great. I was expecting to get some data in this Insight log table HealthStateEventChange, when the service is down, but the table is always empty. Anyone who worked with this table or can give any support I would appreciate any. https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/HealthStateChangeEventasorrourAug 03, 2024Copper Contributor422Views0likes2Comments[Azure CLI] az sf application-type version create authentication
Hello, We're currently using `az sf application-type version create` to create a new application-type version, and then `az sf application upgrade` in our CI for Service Fabric deployments. The first comman, `az sf application-type version create` accepts a --package-url parameter. Currently, we're passing a package url with a SAS token. We want to stop doing this and to authenticate using something like a Managed Identity, but we can't get it to work (we keep authentication issues). Is there any guide on how to do this? Is it even a supported scenario?dkurepaJul 16, 2024Microsoft195Views0likes1Comment
Resources
Tags
- Azure Virtual Machines7 Topics
- azure4 Topics
- AzureAD3 Topics
- Azure Active Directory (AAD)3 Topics
- updates2 Topics
- Azure AD Apps1 Topic
- AzureAD ADConnect1 Topic
- SSPR1 Topic
- Azure MySQL Flexible Server1 Topic
- EntraID1 Topic