rss.livelink.threads-in-node

Sorting by multiple columns in Power Pivot table?

ahhk2000 — Tue, 02 Mar 2021 10:33:18 GMT

Why is it only possible to sort by a single column in the pivot table? Is there a workaround to sort by two?

Windows Server 2019 Essential - The product key entered does not work.

jack85rm — Tue, 02 Mar 2021 10:32:21 GMT

Hi, I created a VM and installed windows server 2019 Essentials Evaluation and after 3 months I decided to buy the original license (OEM).
Activation fails and generates an error message:
The product key entered does not work. Check it and try again or enter a different one (0xc0020036)
From cmd, it reports Error 87, Invalid Product Code KEy.
I tried these commands:
slmgr -ipk <KEY>
(0xc0020036) On a computer running a non-core edition of Microsft windows, run slui 0x02 0xC0020036 to view the error text. If I run the command it tells me "No Endpoint available in the endpoint mapping"

I tried to do these procedures but without success:

sfc / scannow
dism / online / cleanup-image / restorehealth

Also I have another problem but I don't know it is related, Windows update does not install the latest updates: KB4601345 (code error 0x800f0986), KB4601345 (code error 0x80070643)

Windows Server 2019 Essential is not a Domain Controller, there are no Antivirus and the only firewall is the Defender that I have also tried to disable.

What can I do to activate the license?

Product deactivated

elaheh — Tue, 02 Mar 2021 10:27:36 GMT

Hi,

I have already installed 0365 office apps on my device (PC). I have also O365 license from my organization. Recently when I open one the app, on the top of each application I see that i'm already logged in. But on the top of page I get warning that on Sunday 7th of March, most feature of Word will be disabled. After I select 'Reactivate' option it says i'm already logged in. I have also uninstall and install the app but with no chanse.

any idea how to fix this?

Two dates in one cell

Dyla_1806 — Tue, 02 Mar 2021 10:21:39 GMT

Hi all,

I have trouble finding out how to do this.

I want to fit in two dates in one cell without messing up the format

the format I have in mind is d-mmm-yy

however everytime I input two dates in one cell

the format changes to the other one

How do I maintain or fix the format so that both dates remain as such in one cell

Example of what I want to dates in one cell looks like:

01-Jan-21 - 02-Jan-21

Please help me. I am helpless!

Thank you in advance

Teams Desktop Client Gets New History Menu

Tony Redmond — Tue, 02 Mar 2021 10:18:50 GMT

Teams desktop clients are being updated with a new history menu to reveal the last 20 locations visited by a user in their Teams session. It’s a much faster way to get back to something than the older back arrow method. Another example of how Microsoft is refining the Teams client UI to remove little bits of friction and make everything work more smoothly. Or so they say.

https://office365itpros.com/2021/03/02/teams-history-menu/

ERROR SOLVER CON MACROS

ainhoa6 — Tue, 02 Mar 2021 10:15:47 GMT

Hola buenos días,

Llevo varios días intentando instalarme el complemento SOLVER y me indica un error que no se resolver, he probado a instalar la versión, volverla a instalar, reparar... y me sigue sin funcionar. Me salen estos errores, no se si alguien me podría ayudar por favor

SQL SSRS CASE AFTER UPGRADE to 13.0.5865.1, unable to create new subscriptions

AHALEGRE87 — Tue, 02 Mar 2021 10:08:09 GMT

After Upgrading one of the SQL 2016 environments to to 13.0.5865.1, we have issues creating subscriptions on SSRS.

Each time someone tries to create a new subscription they receive the error:

“An error has occurred.

An error occurred within the report server database. This may be due to a connection failure, timeout or low disk condition within the database.

”.

In de SSRS log i can see 1 error (with stacktrace) System.Data.SqlClient.SqlException: The specified @name ('Report Server') already exists.

After rebooting, restarting, checking config, user settings etc…

Checking all db.’s and tempdb of the SSRS, System DB’s, file size limits, disk limits, time-out limits etc. .

I verified the process of creating the subscription and noted that the problem seems to be related to the execution of exec msdb.dbo.sp_add_category @class='JOB',@type='LOCAL',@name=N'Report Server'

After investigating the Stored Procedure, i came to the conclusion that the problem seems to come from the msdb.dbo.syscategories.

In that table there is a record (100 1 1 Report Server), when I alter the value of the name field Report Server to something else and try to create a new SSRS subscription on a report, the subscription is created without any issue.

After this process is noticed that a new record was created in the msdb.dbo.syscategories table (101 1 1 Report Server)

Again, I tried to create a new subscription, the creation fails with the same error’s.

Once again I renamed the 101 record and now I was able to create a subscription onze again, a new record was created in the msdb.dbo.syscategories (102 1 1 Report Server ).

The process is stuck , i have some kind of workaround but can't find the solution, except altering a Sys SP, something i don't want to do for all the obvious reasons.

SSRS log Error +Trace

Microsoft.ReportingServices.Portal.WebHost!reportserverwebapp!25!02/22/2021-23:19:37:: e ERROR: [okx1fx1u]: OData exception occurred: System.Web.Services.Protocols.SoapException: System.Web.Services.Protocols.SoapException: An error occurred within the report server database. This may be due to a connection failure, timeout or low disk condition within the database. ---> Microsoft.ReportingServices.Diagnostics.Utilities.ReportServerStorageException: An error occurred within the report server database. This may be due to a connection failure, timeout or low disk condition within the database. ---> System.Data.SqlClient.SqlException: The specified @name ('Report Server') already exists.

at Microsoft.ReportingServices.Library.ReportingService2005Impl.CreateSubscription(String Report, ExtensionSettings ExtensionSettings, Boolean isDataDriven, DataRetrievalPlan DataRetrievalPlan, String Description, String EventType, String MatchData, ParameterValueOrFieldReference[] Parameters, Guid batchId, String& SubscriptionID)

at Microsoft.ReportingServices.WebServer.ReportingService2010.CreateSubscription(String ItemPath, ExtensionSettings ExtensionSettings, String Description, String EventType, String MatchData, ParameterValue[] Parameters, String& SubscriptionID)

at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)

at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)

at Microsoft.SqlServer.ReportingServices2010.ReportingService2010.CreateSubscription(String ItemPath, ExtensionSettings ExtensionSettings, String Description, String EventType, String MatchData, ParameterValue[] Parameters)

at Microsoft.SqlServer.ReportingServices2010.RSConnection2010.<>c__DisplayClass5a.<CreateSubscription>b__59()

at Microsoft.SqlServer.ReportingServices2010.RSConnection2010.SoapMethodWrapper`1.ExecuteMethod(Boolean setConnectionProtocol)

at Microsoft.SqlServer.ReportingServices2010.RSConnection2010.SoapMethodWrapper`1.ExecuteMethod()

at Microsoft.SqlServer.ReportingServices2010.RSConnection2010.CreateSubscription(String itemPath, ExtensionSettings extensionSettings, String description, String eventType, String matchData, ParameterValue[] parameters)

at Microsoft.ReportingServices.Portal.Services.SoapProxy.SoapRS2010Proxy.<>c__DisplayClass1a.<CreateSubscription>b__19()

at Microsoft.ReportingServices.Portal.Services.SoapProxy.SoapAuthenticationHelper.ExecuteWithWindowsAuth[TReturn](SoapHttpClientProtocol soapClient, IPrincipal userPrincipal, Func`1 func)

at Microsoft.ReportingServices.Portal.Services.SoapProxy.SoapAuthenticationHelper.ExecuteWithCorrespondingAuthMechanism[TReturn](SoapHttpClientProtocol soapClient, IPrincipal userPrincipal, Func`1 func)

at Microsoft.ReportingServices.Portal.Services.SoapProxy.SoapRS2010Proxy.CreateSubscription(IPrincipal userPrincipal, String itemPath, ExtensionSettings extensionSettings, String description, String eventType, String matchData, ParameterValue[] parameters)

at Microsoft.ReportingServices.Portal.Repositories.SubscriptionService.CreateSubscription(IPrincipal userPrincipal, Subscription subscription)

at Microsoft.ReportingServices.Portal.ODataWebApi.V1.Controllers.SubscriptionsController.AddEntity(Subscription entity)

at Microsoft.ReportingServices.Portal.ODataWebApi.V1.Controllers.Reflection.EntitySetReflectionODataController`1.AddEntity(T entity, T& createdEntity)

at Microsoft.ReportingServices.Portal.ODataWebApi.V1.Controllers.Reflection.EntitySetReflectionODataController`1.Post(ODataPath oDataPath, T value)

at lambda_method(Closure , Object , Object[] )

at System.Web.Http.Controllers.ReflectedHttpActionDescriptor.ActionExecutor.<>c__DisplayClass10.<GetExecutor>b__9(Object instance, Object[] methodParameters)

at System.Web.Http.Controllers.ReflectedHttpActionDescriptor.ExecuteAsync(HttpControllerContext controllerContext, IDictionary`2 arguments, CancellationToken cancellationToken)

--- End of stack trace from previous location where exception was thrown ---

Join Omnibox with site title in vertical tabs

viliuz — Tue, 02 Mar 2021 10:12:31 GMT

Hello, I am trying vertical tabs and I find them very useful. They unclutter the view, allow to see full website title on top, gives better readability on other tabs titles. Collapsed view is also very convenient as well as tab grouping. But vertical tabs could also give some more vertical space as they are listed on a side not on top. I suggest to join Omnibox and site title in one row when vertical tabs are used. Now site title takes a whole row of real estate on screen but is basically empty as most screens are wide nowdays. Vertical tabs have great value specifically for widescreen displays which lack vertical space. If you would replace Omnibox with site title while scrolling and show address on mouse hover as well as allowing editing it, also move window control buttons the same toolbar row, it would leave more vertical space for site content.

This is what I have in mind:

Browser compatibility and teams in incognito mode in Chrome

NeutralKaon — Tue, 02 Mar 2021 09:59:54 GMT

Hi there,

I have multiple Teams accounts through different organisations. I've got three points to mention:

-- I'd like to point out that Teams, despite being a web application with (rather inefficient!) desktop Electron clients, only completely works in Chrome. I can't call people from Firefox, say, and get told to use Chrome.

-- Relatedly, I can't log using incognito mode in Chrome. I get a message with a "Clock" logo and the message "To re-enable the application, the tab needs to be refreshed." with a button that says "I'm back". Clicking it yields nothing. I want to use it in incognito mode to have two separate accounts signed in at the same time. Looking in the Javascript console, there are a large number of XSS related issues where I suspect OAUTH authentication is blocked, despite me authenticating successfully:

21-03-02T09:49:18.198Z AUTHMSAL: Event: adal:tokenRenewFailure, code: interaction_required|Seamless single sign on failed for the user. This can happen if the user is unable to access on premises AD or intranet zone is not configured correctly Trace ID: 0f7a6ad7-91d1-4165-9f55-7fe400ec0e00 Correlation ID: f2e1faf0-4cbe-44c1-80e2-9cb39dab88e2 Timestamp: 2021-03-02 09:49:17Z, resource: https://api.spaces.skype.com, action: loginFailure (anonymous) @ 0-angular-jquery.min-eee9041.js:114 0-angular-jquery.min-eee9041.js:114 2021-03-02T09:49:18.198Z AUTHMSAL: Attempting to handle auth response: error:interaction_required|Seamless single sign on failed for the user. This can happen if the user is unable to access on premises AD or intranet zone is not configured correctly, resource:https://api.spaces.skype.com, error mapped to action:loginFailure (anonymous) @ 0-angular-jquery.min-eee9041.js:114 0-angular-jquery.min-eee9041.js:114 2021-03-02T09:49:18.199Z AUTHMSAL: Attempting to handle auth response: error:interaction_required|Seamless single sign on failed for the user. This can happen if the user is unable to access on premises AD or intranet zone is not configured correctly, resource:https://api.spaces.skype.com, error mapped to action:loginFailure (anonymous) @ 0-angular-jquery.min-eee9041.js:114 0-angular-jquery.min-eee9041.js:114 2021-03-02T09:49:18.201Z TenantService: [getTenants] Failed to get all tenants. Error: unknown (anonymous) @ 0-angular-jquery.min-eee9041.js:114 0-angular-jquery.min-eee9041.js:114 2021-03-02T09:49:18.201Z SfbTeamsUpgradeService: Failed to get teams upgrade policy V2. HTTP Status Code = undefined (anonymous) @ 0-angular-jquery.min-eee9041.js:114 0-angular-jquery.min-eee9041.js:114 2021-03-02T09:49:18.202Z TeamsMeetingConfiguration: Error in getTeamsMeetingConfigurationFromServer: {"status":401,"errorCode":1,"errorMessage":"1"} (anonymous) @ 0-angular-jquery.min-eee9041.js:114 0-angular-jquery.min-eee9041.js:114 2021-03-02T09:49:18.202Z Failed to get teamsMeetingConfiguration through /me/settings/meetingConfiguration. HTTP Status Code = 401. (anonymous) @ 0-angular-jquery.min-eee9041.js:114 0-angular-jquery.min-eee9041.js:114 2021-03-02T09:49:18.204Z PeopleResolverService: [doGetPeopleProfile] Unable to resolve given user UPN. Error: unknown. (anonymous) @ 0-angular-jquery.min-eee9041.js:114 0-angular-jquery.min-eee9041.js:114 2021-03-02T09:49:18.204Z PeopleService: Failure on fetching user profile for id: au687846@uni.au.dk with reason: {"response":null,"status":-1,"_codeEnum":0,"_code":"ClientNetworkOffline","_message":"App offline cannot complete request"} and caller info: authenticationService (anonymous) @ 0-angular-jquery.min-eee9041.js:114 0-angular-jquery.min-eee9041.js:114 2021-03-02T09:49:18.204Z AUTHMSAL: Unable to backfill the UPN for logged in user. (anonymous) @ 0-angular-jquery.min-eee9041.js:114 0-angular-jquery.min-eee9041.js:114 2021-03-02T09:49:18.205Z AUTHMSAL: message: App offline cannot complete request, code: ClientNetworkOffline, status: -1 (anonymous) @ 0-angular-jquery.min-eee9041.js:114 0-angular-jquery.min-eee9041.js:114 2021-03-02T09:49:30.903Z Appbar-powerbar: Failed to get skype tokens. Error: Max time reached (anonymous) @ 0-angular-jquery.min-eee9041.js:114 0-angular-jquery.min-eee9041.js:114 2021-03-02T09:49:30.904Z Orchestrator: authenticationService_skype-auth failed. (anonymous) @ 0-angular-jquery.min-eee9041.js:114 0-angular-jquery.min-eee9041.js:114 2021-03-02T09:49:30.905Z UserPreferences: Couldn't fetch preferences from the server: {"statusCode":401,"errorMessage":"Max time reached","errorCode":1} (anonymous) @ 0-angular-jquery.min-eee9041.js:114 0-angular-jquery.min-eee9041.js:114 2021-03-02T09:49:30.908Z Orchestrator: myUserPreferencesStore_startup failed. (anonymous) @ 0-angular-jquery.min-eee9041.js:114 0-angular-jquery.min-eee9041.js:114 2021-03-02T09:49:30.910Z AppsService: getUserAppEntitlementsFromMiddletier - Initial user app entitlements failed for the user: a0724a85-bed0-47c2-ac28-8f2798eb0f4a, error-code: undefined, exception: undefined (anonymous) @ 0-angular-jquery.min-eee9041.js:114 0-angular-jquery.min-eee9041.js:114 2021-03-02T09:49:30.925Z Orchestrator: Unexpected error while executing stage 0, error: '[object Object]' (anonymous) @ 0-angular-jquery.min-eee9041.js:114 0-angular-jquery.min-eee9041.js:114 2021-03-02T09:49:30.925Z Orchestrator: Required orchestration step failed: authenticationService_skype-auth, rejecting orchestration promise. (anonymous) @ 0-angular-jquery.min-eee9041.js:114 0-angular-jquery.min-eee9041.js:114 2021-03-02T09:49:30.929Z APP: App loading "appLoadOrchestrationPlan_authenticationService_skype-auth" failed due to error: authenticationService_skype-auth-Max time reached, redirecting to oops page (anonymous) @ 0-angular-jquery.min-eee9041.js:114 0-angular-jquery.min-eee9041.js:114 2021-03-02T09:49:31.071Z Analytics panel: Panel data not present in context, routing or state service. No way to infer panel data for panel view. Falling back to "undefined" (anonymous) @ 0-angular-jquery.min-eee9041.js:114 0-angular-jquery.min-eee9041.js:114 2021-03-02T09:49:31.072Z Analytics panel: Panel data not present in context, routing or state service. No way to infer panel data for panel view. Falling back to "undefined"

Despite working in "normal" browser mode, this fails in Incognito mode.

-- Finally, if things do go wrong -- which they do, regularly -- I find the "Something went wrong" or "Ooops, something went wrong" or similar messages absolutely patronising. Please tell me _what_ went wrong -- don't make me dig in the javascript console and see…

Change room mailbox that are synched from AD to pure cloud

Marvin Oco — Tue, 02 Mar 2021 09:55:00 GMT

We previously have exchange hybrid, local exchange is already deprovisioned but room mailboxes are still tagged as synched from AD.

How do we Change room mailbox that are synched from AD to pure cloud?

Tnx

extraction de données d'un tableau

genvert — Tue, 02 Mar 2021 09:51:48 GMT

Bonjour,

J'ai un tableau qui représente un planning de travail avecles différents horaires par équipe. Je souhaite regrouper tous les noms des personnes dans une même plage horaire. Je fais cela avec un TDC mais le filtres sélectionnés change régulièrement. Cordialement

Sum a calculation action to another cell

roeedelco — Tue, 02 Mar 2021 09:38:06 GMT

Hi!

How can I make a different cell giving me the sum of a calculation action

example:

cell 1: 10*5*100

cell 2: 5000 >>> as if it contains =10*5*100

Thanks !!

Windows Server 2019 Cumulative updates fail

JoniLjungqvist — Tue, 02 Mar 2021 09:12:03 GMT

Hi all,

We have a Windows Server 2019 production server where the cumulative updates keep failing to install since january this year and I'm at my wits end. Currently it's trying to install 2021-02 Cumulative Update for Windows Server 2019 for x64-based Systems (KB4601345) but it keeps failing.

I've tried downloading the update directly from Microsoft as well and manually install it on the machine but this fails as well. I then tried clearing out C:\Windows\SoftwareDistribution\Download and re-downloading the updates however this doesn't work either.

I have attached CBS-logs and Windows Update-log.

Has Microsoft changed anonyms settings in teams meeting

oopvenzocom385 — Tue, 02 Mar 2021 09:03:01 GMT

Have Microsoft enabled the setting where anonyms can access a Teams meeting in an update?

If so it should have been in the last year (2020-2021)

Is Application Guard possible to deploy all users?

Hiroshi77 — Tue, 02 Mar 2021 09:02:49 GMT

Since Application Guard is white list operation and has issues on performance and function limitations, I'm wondering if it is possible to deploy on all PCs for over 10,000 users?

What's new in Windows Virtual Desktop for February 2021

TomHickling — Tue, 02 Mar 2021 08:53:35 GMT

We have just updated our What's new in Windows Virtual Desktop document for changes made to the service in February.

Here's what changed in February 2021.

Portal experience

We've improved the Azure portal experience in the following ways:

Bulk drain mode on hosts in the session host grid tab.
MSIX app attach is now available for public preview.
Fixed host pool overview info for dark mode.

EU metadata storage now in public preview

We're now hosting a public preview of the Europe (EU) geography as a storage option for service metadata in Windows Virtual Desktop. Customers can choose between West or North Europe when they create their service objects. The service objects and metadata for the host pools will be stored in the Azure geography associated with each region. To learn more, read our blog post announcing the public preview.

Teams on Windows Virtual Desktop plugin updates

We've improved video call quality on the Windows Virtual Desktop plugin by addressing the most commonly reported issues, such as when the screen would suddenly go dark or the video and sound desynchronized. These improvements should increase the performance of single-video view with active speaker switching. We also fixed an issue where hardware devices with special characters weren't available in Teams.

DevTools - All menus are "empty"

Salvuccio1595 — Tue, 02 Mar 2021 08:32:20 GMT

Hi!

Am I the only one who's experiencing this issue with DevTools menu?

Labels are not displayed, regardless of the website / menu.

MS Edge 90.0.803.0 (64 bit)

Skype for bussiness settings not saved in VDI

oron87y — Tue, 02 Mar 2021 08:36:45 GMT

Hello

In my organiztion working with VDI workstations , the settings in the Skype is not saved

I tired to save the registry value in this location :

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Office\16.0\Lync
HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Office\16.0\Lync

HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Lync

And folder in this location :

AppData\Roaming\Microsoft\Office\16.0\Lync

AppData\Roaming\Skype\RootTools

AppData\Local\Microsoft\Office\16.0\Lync

But is doesn't work , i have also the "Dynamic Environment Manager" but i dont know where is the Setting location saved , the most importent is the Volume that change every logout and login to station

Can someone can help my with that , Thanks in advance

Not possible to join Insider channel

ice89 — Tue, 02 Mar 2021 08:09:47 GMT

Hi all,

i try to join the insider channel on my new MacBookAir but i can´t to search for updates.

In all office apps the Button "Search for new updates" are missing and in the MicrosoftAutoUpdate the apps also not listed.

The Office Apps were distributed by Intune, is it possibly because of that? Do I still need to create a config that changes the plist? If so, which one or how should it look like?

About searching on Stream

O365_Japan_Support — Tue, 02 Mar 2021 08:08:33 GMT

*English follows Japanese

■Title(件名)：

Microsoft Stream の検索について

About searching on Stream

************

■Description(内容:(

Microsoft Stream の検索には、絞り込み検索や日付で検索する機能がありません。

Microsoft Stream の動画を詳細に検索することが困難なため、絞り込み検索や日付で検索する機能の拡充を希望致します。

There is no way to filter searches or narrow them by date on Stream.

Please add ways to search for Stream videos using filter conditions and dates etc., since searching in detail is currently difficult.

Customer Offerings:Device Protection w/ Microsoft Endpoint Manager & Microsoft Defender for Endpoint

John_Barbare — Tue, 02 Mar 2021 08:00:00 GMT

Introduction

Welcome to another customer offering article to inform you about how to configure, setup, and deploy endpoint protection policies which include protective measures from Microsoft. In this article, we will present Premier Services Offerings WorkshopPLUS - Device Protection with Microsoft Endpoint Manager and Microsoft Defender for Endpoint.

Offering Overview

With customers needing a deployment solution to push out Microsoft security policies and configurations, this offering will address this and more. This Premier offering builds on the fundamental security components and features of any Microsoft Endpoint Configuration Manager environment such as RBAC or role-based administration, Endpoint Protection, Exploit Guard, Application Guard, Microsoft Defender for Endpoint, BitLocker Drive Encryption, and Compliance Settings. With this new customer offering, we were able to provide a 3-day hands on training in a live demo tenant to meet and exceed customer expectations.

What the workshop entails

What's Included

The content of this offering is a mix of education, administration, compliance, and security best practices at the L200-L300 level. This offering focuses on the breadth of Microsoft Endpoint Configuration Manager, Microsoft Defender for Endpoint, M365 Security (on-prem and in the cloud), and also Intune. The Device Protection with Microsoft Endpoint Manager and Microsoft Defender for Endpoint workshop is a three day engagement where you will learn about configuring a tenant using labs hosted in the cloud (Microsoft Labs on Demand) with a full M365 E5 license (EMS E5 + M365 E5 + Office 365 E5). Each module contains scenarios that provide students with in-depth expertise, tools, and hands-on experience to help implement and troubleshoot security related concepts as they pertain to Microsoft Endpoint Configuration Manager.

Endpoint Protection policies

Areas Covered

The sections below sections are covered in detail throughout the three-day offering and expand on each objective to maximize your understanding of each topic and focus area through knowledge transfer modules.

Introduction to Endpoint Security - Overall introduction to security settings and recommendations that can be managed using Microsoft Endpoint Configuration Manager and Intune.

Role Based Access Control – Overview of Role Based Administration Control concept in Microsoft Endpoint Configuration Manager, including the reporting feature.

Endpoint Protection Technologies Overview - Objectives focus on a deeper dive into the technologies that make up Endpoint Protection.

Antimalware Policies - Objectives focus on learning the basic concepts and terminology for Endpoint Protection Antimalware Policies for Microsoft Defender Antivirus.

CAMP and Security Intelligence Updates - Objectives focus on managing Endpoint Protection Definition updates through Configuration Manager.

Endpoint Protection Alerts and Reporting - Objectives focus on how to configure and use alerts and report notifications within Configuration Manager.

Endpoint Protection Troubleshooting - Objectives focus on learning troubleshooting techniques for securing endpoints.

Exploit Guard and Application Guard - Objectives focus on learning about Attack Surface Reduction, Controlled Folder Access, and Exploit and Network Protection. You will also learn how to mitigate security threats using containers by deploying Application Guard.

Microsoft Defender for Endpoint - Objectives focus on learning how to onboard endpoints to Microsoft Defender for Endpoint using Microsoft Endpoint Configuration Manager and explore basic operational possibilities within Microsoft Defender for Endpoint portal.

Device Encryption - Learn what is BitLocker and explore modern management possibilities to control device encryption with Microsoft Endpoint Configuration Manager and Intune.

Compliance settings - Dive deeper into the compliance settings topic, including management possibilities using Microsoft Endpoint Manager (Intune).

Hands on with Labs on Demand

During this offering there are multiple hands-on labs exercises using Microsoft’s Labs on Demand. Each student will be an administrator of their own demo tenant where they will create and deploy security policies using Microsoft Endpoint Configuration Manager. Once the polices are deployed to another machine, the student will be able to view and test out those policies. The areas are listed below are covered in the lab exercises:

Endpoint Security
Implementing RBAC
Endpoint Protection policies
CAMP and Security Intelligence updates
Endpoint protection alerts and reporting
Endpoint protection troubleshooting
Exploit Guard and Application Guard
Microsoft Defender for Endpoint
Device Encryption
Compliance settings

Creating the configuration file for Endpoints for MDE

Configuring Attack Surface Reduction Rules

Configuring Bitlocker drive encryption in MEM

Objectives

After completing this course, you will understand how to set up, configure, and manage Microsoft Endpoint Configuration Manager Role Based Access, Endpoint Protection for Microsoft Endpoint Manager, Application Guard and Exploit Guard integration, Microsoft Defender for Endpoint, BitLocker Drive Encryption, and compliance settings.

Key Personnel For this Offering

This course is targeted at IT staff who have already started designing and implementing Microsoft Endpoint Configuration Manager integration with Microsoft Security products and concepts. To ensure that students are successful at the end of this WorkshopPLUS, it is highly recommended they meet the following criteria:

Existing knowledge of Microsoft Endpoint Configuration Manager
Moderate knowledge of Windows Platform and Microsoft Security products
Basic knowledge of Microsoft Endpoint Manager (Intune)

Disclaimer

As of this writing, the above modules are in scope. However, they might change as Microsoft Endpoint Configuration Manager, Intune, Microsoft Defender for Endpoint, and M365 Security are subject to change.

Follow up and feedback

For further information, please contact your Microsoft Account Representative, Customer Success Account Manager (CSAM), or Service Delivery Manager (SDM).

To improve this or any other workshop, we always consider feedback from you. At Microsoft, achieving a high level of satisfaction among our customers and partners around the world is a core component of our business. For that reason, please don’t hesitate to complete the surveys and provide feedback.

Credit

Special thanks and credit to the development team:

Anton Tatarkin, Senior Customer Engineer, Intune / EMS / Configuration Manager, Netherlands

John Barbare, Senior Customer Engineer - Cybersecurity, Monitoring Solutions (Sentinel, M365 Defender, MDE, MDI, MCAS), Unites States

Charles Baldridge, Customer Engineer, Configuration Manager, United States

Links to Teams files for externals who are member of the Teams

sandy260 — Tue, 02 Mar 2021 07:58:46 GMT

Hi,

we collaborate in our company Teams Team with an external agency, who are member of the Teams team. How can I link documents from Teams so that the Externals can use them? It doesn´t work for them, although they have access to the Teams files.

Thank you for your support

Connector accessto universal print via proxy

jithinsbabu — Tue, 02 Mar 2021 07:56:23 GMT

Universal print connector while trying to connect via proxy is not working at all. Would be good if this product can be made work via a proxy connection to Universal Print. Since most of corporates use internal DNS, register.print.microsft.com is not reached directly from the server hence connection is getting failed.

I can't open word with Docx extension but I have no problem with doc extension

Barzan_M_Hassan — Tue, 02 Mar 2021 07:44:08 GMT

Dear All,

I am here asking for help, I have synced SharePoint library on my laptop, I can open word file with docx extension online through browser but I can't open the same file on my computer.

Word.docx can't be open it on my laptop but no problem online

word.doc file can open online and on my computer.

Please note that i have office 365 applications

Please help me sort this out.

Best,

Barzan

PowerShell Connection on Different Domain

Nitts — Tue, 02 Mar 2021 07:43:04 GMT

Hi Guys,

I need help with the script to remove Multiple Users from a Group on Different Domain using PowerShell. We have two domains however, my machine is on another domain. How can i leverage PowerShell Script to remove bulk users in a Group on a different domain.

Thanks in Advance.

Change back default colors

János — Tue, 02 Mar 2021 07:43:02 GMT

Hi All,

Is it possible to change back to the default colors?

It seems after update my colors are changed and i hate this whole white colors stuff.

The menu left side was blue before, i want it back :)

Thanks,

Br,

János

Read API for Viva Topics

eridab — Tue, 02 Mar 2021 07:38:54 GMT

Hello everyone! First of all, Viva seems to be a great app that Teams definitely needs. I am curious to know if there is already an API that allows me to get all Viva topics inside my Teams. If not, are you thinking of making a read API for Viva topics available in the very near future.

Thank you in advance!

problem in conversion sra to fastq

dinna550 — Tue, 02 Mar 2021 07:33:34 GMT

I wrote code:

#Import the data table into a variable
$sorceFolder= import-csv 'elife-526-s.csv'
$files=$sorceFolder|select SRA
#Convert any SRA file to fastq
$list = $sorceFolder |where {$_."SRA" -eq "ERR1654119"}
foreach($f in $list){
prefetch $f --max-size 100G --progress -O C:\Users\user\Desktop\labHebrew\RhizosphereMicrobiome\Data
fasterq-dump --split-files --threads 32 --stdout $f -O C:\Users\user\Desktop\labHebrew\RhizosphereMicrobiome\Data
}

And I got a comment:

prefetch : The term 'prefetch' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name,
or if a path was included, verify that the path is correct and try again.
At line:2 char:1
+ prefetch $f --max-size 100G --progress -O C:\Users\user\Desktop\labH ...
+ ~~~~~~~~
+ CategoryInfo : ObjectNotFound: (prefetch:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException

fasterq-dump : The term 'fasterq-dump' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of
the name, or if a path was included, verify that the path is correct and try again.
At line:3 char:1
+ fasterq-dump --split-files --threads 32 --stdout $f -O C:\Users\user ...
+ ~~~~~~~~~~~~
+ CategoryInfo : ObjectNotFound: (fasterq-dump:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException

what is the problem?

Microsoft Teams problem

Andreea545 — Tue, 02 Mar 2021 07:18:11 GMT

Hi, I have a problem with Microsoft Teams, I do online school on the platform, but yesterday I noticed that it leaves my call, that is, I enter the call ... I stay 5 minutes and it leaves my call based on the fact that a problem appeared, on the other devices I have no problem. I mean phone and tablet ... what could I do ?

Custom SPFx app on SPO: How to roll back to previous version?

kenneho — Tue, 02 Mar 2021 07:10:14 GMT

Hi.

We've developed a simple SPFx app, and installed it on a couple of sites on our intranet.

I package-solution.json I can set the app version that's used by our SPO sites' app store.

Say I have deployed version 1.0.0, and then deploy version 1.0.1. Can I roll back to version 1.0.0 using only SPO app store? Or do I have to delete the app from the app store, and upload version 1.0.0 and re-install it on the sites?

Announcing the preview of Zone Redundant Storage (ZRS) option for Azure managed disks

Raman Kumar — Tue, 02 Mar 2021 07:05:02 GMT

We are excited to introduce the preview of Zone Redundant Storage (ZRS) option for Azure managed disks! This capability provides synchronous replication of data across the three Zones in a region, enabling disks to tolerate Zonal failures which may occur due to natural disasters or hardware issues. ZRS option is currently supported for Premium SSD and Standard SSD disks.

Use ZRS disks for legacy applications to achieve better availability

You can achieve high availability for your workloads using application-level replication across two zones, for example, SQL Always On. However, suppose you are using industry-specific proprietary software or legacy applications like older versions of SQL Server, which don't support application-level synchronous replication; ZRS disks will provide improved availability via storage-level replication. For example, if a zone goes down due to natural disasters or hardware failures, ZRS disk will continue to be operational. If your virtual machine (VM) in the affected Zone becomes unavailable, you could use a virtual machine in another zone and attach the same ZRS disk.

Use ZRS with shared disks

You can also use the ZRS option for shared disks to provide improved availability for clustered or distributed applications like SQL FCI, SAP ASCS/SCS. You can attach a shared ZRS disk to primary and secondary VMs allocated on different zones to take advantage of both ZRS disks and Availability Zones for VMs for higher availability. In the event of a primary zone failure, you can quickly fail over to the secondary VM using SCSI persistent reservation.

Use ZRS disks to achieve zero RPO

For LRS disks, you can achieve better durability by taking frequent backups of your disks using ZRS snapshots. You can also enable cross-zone disaster recovery for LRS disks via Azure Site Recovery. However, these options do not provide zero Recovery Point Objective (RPO). If your application must meet zero RPO, then ZRS disks could be the solution.

Pricing and performance

You can find the price for Premium SSD and Standard SSD ZRS disks at the disks storage pricing page. The IOPS and bandwidth provided by ZRS disks is same as the corresponding LRS disks. For example, a P30 (128 GiB) LRS Premium SSD disk provides 5000 IOPS and 200 MB/second bandwidth, which is same for P30 ZRS Premium SSD disk. Disk latency for ZRS is higher than that of Locally Redundant Storage (LRS) due to the cross zonal copy of data.

Get started

If you are interested in participating in the preview, request access by filling out this form. A list of regions where the feature is supported can be tracked on the documentation page. We will keep adding new regions throughout the public preview.

Review the ZRS disks preview documentation to learn how to do the following:

Create a VM with ZRS OS and data disks.
Create multiple VMs in different zones with a shared ZRS disk.
Create VMSS with ZRS OS and data disk.

Using MS Teams group in Exchange Online mail rule.

Pawel Jarosz — Tue, 02 Mar 2021 07:04:18 GMT

Hi Everyone,

I would like to build a mailflow rule based on a group membership, however I would like this group to be MS Teams groups, so if a user is a member of X Team, rule will apply, however I am not able to see any Team group on a list. I have securityenabled this group - no luck, still not there.

Is anyone aware of if/how this can be achieved? Basically what I would like to have is a mail rule based on a group membership where users would be able to add themselves (and only themselves) there and remove as well - so they can decide whether the solution works for them or not. I was thinking about Team membership - easy for users to add and remove themselves.

Any ideas appreciated,

Cheers,

Numbering and bullets in Word docs keep disappearing

AndrewBallem — Tue, 02 Mar 2021 06:45:38 GMT

When working as a team on Word files within SharePoint, I constantly have problems with things like heading numbering disappearing (or changing from numbers to bullets), bullets going missing or bullets turning into numbers. From what I can see, the custom list styles in the documents go missing. Other formatting things happen, like table column widths messing up. I can fix it all, PDF it, save and close, and when I open the Word doc again it's all gone haywire once more.

I was always approaching this from a Word bug perspective, but maybe it's something I'm doing wrong in regard to SharePoint. Essentially, this is my workflow:
1. Create Word template.
2. Create documents from Word template (bid response schedules, one for each).
3. Upload all files to SharePoint.

At this point, the template resides on my computer, in my OneDrive folder. As I understand it, this shouldn't be an issue because unless people play around with what template the document is linked to, it shouldn't change. However, often I found that the template had reverted back to "Normal". So, I started saving the template in a location on SharePoint (along with the documents) and making sure it was linked to it.

When the document styles go haywire, to fix it all I need to do is link back to the template and update the styles. I have a macro that has the location of the template hard coded, and it links the document to the template, updates the styles, then turns off the checkbox again. (Note: I always make sure the "update styles from template" is kept off). Whether the template is on my computer or on SharePoint, once the styles start messing up they will continue to keep messing up, so putting the template on SharePoint doesn't seem to have fixed it.

I'm outlining this process because all the forum posts I've found seem to treat SharePoint more as a space where templates are uploaded and people use the "New" button to create and then save documents straight into SharePoint from Templates that are uploaded into the site library. This is obviously not how we are using it: these Teams sites are created per project, we do our submission and then move on. I'm the only one creating documents and other people contribute to them.

Is there something I'm doing fundamentally wrong and that's why these issues happen? If not, has anyone seen this issue and worked out what causes it?

Graph api returns 19999 error at 'List Assignments'

BoHyun — Tue, 02 Mar 2021 06:30:24 GMT

Greetings,

I am using Microsoft api beta(Education).

Among them, I'm using List Assignments, suddenly it returns 19999 error.

Code: 19999 Message: Something failed, the API cannot share any more information at the time of the request.

I refferd to this site.

Does anyone know why this is happening? );

Show Button only in display form

jean090681 — Tue, 02 Mar 2021 06:26:16 GMT

Hello Everyone,

I have Customized PowerApps form for my SharePoint list and i have add a button to a hyperlink column and would like to make the button visible only in display form.

Here is what i have on the button displaymode and the button is visible in both edit and display form,
Visible = If(SharePointForm1.Mode=1,false,true)

And i would like this button to be visible only when it contains value.

Any suggestions on how to configure this.

help with formula

Dania1215 — Tue, 02 Mar 2021 05:34:05 GMT

I have a spreadsheet with several tabs of data. I am wanting to count column L for time in minutes and divide it by 60 to get hours in the time period specified on Tab Injury Prevention. My current formula looks like this:

=SUMIFS('Summary of Services'!L:L,'Summary of Services'!A:A,">"&'Injury Management'!D3)/60

However, it seems to consistantly be 180 minutes/3 hours off no matter what I try. What am I missing?

Any suggestions!?? Thanks!

SAP on Azure General Update – February 2021

Cameron_MSFT_SAP_PM — Tue, 02 Mar 2021 05:30:12 GMT

1. Hotnews : Updates to SAP on Azure Documentation

SAP introduced a new feature called HANA data volume partitioning with HANA 2.0 Support Pack Stack 3.

This feature places multiple Hana datafiles onto multiple disks, thereby avoiding the requirement to aggregate disks using LVM. Some Linux Administrators prefer simpler disk structures.

Example: Rather than aggregating 4 x P30 in LVM and placing one large datafile, multiple datafiles can be placed onto 4 separate disks.

Microsoft has updated the SAP Hana on Azure documentation to reflect the usage of this new feature. Customers should test scenarios such as Backup/Restore and DB integrity check.

SAP HANA Azure virtual machine storage configurations - Azure Virtual Machines | Microsoft Docs

SAP HANA Azure virtual machine ANF configuration - Azure Virtual Machines | Microsoft Docs

SAP HANA – Partitioning Data Volumes | SAP Blogs

Other recent documentation updates for Azure NetApp Files include:

Azure Virtual Machines Oracle DBMS deployment for SAP workload

HA for SAP HANA scale-up with ANF on RHEL

SAP HANA scale-out HSR with Pacemaker on Azure VMs on RHEL

SAP HANA scale-out with standby node on Azure VMs with ANF on SLES

SAP HANA scale-out with standby node on Azure VMs with ANF on RHEL

NFS v4.1 volumes on Azure NetApp Files for SAP HANA

Azure Storage Configuration page is frequently updated. It is recommended to review recent changes in:

SAP HANA Azure virtual machine storage configurations. Recently the disk performance table has been updated to include Azure Premium Disk Burst functionality

More information on Disk Performance Tiers can be found here: Performance tiers for Azure managed disks - Azure Virtual Machines | Microsoft Docs

Recent price reductions and performance improvements are announced here More IOPS at no additional cost for Azure Files premium tier | Azure updates | Microsoft Azure

The main SAP on Azure site https://azure.microsoft.com/en-us/solutions/sap/

SAP on Azure Resources https://azure.microsoft.com/en-us/solutions/sap/resources/

SAP on Azure Updates on the main Azure site https://azure.microsoft.com/en-us/updates/?query=sap

SAP on Azure Documentation “Getting Started” https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/get-started

2. New Azure Monitoring Agent

A new Azure Monitoring Agent is currently in preview and will become Generally Available in due course.

Azure Monitor agent overview - Azure Monitor | Microsoft Docs

The new Azure Monitoring Agent (AMA) has advantages over the current monitoring framework

AMA fully supports Multi-homed Linux VMs and control over version upgrades

AMA is still in Public Preview, but when released AMA will become the default agent installed when a new VM is created. The previous Log Analytics solution will still be available for manual installation.

AMA can also monitor non-Azure servers using ARC Azure Arc – Azure Management | Microsoft Azure

To join the AMA Preview https://aka.ms/AMAgent

Supported Operating Systems include popular Windows, Suse and Redhat releases used by SAP customers Overview of the Azure monitoring agents - Azure Monitor | Microsoft Docs

3. Tuning for SIOS LifeKeeper on Oracle Linux

A significant number of SAP on Azure customers run on Oracle database. Microsoft is continuing to improve and optimize the Azure platform for SAP on Oracle customers. In recent time we have published guidance for deploying Oracle 19.8 on Oracle Linux 8.2 with Automatic Storage Management (ASM). In the future we will publish blogs on Oracle DataGuard and SnapShot Backup of ASM systems.

Oracle customers are often using SIOS LifeKeeper cluster software for the ASCS cluster. Testing has shown the following configuration is optimal for DB, ASCS and SAP Application servers

Increase SIOS cluster timeout to 45 sec (5 sec heartbeats x 9 failures)
Set /proc/sys/net/ipv4/tcp_retries2 = 9 (originally set to 15) on cluster VMs
Set ASCS/SCS for ENSA1 profile parameter to: enque/encni/set_so_keepalive = true restart SAP ASCS/SCS to enable settings
Set net.ipv4.tcp_keepalive_time = 300 (originally set to 7200) on ALL VMs

Thanks for Goran for contributing this item

SIOS Lifekeeper: Linux High Availabillity Cluster Software | SIOS

4. Recommended Blogs for SAP on Azure Customers & Consultants

Many new useful blogs have been created by Microsoft for SAP customers

Part 1: Application Gateway WAF v2 setup for Internet facing SAP Fiori Apps

The blog provides details to configure Application Gateway WAF v2 which acts a first line of defense for Internet facing SAP Fiori Apps in Azure.

NOTE: There is a difference in the end-to-end SSL setup process with respect to the version of application gateway used (v1 or v2). As this blog highlights configuration using application gateway SKU v2, you will find a difference in setup process if you configure application gateway v1.

Part 2: Single Sign On Configuration using SAML and Azure Active Directory for Public and Internal URLs

We already have an official tutorial that describes Azure Active Directory Single Sign On (SSO) integration with SAP Fiori, but this blog extend the use on achieving SAML based SSO for two different URLs (Public and Internal).

Thanks to Bartosz Jarkowski for contributing this blog on SQL Server TDE with Azure Key Vault

https://blogs.sap.com/2021/01/19/your-sap-on-azure-part-25-sql-server-transparent-data-encryption-with-azure-key-vault/

Thanks to Philipp Leitenbauer for releasing this useful tool – version 2.0 of the Hana on Azure Quality Check tool

SAP-on-Azure-Scripts-and-Utilities/QualityCheck at main · Azure/SAP-on-Azure-Scripts-and-Utilities · GitHub

Thanks to Vamshi Polasa for releasing this whitepaper on migrating Oracle workloads to Azure

https://techcommunity.microsoft.com/t5/running-sap-applications-on-the/migrating-sap-on-oracle-workloads-to-azure/ba-p/2109839

Thanks to Anjan for providing a procedure to replication Linux Pacemaker ASCS clusters with ASR

SAP ASCS HA Cluster (in Linux OS) failover to DR region using Azure Site Recovery - Microsoft Tech Community

Another major customer is moving from SAP ECC on Azure to S4 running on Hana Enterprise Cloud running on Azure.

Zespri selects SAP cloud solutions in multi-year deal - SAP Australia & New Zealand News Center

Thanks to Ralf Klahr for this video about CONA (Coca Cola North America)

https://tv.netapp.com/detail/video/6230415190001

Thanks to Goran Condric and others for these blogs on automating system shutdown & startup

Optimize your Azure Costs by Automating SAP System Start – Stop - Microsoft Tech Community

Hey, SAP Systems! My PowerApp says Snooze! But only if you’re ready yet | SAP Blogs

5. SQL Server 2019 CU8 Distributed Network Name

A new feature has been added in SQL Server 2019 CU8 that eliminates the requirement to have a Internal Load Balancer for the SQL Server AlwaysOn Listener. This new feature simplifies the setup, configuration and operations of SQL Server AlwaysOn. Customers may also notice that failover times are faster with a DNN.

A Distributed Network Name (DNN) Listener can be retrofitted to an existing configuration that has a conventional ILB. Documentation on the setup and configuration of a DNN can be found here https://docs.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/availability-group-distributed-network-name-dnn-listener-configure

It is recommended to set MultiSubnetFailover=True and review https://docs.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/availability-group-dnn-interoperability

Note: this feature is exclusively available only as of SQL Server 2019 with CU8 or higher and Windows 2016 or higher.

The default.pfl and Windows environment variables should be updated. A sample ENV can be seen below. The TCP port number specified in the powershell command must be added to both the ENV and default.pfl. The format should be <listenername>,<port>. A comma and not a “.” or “:” must be used

MSSQL_CONNOPTS=MultiSubnetFailover=yes

MSSQL_DBNAME=P01

MSSQL_SCHEMA=p01

MSSQL_SERVER=dnnp01lsnr,6789

The latest SQL Server Service Pack and CU is always supported by SAP and can be downloaded from here https://techcommunity.microsoft.com/t5/sql-server/bg-p/SQLServer/label-name/SQLReleases

SQL Server 2019 CU8 Availability Groups Supports DNNs (microsoft.com)

6. Running Oracle on Azure NetApp Files

It is now supported to run Oracle 19.8 DBMS on Oracle Linux 8.2 connection over NFS to Azure NetApp Files. NetApp features such as Snapshot backup can be used for near instant Backup & Restore

Changes in our Oracle documentation Oracle Azure Virtual Machines DBMS deployment for SAP workload - Azure Virtual Machines | Microsoft Docs
Minimum OEL release (8.2) and minimum DBMS requirement (19.8.0) is documented in SAP note: 2039619 - SAP Applications on Microsoft Azure using the Oracle Database: Supported Products and Versions - SAP ONE Support Launchpad
The Oracle provided dNFS driver should be used in the guest OS. More documentation can be found here: Creating an Oracle Database on Direct NFS - Bing
Thanks to Ralf for providing this blog describing the whole end-to-end process of deployment and configuration with this blog: Deploy SAP AnyDB (Oracle 19c) with Azure NetApp Files - Microsoft Tech Community

Note: VM skus with very high network quota may be needed

7. SUSE Linux 15 Service Pack 2 – Remove Mount Option NOBARRIER

SUSE Linux Enterprise Server 15 (SLES 15) or SUSE Linux Enterprise Server 15 for SAP Applications (SLES for SAP 15) is now certified and supported for both NetWeaver and Hana. The /etc/fstab option NOBARRIER has been depreciated for some time. Suse 15.2 uses a Linux 5.0 kernel. The option NOBARRIER will now cause an error and should be removed. On most modern Linux distributions the NOBARRIER option will be ignored.

The correct IO Scheduler options are documented here SAP HANA Azure virtual machine storage configurations - Azure Virtual Machines | Microsoft Docs

Azure Site Recovery and Azure Hana Backup are both supported on Suse 15 Service Pack 2 (Linux Kernel 5.0)

List of SUSE Linux Enterprise Server kernel (version and release date) | Support | SUSE

8. Update on Support Matrix for SAP on Azure

In recent months many new features have become available for SAP customers. The list below is a very brief overview of recommended features and updated documentation

Azure Disk Encryption is now supported for Gen2 Windows VMs. Gen2 Linux VM support is in progress
Redhat 8.2 is now certified for Netweaver and Hana.
Suse 15.2 is now certified for Netweaver and Hana
Azure Site Recovery now works with Linux Pacemaker clusters and the procedure for protecting and recovering Pacemaker clusters after an ASR failover is documented here https://techcommunity.microsoft.com/t5/blogs/blogworkflowpage/blog-id/SAPApplications/article-id/722
Azure Site Recovery Portal support for PPG is now live https://docs.microsoft.com/en-us/azure/site-recovery/how-to-enable-replication-proximity-placement-groups
Azure Backup for Hana now supports incremental backups Azure Backup for SAP HANA databases now supports Incremental backups – Public preview | Azure updates | Microsoft Azure
Azure backup increased SAP HANA soft limit from 2 TB to 8 TB volume
Customers with a requirement for Immutable Storage for legal or compliance reasons and/or to prevent modification of objects such as backups can use https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-immutable-storage
Customers are recommended to review “Azure Monitor for SAP” which is in preview - https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/azure-monitor-providers

The Azure platform offers ADE and additional encryption solutions. These will be discussed in an upcoming blog:

Double Encryption https://docs.microsoft.com/en-us/azure/virtual-machines/disks-enable-double-encryption-at-rest-portal
Encyption at Host https://docs.microsoft.com/en-us/azure/virtual-machines/disks-enable-host-based-encryption-portal

9. New Azure Monitor Counters – Guest VM Throttling

Customers and Partners should setup Azure Monitor and leverage new performance counters to ensure SAP on Azure solutions are correctly sized for optimal cost savings and performance.

Over-sizing VMs leads to excessive costs. Undersizing VMs can lead to performance and stability problems.

Each Azure VM is assigned a specific quota of CPU, RAM, Disk & Network. If these quotas are saturated for extended periods performance and stability problems may occur. It is recommended to size VMs such that there are only momentary spikes to 100% for brief periods, typically no more than tens of seconds

Forunately the Azure platform comes with Azure Monitor – a very powerful and useful tool. https://docs.microsoft.com/en-us/azure/azure-monitor/overview

Azure Monitor Quickstarts for Linux and Windows can be found here https://docs.microsoft.com/en-us/azure/azure-monitor/learn/quick-monitor-azure-vm

A list of all the Azure Monitor metrics can be found here

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/metrics-supported but the more useful counters for SAP IaaS VMs can be found here Azure Monitor supported metrics by resource type - Azure Monitor | Microsoft Docs

The counters that monitor disk quota consumption are labelled “Consumed Percentage”. In addition to the below monitoring the network throughput may also be useful.

The quotas of typical VMs used for SAP systems can be found in this link below.

Edv4 and Edsv4-series - Azure Virtual Machines | Microsoft Docs

Additional Links & Notes

The new Azure Portal Application is faster and has useful features – available for download

https://portal.azure.com/App/Download

Redhat support cycle and support dates Red Hat Enterprise Linux Life Cycle - Red Hat Customer Portal

Azure Files NFS 4.1 is now in Preview https://azure.microsoft.com/en-us/updates/azure-files-support-for-nfs-v41-is-now-in-preview/ Azure Files NFS removes the need for a highly available NFS VM infrastructure

Azure Certification and Training courses

Collections - MicrosoftAzuretrainingandcertifications | Microsoft Docs

SAP on Azure Free Online Training Course. Exam AZ-120: Planning and Administering Microsoft Azure for SAP Workloads

https://docs.microsoft.com/en-us/learn/certifications/exams/az-120

A free Certification Exam offer is here https://docs.microsoft.com/en-us/learn/certifications/microsoft-build-cloud-skills-challenge-2020-free-certification-exam-offer

This Red Hat article How to in-place upgrade SAP environments from RHEL 7 to RHEL 8 - Red Hat Customer Portal describes the supported combinations. For HANA, according to the article the in-place upgrade is only supported on non-cloud systems: “The in-place upgrade of RHEL 7 with SAP HANA can be performed from RHEL 7.7 to RHEL 8.2 only, on x86_64 only, and on non-cloud systems only. A SAP HANA system running on RHEL 7.6 or earlier must be updated to RHEL 7.7 “

Linking Two Cells Together (complex)

waldhari1365 — Tue, 02 Mar 2021 05:21:02 GMT

Does anyone know if one could equate two cells in Excel, say A1 and C1, such that if I change A1, then C1 will change to reflect the data of A1, and if I change C1, A1 will reflect the data of C1? I don't believe formulas will permit this since when you enter data into a cell, it removes the formula. But perhaps Excel has another tool for this?

Microsoft Viva - Replacing Microsoft Learning Pathways?

Scarlett725 — Tue, 02 Mar 2021 04:55:22 GMT

Hello!

As MS Ignite kicks off, and we all start to learn a bit more about Viva, I'd like to understand what that means for the Microsoft Learning Pathway site? Will MLP be subsumed into Viva's learning modules?

Users are disconnected for a Moment While the TEAMS dynamically changes their IP

RabbaniSYed — Tue, 02 Mar 2021 04:33:43 GMT

Lot of our users are started complaining that teams disconnect and connect in a fraction of moments, we started look at our network and ISP but did not succeed, later i have identified that when the IP switchover may take place it happens, is there any way to prevent this.

Automatically create incidents from Microsoft security alerts and send notification

cklonger — Tue, 02 Mar 2021 04:32:21 GMT

Hello, we have trigger the rule "Automatically create incidents from Microsoft security alerts" and generate incidents successfully. However, we have no idea how to connect these kind of incidents (from security center) with notification email playbook of other sentinel rules. We know there is a notification setting in Security center. Is it possible to set the auto playbook for the incidents from Microsoft security alerts?

What’s New in Azure Disk Storage at Microsoft Ignite 2021

henryyan — Tue, 02 Mar 2021 04:10:42 GMT

Since Ignite last September, we’ve been focused on delivering enhancements to Azure Disk Storage to help our customers migrate their mission-critical workloads to Azure. Today, at Microsoft Ignite 2021, we are excited to share a new set of innovations for Azure Disk Storage across key elements, including reliability, scale & performance, security, data protection, and cloud native applications.

This blog post gives you an overview of these new capabilities which will help you run your business-critical applications on Azure.

Reliability

Increase availability for your applications with Zone redundant storage (ZRS) on Premium and Standard SSDs, in preview

Provide synchronous replication of data across zones in a region, enabling disks to tolerate zonal failures which may occur due to natural disasters or hardware issues.
Enable customers to maximize their virtual machine availability without the need for application-level replication of data across zones, not commonly supported by legacy applications such as old versions of SQL or industry-specific proprietary software. This means that if a virtual machine becomes unavailable in an affected zone, you can continue to work with the disk by mounting it to a virtual machine in a different zone.
Can be used with shared disks to provide improved availability for clustered or distributed applications like SQL FCI, SAP ASCS/SCS or GFS2.

Sign-up for the preview.

Read the blog and documentation to learn more about ZRS for Azure managed disks.

Scale & Performance

Achieve sustained higher performance by changing tiers without disruption to your workloads, in preview

In November 2020, we announced the general availability of performance tiers on Premium SSDs, which provides you the flexibility to scale the disk performance without increasing the disk size by selecting a higher performance tier. You can also change tiers to bring the disk back to your baseline performance tier, enabling you to achieve higher performance and cost savings. Performance tiers is critical for planned events like a seasonal sales promotion or running a training environment, where you need to achieve sustained higher performance for a few hours or days and then return to the normal performance levels. Now, in preview, you can change the performance tiers of Premium SSD without any downtime to your application - even when the disk is attached to a running virtual machine.

Sign-up for the preview.

Read the documentation to learn more about performance tiers on Premium SSDs.

Boost disk performance on-demand with new disk bursting experience on Premium SSDs, in preview

We are extending disk bursting support for larger Premium SSDs (above 512 GiB) with a new enhanced experience. Unlike credit-based bursting where you can only burst your performance if you have accrued credits, on-demand bursting allows you to burst up to 6x of the provisioned limit (up to 30,000 IOPS and 1,000 MBps) whenever needed. On-demand disk bursting is most suitable for mission-critical workloads where a limit in performance cannot be tolerated even for unexpected spikes. With on-demand disk bursting, you will be charged a burst enablement fee and for any additional transactions over the provisioned limit.

Read the documentation to learn more about on-demand bursting.

Security & Data Protection

Keep your data secure with auto-key rotation of customer-managed keys, in preview

Azure managed disks provide end to end encryption of data with your keys stored in Azure Key Vault. Now, you can choose to enable automatic rotation of your keys. When you generate a new version of a key in your Key Vault, the system will automatically update all the managed disks, snapshots, and images to the new key version within an hour.

Read the documentation to learn more about auto-key rotation of customer managed keys.

Protect your critical data with per disk backup, in preview

Per disk backup provides snapshot lifecycle management by automating periodic creation of snapshots and retaining it for configured duration using a backup policy. You can easily manage disk snapshots with no additional costs and without need for custom scripting or any management overhead. This is an agent-less and crash-consistent backup solution that takes point in time backup of a managed disk using incremental snapshots with support for multiple backups per day.

Several key aspects of per disk backup include:

Faster and more frequent backups without disruption to your applications
Supports backup and restore for both OS and data disks (including shared disks), regardless of whether they are currently attached to a running Azure Virtual machine.
Cost-effective solution to backup specific disks

Sign-up for the preview.

Read the documentation to learn more.

Cloud Native Applications

Deploy and protect Stateful Kubernetes applications with Azure Disk CSI Driver, generally available

Container Storage Interface (CSI) is a standard for exposing block and file storage systems to containerized workloads on Kubernetes. With the GA of the Azure Disk CSI driver, starting in Kubernetes v1.20, you can now:

Take advantage of the latest Azure Disk functionality by updating to the new CSI driver version, without the need to wait for Kubernetes release cycles.
Create, manage and delete disk volume snapshots via Kubernetes native API, as well as, create new disk volumes pre-populated with the data from a snapshot via Kubernetes dynamic volume provisioning - providing a singular interface for volume and snapshot management.
Use RWX raw block volumes from multiple pods.

Azure Disk CSI driver is now available with Kubernetes v1.20 onwards with AKS Engine and will be available on AKS coming soon.

Formula help

62Mojo — Tue, 02 Mar 2021 03:41:54 GMT

Looking for some help again.

I need to figure out a formula that returns a value if another cell contains a set of information. Attached is the template I'm working on and I've detailed the criteria on the spreadsheet.

I'd really appreciate some assistance again.

Thanks,

Restricting the creating team but Able to create new plan

acksios — Tue, 02 Mar 2021 03:29:34 GMT

Hi,

I am planning to migrate my organisation file server to SharePoint and Team. As I am testing different permission options. I found a situation, I have to restrict the team leaders and staffs to not able to create a new team. So I was following this article:

Manage who can create Microsoft 365 Groups | Microsoft Docs

However, I would team leader to able to create a new plan on the planner.

Is this possible? (or if this is a discussion already exist would you be able to gentle direct me?)

Acksios Kim

Application Troubleshooting - Stateless/Stateful Services Cannot Be Started In Service Fabric

Ping_Wu — Tue, 02 Mar 2021 03:05:16 GMT

This blog introduces troubleshooting steps for the issue that stateless/stateful services cannot be started in service fabric as well.

Customer could read this information and follow up the troubleshooting steps to identify the exception and the issue events when stateless and stateful try to start.

Stateless and Stateful Service Lifecycle

The lifecycle of a stateless service is straightforward. Here's the order of events:

1. The service is constructed.

2. Then, in parallel, two things happen:

* StatelessService.CreateServiceInstanceListeners() is invoked and any returned listeners are opened. ICommunicationListener.OpenAsync() is called on each listener.

* The service's StatelessService.RunAsync() method is called.

3. If present, the service's StatelessService.OnOpenAsync() method is called. This call is an uncommon override, but it is available. Extended service initialization tasks can be started at this time.

Stateful services have a similar pattern to stateless services, with a few changes. For starting up a stateful service, the order of events is as follows:

1. The service is constructed.

2. StatefulServiceBase.OnOpenAsync() is called. This call is not commonly overridden in the service.

The following things happen in parallel:

* StatefulServiceBase.CreateServiceReplicaListeners() is invoked.

* If the service is a Primary service, all returned listeners are opened. ICommunicationListener.OpenAsync() is called on each listener.

* If the service is a Secondary service, only those listeners marked as ListenOnSecondary = true are opened. Having listeners that are open on secondaries is less common.

* If the service is currently a Primary, the service's StatefulServiceBase.RunAsync() method is called.

3. After all the replica listener's OpenAsync() calls finish and RunAsync() is called, StatefulServiceBase.OnChangeRoleAsync() is called. This call is not commonly overridden in the service.

Events and Cancellation Token

CreateServiceInstanceListener is to supply the communication listeners for the service instance, it is normally override in stateless service like using Kestrel , https and so on.

RunAsync() is executed in its own task. Note that in the code snippet above, we jumped right into a while loop. There is no need to schedule a separate task for your workload. Cancellation of your workload is a cooperative effort orchestrated by the provided cancellation token. The system will wait for your task to end (by successful completion, cancellation, or fault) before it moves on. It is important to honor the cancellation token, finish any work, and exit RunAsync() as quickly as possible when the system requests cancellation. It will be triggered for stateful primary replica or all stateless instances and normally override in stateful service.

Cancellation token is provided to coordinate when your service instance needs to be closed. In Service Fabric, this open/close cycle of a service instance can occur many times over the lifetime of the service as a whole. This can happen for various reasons, including:

* The system moves your service instances for resource balancing.

* Faults occur in your code

* The application or system is upgraded.

* The underlying hardware experiences an outage.

Troubleshooting

Please follow up below steps to idenify the exception method:

1. RDP to service fabric node. (primary replica node if it is stateful service)

2. Check Application event logs for any exception if no exceptions go to step 3.

3. Check if the port is occupied by the other services.

For TCP: Get-Process -Id (Get-NetTCPConnection -LocalPort YourPortNumberHere).OwningProcess For UDP: Get-Process -Id (Get-NetUDPEndpoint -LocalPort YourPortNumberHere).OwningProcess

4. For non-prod environment, remote debug would be helpful to get more insight, please ref more details via Debug your application in Visual Studio

5. List underlying exceptions and capture dump via procmon

Start-bitstransfer "https://download.sysinternals.com/files/Procdump.zip"

procdump.exe -accepteula -e 1 -f "" -w "processname"

6. Then capture the dump for specific exception.

procdump.exe -ma -e 1 -f "NullReferenceException" -w "processname"

7. Use Windbg, Debugdiag to get details about exception like method call stack.

Troubleshooting 4xx and 5xx Errors with Azure APIM services

SherrySahni — Tue, 02 Mar 2021 03:01:54 GMT

Part I - Troubleshooting 4xx Errors

Debugging and Troubleshooting Overview

The API Management is nothing but a proxy which help to forward the request from client side to destination API service. It has the ability to modify the request or process based on the inputs from the client side before it reaches the destination. In an ideal scenario, APIs configured within an APIM service are expected to return successful responses (mostly 200 OK) along with the accurate data that is expected from the API.

In case of failures, you may see an incorrect response code along with a precise error message of what went wrong during the API call.

However, there may be scenarios where you may observe API requests failing with generic 4xx or 5xx errors without a detailed error message, and it could be difficult to narrow down or isolate the source of the error.

In such cases, the first point is to isolate whether the error code is thrown by APIM or the backend configured by the APIM. This proves to be an important method as most of the error codes are generated by the backend and APIM being a proxy forwards the response (error codes) back to the users who initiated the request. This makes the user think that the error code is thrown from the APIM.

Troubleshooting Azure APIM Failed Requests

Let's suppose you have initiated an API request to your APIM service and the request eventually fails with a “HTTP 500 – Internal Server Error” message.

With generic error messages such as above, it becomes very difficult to isolate the cause or the source of the failed API request since there are several internal and external components that participate during an API invocation process.

If responseCode matches backendResponseCode, then there is an issue with the backend and we should troubleshoot the backend configured with the APIM
If responseCode does not match backendResponseCode and errorReason is empty, then we should check if their policy logic is returning the error using inspector traces.
If errorReason is not empty, it’s a problem in APIM and the troubleshooting of error codes can help to resolve the issue.

Inspector Trace

If the issue is reproducible on demand, then your best option would be to enable tracing for your APIM API requests. Azure APIM services have the option of enabling the “Ocp-Apim-Trace” for your API requests. This generates a descriptive trace containing detailed information that helps you inspect the request processing step-by-step in detail and gives you a head-start on the source of the error.

Reference: https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-api-inspector

Diagnostic Logging to Azure Monitor Log Analytics

You could also enable diagnostic logging for your APIM services. Diagnostic Logs can be archived to a storage account, streamed to an Event Hub resource, or be sent to Azure Monitor Log Analytics logs which could be further queried as per the scenario and requirement.

These logs provide rich information about operations and errors that are important for auditing as well as troubleshooting purposes. The best part about the diagnostic logs is that they provide you with granular level per-request logs for each of your API requests and assist you with further troubleshooting.

Reference Article: https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-use-azure-monitor#resource-logs

While storage accounts and event hubs work as single targeted destinations for diagnostic log collection/streaming, if you choose to enable APIM diagnostic settings with the destination as Log Analytics Workspace, you would be offered with the below 2 modes of resource log collection:

Azure diagnostics - Data is written to the AzureDiagnostics table, which collates diagnostic information from multiple resources of different resource types.
Resource specific - Data is written to individual table for each category of the resource. For APIM, the logs would be ported to ApiManagementGatewayLogs table

Reference Article: https://docs.microsoft.com/en-us/azure/azure-monitor/platform/resource-logs#send-to-log-analytics-workspace

If you want the resource logs to be ported to the ApiManagementGatewayLogs table, you would have to choose the option ‘Resource specific’ as highlighted in the sample screenshot below:

Below are the sample diagnostic logs generated on the Log Analytics Workspace. These logs would provide granular level details for your API requests such as the timestamp, request status, api/operation id, time taken values, caller/client IP, method, url invoked, backend url invoked, response code, backend response code, request size, response size, error source, error reason, error message, et cetera.

NOTE: Post initial configuration, it may take a couple of hours for the diagnostic logs to be streamed to the destination by the resource provider.

Depending on your mode of log collection, here are a few sample queries that could be used for querying the logs pertaining to diagnostic data for your API requests. You can also choose to filter through the logs by fine-tuning the query to retrieve data specific to an API ID or specific to a response code, et cetera.

Maneuver to Azure Portal a APIM service a Logs blade under “Diagnostic Settings” section to execute the queries

AzureDiagnostics | where TimeGenerated > ago(24h) | where_ResourceId == “apim-service-name” | limit 100

ApiManagementGatewayLogs | where TimeGenerated > ago(24h) | limit 100

Log to Application Insights

Another option is to integrate APIM service with Application Insights for generating diagnostic log data.

Integration of APIM with Application Insights - https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-app-insights

Below is a sample query that can be used for querying the “requests” table that can retrieve the diagnostic data concerned with Azure APIM API requests

Maneuver to the respective Application Insights resource a Click on Logs under “Monitoring” section.

requests | where timestamp > ago(24h) | limit 100

Alternatively, the error handling in APIM can be carried out using the API management error handling policy - https://docs.microsoft.com/en-us/azure/api-management/api-management-error-handling-policies

Now that we have enabled diagnostic logs in order to retrieve details about the different types of errors and errors messages for failed API requests, let’s walk through a couple of commonly observed 4xx and 5xx errors with APIM services.

This troubleshooting series focuses on

Capturing some of the common 4xx and 5xx errors observed while making API requests using Azure APIM services.
Providing guidance to APIM users as to how can they debug or troubleshooting API requests that fail with these errors.
Possible solutions for fixing some of the commonly observed 4xx and 5xx errors.

Troubleshooting 4xx and 5xx errors with APIM services

The very first pivotal step with troubleshooting failed API requests is to investigate the source of the response code that is being returned.

If you have enabled diagnostic logging for your APIM service, then the columns “ResponseCode” and “BackendResponseCode” would divulge this primary information.

If the 4xx or the 5xx response being returned to the client is primarily being returned by the backend API (review “BackendResponseCode” column), then the issue has to troubleshoot more often from the backend perspective since the APIM service would then forward the same response back to the client without actually contributing to the issue.

4xx Errors:

Error code: 400

Scenario 1

Symptoms:

The API Management has been working fine during its implementation. It is now throwing a ‘400 Bad Request’ when invoked using the ‘Test’ option under the API Management in Azure portal. While accessing it using a client app or application, the desired result is yielded.

Troubleshooting:

Now, from the above scenario, we understand that the API is throwing a ‘400 Bad Request’ when invoke only from API Management under the Azure portal.

But the other method of invoking is yielding results. The error message clearly states that the endpoint could not be resolved. In case, if it was an issue with the endpoint, then the issue should occur across the invoking methods of the API. Since it is not our case, let us try verifying the endpoint. You can either try to resolve the endpoint from the same machine using command prompt or try a ping test.

Resolution:

In this kind of scenario’s, it is always recommended to check if the API Management is present within a Virtual Network and also notice that it will be configured in the internal mode.

As per the official documentation, “The Test console available on the Azure Portal will not work for Internal VNET deployed service, as the Gateway Url is not registered on the Public DNS. You should instead use the Test Console provided on the Developer portal.”

Scenario 2

Symptoms:

While invoking the API present under the API Management, we encounter ‘Error: The remote server returned an error: (400) Invalid client certificate’.

Troubleshooting:

Let us analyze the scenario,

This issue occurs when the customer has implemented mutual client certificate authentication, in this case client should pass the valid certificate as per the condition written in the policy

To check whether the certificate is passed or not we can enable the ocp-apim-trace. The below trace shows that no client certificate received.

Resolution:

Issue resolved after adding the valid client certificate.

Similar Scenario’s:

Scenario 3

Error Reason: OperationNotFound
Error message: Unable to match incoming request to an operation.
Error Section: Backend

Resolution:

Make sure that the operation which is invoked for the API is configured or present in the API Management. If not, add the operation or modify the request accordingly.

Scenario 4

Error Reason: ExpressionValueEvaluationFailure
Error message: Expression evaluation failed. EXPECTED400: URL cannot contain query parameters. Provide root site url of your project site (Example: https://sampletenant.sharepoint.com/teams/sampleteam )
Error Section: inbound

Resolution:

Ensure that the URL contains only the query parameter defined in the API according to the configuration in the API Management. Any mismatch might lead to such error messages. For example, if the expected input value is integer and we supply a string, this scenario might lead to the error.

Error code: 401 - Unauthorized issues

Scenario 1

Symptoms: The Echo API suddenly started throwing HTTP 401 - Unauthorized error while invoking the operations under it.

Message-

HTTP/1.1 401 Unauthorized

{ "statusCode": 401, "message": "Access denied due to missing subscription key. Make sure to include subscription key when making requests to an API."}

{
"statusCode": 401,
"message": "Access denied due to invalid subscription key. Make sure to provide a valid key for an active subscription."
}

Troubleshooting:

To get access to the API, developers must first subscribe to a product. When they subscribe, they get a subscription key that is sent as a part of request header that is good for any API in that product. Ocp-Apim-Subscription-Key is the request header sent for the subscription key of the product that is associated with this API. The key is filled in automatically.
Regarding error Access denied due to invalid subscription key. Make sure to provide a valid key for an active subscription, it's clear that you are sending a wrong value of Ocp-Apim-Subscription-Key request header while invoking Create resource and Retrieve resource operations.
You can check your subscription key for a particular product from APIM Developer portal by navigating to Profile page after sign-in as shown below.
Select the Show button to see the subscription keys for respective products you have subscribed to.

If you check the headers being sent from Test tab, you notice that the value of Ocp-Apim-Subscription-Key request header is wrong. You might be wondering how come that is possible, because APIM automatically fills this request header with the right subscription key.
Let's check the Frontend definition of Create resource and Retrieve resource operations under Design tab. Upon careful inspection, you would notice that these operations got a wrong hard-coded value of Ocp-Apim-Subscription-Key request header added under Headers tab.
You can remove it, this should resolve the invalid subscription key problem, but still you would get missing subscription key error.

You may get the following error message:

HTTP/1.1 401 Unauthorized

Content-Length: 152

Content-Type: application/json

Date: Sun, 29 Jul 2018 14:29:50 GMT

Vary: Origin

WWW-Authenticate: AzureApiManagementKey realm="https://pratyay.azure-api.net/echo",name="Ocp-Apim-Subscription-Key",type="header" {

"statusCode": 401,

"message": "Access denied due to missing subscription key. Make sure to include subscription key when making requests to an API."

}

Go to the Echo API settings and check if it is associated with any of the available products. If not, then you must associate this API with a product so that you get a subscription key.

Resolution:

Developers must first subscribe to a product to get access to the API. When they subscribe, they get a subscription key that is good for any API in that product. If you created the APIM instance, you are an administrator already, so you are subscribed to every product by default.

Error code: 401 Unauthorized issues

Scenario
Symptoms:

The Echo API has enabled OAuth 2.0 user authorization in the Developer Console. Before calling the API, the Developer Console will obtain an access token on behalf of the user from Authorization header in the Request.

Message :

Troubleshooting:

To troubleshoot the scenario, we would start with checking the APIM inspector trace. We can also find the Ocp-Apim-Trace link from the response.
We notice the existence of a “JWT Validation Failed : Claim Mismatched” message in the traces which is unable to decode the header token provided.

To check the scope of the “JWT Validation” policy, select the Calculate effective policy button. If you don't see any access restriction policy implemented at any scopes, next validation step should be done at product level, by navigating to the associated product and then click on Policies option.

Resolution:

The claim name provided in the Claim section does not match with the APP registered in the AAD.

Provide the Client app registered Application ID in the Claims section to fix the authorization error.
After providing the valid app id, the HTTP response results with HTTP/1.1 200 OK.

Error code: 403 - Forbidden issues

Symptoms:

GetSpeakers API operation fetches the details of speakers based on the value provided in the parameter. After few days of using it, The Operation started throwing HTTP 403- Forbidden error whereas the other operations are working fine as expected.

Message:
HTTP/1.1 403 Forbidden
{
"statusCode": 403,

"message": "Forbidden"
}

Troubleshooting:

To troubleshoot the scenario, we would start with checking the APIM inspector trace. We can also find the Ocp-Apim-Trace link from the response

We notice the existence of a “ip-filter” policy that filters(allow/denies) call from specific IP address ranges.

To check the scope of the 'ip-filter' policy, select the Calculate effective policy button. If you don't see any access restriction policy implemented at any scopes, next validation step should be done at product level, by navigating to the associated product and then click on Policies option.

Resolution:
HTTP 403 - Forbidden error can be thrown when there is any access restriction policy implemented.

As we can see the IP address is not whitelisted in the error screenshot, we need to allow the IP address in the Policy to make it work.
Before:

<ip-filter action="allow"> <address-range from="13.66.140.128" to="13.66.140.143" /> </ip-filter>

After:

<ip-filter action="allow"> <address>13.91.254.72</address> <address-range from="13.66.140.128" to="13.66.140.143" /> </ip-filter>

Once we allow the IP address in the IP-Filter Policy we would be able to receive the response.

Error code: 404

Symptoms:

The Demo API is being invoked by either of the means below,

- Developer portal

- ‘Test’ option under API Management

- Client app like PostMan

- Using user code

The result of the call is a 404 Not Found error code.

Troubleshooting:

Make sure that the issue is existing to proceed with the troubleshooting steps.

Note: The API Management is not present in any Virtual Network which eliminates the option of Network elements causing the issue.

According to the API Management configuration, below are the settings

Name of the API – Demo API

Web Service URL - http://echoapi.cloudapp.net/api

Subscription Required – Yes

Below is the error scenario for the 404 error code using the API Management and the PostMan.

Postman:

API Management portal:

Based on the trace file, we can see that the error code is thrown from the forward-request section and we do not obtain much insights from it.

The configured web service URL is also reachable, and it displays us a visible content.

Web Service URL:

Hence, we proceed on collecting the browser trace while replicating the issue in the API Management section in Azure portal.

Steps to collect browser trace:

- Replicate the issue in the browser (chrome, steps for other browsers might differ slightly)

- Press F12 and navigate to the network tab.

- Make sure that the actions are recorded.

- Right click on any one of the actions and select the last option (Save all as HAR with content).

From the trace, we could see the below information which is show in preview state.

The Requested URL does not lead to a proper content over the mentioned Web Service URL. This is the reason that though the Web Service URL is reachable, the API was still throwing a 404 Not found error code when it was invoked.

Resolution:

Make sure that the Web Service URL leads to a valid destination which helps in the issue resolution. The best approach is to create a proper backend structure which hosts the APIs and then map it to the respective API of the API Management and not vice versa.

The following pointers are the main reason to encounter a 404 Not found error message from an API Management.

You might hit the wrong http Method, (for example, the operation might be POST but you are calling it as GET.)
You might be calling a wrong URL (that either has a suffix or wrong operation path).
You might be using a wrong protocol (HTTP/HTTPS).

In our case, the error is in correspondence with the second point where the configured URL is not pointing to the destination. This has been confirmed by the Browser trace too and hence correcting the URL/path will resolve the issue.

Continue Reading 5xx Error Series

Troubleshooting 4xx and 5xx Errors with Azure APIM services

Janani_R — Tue, 02 Mar 2021 03:00:55 GMT

Part II - Troubleshooting 5xx Errors

This is a continuation of troubleshooting series for 5xx errors. You can find the link of 4xx here.

In the below section, we are referring to the diagnostic logs present under the Log Analytics ApiManagementGatewayLogs when we quote “Diagnostic/Gateway Logs”

Scenario 1: Http Error code 500 with BackendResponseCode logged as 500

Symptom:

A certain API call fails with the error message “500 – Internal Server Error” as highlighted below.

The diagnostic log for this specific failure indicates 500 for the value of the column BackendResponseCode

Cause:

Under the diagnostic logs, if you observe the BackendResponseCode value logged as 500, it means that the backend API has returned a 500 response to the APIM service.

In scenarios where the backend API itself has returned a status code 500 for the incoming request, the APIM service would forward the same response back to the client

Resolution:

The issue would further have to be investigated from the backend API perspective and the backend API provider has to verify why are the backend servers returning the HTTP 500 errors.

Scenario 2: Expression Value Evaluation Failures

Symptom:

Few API requests may return a 500 response code due to failures in the evaluation of the policy expression that the API request invokes.

The error message would be logged as follows:

“ExpressionValueEvaluationFailure: Expression evaluation failed. Object reference not set to an instance of an object.”

Cause:

This error normally occurs due to a “NullReferenceException” wherein you attempt to read a parameter value that hasn’t been defined yet or is set to null.

The ErrorSource column in the diagnostic logs would indicate the name of the policy that is causing the error during the evaluation.

Resolution:

Recommendation is to revisit the policy definition for the API operation which fails evaluation during request processing and fix the null reference exception.

Scenario 3: APIM Client Connection Failure with response code 0 or response code 500

Symptom:

In the gateway logs, you may observe scenarios where the:

Response code column contains either a 0 or 500 response
Error Reason column contains the value “ClientConnectionFailure” logged
Error Message column contains error messages such as “The operation was cancelled, “A task was cancelled”, et cetera.

Cause:

The term ‘Client Connection Failure’ essentially means that the client application (which initiated the API call) terminated the connection with the APIM service even before the backend API could revert with the expected response for the incoming API call and APIM could forward the same back to the client.

It basically implies that the client abandoned the request before the response could be received. APIM has no control over when or why the client decides to abandon the request.

These failures generally occur when the request is taking too long to complete so the client either gives up (a user may close the browser) or the client application may have a time out.

Here a few possible causes for such failures:

Issues with client network
Azure Virtual Network stability
Issues with client application
Low time-out value in client application
Increased request processing time
The Backend API takes abnormally long to respond (possibly due to large payload)

Most of the time, you can observe from the diagnostic logs that the clientTime values for these requests are quite high and contribute to most of the totalTime.

In order to explain what these fields indicate:

totalTime - Total time for the request measured from the first byte received to last byte sent to the client. This includes backend roundrip and client ability to read.
backendTime - Number of milliseconds spent on overall backend IO (connecting, sending, and receiving bytes). If this time is high, it means the backend is slow and the performance investigation needs to be focused there.
clientTime - Number of milliseconds spent on overall client I/O (connecting, sending, and receiving bytes). If this time is high, the client bandwidth or processing might not allow to read response fast.

Resolution:

In most scenarios, Client Connection Failures primarily have to be investigated further from a client perspective since it is the client that essentially terminates the connection with the APIM service.

Few possible suggestions are increasing the Timeout value at the client end, decrease the response processing time, et cetera which depend from scenario to scenario.

Additionally, using the diagnostic logs, you can also find the specific process during which the client abanonds the request by looking into the ErrorSource column.

For example,

If the column contains the value “forward-request”, it means that the client terminated the connection while the APIM service was still forwarding the request to the backend API
If the column contains the value “transfer-response”, it means that the client terminated the connection while the APIM service had received the response from the backend API and was forwarding it back to the client.

Scenario 4: APIM Backend Connection Failures

The APIM service logging “BackendConnectionFailure” under the ErrorReason column in the diagnostic logs essentially indicates that the APIM service failed to establish a connection with the backend API.

This error could be happen due to various reasons and with multiple types of error messages.

Few of the commonly observed error messages for Backend Connection Failures are listed down below. The corresponding error message for the failure would be logged under the ErrorMessage column in the diagnostic logs.

Scenario 5: Unable to connect to the remote server

Symptom:

API requests fail with Backend Connection Failure with the below error message highlighted in the Ocp-Apim traces/diagnostic logs

Cause and Resolution:

The error “Unable to connect to the remote server” normally occurs due to the below reasons:

APIM performance/capacity issues.
SNAT port exhaustion on the APIM VMs
There is an additional network device (like a firewall) that is blocking the APIM service from communicating with the backend API
Backend API isn’t responding to the APIM requests (backend down or not responding)
Network issues/latencies between the APIM service and the backend.

Using the Capacity dashboard on the Metrics blade of the APIM service, you can verify whether there have been any abnormal fluctuations with the average capacity which could have possibly contributed to the issue.

SNAT Port Exhaustion is a hardware specific failure.

The following document highlights that the max concurrent requests from APIM to a back-end is 1024 for the developer tier and 2048 for the other tiers.

https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits#api-management-limits

Let’s take the example of a Developer Tier service to understand what this means.

The Developer Tier is an APIM service where the APIM service is hosted on a single underlying VM/node/host machine.

Each VM is internally assigned 1024 SNAT ports for communication. Hence, in case of the Developer tier you cannot have more than 1024 outbound connections to the same destination at the same time (concurrent connections). If the number exceeds beyond 1024 outbound connections (possibly due to huge influx of incoming requests) the service will encounter SNAT port exhaustion issues and will fail to establish a connection with the backend server.

NOTE: You can have more than 1024 connections at the same time if the destinations are different (not concurrent).

If it has already been verified that the issue has not occurred due to either capacity issues or SNAT failures, then the issue could possibly be occurring because either the backend API was down, unavailable to establish connection with the APIM service or was terminating the connection due to network latencies between the APIM service and the backend

In order to confirm this, you would have to collect network traces from the underlying VMs/nodes hosting the APIM service while the issue is being reproduced and then analyze the traces for establishing the point of failure.

In most scenarios, you can observe from the diagnostic logs that the "BackendTime" was almost equal to or greater than 21 seconds for all the failed requests and contributed to most of the “totalTime”.

This indicates possibilities of a TCP connection failure to the backend (21 seconds is the usual TCP timeout). APIM tried to engage with the backend, but there was no response from the backend. So, the connection timed out after 21 seconds and a HTTP Status Code 500 was returned, which indicates that the backend server was down or was not responding to connection requests or was unable to maintain the connection.

Scenario 5: The underlying connection was closed: A connection that was expected to be kept alive was closed by the server.

Symptom:

API requests fail with Backend Connection Failure with the below error message highlighted under the errorMessage section in the diagnostic logs

“The underlying connection was closed: A connection that was expected to be kept alive was closed by the server.”

Cause:

This is usually caused by a known APIM issue.

APIM keeps connections to the backend open for as long as possible so it can re-use them and so that it doesn't have to perform TCP/SSL handshakes to establish new connections every time, which has a negative impact on performance. However, if a connection doesn't get used for a certain period of time due to low/no activity (4 minutes), the internal Azure Load Balancer silently drops the connection. When this happens, if APIM tries using the dropped connection next time, the connection fails and the above error message gets logged.

Resolution:

This can be avoided by using the retry logic in APIM.

Reference: APIM Retry Policy - https://docs.microsoft.com/en-us/azure/api-management/api-management-advanced-policies#Retry

Scenario 6: The remote name could not be resolved

Symptom:

API requests fail with Backend Connection Failure with the below error message highlighted under the errorMessage section in the diagnostic logs:

“The remote name could not be resolved”

Cause:

When one machine has to connect to another machine, it has to perform DNS name resolution.

The above error indicates that APIM wasn't able to convert the hostname of the backend (e.g. contoso.azurewebsites.com) to an IP address and couldn't connect to it.

The most frequent cause for this error is using an incorrect hostname while setting up the API configuration. If the service is in a VNET and is using custom DNS, it could mean that custom DNS server was unavailable or did not contain a record for the backend that APIM is attempting to connect to.

Resolution:

Accordingly, the issue has to be troubleshot from a network perspective as per the dependent scenario. The most reliable method of isolating the issue and zeroing down on the exact cause is analysis of network traces for sample failures.

Scenario 7: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel

Symptom:

API requests fail with Backend Connection Failure with the below error message highlighted under the errorMessage column in the diagnostic logs:

“The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel”

Cause:

This error is normally encountered when the backend has been configured to use a self-signed certificate instead of using a publicly trusted root CA certificate.

APIM services are hosted in the Azure infrastructure using PaaS VMs that run on Windows OS.

Hence, every APIM instance trusts the same default Root Certificate Authorities that all windows machines trust.

The list of trusted Root CAs can be downloaded using the Microsoft Trusted Root Certificate Program Participants list - https://docs.microsoft.com/en-us/security/trusted-root/participants-list

Resolution:

There are 2 possible solutions for resolving this issue:

Add a valid trusted root CA certificate that resolves to a Microsoft Trusted Root Participant list.
Disable certificate chain validation in order for APIM to communicate with the backend system. To configure this, you can use the New-AzApiManagementBackend (for new back end) or Set-AzApiManagementBackend (for existing back end) PowerShell cmdlets and set the -SkipCertificateChainValidation parameter to True.

Below is the sample PowerShell command:

$context = New-AzApiManagementContext -resourcegroup 'ContosoResourceGroup' -servicename 'ContosoAPIMService' New-AzApiManagementBackend -Context $context -Url 'https://contoso.com/myapi' -Protocol http -SkipCertificateChainValidation $true

References for creating/updating backend entity:

Scenario 8: Unable to read data from the transport connection: The connection was closed.

Symptom:

API requests fail with Backend Connection Failure with the below error message highlighted under the errorMessage column in the diagnostic logs:

“Unable to read data from the transport connection: The connection was closed.”

Cause:

This error occurs when the APIM service is still trying to read the response from the backend, but the connection was suddenly aborted.

The process by which an APIM service transfers a response to the client is highlighted below:

APIM reads the response status code and header first. The payload will stay in network stream.

Once the header and the status code is received, then APIM will stream across the response body from the backend service to the client.

While the data stream is underway, if any exception is encountered, then the above error message is logged.

Resolution:

Users can implement the retry logic in APIM for avoiding this error:

Reference: APIM Retry Policy - https://docs.microsoft.com/en-us/azure/api-management/api-management-advanced-policies#Retry

Scenario 9: The underlying connection was closed: The connection was closed unexpectedly

Symptom:

API requests fail with Backend Connection Failure with the below error message highlighted under the errorMessage column in the diagnostic logs:

“The underlying connection was closed: The connection was closed unexpectedly”

Cause:

This error occurs when either the APIM service or the backend service abruptly terminates the connection while the communication between the APIM service and the backend was still underway.

Resolution:

In order to isolate the source of the issue and resolve the same, the scenario would require collection of network traces from the underlying VMs/nodes hosting the APIM service while the issue is being reproduced and then analyze the traces for establishing the point of failure.

Implementing retry logic may help to some extent if the frequency of the issue is highly rare.

Error Code: 501

Scenario 1: Not Implemented

Symptom:

Sometimes, you can observe API requests fail with HTTP 501 errors with either of the below error messages highlighted under the errorMessage column in the diagnostic logs:

NOTE: This is not an exhaustive list and the error message would depend on the actual cause:

“Header BPC was not found in the request. Access denied.”
“Unable to match incoming request to an operation.”
“Header RegionID was not found in the request. Access denied.”

Cause:

This is not a rarely observed error with the usage of APIM services.

The above HTTP server error response code means that the server does not support the functionality required to fulfill the request.

In APIM terms, if the client makes a request to the server but the server finds the request as inappropriate since it does not support the feature/method to process the request, then it could return a 501 response to the caller.

Reference: https://www.checkupdown.com/status/E501.html

The server returning the 501 response in this scenario would be the

Backend if the BackendResponseCode in the logs is 501. APIM would return the same response to the client.
APIM service if the ResponseCode is 501 and BackendResponseCode is either blank or 0 in the diagnostic logs.

Resolution:

In case it’s the APIM service which returns a 501 response and not the backend, a very popular occurrence is where APIM logs the following error message – “Unable to match incoming request to an operation” for which both the API configuration within the APIM service as well as the request formation and invocation processes have to be reviewed at client-side as per the scenario.

Or there are also possibilities where the 501 error code is being returned by a policy effect that is being evaluated during request processing. If that is the case, you would find the corresponding policy name highlighted under the “ErrorSource” column in the diagnostic logs.

Resolution:

The best option in such scenarios is to collect Ocp-Apim Trace which would retrieve detailed request processing details and assist isolating the point of failure.

Error Code: 502

Scenario 1: Bad Gateway

Cause/Resolution:

APIM services forwards a 502 Bad Gateway response to the client in case of Backend Connection Failures.

Hence, the troubleshooting and debugging remain the same as the Backend Connection Failures section documented above and is dependent on the details observed under the “ErrorMessage” column in the diagnostic logs.

The most commonly found error message logged by APIM for a 502 response is “The remote name could not be resolved”

Error Code: 503

Scenario 1: Service Unavailable

Symptom:

Sometimes, you can observe API requests failing with HTTP 503 errors and the error message indicating that the Service is Unavailable.

Below is a sample error message observed on Postman while attempting to invoke an API

Cause:

503 responses are mostly returned by the backend servers amongst popular occurrences.

However, APIM services also return a 503 response to the client even before the request is forwarded to the backend in scenarios where there are certain policy effects being applied to the incoming request before forwarding it to the backend and the request is terminated due to the application/evaluation of the inbound policy effect.

Resolution:

Verify the “ErrorSource”, “ErrorReason” and “ErrorMessage” columns in such scenarios and proceed accordingly.

Error Code: 504

Scenario 1: Gateway Timeout

Cause/Resolution:

Below are some of the popular scenarios where APIM services return a 504 response to the client:

Scenario 1: The APIM service has waited too long to establish a connection with the backend server but the backend is not available or responding.

The troubleshooting performed remains the same as that of troubleshooting Backend Connection Failures highlighted above.

In the diagnostic logs, specifically look out for the sub-component time values and the columns “ErrorReason” and “ErrorMessage” in order to isolate the source of the issue.

Scenario 2: The backend service is taking too long for request processing leading to the APIM service terminating the connection. In such scenarios, you can observe under the diagnostic logs that the “BackendTime” is high when compared to the total time taken for request processing and consumes most of the total time.

There are 2 possible solutions for mitigating this issue:

Increase the timeout value of the APIM service under the <forward-request> policy such that it is in tally with the average time taken by the backend for request processing.
Reference: https://docs.microsoft.com/en-us/azure/api-management/api-management-advanced-policies#ForwardRequest
Improve backend performance by reducing the response time.

Scenario 3: The timeout value configured for the APIM service within the <forward-request> policy is low.

Popular mitigation step is to Increase the timeout value of the APIM service under the <forward-request> policy section such that it is in tally with the average time taken by the backend for request processing.

NOTE: For APIM API request processing, the default timeout value imposed by APIM services is 300 seconds/5 minutes.

The default timeout value can be increased using the forward-request APIM policy - https://docs.microsoft.com/en-us/azure/api-management/api-management-advanced-policies#ForwardRequest

For "timeout", the maximum value can be set to any valid integer, but as the above documentation states, the real maximum value is going to be around 240 seconds since values greater than 240 seconds may not be honored as the underlying network infrastructure can drop idle connections after this time.

Reference: https://docs.microsoft.com/en-us/azure/api-management/api-management-advanced-policies#attributes-1

Business Voice Call Flow, user numbers vs service numbers

boundlessdata — Tue, 02 Mar 2021 02:58:20 GMT

I wanted a simple call flow. A call comes in from either of our two public phone numbers, it rings everyone. Whoever answers it first gets the call. If no one answers, the call is directed to voicemail where anyone can review and respond. In our previous VoIP system it was called a call group.

I created a call queue but, I don't like callers being put on hold right away. I want a human to answer the phone. So I ported our numbers as user numbers and configured each user to also ring a call group. This has two problems. When a call comes in, the name of the user who's number is receiving the call is displayed instead of the caller's ID. The second problem is if one user is away, the other cannot access their voicemail. So the person on duty misses a call, they can't see who called and can't access voicemail. I thought delegate would rescue me from this problem but if you are someone's delegate, they can't also be yours.

If my only remedy is to revert to a call queue and accept the annoying hold feature, then how do I safely convert user phone numbers to a service number assigned to a call queue? Is there any way to configure a call queue so it rings a group right away instead of putting people on hold? What is the best practice to achieve this simple desired call flow?

[UI Only] Event Trigger Renamed to Storage Event Trigger

ChenyeCharlieZhu — Tue, 02 Mar 2021 03:05:28 GMT

As we public preview the new Custom Event Trigger, that processes and responds to Custom Topics in Event Grid, we are making one minor change to the beloved Event topic: we are renaming the trigger to Storage Event trigger, to better convey its use cases and capabilities.

Storage event trigger kick offs pipelines based on events such as the arrival or deletion of a file in your Azure Storage account. The trigger supports both Azure Data Lake Storage Gen2 and General-purpose version 2 storage accounts.

To create a Storage event trigger, in ADF UI portal, select Storage event in the trigger type drop down menu

Similarly, the monitoring tab is renamed to Storage Events under Trigger run monitoring page

3 Key points for renaming:

The renaming only impacts UI experience: in that instead of selecting Event Trigger, customers should select Storage event trigger
Renaming has no impact on existing triggers. Backward compatibility is guaranteed
Renaming has no impact on JSON definitions, or SDK usage. For JSON definition, trigger type remains "BlobEventsTrigger". SDK and JSON editing users will not be impacted by this change

Delivering an even better Redis experience on Azure

kteegarden — Tue, 02 Mar 2021 02:41:36 GMT

As ever more applications are built to be cloud native, services like Redis are essential to enable these applications to perform and scale under heavy loads. To allow developers to utilize the speed and flexibility of Redis without the hassle of operation, Azure offers Azure Cache for Redis, a fully managed Redis service. A third-party benchmark recently showed that Azure Cache for Redis can improve latency and throughput performance by up to 800% when added to existing Azure architectures. To build on this powerful technology, we announced an innovative collaboration with Redis Labs almost a year ago to bring their Redis Enterprise software to Azure as a part of Azure Cache for Redis. Customers both large and small have been excited to try the expanded capabilities during the preview, and developers have found novel ways to solve their application challenges with the offering. Today, we’re proud to announce the general availability of the Enterprise and Enterprise Flash tiers of Azure Cache for Redis.

What’s in the box?

The new Enterprise offerings enhance and expand the range of use cases for Redis today. Redis modules from Redis Labs, like RediSearch and RedisTimeSeries, enable new use-cases for Redis such as real-time search and IoT data ingestion. At the same time, the offering also improves your existing Redis experience by making caches larger, more resilient, and capable of being distributed around the globe. The powerful features available include:

Active Geo-Replication (in Preview)
Higher availability—architected for 99.99% with zone redundancy, and 99.999% with active geo-replication.
Redis Modules, including
- RediSearch
- RedisBloom
- RedisTimeSeries
The latest version of Redis—Redis 6.0
Redis on Flash, using both DRAM and NVMe storage to enable cache sizes up to 13TB at a lower price per GB.

If you currently use Redis Enterprise on-prem, this offering allows you to enjoy many of your favorite features in a native Azure solution. Streamlined billing, familiar security and monitoring tools, and the ability to use your Azure spend commitment are all included. Even better, support for the Enterprise offering on Azure is backed all day, every day by the Microsoft support team, who have a direct line to the experts at Redis Labs if additional assistance is needed.

Active Geo-Replication

New in the Enterprise offering is a much-requested upgrade: the ability to geo-replicate data across caches in an active-active configuration. Now in preview, this feature allows data to be written locally in more than one region, with changes automatically replicated to and merged with other regions. Active geo-replication enables you to create a worldwide distributed cache with local latency access for users around the globe. This feature opens many exciting possibilities:

One key application is handling user sessions across regions. A huge advantage of Redis is the blazing-fast latencies gained from accessing data in-memory. If a user is far away from the data center holding the cache, however, this advantage is limited due to network latency. With active geo-replication, user session data can follow a user without complicated data management on the backend. The data is simply duplicated to the Redis instance in the closest data center, with all changes synchronized automatically.

Another important use case is with applications that are distributed worldwide. Active geo-replication greatly simplifies the data layer by reducing the need to manage geographies. For instance, a mobile game might have a worldwide leaderboard. Instead of developing infrastructure to share and rank scores between regions, high scores from each user can simply be written to a Redis sorted set that is distributed across regions worldwide. Through conflict-free resolution in active geo-replication, scores will be ranked seamlessly.

Increased Availability

One significant advantage of active geo-replication is that it makes a Redis deployment substantially more resilient to single-region failures. This, combined with the option to deploy Redis across multiple availability zones in a single region, provides two additional high-availability options. Deploying across availability zones gives up to 99.99% availability, while active geo-replication is designed for up to 99.999% availability—less than six minutes of downtime per year. This increased resiliency is essential to many retail and financial services customers who rely on Redis for inventory or pricing systems.

Redis Modules + Redis 6.0

The Redis Enterprise offering on Azure doesn’t just boost geographic distribution and availability, however. It also includes powerful features that enable new use cases. With the introduction of Redis 6.0, Azure Cache for Redis users gain access to the Redis Streams data type for the first time. Streams can be used to implement messaging systems, allowing Kafka-like functionality where clients can intelligently consume items from the stream. Three Redis Modules are additionally supported: RedisBloom, RediSearch, and RedisTimeSeries:

Customers like SitePro have already started using these highly-effective modules in their workflows, for example using RedisTimeSeries for IoT data ingestion:

"We are extremely excited about the added functionality in the Azure Cache for Redis, Enterprise Tiers. We know, love, and have used Redis for years as a key component in our industry leading real-time IoT control & monitoring platform. The Enterprise tiers allow us to do more with Redis by leveraging the RedisTimeSeries module to support data collection and analytics from hundreds of thousands of IoT sensors. "

-CEO and President

Learn More

Interested in learning more? Watch the session at Microsoft’s Ignite conference for a deeper dive and a demo of active geo-replication, and read the blog from Redis Labs.

Want to go ahead and give the new features a try? Read the documentation, and start your free Azure trial today.

Windows 10 Clients stops reporting to WSUS Console

josephboban — Tue, 02 Mar 2021 02:39:36 GMT

Hello Team..

Some of the windows 10 clients stopped reporting to WSUS console..
If i rename the Software Distribution Folder and then force to report it will report back to WSUS console,but after a couple of days it will stop reporting ,again if i delete and Software Distribution Folder it will report back for a few days
and this keep happening ,This is happening for some of the clients

Please suggest..

Thanks and Regards
Joseph

Edge making all autofill form data an address

krubinow — Tue, 02 Mar 2021 02:28:52 GMT

In a recent version of Edge, all saved form field values for autofill seem to be categorized as addresses. Edge used to separate these into general auto-fill values and full address records, which seemed more useful to me. Anyone else seeing this and feel this way?

Utilizing Full Width of Meeting Side Panel

tehreemf — Tue, 02 Mar 2021 02:19:14 GMT

Hi,

I am exploring in-meeting applications and using token generator app as template. While customizing the UI, I noticed that the actual iframe that gets displayed in the meeting side panel has a width of 280px as compared to 320px mentioned in the docs. My entire React App gets displayed in this frame no matter what. Is there any way I can utilize the full space and get rid of unnecessary margin?

Thanks

Tehreem

Copy row from one sheet to another based on cell

Nelz_ — Tue, 02 Mar 2021 02:01:23 GMT

Hi,

I'm trying get rows from table 1 pasted into correct sheet based on cell value.

I've attached an example of what I'm trying to have automated.

You'll see that there are 3 x sheets.

If on 'overall sheet' column 'O' has FEED 1, I would like for that row to be pasted into 'FEED 1' sheet & 'FEED 2' into Feed 2 sheet.

Any help on this would be greatly appreciated !!

Error with > OR < statement

KAC0413 — Tue, 02 Mar 2021 01:58:46 GMT

I'm fairly new to Power Apps and am having trouble creating a statement for the following scenario:

If "weekly hours" <=5 or >=10, then need to have prompt which would mandate employee input comments stating reason for falling out of parameters.

Any suggestions would be greatly appreciated. Thank you

Building MCAS Policies - Concurrent Sessions, Multiple Devices/IPs

LiselN — Tue, 02 Mar 2021 01:58:24 GMT

I'm hoping for some suggestions or custom templates folks have built (in Microsoft Cloud App Security portal) to alert on the following use cases:

- Concurrent account logins from multiple different IPs

- Concurrent logins from multiple devices

- Concurrent login sessions / multiple active sessions

- Excessive browsing/viewing within SharePoint/Teams/Yammer - looking around many sites, files, etc. in a short amount (or specified amount) of time

Thank you in advance!

Diary Planner

Denis330 — Tue, 02 Mar 2021 01:30:32 GMT

Can anyone tell me where I can download a diary planner to use in One Note. 2 Pages per day?. I've seen some great examples on YouTube, but cant find these anywhere

Automatically copy & update data from one sheet another

Nelz_ — Tue, 02 Mar 2021 01:29:40 GMT

Hi,

I have a table made up of 15 columns in sheet 1 and I would like to have data in columns 1-13 only, automatically copied into sheet 2, where if I change/add/delete rows anything on sheet 1, sheet 2 will automatically update to match info.

Any assistance would be greatly appreciated!!

glitch with file

lwl101 — Tue, 02 Mar 2021 01:00:05 GMT

I created a maintenance file. It works on a monthly basis. All rows have exactly the same formulas. They are copied. All that changes is a date where the last maintenance was completed and and a location to determine which months I want the maintenance to be done. I use conditional formatting to color code work completed, work to be done and work past due. In row 4 everything color codes properly. In row 6 everything is identical (I even recopied the formulas) and it doesn't color code the same. I am at a loss.

Bug report: right click in Developer Tools > Network when side docked is cut off

jwebster — Tue, 02 Mar 2021 00:59:24 GMT

Version: Version 90.0.803.0 (Official build) dev (64-bit)

Platform: Windows 10 Pro 19041 x64

When Developer Tools is open in side docked mode, under Network, right clicking on a Network Item shows an incomplete context menu.

Please let me know if there's any further information I can provide.

Using Microsoft To Do with my iPhone

grmews — Tue, 02 Mar 2021 00:50:15 GMT

I have Microsoft To Do installed on my iPhone. When I launch the app, the screen asks me for my Microsoft account number. I type this in and and press Sign In. The screen says I am offline and do not have an internet connection. That isn't true as I can use an internet browser such as Safari or Edge on my phone to access the internet and successfully do a search on an item. Any thoughts on how to resolve this? Microsoft To Do works fine with my Windows desktop and laptop.

Como esconder el engrane de Sharepoint?

rockyto — Tue, 02 Mar 2021 00:34:02 GMT

Hola buenas tardes.
Espero se encuentren de lo mejor.

Escribo por este medio porque tengo una duda referente a Sharepoint.
Me gustaría saber cómo puedo ajustar un sitio que de tal manera no se muestre el engrane de configuraciones que se localiza justo a lado del banner del usuario.

Ojalá puedan ayudarme.
Les agradezco mucho su atención y dedicación por leer mi tema.

Gracias de antemano.
Saludos.

Different and incompatible lists for Teams dial-in numbers?

MikeVancouver — Tue, 02 Mar 2021 00:24:49 GMT

We starting using Teams and have assigned calling plans to some staff. We created a meeting request and it adds a local dial-in number. Some participants are remote, but there is a link to 'find a local number'. That takes me to here:

https://dialin.teams.microsoft.com/3512e538-238a-4ce5-8353-6c11c5841429

I see one option for Canada (I'm in Canada):

Canada, Toronto
+1 647-738-6213

However, I'm hoping to use a toll-free number in Canada and one for the USA. Looking online, there is this page:

https://dialin.teams.microsoft.com/8551f4c1-bea3-441a-8738-69aa517a91c5

That page has several Canadian numbers, including toll-free.

Canada, Toll-Free
(844) 614-2305

The problem is that if I create a meeting, then try and dial into the meeting using the toll-free number, it will accept the meeting ID but it doesn't join the conference. Also, if I press "*" as the meeting organizer it won't accept my PIN. I can only assume it's connecting me to some other meeting that I didn't create.

So are there different and incompatible dial-in numbers for Teams?

Topics in the real world...

Chris Shaida — Tue, 02 Mar 2021 00:14:29 GMT

We turned on Topics on 20Feb across almost all of our tenant (not that big 10+TB or so). To provide a bit of context: we've been waiting eagerly for this and see it smack in the middle of our long term digital strategy. We've done a fair amount of curation in advance that included

acronyms
QnAs
Bookmarks
Adding Skills to People (using Delve)

We recognize we are in early stages and understand that all documentation, particularly about the logic and behavior of the crawler itself, has not been buttoned up. We recognize this is a journey and are ok with all of that. We are hoping that someone else is a bit farther along and is willing to share what they've learned. In any case, here is a status report two weeks in:

What the Topics crawler has done
- Has found about 1,500 Suggested Topics, the majority of which are clients (we're a professional services firm) and for each is suggesting
  - Name
  - Alternate Names (almost all do have one or more of these
  - Suggested People
  - Suggested Documents
  - Suggested Links
- It appears to still be doing something (more topics found today March 1)
What we've done (in parallel)
- created about 50 topics from scratch (to see if this impacted the crawler in any way--it hasn't so far)
- edited approximately 100 other Topics that the crawler suggested (to see if this impacted subsequent crawler activity--it hasn't so far)

What the crawler has not done (yet anyway)

Acronyms - it does not appear to have used any of our existing Acronyms
QnAs - it does not appear to have used any of our existing QnAs
Bookmarks - it does not appear to have used any of our existing Bookmarks
It's possible that either it just hasn't gotten to that point in its cycle or that that is in a coming version
Descriptions - I haven't found a single Suggested Topic for which there is a proposed Description (all are blank) despite our having a number of Acronyms defined that do contain potential Descriptions and having a number of other places where candidate descriptions might be found
Filter out copies or near-copies of documents - there are a number of instances (generally from older client libraries) where 3 or 4 copies of the effectively same file are listed. The crawler appears to have a rough quota of 20 or less documents per topic.
Relate any Topic to any other - that is, the topic network diagrams all only have one topic on them
Merge duplicates - in cases where the crawler suggested two topics that are in fact the same and for which we have edited both so that they each share the same name and Alternative Names, no merging of those Topics has been done (yet anyway)

Other Observations

edits to crawler-suggested topics take a while to appear in the Topic Manager
a few other sort and select views would be handy
some global search-and-replace tools would be handy (we did some mass moves five or so years ago and the admin personnel wo did them are showing up everywhere--makes sense since it's just reading the names attached to the files. But it would be handy to be able to just remove en-mass specific users who are no longer here or who we humans know aren't in fact experts on the Topic at hand)
we haven't figured out how to add related Topics through human curation
it seems a bit finicky about adding links to sites it doesn't either suggest in the first place or surface in the nearby sites -- that is, pasting in the link doesn't seem to work

Would love to hear any confirmations or work-arounds or other tips and tricks.

Windows user credential dialog/prompt popup

Jimmy_Wu — Tue, 02 Mar 2021 00:00:15 GMT

A number of customers have encountered a situation where on the Windows client machine, a user credential dialog window pops up and after entering the user credentials it errors out with a message that basically says that the user account does not exist and can not access Universal Print.

This can happen if the work account that has access to Universal Print is NOT the Windows login account and is only added as a "Accounts used by other apps" or "Access work or school" account. The user credential prompt pops up when the Universal Print client can not retrieve the user's Azure AD access token. For example, when trying to discover printers, if the user's Azure AD access token has expired and needs to be re-fetched from Azure AD, the user credential prompt will pop up to ask for the user account credentials.

Please enter the Azure AD user account information instead of the Microsoft Account (such as Live.com; Hotmail.com; Xbox.com account).

If your organization has enabled single sign-on (SSO) and your log into the Windows client device using your organization's user account, then it should be super rare for you to see this credential prompt, as your access token should be refreshed in regular use when accessing your organization's resources.

Regards,

Jimmy

How to Save a MS Planner Board and Share it With a Client

VicSmith — Mon, 01 Mar 2021 23:51:15 GMT

Hi,

One of my service offerings as a consultant is setting up Microsoft 365 for mentors, coaches and consultants. I am a Coach and have build a proprietary coaching management system in Teams and MS Planner.

I just built out a new client in Microsoft 365. They are a totally different tenant/account etc.

I know Planner has the ability to copy plans from one group to another. I have done this.

Is there a way to copy a plan to a customers Microsoft 365 which is a totally different tenant?

I have a number of "MS Planner Templates" I want to just port over to clients without having to Re-Build them

'No conversation selected'

benjdunn — Mon, 01 Mar 2021 23:35:51 GMT

Hi all,

I'm using New Outlook (version 16.47) on an iMac using Catalina and I'm on the Beta programme.

I run about five different email accounts on Outlook using a variety of iCloud, Outlook.com, IMAP & Gmail accounts. All of them have this problem. When I select an email it appears in the preview pane. However, when I use any button to reply to that email I get a message in the Preview saying 'No Conversation Selected. Select a conversation to read'. I've tried turning the conversation view on and off (its normally off). If conversation view is on this doesn't happen, but I want it off.

Any ideas ?

Ben

Automatically select chosen cells

Rewors — Mon, 01 Mar 2021 23:19:41 GMT

Hello,

I would like to know if it's possible to create a button, then, when i click on it, it will select automatically some cells.

Because i would like to select the ENTIRE column but few cells on it need to be ignore.

I don't know if my english is understable but thank you.

Retention for Deleted Files, Sites, Items Only

TechGurl — Mon, 01 Mar 2021 23:19:20 GMT

Hi,

Looking for feedback on he best way to set up Retention in this particular scenario.

Must keep ALL data, Sharepoint sites, files, emails.

UNLESS it has been purposefully Deleted, then I must retain for 90 days, then OK to permanently delete.

365Admin Retention Policies are all based on Created and Modified dates which I cannot use as I have files upwards of 20years old.

How does one keep all documents, sites, email, files and only delete deleted items after 90 days?

Should be simple but I've asked half dozen folks who say its not possible.

Thanks!

Unable to export from Sharepoint to Excel

UCLAtech — Mon, 01 Mar 2021 23:07:01 GMT

I'm unable to export - the button is not grayed out, but nothing happens when I click on it (no error message, nothing.) Tried it on all browsers. Using a Mac. Also tried the "get data" workaround by trying to add data from inside Excel. Doesn't work.

Getting notifications on iPhone when active on desktop

medlin_rocio — Mon, 01 Mar 2021 23:00:46 GMT

Hi all,

I found a post from 2018 detailing my problem, but that person didn’t get an answer.

I’m still getting Teams notifications on my iPhone when I’m working actively on my desktop. I’ve done basic troubleshooting (e.g., rebooting iPhone, turning notifications off and on again, relaunching app). Nothing works. Any tips would be very appreciated!

What’s new in Azure AD at Microsoft Ignite Spring 2021

Alex Simons (AZURE) — Mon, 01 Mar 2021 23:00:00 GMT

Howdy folks,

It’s that special time of year with another digital edition of Microsoft Ignite on the horizon. We know that security is top-of-mind for you and your business leaders, maybe now more so than ever. So we’re excited to share several Azure AD announcements that will help you strengthen your Zero Trust defenses in this current era of hybrid work. We’ll be updating our key news on Tuesday morning as Microsoft Ignite starts, so please watch our Microsoft Security blog for further announcements.

Once you’ve checked that out, be sure to tune in to Azure Active Directory: our identity vision and roadmap airing first at Wednesday, March 3^rd at 5:00pm PT, delivered by Joy Chik, as she shares a deeper dive on how Azure AD helps you maximize control while enabling a seamless and secure user experience. Joy will be joined by a team of our identity expert to show off cool demos and share best practices to strengthen your authentication, simplify onboarding, and secure access to all your apps.

Please also join our experts for a live Q&A where they will answer your burning questions on our identity announcements, tips for deploying secure passwordless solutions, and Zero Trust as the proactive approach to cybersecurity.

No matter where you are in the world, I hope you will join us through our live and pre-recorded sessions. Join the conversation on Twitter and LinkedIn with the hashtag #MSIgnite.

Additional technical deep dive sessions available starting Tuesday

Go passwordless | Hands-on tour in Azure AD with FIDO2 keys and Temporary Access Pass - watch
Taking identity and privacy to a new level – watch
Prevent attacks by protecting your applications with Azure Active Directory – watch
Winning Azure Active Directory strategies for identity, security, and governance – watch
Zero Trust – The proactive approach to cybersecurity – watch

Looking for more ways to engage with our identity content and experts?

Visit the Connection Zone where various engagement opportunities will help deepen your knowledge and skills.

Compete and win free certification exams while building your expertise by participating in Cloud Skill Challenges
Tune into Plan implement and administer conditional access, a Learn Live session which will highlight how to plan and implement security defaults, test, and troubleshoot conditional access policies implement application controls and session management as well as how to configure smart lockout thresholds.
Want to have your questions answered by a Microsoft Professional? Visit One-on-one Consults to schedule a 45-minute consultation where you can engage directly with an identity expert.

Best regards,

Alex Simons (Twitter: @alex_a_simons)

Corporate Vice President Program Management

Microsoft Identity Division

Change icon for embedded PDF file in Excel.

Jaiden — Mon, 01 Mar 2021 22:58:03 GMT

Excel can't show PDF icon in Change icon box.

I've tried to save the icon from one computer to this one & use the icon as a default, however I can't save it as the default.

Any ideas?

AzureRM will retire by 29 February 2024

dcaro — Mon, 01 Mar 2021 22:32:53 GMT

Can you remember 2015? Apple launched the Apple Watch, Microsoft launched Windows 10, and we announced AzureRM v1.0!

After years of service and coexistence with its replacement, the time has come to share the next steps we are taking with AzureRM.

Looking back

In 2018, we introduced a new generation of PowerShell modules named “Az”, bringing several advantages:

Based on .NET Standard library for cross-platform execution.
Addressed customer feedback about the length of commands.
Reduced inconsistencies between cmdlets and modules.

After two years of existence and continuous improvements, the Az PowerShell modules feature the following benefits:

Security and stability
- Token cache encryption
- Prevention of man-in-the-middle attack type
- Support authentication with ADFS 2019
- Username and password authentication in PowerShell 7
Support for all Azure services
- All generally available Azure services have a corresponding supported Az PowerShell module
- Multiple bug fixes and API version upgrades since AzureRM
New capabilities
- Support in Cloud Shell and cross-platform
- Can get and use access token to access Azure resources
- Cmdlet available for advanced REST operations with Azure resources

We are now announcing that the AzureRM PowerShell module will retire by 29 February 2024.

If you are still using AzureRM modules, we advise you to migrate to Az at your earliest convenience.

How do I migrate?

When we talked with customers, the effort needed to migrate scripts based on AzureRM to Az was one of the main blockers.

We provide a toolkit comprised of three options to help you migrate to Az:

A PowerShell module to convert your scripts automatically.
A compatibility mode with the “Enable-AzureRmAlias” cmdlet allowing you to run AzureRM scripts with Az modules.
A VSCode extension if you want to perform the migration of your scripts with an IDE.

The following page has all the resources and technical information to help you migrate your scripts to Az: https://docs.microsoft.com/powershell/azure/migrate-from-azurerm-to-az

Open an issue on GitHub if you encounter problems with the migration toolkit.

Products and services using AzureRM

Some products and services have dependencies on the AzureRM modules. We are working closely with them to provide you with a path forward.

Next steps

We encourage you to start your migration as soon as possible and share with the community best practices that you may have, including tips and tricks.

The entire team is listening to your feedback and welcomes issues and contributions.

For issues on the migration toolkit: https://github.com/Azure/azure-powershell-migration
For best practices sharing: https://github.com/Azure/azure-powershell/discussions

And as always, you can reach out to us via Twitter @azureposh

Excel Voice Control

Ken_watt — Mon, 01 Mar 2021 22:07:12 GMT

Does anyone have experience with using voice control to enter data in Excel for Mac?

SharePoint online employee directory

Office365Userr — Mon, 01 Mar 2021 22:03:17 GMT

I need help, we currently have setup on the SharePoint online employee directory and Delve, we paid external resource to implement the SharePoint online but they added only few departments on the left navigation on the Employee Directory, I would like to add all departments and job title users there if there's a way. Please help if you experience with that.

Thank you

Hotmail/Outlook Deleting Safe Senders by default

d3bug — Mon, 01 Mar 2021 22:00:38 GMT

It appears Outlook.com is deleting password reset and support emails from Amazon.com regardless if they are on the safe senders list or not. I am unable to fix this bug as there are no filters in place causing the issue that I can find. Microsoft may want to look into this bug.

IF Formula not displaying in modern mode

KevinK201 — Mon, 01 Mar 2021 21:59:43 GMT

Hi Team

I created a Calculated (calculation based on other columns) column with a simple IF formula =IF([column1]<=[column2],"UnderBudget","OverBudget") but it is not displaying in modern mode, only in classic mode?

any quick fix? screenshot attached with developer tool errors showing in modern mode.

Not able to assign phone number on User account

harshajha — Mon, 01 Mar 2021 21:57:41 GMT

I have a couple of users on my new azure account. Those users have an E5 license.
But I am not able to assign a phone number to them. It says 0 Available to acquire.

I am not sure what is wrong?

Very basic office 365 powershell MFA question, something has changed

Dave Brunner — Mon, 01 Mar 2021 21:43:19 GMT

I had a very basic script to enable MFA, set SMS as default and define phone #. It worked great until recently. Now it will enable MFA but when the user attempted to log in for the first time MFA does not even attempt to send a text and gives the error shown below instantly. I tried a different tenant and created an entire new account as a test just to see if I was missing something. I compared user details between a working and non working MFA account and the only difference was the line "StrongAuthenticationUserDetails" but that may have just been due to the user not verifying # and logging in yet. The user i compared with had "Microsoft.Online.Administration.StrongAuthenticationUserDetails" in that field. May be a red herring but i'm not sure at this point.

Thanks
Dave

#Ensure to Connect-MsolService as tenant admin first (365admin@), WILL NOT work using delegate permissions. #This will prompt for email and phone #. It will then enable MFA, add a phone # and default to SMS for approval. $User = Read-Host -Prompt 'User email address' $mobilenumber ="+1 " + (Read-Host -Prompt 'User cell phone') Set-MsolUser -UserPrincipalName $user -MobilePhone $mobilenumber #enforce MFA $st = New-Object -TypeName Microsoft.Online.Administration.StrongAuthenticationRequirement $st.RelyingParty = "*" $st.State = “Enabled” $sta = @($st) #Enable MFA for the user Set-MsolUser -UserPrincipalName $user -StrongAuthenticationRequirements $sta #Set SMS as default MFA method (Thanks GZ) $m1=New-Object -TypeName Microsoft.Online.Administration.StrongAuthenticationMethod $m1.IsDefault = $true $m1.MethodType="OneWaySMS" $m=@($m1) #Set SMS as default set-msoluser -Userprincipalname "$user" -StrongAuthenticationMethods $m #Display new mobile # Get-MsolUser -UserPrincipalName $user | fl MobilePhone

Excel crashes when saving or updating links to other workbooks

Huffman22670 — Mon, 01 Mar 2021 21:38:12 GMT

I have been having issues with my excel for a while. It first started November after a computer update. I figured out I had to uninstall the update to get the office programs to work again. Now that is no longer working as I have uninstalled all recent updates (I keep the automatic update off). Excel crashes when I try to "save as" or if I am trying to link to another workbook.

Here are the steps I have tried:

- opening in safe mode

- quick repair and online repair of office

-uninstall and reinstall office

-making sure office is running the most recent version

- checking issues with possible add-ins (no add-ins were listed)

-Selective startup

-checked to see if AVG was causing issues

-Updated the computer, removed updates (neither made a difference)

This happens to all excel workbooks, even if it is a new one I am just saving as to test things.

Помогите, удалился Excel с компьютера

Camilla06 — Mon, 01 Mar 2021 21:34:49 GMT

Здравствуйте, сегодня из-за некоторых ошибок в Excel приняла решение переустановить его, но как оказалось сделать это непросто. Я совсем удалила Excel с ноутбука, на setup.office ввожу код продукта, а в ответ получаю, что данная учетная запись уже используется. Пожалуйста подскажите мне что делать.

Printing from a grid

Stuffyzei556 — Mon, 01 Mar 2021 21:31:21 GMT

How do you after drawing an isometric drawing then capture an print , or scale it for full sheet

Branching Malfunction

taramanoogian — Mon, 01 Mar 2021 21:17:17 GMT

I have a created a form where some questions have branching. The form has 3 sections and at the end of section 2 there is a "yes" or "no" question where if you click "yes" it should take you back to section 1. When the form is actually completed, when you click "yes" it actually ends the form. Need to understand if this is a glitch or if branching doesn't allow you to go back in sections.

Please help ASAP.

File association getting reset for PDF

Rickywin — Mon, 01 Mar 2021 21:11:22 GMT

Pdf files association getting reset to Chrome and edge randomly daily after changing Adobe Acrobat 2017 as default.

Effected machines are windows 10 enterprise 20H1 and 20H2

We updated some machines to 20h2 and got same behaviour.

Approx impact 300 users at client side.
GPO and GPP are not helpful. We doubt it's bug related to file association.

Anyone else facing same issue ?

Universal Print ready printers by Epson

Epson_UniversalPrint — Mon, 01 Mar 2021 21:00:54 GMT

In September 2020, we announced that we are working with Microsoft on Universal Print integration. Epson is happy to share that we are ready to release Epson printers with built-in support for Universal Print from Microsoft.

Our Universal Print ready support is available by updating firmware according to the list of models below:

Support starting end of March 2021:

(Japan) PX-M7080FX, PX-M7090FX, PX-S7090X
(Other regions) WF-C878R, WF-C879R, WF-C878RB, WF-C879RB

Support starting May 2021:

(Japan) LX-10050MF, LX-10050KF, LX-7550MF, LX-6050MF
(Other regions) WF-C20600 Series, WF-C20750 Series, WF-C21000 Series

- Epson Universal Print

Problem with Exporting from Access to excel .xlsx file type

DomStam — Mon, 01 Mar 2021 20:53:55 GMT

I have a form in Access that contains a column of suppliers among other items. When I export to .xls all is fine and appears as it does in Access. But when I export to .xlsx file one of the supplier names gets concatenated with another spelling of the same name. Almost like its auto filling in the name. Example - a supplier is CompanyX in Access and .xls files. But in the .xlsx file it comes out as CompanyXCompanyyX This also happens if I do a straight cut and paste into excel.

Any ideas are very much welcome.

Subtract days in the past, from today, to show a past due message.

NoraJJ — Mon, 01 Mar 2021 20:35:49 GMT

The expiry warning is todays date against the date in column E.

I need a message to populate in column F with one of the three options.

"Past due"

"Due in less than 10 days"

"More than 10 days"

Calculating two time/dates from Form and Creation date

Jakes_profile — Mon, 01 Mar 2021 20:31:19 GMT

I have a form set up that asks for the date and time.
Since I have the basic version of Microsoft forms, I cannot enter in a time.

What I've done is created three drop-down questions in the form.
Hour: 1-12, Minute: 0-59, Time of Day: AM or PM.

The data then is moved to a SharePoint List that also displays the "Created" date and time.
I want to string my data across so I can calculate the time difference between the date from the form and from the created date.

I attached an image to help understand.

I can use calculated column times to string the information from the form just fine.
However, the date will display in serial format. I don't mind that it does but I still cannot figure out how to calculate the difference.

Disable "Scientific Notation" 100% - NO "Work Arounds"; NO silly special data import.

phenry1175 — Mon, 01 Mar 2021 19:55:54 GMT

Can you guys add a feature to disable this idiotic "Scientific Notation"? I am so tired of Excel just absolutely destroying my data by doing something @#$!ing dumb.

Just stop.

If I add 17312522506837 into a cell, what I want to see is 17312522506837. I DO NOT want to see "1.80545E+13".

Stop @#$!ing with people's data. Stop auto @#$!ing people's data.

Rich text formating is stripped when exporting from Access to Excel (365 versions)

DonaldCollins — Mon, 01 Mar 2021 19:51:45 GMT

Hi Community,
In Access, data type has been set up so it can be stored with rich text but once the data is pulled up in the report and ultimately exported to an excel spreadsheet, the formatting is stripped.
Is there a way to retain this?
Thank you for your time.
Best Regards,
Donald

February Project Update Blog

Microsoft Project Team — Mon, 01 Mar 2021 23:57:50 GMT

Microsoft Project Trivia!

We’re starting trivia this month to help people learn more about Microsoft Project & its history. Leave your guesses to these questions in the comments & check back next month to see if you were right!

Question: What year was Microsoft Project first released?

Bonus: How many Windows applications did Microsoft release before Project?

Reimagine Project Management with Microsoft

Microsoft Project is hosting a free digital event to help our users learn more about how to leverage Project, Microsoft Planner, and Dynamics 365 Project Operations to best manage your projects – both big and small!

This includes 6+ hours of on-demand demos and product walkthroughs to help you discover and leverage new features and learn best practices to keep your projects on track. Get tailored guidance directly from the engineering teams behind these products.

This event goes live on March 18^th, 2021. You can learn more here.

New Features

Flexible Deployment for Project for the web ~ This feature is now available to all users! Create different environments for Project for the web based on organization, business unit, or team needs. Check out our blog post to learn more about this new experience
Filter on Project Home ~ Use a search bar to easily find your projects on Project Home.

Upcoming Features

Export Timeline to PDF ~ Print your timeline information to a PDF so you can share your project schedule with external stakeholders.
Project Accelerator ~ The Project Accelerator allows users to leverage Power Apps to manage the entire lifecycle of your projects, including demand management, financial goals, team development, and artifact tracking.
Assign tasks to non-group members ~ Assign a task to someone without automatically adding them to your project group.
Effort in the Project details pane ~ See overall effort on your project directly in the Project details pane, including the total effort, completed effort for your project, and remaining effort on your whole project.

FAQ:

This section includes questions we see frequently, either through the in-app Feedback button or from the comments of last month’s blog.

Q: What dependencies are supported in Project for the web?

A: Project for the web currently only supports Finish-to-Start dependencies. If you need additional dependencies, please submit feedback using our in-app “Feedback” button in the top-right corner of the product. This best helps us keep track of customer needs.

Q: Where are attachments stored in Project?

A: You can find all your attached files in your Team’s SharePoint library.

Note that you can't attach files to tasks in Project unless you have already shared your project to a group. You can do this by using the “Group members” button in the top-right corner of the product.

You can attach links to your tasks even before you add a group to your project.

We want to hear from you! If you have feedback, submit it by using the “Feedback” button in Project for the web. Make sure to include your email address so we can contact you directly with any follow up questions or comments. Your comments on our blog posts are also monitored, so let us know what you think about this or other articles.

Access output to Excel truncates data

DonaldCollins — Mon, 01 Mar 2021 19:37:14 GMT

Hi Community,
We have an Access "Long text" data type field.
In the Access report, all the data in the field is displayed.
When the data is exported to excel, the field is truncated.
What is weird is that the truncation in excel does NOT start at 255 characters, but more downstream so to speak.
For example, in the table and the report a long text field record has 15,460 characters.
But when exported to excel it contains only the first 13,212 characters and truncates the remaining 2248 characters of the long text field.
Please advise!
Thank you for your time.
Best Regards,
Donald

Error in deploying windows virtual Desktop

dammyfaruq1994 — Mon, 01 Mar 2021 19:36:23 GMT

I have the error below while creating Windows virtual Desktop hostpool,

{"code":"DeploymentFailed","message":"At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details.","details":[{"code":"VMExtensionProvisioningError","message":"VM has reported a failure when processing extension 'dscextension'. Error message: \"The DSC Extension failed to execute: Error downloading https://wvdportalstorageblob.blob.core.windows.net/galleryartifacts/Configuration_1-25-2021.zip after 29 attempts: The remote name could not be resolved: 'wvdportalstorageblob.blob.core.windows.net'.\r\nMore information about the failure can be found in the logs located under 'C:\\WindowsAzure\\Logs\\Plugins\\Microsoft.Powershell.DSC\\2.83.0.0' on the VM.\"\r\n\r\nMore information on troubleshooting is available at https://aka.ms/VMExtensionDSCWindowsTroubleshoot "}]}

Please has anyone came across this error before and how was it resolved?

Microsoft Endpoint Manager at Microsoft Ignite: March 2021 edition

Joe Lurie — Mon, 01 Mar 2021 19:52:06 GMT

Microsoft Ignite 2021: March edition is almost here! And here’s your guide to everything you’ll find that’s Microsoft Endpoint Manager related! And we mean EVERYTHING!

Jump to: Core sessions | On-demand sessions | Ask the Experts | Depth on demand | Endpoint management deep dives - Q&A in March

Microsoft Endpoint Manager continues to be the one product, that hub, to unify security, apps, access, compliance, and the end-user experience across your entire estate. And whether those devices are Windows devices, Android, iOS, iPad OS, Mac OS, whether they are used by information workers or are being used as kiosks, whether they are assigned to a single user or are configured as shared devices, and whether they are on-premises or remote – or any combination, Endpoint Manager can help keep your organization running smoothly, whatever the future brings.

If you are currently using Configuration Manager to manage your devices and haven’t moved to the cloud, or you’ve started that path to cloud management, or you are natively managing all of your endpoints with Microsoft Intune, now is the time to hear about everything new with Endpoint Manager- even since last September. If you haven’t already, register at https://myignite.microsoft.com and start building your schedule. You can click the session titles below and add them to your schedule (aka: digital backpack). Make sure you bookmark this post as we’ll be updating it each day with links to all our announcements, in-depth learning on demand, and all post-Ignite activities.

Here's what’s on the agenda, live and on-demand at Microsoft Ignite 2021: March edition!

Core sessions

Spotlight on the future of work

Start the event with Modern Work CVP Jared Spataro, as Jared talks about flexible work, and how Microsoft is empowering people to work from home, on the go, and at the office.

The hybrid workplace – Tuesday, March 2 | 9:45AM-10:15AM PST
The hybrid workplace – Tuesday, March 2 | 7:15PM-7:45PM PST

Engineer to engineer: let's talk Windows!

After Jared’s keynote, even though this is a Windows session, you need to join our Windows CVP Aidan Marcuss with his guests (from left to right) Gabe Frost (Windows), Ramya Chitrakar (Endpoint Manager), and David Weston (security) for a fun conversation about all of the great features and capabilities we’ve built into Windows, security, and management based on YOUR FEEDBACK AND SUGGESTIONS. And how we’re carrying those further to help prepare your organization for the future.

We’ll have live Q&A throughout the session, too, so pick the time that works best for you and add it to your backpack!

After the Wednesday. March 3rd "Let's talk Windows" session, around 4:30 PM PST, Steve Dispensa, Rob Lefferts, and Rudra Mitra will also join the live anchor desk to talk about the convergence of endpoint management and security so keep an eye on the MyIgnite main channel!

On-demand sessions

After or in between core sessions, we have also great sessions that you can watch or save to your digital backpack to watch on demand any time:

Ask the Experts

We offer live Q&A during the core sessions and in-between segments, but if you miss those, we also have our SMEs taking your questions live via Teams Live Events! Come join our diverse group of engineers, support, and other product experts as we discuss and answer your questions live! Space is limited so make sure you click your desired session to RSVP!

Ask the Experts: Zero Trust – The proactive approach to cybersecurity
Wednesday, March 3 | 11:00AM-11:30AM PST
Ask the Experts: Securing your endpoints with Defender and Microsoft Endpoint Manager
Wednesday, March 3 | 2:30AM-3:00AM PST

Microsoft Edge

If you have specific questions around deploying and managing Microsoft Edge, join Colleen Williams and members of the Edge engineering team on Tuesday, March 2 | 11:30PM-11:59PM PST for Ask the Experts: Microsoft Edge: Top reasons why customers love Microsoft Edge

Windows & Devices

If you are also looking for advice on deploying, managing, and servicing Windows & Devices, we have lots of goodies for you! First, we’ll offer live Q&A during the fireside chat with Panos Panay and Roane Sones on Tuesday, March 2 | 11:30AM PST. And if that time doesn’t work for you, keep an eye on the session builder as we’ll be replaying this session later in the day.

Then check out the special Ask the Experts sessions: Let’s talk Windows, which we’ll have live at two timeslots:

And for more session on Windows & Devices, check out our blog post here: Windows & Devices at Microsoft Ignite 2021: March edition

Depth on demand

And finally, we know you come to Microsoft Ignite for deep, technical learning, and to build your technical skills. Like we did in September, we have a breadth of deep dive videos on the Video Hub on Tech Community. These are direct from our engineers and product experts!

What's new in Windows management with Microsoft Endpoint Manager – Matt Call & Mike Danoski
What's new in iOS/macOS management with Microsoft Endpoint Manager – Arnab Biswas & Anya Novicheva
What's new in Android management with Microsoft Endpoint Manager – Priya Ravichandran
Microsoft Defender + Tunnel: simple, secure mobile connectivity – Tyler Castaldo & Shravan Thota
Enabling frontline workers with Microsoft Endpoint Manager – Chris Baldwin & Cory Ferro
Application reliability in Endpoint analytics – Zach Dvorak

Endpoint management deep dives – Q&A in March

Of course, you’ve already heard about our Microsoft Endpoint Manager deep dives and Q&A events that are happening after Ignite! For more information on our Endpoint Management Acceleration Day, our 1:1 consults, and Ask the Experts Q&A, check out the Microsoft Endpoint Manager Blog!

Learn more

If you are looking for more of a prescriptive learning path, we’ve got some learning guides to help you manage and protect devices and apps with Endpoint Manager.

And, finally, here are some additional guides to help you maneuver around all that is Microsoft Ignite 2021: March edition.

Stay informed

Follow us at @MSIntune for the latest announcements and updates on Microsoft Endpoint Manager throughout Microsoft Ignite and beyond.

* Timing subject to change Refer to the MyIgnite session catalog for the latest times and updates.

VSSAdmin Deletion Logging

Joe Croll — Mon, 01 Mar 2021 19:26:51 GMT

Hello,

Does VSSAdmin have the ability to log events for deleting shadow copies (for example, running "vssadmin delete shadows" from the command line)?

I see that errors are logged when a shadow copy or scheduled task fails and that informational events are logged in the task scheduler, but I don't see anything related to creation or deletion of shadow copies in the event log.

Can't use Lists iOS app

Aubrey Moren — Mon, 01 Mar 2021 19:25:50 GMT

We can use the Lists app fine in Teams, etc., but if anyone tries to log into the iOS app, we get this:

I haven't been able to find a fix for this, would appreciate any suggestions.

Remotely run DDL and DML in Synapse from a SQL Managed Instance using Linked Servers

pedrorebelo — Mon, 01 Mar 2021 19:18:19 GMT

Imagine you have a SQL Managed Instance and a SQL Dedicated Pool. Now imagine that for some reason you need to run a SELECT, INSERT, UPDATE or even a CREATE TABLE on your SQL Dedicated Pool but executed from your SQL Managed Instance. In case you didn't know, you can do this using Linked Servers.

For those unfamiliar with Linked Servers, they enable the instance in which you create them to read data from remote data sources and also to execute commands against remote database servers.

You can setup Linked Servers using SSMS or you can use T-SQL as well. Here's a short example of how to setup a Linked Server from a SQL Managed Instance to Azure Synapse Analytics SQL Dedicated Pool, using T-SQL.

First, we need to start by creating the Linked Server on our SQL Managed Instance, and configuring it to point to our SQL Dedicated Pool:

-- Configure the linked server on your SQL Managed Instance EXEC sp_addlinkedserver = 'yourLinkedServer', -- specify here the name you want for your linked server @srvproduct = N'', = 'MSOLEDBSQL', -- recommended OLE DB provider @datasrc='yourworkspacename.sql.azuresynapse.net', -- add here your SQL Dedicated Pool server name @catalog = 'yourDatabase'; -- add here your SQL Dedicated Pool database name as initial catalog (you cannot connect to the master database)

After having created the Linked Server, we need to define the credentials with which we want to connect to your SQL Dedicated Pool:

-- Add credentials and options to this linked server EXEC sp_addlinkedsrvlogin @rmtsrvname = 'yourLinkedServer', @useself = 'false', -- so we can specify below which user and password to connect with @rmtuser = 'yourLogin', -- add here your login on your SQL Dedicated Pool @rmtpassword = 'yourPassword'; -- add here your password on your SQL Dedicated Pool

Lastly, by default Linked Servers are not able to make stored procedure calls so we need to enable a setting:

-- Enable RPC to the given server EXEC sp_serveroption = 'yourLinkedServer', @optname = 'rpc out', @optvalue = true;

Once you've successfully executed all the previous steps, you can now remotely run T-SQL commands on your SQL Dedicated Pool directly from your SQL Managed Instance.

Executing T-SQL via Linked Servers requires we declare the objects we are referencing with a 4-part name in the format of:

-- Query the data using 4-part names SELECT * FROM yourLinkedServer.yourDatabase.yourSchemaname.yourTablename;

However, if you try to run DDL or DML (other than SELECT) using this 4-part name you'll get error messages as follows:

INSERT INTO yourLinkedServer.SampleSQL.dbo.Employee VALUES(1);

Msg 46706, Level 16, State 1, Line 29
Cursor support is not an implemented feature for SQL Server Parallel DataWarehousing TDS endpoint.

CREATE TABLE yourLinkedServer.SampleSQL.dbo.t1(col1 INT NULL);

Msg 117, Level 15, State 1, Line 31
The object name 'yourLinkedServer.SampleSQL.dbo.t1' contains more than the maximum number of prefixes. The maximum is 2.

A way to get around this is by running the DDL and DML in the format of:

EXEC ('DDL/DML') at yourLinkedServer

So for two previous examples, the T-SQL would be:

--to create a table EXEC ('CREATE TABLE dbo.t1(col1 INT NULL)') at yourLinkedServer;

--to insert a row into the table EXEC ('INSERT INTO dbo.t1 VALUES(1)') at yourLinkedServer;

Hope you find this useful!

Outlook on iOS devices is showing company logo instead of pictures or initials

Michael Jensen — Mon, 01 Mar 2021 19:22:18 GMT

Anybody seen this feature today? We got several customers seeing this from today. Only on iPhones, not iPad, Android, OWA or Windows 10

So when looking in the inbox, they only see the company logo. Looks like BIMI (Which is not implemented at any of the customers).

Microsoft Developer Tenant and Microsoft Project

Mike Dumka — Mon, 01 Mar 2021 19:10:22 GMT

Hi There,

I have a tenant as part of the Microsoft Developer program, but I am trying to explore the possibilities with Project for the Web (Project Plan 1) and Project Online (Project Plan 3&5) and also how that interacts with Project Roadmap and Power BI.

The problem is I can seem to find anything to do with Project in my tenant. Is this not possible?

Thanks