Understanding Azure Account, Subscription and Directory.
For the last couple of days, I am trying to understand the relationship between Azure account, Subscription, and Directory and Resource Groups. Is there any comprehensive guide that can help me to understand how Azure Account, Subscription and Directory works? Thank you in advance.
MFA without a Cellphone
This is becoming a bigger issue more and more. We cannot, as a company, require our Employees to use a personal cellphone to get text codes or install work apps to authenticate our work accounts. We supply these users with a Business Voice license so they can make business calls and accept business calls. All of our employees have corporately paid laptops running Windows 10 and all have SharePoint, Email, OneDrive, Teams etc. Microsoft does not offer the authenticator app on Windows 10 so we can't use that method. So what do we do? Leave all these accounts vulnerable? I've read about using "landlines" for authentication then Microsoft says that's not secure but then provides no guidance on exactly how we're supposed to do this. We cannot be expected to pay for a cellphone for all these users just to use one app. That's ridiculous.
Revert to Azure Managed Disk snapshot on Azure VM
Hi All, Looking for some assistance in reverting a Managed disk snapshot to an OS disk of the VM. Idealy i would like to do the following: 1. Detach existing OS managed disk from VM 2. Convert the snapshot to a managed disk 3. Attach new managed disk to VM I'm struggling at point 1. The Remove-AzureRMDisk cmdlet doesnt like the fact its currently attached. The current way im achieving this is by deleting / recreating the VM with the new disk. Seems to work well but is getting complicated when more services are setup against this VM. Any suggestions?
Azure as a Print Server
Is there a way to setup Azure as a print server without a physical server onsite? Would also like to push through installation through GPO and possibly by location I would hope that Microsoft would add printer settings to the AzureAD/Intune features, but it doesn't appear possible yet (without on prem)How to enable Ping (ICMP echo) on an Azure VM
This is just a very quick blog post because I got the question from a couple of people. In this blog post want to show you how you can enable ping (ICMP) on a public IP address of an Azure virtual machine (VM). First, just let me say that assigning a public IP address to a virtual machine can be a security risk. So if you do that, make sure you know what you are doing. If you need admin access to virtual machines only for a specific time, there are services like Azure Just-in-Time VM Access (JIT) and Azure Bastion you should have a look at. Now back to the topic, Azure by default denies and blocks all public inbound traffic to an Azure virtual machine, and also includes ICMP traffic. This is a good thing since it improves security by reducing the attack surface. Read more here: https://www.thomasmaurer.ch/2019/09/how-to-enable-ping-icmp-echo-on-an-azure-vm/
