Forum Widgets
Latest Discussions
Architectural Feedback: Is SPFx + Azure Database a viable choice for an internal ticketing system?
Hi everyone, I am currently evaluating the architecture for a new interdepartmental ticketing system and would love to get your feedback, real-world experiences, or best practices regarding our proposed approach. Our goal is to centralize and streamline requests, tracking, and communication across various departments within the organization. We want to provide an intuitive interface that integrates seamlessly into our existing workplace (SharePoint Online / Microsoft Teams). Proposed Architecture Frontend / UI: Custom web parts developed using SPFx (SharePoint Framework), embedded into SharePoint pages and surfaced in Microsoft Teams. Backend / Database: Azure Database for PostgreSQL for managing relational data, audit logs, complex ticket statuses, and SLA metrics. Integration Layer: Custom REST APIs (hosted via Azure Functions / App Service) to handle transactions securely between SPFx and PostgreSQL Rationale Behind This Choice User Experience: SPFx provides a native look and feel within Microsoft 365, minimizing user onboarding friction. Relational Data Complexity: We prefer PostgreSQL over standard SharePoint Lists due to data volume projections, complex relational data models, granular access control requirements per department, and advanced analytics needs. Questions Architecture Viability: Do you consider using SPFx purely as a frontend consumer for external REST APIs connected to PostgreSQL a clean and sustainable pattern long-term? SharePoint Lists / Dataverse vs. External DB: Is the added overhead of maintaining a custom API + PostgreSQL in Azure justified, or would you strongly favor Dataverse or native SharePoint Lists for this specific use case? Authentication & Security: Any specific tips when securing SPFx calls to Azure API/Functions using Microsoft Entra ID (Azure AD) to ensure proper department-level data segregation? Maintenance & Governance: Are there any major maintenance, lifecycle, or performance bottlenecks we should prepare for when maintaining a hybrid SPFx + external DB solution? Thanks in advance for any insights, lessons learned, or potential red flags!
Microsoft Sentinel UEBA – AWS CloudTrail data source fails to connect with HTTP 500
Hi everyone, I am currently testing the newer UEBA capabilities in Microsoft Sentinel through the Microsoft Defender Unified SecOps portal and I am facing an issue while trying to enable AWS CloudTrail as a UEBA data source. I wanted to share the troubleshooting steps I have already completed in case anyone has seen something similar. 1. Verified AWS CloudTrail ingestion AWS CloudTrail is already connected to Microsoft Sentinel and the AWSCloudTrail table is receiving data normally. There is no issue with the AWS connector or the existing log ingestion. 2. Verified the CloudTrail data I checked the CloudTrail data specifically for the events used by UEBA. The required ConsoleLogin events are present, with: - EventSource = signin.amazonaws.com - UserIdentityPrincipalId populated for the majority of events - Other relevant identity and source information available So the source data appears to meet the documented AWS CloudTrail UEBA requirements. 3. Verified permissions The required Microsoft Entra and Azure RBAC permissions were checked. The user also has permission to perform the Sentinel UEBA settings update. Other UEBA data sources have already been enabled successfully from the same environment. 4. Checked resource locks and other settings The Sentinel workspace was checked for Azure resource locks and none were found. The UEBA anomaly detection setting is also enabled. 5. Checked the backend operation When AWS CloudTrail is selected from the UEBA settings and I try to connect it, the operation fails with: InternalServerError – HTTP 500 The Azure Activity Log shows the operation as: Microsoft.SecurityInsights/settings/write with the final status: Failed – InternalServerError (HTTP Status Code: 500) There is no AuthorizationFailed or RequestDisallowedByPolicy error. 6. Tested the API directly I also checked the current UEBA configuration through the Microsoft SecurityInsights API. The GET request works and returns the existing UEBA configuration. As an additional test, I attempted to update the same existing UEBA configuration without adding AWS CloudTrail. That update also returned HTTP 500. This makes me think the issue may not be related specifically to AWS CloudTrail or the AWS data itself, but potentially to the UEBA settings update or backend service. My questions Has anyone recently experienced UEBA settings returning HTTP 500 when updating data sources, particularly in the new Microsoft Defender/Unified SecOps portal? If anyone from the Microsoft Sentinel team can confirm whether there is a known issue or additional prerequisite for enabling AWS CloudTrail UEBA, that would be very helpful. Thanks.
Windows Server Replacement Folder redirection policy won't apply
Good morning! We are hoping someone in the community can guide us in the right direction. We have scoured the internet looking for a solution and nothing we have tried works. We have a windows server that we set up a very basic folder redirection policy on. We added a user to the OU associated with it, and it worked flawlessly. The user’s account mapped the folders to the correct location and was able to save data. We then wanted to use a different folder, so we created a second policy identical to the first, but pointing to a different root folder. We applied the group policy to the server, then moved the user from the original OU to the new OU. The original redirection policy disassociated, but the new one will not apply. We simply get an error message in gpresult that states “Cannot complete this function”. We have duplicated this in a live environment and a lab environment, so it seems clear that it is something that we are doing wrong or not understanding about how this is supposed to work. Has anyone run into this\have any guidance for us? Is our expectation of how this should work unrealistic? Our expectation is that the old policy will be removed and the new policy with the new folder would then apply. Thanks very much.
Can not add-in endnote
For the past few days, I have been unable to use Microsoft Word reliably because the application keeps freezing. I contacted your Microsoft support team, and the issue was reportedly resolved by updating my registry. After this, I noticed that I’m no longer able to use the EndNote add-in / “Cite While You Write” functionality. I upgraded my EndNote to the latest version, but I still cannot configure it in Word. When I attempt to set it up, I receive the message stating that “the current Word is not supported for EndNote.” Could you please advise on how to fix this? If the registry update may have affected Word’s add-in compatibility, I would also appreciate guidance on what needs to be changed to restore EndNote support. Thank you for your help.
Text highlighting not working
Microsoft Word 2021, Windows 11 Home Unable to highlight/select text using mouse or touchpad Keyboard selection (Shift + Arrow Keys) works Issue occurs in all Word documents. Office Online Repair temporarily resolves the issue, but it returns within minutes. Mouse and touchpad function normally in other applications such as Excel. Issue began approximately one week ago. Multiple support sessions and repairs have already been performed. This issue is so frustrating! Any advice is appreciated!Content Not Published Your post contains invalid HTML.
"Content Not Published Your post contains invalid HTML. Remove the following invalid tags before publishing: p (data-afsc-id)" That message appears just about every time I try to post something in this forum. It is so annoying. Can't someone fix the forum so that it stops doing this? I am never posting any html. Apparently, the forum is adding the html itself and then saying that I can't post it.Venting about all the security features blocking my own local apps
I have Windows 11 Pro with a new laptop (a good brand with 32GB RAM). (I wanted a Surface, but way too expensive.) I am a retired .NET developer and I still code at home. I have a few personal apps that are run from task scheduler. Getting a laptop to start an app from the task scheduler in the middle of the night is a whole other discussion (laptops prefer not to stay in a state that task scheduler can wake from). But let's say I have apps that upload files to my personal web site. I have needed to: add firewall rules for the apps in whatever folders they run from; add Windows Security exceptions for the EXEs and folders; move the EXEs to folders under Program Files because Device Guard otherwise blocks them (I don't want to bother with signing the apps), and trust me when I say you don't want to try to disable Device Guard, and there is no way to add exceptions to Device Guard; wonder why aka.ms/myrecoverykey has been messed up for days; adjust Visual Studio Debug settings to refer to the Program Files locations; log extensively from my apps because I never know what new Windows feature will block them, and watch obscure event logs such as CodeIntegrity; constantly update third-party modules (Nuget, etc.). Yeesh, I just want to post a message of the day on my own web site.
help.microsoft.com talk to a person
1=<8.08>`73.1<03.69> Although, as a moderator, I'm not directly responding to customer calls with problems, I can offer you strategic guidance on how to contact a real person in Microsoft Support.1=<8.08>`73.1<03.69> This is a common problem, and the key is understanding the prompts and steps to bypass the automated system. to your Microsoft 365help.microsoft.com talk to a person
1=<8.88>`31.9<89.20> Although, as a moderator, I'm not directly responding to customer calls with problems, I can offer you strategic guidance on how to contact a real person in Microsoft Support.1=<8.88>`31.9<89.20> This is a common problem, and the key is understanding the prompts and steps to bypass the automated system. to your Microsoft 365
