Check This Out! (CTO!) Guide (November 2026)
Member: TysonPaul | Microsoft Community Hub Advancing sovereign AI with Foundry Local and Azure Local Team Blog: Azure Arc Author: insagiv Published: 10/20/2026 Summary: Microsoft is expanding sovereign AI with Foundry Local on Azure Local, enabling organizations to run AI models, agents, and applications in customer-controlled environments, including disconnected or regulated settings. Built on Azure Arc-enabled Kubernetes, it supports local inference, model management, GPU acceleration, enterprise data retrieval, connectors, and configurable guardrails. Together with Azure Local and GitHub Enterprise Local, it lets organizations keep sensitive data, development workflows, and AI operations under greater control. The approach gives governments, regulated industries, and critical infrastructure providers flexibility to choose cloud, local, or hybrid architectures based on workload, security, and sovereignty needs. Simplify Azure Arc agent updates with Automatic Agent Upgrade, now generally available Team Blog: Azure Arc Author: yunishussein Published: 10/28/2026 Summary: Microsoft’s Automatic Agent Upgrade for Azure Arc-enabled servers is now generally available. The feature keeps the Azure Connected Machine agent up to date by letting Microsoft manage upgrades automatically, reducing manual effort and helping servers receive security, reliability, quality, and platform improvements. Upgrades are rolled out in regional batches during off-peak hours to minimize disruption. Organizations can enable it at scale using Azure Policy, during onboarding with the `--enable-automatic-upgrade` command option, or through Azure portal onboarding scripts. Microsoft recommends reviewing the documentation for prerequisites and management options. Understanding device redirection changes in Hyper-V Virtual Machine Connection enhanced session mode Team Blog: Virtualization Author: Jeff-Woolsey Published: 10/12/2026 Summary: Starting with the October 2026 security update, Hyper-V VMConnect enhanced session mode changes device redirection defaults to improve security. The connection dialog now prominently shows Clipboard, Printers, Smart cards, and WebAuthn options. Printers, smart cards, and WebAuthn are off by default; clipboard remains on, and audio playback remains on. The change prevents sensitive credentials and devices from being shared with untrusted VMs without clear consent. Users must re-confirm saved settings once per VM and can edit them later. Microsoft recommends redirecting only needed resources, avoiding credential redirection for untrusted VMs, and using basic session mode when appropriate. Evaluate Before Production: Evidence-Based Gates for On-Premises RAG Team Blog: Educator Developer Author: kevin_gatimu Published: 10/21/2026 Summary: The article argues that on-premises RAG systems need evidence-based release gates, not demos or unverified runbooks. It outlines how evaluation must separately test routing, SQL execution, retrieval, grounding, refusal, authorization, performance, and recovery, with artifacts tied to commits, hardware, models, configuration, datasets, and outcomes. The prototype includes limited synthetic router/retrieval evaluation and CI checks, but lacks production-grade judged evaluation, capacity proof, fault-injection evidence, and clinical/compliance validation. It stresses data residency, local evaluation, exact oracles where possible, hardware-specific performance testing, and failing release gates when required evidence is missing or stale. Fine-Tuning and Auditing an On-Device SLM Traffic Controller with Real London Data Team Blog: Educator Developer Author: ebenezer-isaac Published: 10/14/2026 Summary: A UCL MSc project fine-tuned a 0.6B Qwen language model to control traffic signals in SUMO simulations using London road networks and real TfL demand shapes. Running locally on a 6GB GPU via Microsoft Foundry Local, the model used safety checks, fallbacks, fairness rules, and tamper-evident audit logs. On a calibrated Bloomsbury grid, fine-tuning cut delay 18.3% versus the stock model and matched MaxPressure, beating fixed-time control by 8.8%. On Euston Road, SUMO’s vehicle-actuated baseline remained strongest. The work is simulation-only, with future plans for richer training and inter-junction context. Connect Azure Service Bus to other messaging systems with a JMS bridge Team Blog: Messaging on Azure Author: EldertGrootenboer Published: 10/19/2026 Summary: A JMS bridge can connect existing JMS-compatible systems, such as on-premises IBM MQ, to Azure Service Bus Premium without changing current applications. Using Apache Artemis’s Jakarta JMS bridge, messages from a dedicated MQ queue are received via the IBM MQ connection factory and forwarded over AMQP 1.0/TLS to a Service Bus queue using Azure’s JMS library and Microsoft Entra ID authentication. Running the bridge on-premises keeps MQ private while opening only outbound Azure connectivity. The setup supports one-way or bidirectional flows, but with DUPLICATES_OK, duplicates are possible, so Service Bus duplicate detection and idempotent processing are recommended. Choosing the Right Azure Virtual Machine for Ansys CFX Team Blog: Azure High Performance Computing (HPC) Author: Hugo_Meiland Published: 10/21/2026 Summary: Azure VM choice for Ansys CFX should be based on solver runtime and cost per completed simulation, not hourly price or VM size. Benchmarks across HBv5, HBv4, HX, and Fams_v7 show HBv5 is fastest and most cost-effective for larger meshes, especially 50M+ nodes, due to strong scaling and memory bandwidth. HBv4 offers the lowest cost for smaller 10M-node cases. HX performs similarly to HBv4 but is useful when more memory is needed. Fams_v7’s low hourly cost can become expensive on large jobs. Users should tune MPI, measure solver time, and avoid over-provisioning ranks. Build a Simple GPU-Enabled Kubernetes Cluster on Azure N-Series VMs Team Blog: Azure High Performance Computing (HPC) Author: vinilv Published: 10/14/2026 Summary: The article explains how to build a simple two-node, GPU-enabled Kubernetes cluster on Azure using kubeadm rather than a managed service. It uses an Ubuntu control-plane VM and an Azure N-series A100 GPU worker with Kubernetes v1.33, containerd, Flannel, NVIDIA Container Toolkit, and NVIDIA device plugin. It covers node preparation, control-plane initialization, worker joining, GPU driver/runtime validation, advertising GPUs to Kubernetes, and running a PyTorch CUDA test Job. The setup is intended for development, testing, workshops, and debugging—not production—because it lacks high availability, redundant etcd, and hardened operations. Multi-NIC Support on AKS powered by DRANET – Now in Public Preview Team Blog: Azure Networking Author: chandanAggarwal Published: 10/09/2026 Summary: Microsoft announced public preview of multi-NIC support for AKS pods, powered by the managed DRANET driver. AKS can now provision worker nodes with multiple NICs on subnets in the same VNet and either attach dedicated NICs directly to pods using Kubernetes Dynamic Resource Allocation or leave them on nodes for custom VPP/DPDK/routing setups. DRANET handles discovery, allocation, attach/release, and recovery without Multus or custom CNI extensions. Dedicated pod NICs support IPv4/IPv6 and optional public IPs, but are exclusive per pod, limiting density by NIC count. Network policy applies only to the primary interface. Proactively monitor Azure VPN Gateway tunnel disconnections Team Blog: Azure Networking Author: shyambasnet Published: 10/06/2026 Summary: The article explains how to proactively monitor Azure VPN Gateway site-to-site tunnel disconnections using Azure Monitor. It recommends enabling VPN Gateway diagnostic logs, especially `TunnelDiagnosticLog`, and sending them to a Log Analytics workspace. Administrators then create an Azure Monitor alert rule scoped to the VPN Gateway, using a KQL query to detect `Disconnected` tunnel status events within the last 10 minutes. The alert triggers when one or more disconnection events occur and can notify teams via email, SMS, webhook, or action groups. This improves visibility, reduces detection time, and helps maintain reliable hybrid connectivity. Azure CLI on macOS got security upgrade: native broker authentication Team Blog: Azure Tools Author: Alex-wdy Published: 10/08/2026 Summary: Azure CLI 2.91.0 introduces preview support for native broker authentication on macOS, improving security for enterprises through OS-based credential brokering, SSO, device-bound tokens, and Conditional Access support. When enabled, `az login` uses a native macOS account picker instead of browser sign-in, falling back to browser auth if no compatible broker is available. The feature is disabled by default and can be enabled via configuration. Azure CLI is now distributed through Homebrew Cask to meet macOS broker, notarization, and compliance requirements, while preserving the familiar `brew install azure-cli` workflow. Azure AD Graph API retirement: action required for older versions of Azure CLI and Azure PowerShell Team Blog: Azure Tools Author: Alex-wdy Published: 10/05/2026 Summary: Azure AD Graph (graph.windows.net) was retired, and legacy access for old Azure CLI/Azure PowerShell releases will be progressively disabled after October 6, 2026. Current Azure CLI and Az PowerShell versions already use Microsoft Graph, so no action is needed if updated. Users should check all environments—including CI/CD, runbooks, containers, and developer machines—and upgrade Azure CLI to 2.37.0+ and Az.Resources to 5.1.0+ or later. Also migrate any direct graph.windows.net calls and legacy AzureAD/MSOnline PowerShell usage to Microsoft Graph. Targeted notifications indicate residual tenant traffic requiring investigation. Microsoft FinOps News - September 2026 Team Blog: FinOps Author: SoniaCuff Published: 10/01/2026 Summary: September 2026 Microsoft FinOps News highlights cost management and AI updates across Microsoft Foundry, Azure OpenAI, Copilot, Agent 365, GitHub Copilot, and Azure. Key items include new model pricing and availability, Flex processing for lower-cost AI workloads, Foundry Routines GA, Copilot cost controls and usage dashboards, GitHub Copilot model orchestration and budgeting features, Azure savings plan and reservation recommendations, and an Azure SRE Agent trial. The roundup also covers AI transformation guidance, agent optimization economics, governance, and enterprise strategies for measuring value and controlling AI spend. Windows CLAT is Now Generally Available Team Blog: Networking Author: JimAlumbaugh Published: 10/27/2026 Summary: Windows CLAT is now generally available, helping IPv4-only applications work on IPv6-only or IPv6-mostly networks. As the client-side component of 464XLAT, it translates IPv4 traffic into IPv6 for transport to a provider-side NAT64 translator. This enables organizations to reduce IPv4 dependency, simplify network configuration, lower costs, minimize dual-stack security exposure, and support gradual IPv6 adoption. Windows CLAT works across Wi-Fi, Ethernet, and cellular interfaces, automatically detects IPv6-only networks, and supports standards-based prefix discovery via router advertisements or DNS. Microsoft says the feature will accelerate global IPv6 migration while preserving application compatibility. Bulk changing blob tiers using Azure Storage Actions Team Blog: Azure PaaS Author: hqaffesha Published: 10/07/2026 Summary: The article explains how to use Azure Storage Actions to bulk change Azure Blob access tiers without scripts or custom automation. It walks through creating a storage task in the Azure portal, defining conditions such as current access tier, setting a target tier, assigning the task to a storage account, configuring permissions and filters, and running the task. It also highlights execution reports for tracking results. Before enabling a task, users should review scope and costs, including transaction, retrieval, rehydration, and early deletion charges, especially when handling large datasets or Archive-tier blobs. How Microsoft Intune team upgraded a .NET service with GitHub Copilot modernization Team Blog: Apps on Azure Author: RamyaSharma Published: 10/27/2026 Summary: Microsoft’s Intune team used GitHub Copilot modernization to help migrate an enrollment service from .NET Framework 4.7.2 to .NET 8 while moving hosting to Azure Kubernetes Service. The agent accelerated dependency mapping, project conversion, and NuGet/API updates, cutting one internal library migration from six weeks to about 1.5 weeks. The engineer maintained control through editable migration plans, progress logs, and context notes to preserve decisions across sessions and keep pull requests small. Copilot worked well for public and Microsoft-wide libraries but required manual or custom internal context for Intune-specific dependencies. Data Transfer and Transactions metrics now generally available for Azure Container Registry Team Blog: Apps on Azure Author: jeburke Published: 10/20/2026 Summary: Azure Container Registry (ACR) has made two new Azure Monitor platform metrics generally available: Data Transfer and Transactions. These metrics are automatically enabled for all registries at no extra cost and provide deeper visibility into outbound traffic, API activity, regions, response outcomes, failures, and throttling. Users can split metrics by API name, region, and response type to diagnose traffic patterns, throttled requests, and data transfer sources. A new integrated Azure Managed Grafana dashboard offers prebuilt views for registry health, transaction trends, throttling, storage, and data transfer, enabling self-service investigation without logs or support requests. A closer look at noise reduction in Stacks What-If Team Blog: Azure Governance and Management Author: torreyt Published: 10/08/2026 Summary: Azure Deployment Stacks What-If now includes noise reduction to make change previews more trustworthy. Traditional what-if often reports false differences caused by provider defaults, read-only properties, runtime state, or unrecognized write-only fields. Stacks reduce this noise by saving a baseline after successful deployments and filtering unchanged, previously known differences from future results. It still surfaces real drift introduced after deployment. The feature is enabled automatically in all regions for stacks deployed or updated after August 13, 2026. Stacks What-If results are stored as Azure resources, available via CLI, PowerShell, SDKs, and REST. Troubleshoot Hyper-V guarded fabrics and shielded VMs Team Blog: ITOps Talk Author: OrinThomas Published: 10/16/2026 Summary: This FAQ provides troubleshooting guidance for Hyper-V guarded fabrics, Host Guardian Service (HGS), and shielded VMs. It covers deployment prerequisites, HGS service and connectivity failures, certificate and private-key issues, attestation results, TPM and code integrity problems, provisioning, key protection, migration, backup, disaster recovery, BitLocker recovery, and diagnostics. It emphasizes identifying the failing layer—host, HGS, owner keys, templates, VM state, or network—before acting. The article warns against unsafe “fixes” such as clearing TPMs, bypassing certificate validation, weakening attestation, copying private keys, or deleting protected VM state. Before Your Next Azure VM Refresh, Revisit the PaaS Options Team Blog: Azure Migration and Modernization Author: Madhura Amlekar Published: 10/23/2026 Summary: Before refreshing Azure VMs, reassess whether components should move to PaaS. Review VM lifecycle status, MANA readiness, and reservation/savings-plan implications together. Suitable candidates—web apps, APIs, databases, queues, caches, and files—may move to App Service, Container Apps, Azure SQL, Service Bus, Managed Redis, or Azure Files, while components needing OS or appliance control can remain on supported VMs. Start with a low-risk component, validate performance, security, monitoring, backup, cost, and rollback, then expand in waves. Align modernization with FinOps commitments, ownership, governance standards, and business goals rather than doing VM-by-VM refreshes. Securing AI in the Defense Industrial Base – Part 1 – The AI Risk Landscape Team Blog: Public Sector Author: BrookeRobinson Published: 10/29/2026 Summary: DIB organizations are rapidly adopting AI while needing to protect CUI, export-controlled data, IP, and mission systems under NIST 800-171/CMMC. The article frames AI security as an extension of Zero Trust, not a separate program, using NIST AI RMF concepts. It outlines risks across AI usage, applications, platforms, and autonomous agents, including shadow AI, prompt injection, poisoned data, privilege abuse, and excessive agency. It emphasizes treating agents as governed non-human identities. Existing Microsoft GCC High telemetry—Entra, Purview, Defender, Sentinel, Azure logs—can already support investigation, audit evidence, and governance. Unleash Innovation at the Frontier: Join the Agent-a-thon Team Blog: Public Sector Author: Abby_Quinn Published: 10/06/2026 Summary: The article promotes Microsoft’s Frontier Innovation Series: Agent-a-thon, a hands-on event for innovators, technologists, and business leaders to explore agentic AI. Participants will learn how intelligent agents can automate workflows, support decision-making, and address real business challenges. The event emphasizes collaboration, practical skill-building, and creating working AI solutions. It highlights the shift from AI productivity tools to transformative, organization-wide agent capabilities. Attendees will leave with actionable knowledge, use case ideas, and inspiration to apply agentic AI within their organizations. Build and govern AI agents across a multitenant organization Team Blog: Azure Architecture Author: Rebekah_Midkiff Published: 10/01/2026 Summary: The article presents a federated architecture for building and governing AI agents across multitenant enterprises using Microsoft Agent 365, Entra, Purview, Foundry, Azure API Management, and related Azure services. It centralizes standards, inventory, governance, evaluation, and operational oversight while keeping identities, data, telemetry, enforcement, and audit evidence local to each tenant. Agents are grounded in approved data, registered with owners and identities, use governed typed tools, and pass evaluations before release. Runtime controls enforce policy, classification-aware access, guardrails, and human approvals. The pattern suits large regulated or federated organizations managing many agents safely across business units. What happens when attackers get AI too? Team Blog: FastTrack Author: Alexis_Tiacoh Published: 10/21/2026 Summary: Microsoft’s article explores how attackers might use AI to accelerate or scale familiar cyberattack activities such as reconnaissance, phishing, social engineering, script modification, data analysis, and testing attack methods. It emphasizes that AI may not create entirely new threats but could reduce effort, cost, and expertise required for existing tactics. Microsoft security experts will examine realistic AI-powered attack scenarios, practical limits, and defensive controls in a live AMA webinar. The article stresses that core security fundamentals—identity, devices, applications, data, permissions, and boundaries—remain essential as attacker workflows evolve. Azure Storage Discovery now offers advanced capacity insights Team Blog: Azure Storage Author: PreethiThippeswamy Published: 10/22/2026 Summary: Azure Storage Discovery now offers preview advanced capacity insights in its Standard plan at no extra cost. By enabling “Capacity details,” users can analyze storage usage by data age, access tier, composition, object size, retention, and last access time. New charts help identify inactive Hot-tier data, soft-deleted or versioned storage, small-object inefficiencies, retention-related risks, and early deletion costs. Users can drill down from estate-wide trends to specific accounts, containers, prefixes, and tags, helping prioritize lifecycle policies, tiering, archival, cleanup, and cost-optimization decisions across complex Azure storage environments. Sovereign controls for Oracle AI Database@Azure Team Blog: Oracle on Azure Author: RamKakani Published: 10/27/2026 Summary: Oracle AI Database@Azure now supports Microsoft’s EU Data Boundary and Azure Policy, helping regulated organizations meet sovereignty, privacy, and compliance needs. Customers can deploy Oracle databases in EU/EFTA Azure regions, keep backups and replication local, use customer-managed keys, private networking, and enforce policies automatically. OCI controls govern operator access, maintenance windows, region expansion, auditing, and Oracle Data Safe for sensitive data discovery and monitoring. The article stresses that sovereignty spans Azure and OCI, requiring careful configuration of tenancy, backups, exports, diagnostics, and support data, while relying on Oracle and Microsoft compliance certifications for assurance. Meet Microsoft at Oracle AI World 2026 Team Blog: Oracle on Azure Author: AlexStairs Published: 10/07/2026 Summary: Microsoft will sponsor Oracle AI World 2026, showcasing how Oracle AI Database@Azure brings Oracle data together with Microsoft AI. Attendees can hear Microsoft VP Brett Tanzer in a multicloud panel with OCI, AWS, Azure, and Google leaders, and join sessions on modernization, AI innovation, connected agents, and building AI agents on Oracle data. Additional sessions cover Oracle Database@Everywhere and real-world multicloud patterns. Visitors can stop by Microsoft booth #10028 for expert demos, cloud strategy discussions, raffle prizes, and insights into using Azure solutions to accelerate enterprise transformation. Migrating Azure Cosmos DB Across Regions Team Blog: Analytics on Azure Author: Rafia_Aqil Published: 10/15/2026 Summary: The article outlines three Azure Cosmos DB regional migration strategies: cross-region point-in-time restore, online container copy, and provisioned multi-region replication. It emphasizes distinguishing total migration time from application cutover downtime and validating target-region capacity early. PITR restore is simplest but requires a write freeze and creates a new account. Online copy minimizes downtime but is preview-based and requires empty target containers, RBAC, monitoring, and final completion. Provisioned multi-region supports HA/DR and controlled failover but increases cost and requires moving from serverless to provisioned throughput. Optimizing Oracle-to-Power BI Performance and the Path to Modern Analytics Team Blog: Analytics on Azure Author: Rafia_Aqil Published: 10/08/2026 Summary: The article explains that Oracle-to-Power BI performance issues should be diagnosed as an end-to-end pipeline, not blamed on a single component. It recommends measuring Oracle execution, provider behavior, FetchSize, network transfer, Power Query folding, model processing, and gateway performance. Key optimizations include using efficient SQL, filtering and selecting columns at the source, preserving query folding, tuning FetchSize, preferring Import with incremental refresh when possible, and optimizing DirectQuery only when necessary. For long-term scalability, Microsoft Fabric Mirroring can replicate Oracle data into OneLake, reducing analytical load on operational Oracle systems. New GitHub Certified: Agentic AI Business Professional Team Blog: Microsoft Learn Author: LibertyMunson Published: 10/20/2026 Summary: GitHub has introduced the GitHub Certified: Agentic AI Business Professional certification for business roles such as product managers, program managers, technical project managers, and analysts. It validates skills in using GitHub and GitHub Copilot to organize work, produce reliable AI-assisted outputs, build agentic workflows, automate multistep processes, and apply human oversight. No deep coding experience is required. Candidates earn it by passing the beta Exam GH-700. The first 300 eligible test takers by November 9 can receive an 80% discount using code GH700B8F5. General availability is expected in December 2026. AI-powered + human-focused: Powering workforce transformation Team Blog: Microsoft Learn Author: kimberlycottrell Published: 10/02/2026 Summary: Microsoft argues that AI transformation depends on employees having the skills, confidence, and support to use AI effectively. Its approach combines AI-powered skilling—personalized learning paths, role-based playlists, AI coaching, summaries, podcasts, assignments, and progress tracking through AI Skills Navigator—with human-focused learning that builds judgment, collaboration, creativity, curiosity, and responsible decision-making. AI enables scalable, adaptive workforce development, while human-led experiences provide context, trust, dialogue, and practice. Together, these methods help organizations tailor learning by role, readiness, and goals, turning AI adoption into measurable business impact. Azure WAF custom rules for PHP2Shell mitigation Team Blog: Azure Network Security Author: saikishor Published: 10/21/2026 Summary: Microsoft recommends upgrading to patched PHP versions as the complete fix for PHP2Shell CVE-2026-109618 and CVE-2026-109619. For customers unable to upgrade immediately, the article provides Azure WAF custom rules for Azure Front Door, Application Gateway, and AGC to reduce exposure: blocking PHP session upload progress requests and logging deeply nested URL-encoded or multipart form parameters. These rules may cause false positives and should be scoped to affected PHP routes, tested independently, started in Log mode, and moved to Block only after validation. WAF mitigations reduce selected attack patterns but are not complete protection. Protect against Brotli CVE-2026-111497 with Azure Web Application Firewall (WAF) Team Blog: Azure Network Security Author: yuvalpery Published: 10/23/2026 Summary: Google Brotli 1.0.3–1.2.0 has a buffer overflow vulnerability (CVE-2026-111497) that can enable memory corruption, data exposure, DoS, or code execution via crafted Brotli-compressed input. Microsoft recommends upgrading Brotli, Node.js, and affected applications. Azure WAF can mitigate inbound attacks by blocking Brotli request bodies: DRS 2.2 on Application Gateway/Azure Front Door Premium protects by default via rule 920450. Older rule sets, Front Door Standard, Containers, or disabled rules should use custom rules. Next.js apps should also block `_next/image` requests until patched. Request body size limits are recommended as additional protection. Powering Azure infrastructure from grid to chip Team Blog: Azure Infrastructure Author: mariozeng Published: 10/13/2026 Summary: Microsoft is rethinking Azure AI power delivery “from grid to chip” to support denser, more dynamic AI workloads. Its strategy centers on full-stack co-design, reducing conversion losses, improving resiliency, and scaling efficiency through 800VDC/±400VDC low-voltage DC distribution. Key efforts include OCP collaboration, the Mt. Diablo disaggregated power rack, solid-state transformers, integrated energy storage, clean backup power, and server-to-silicon innovations like power delivery boards and vertical power delivery. The goal is a flexible, interoperable architecture that supports existing datacenters while enabling future DC-native AI infrastructure. Networking for the AI era: Building for scale, efficiency, and openness Team Blog: Azure Infrastructure Author: sdighe Published: 10/13/2026 Summary: AI growth is making networking a core part of system architecture, not just infrastructure. Large AI clusters need scale-up, scale-out, and cross-datacenter networks that keep accelerators productive despite congestion, failures, and distributed workloads. Microsoft highlights Multipath Reliable Connection (MRC), an open OCP specification that spreads RDMA traffic across multiple paths to improve resilience and utilization. It also emphasizes open optical and Ethernet efforts such as OCI MSA and ESUN. The article argues that open standards and ecosystem collaboration are essential to building scalable, efficient, interoperable AI infrastructure. Generally Available: Automatic Zone Balance for Virtual Machine Scale Sets Team Blog: Azure Compute Author: HilaryWang Published: 10/15/2026 Summary: Azure announced general availability of automatic zone balance for Virtual Machine Scale Sets. The feature continuously monitors zonal distribution and automatically rebalances VM instances across availability zones to reduce the impact of zone failures. It uses a create-before-delete approach, health checks, cooldowns, and safeguards to preserve availability and avoid conflicts with scale operations. It also enables automatic instance repairs by default. Since preview, it adds coordination with Azure Autoscale and improved balance calculations across active, deallocated, and powered-off VMs. The feature is best for stateless workloads and requires multiple zones, zonal instances, and health monitoring. Preparing for end of support for CNAME auto-discovery in Windows MDM-only enrollment Team Blog: Intune Customer Success Author: Intune_Support_Team Published: 10/15/2026 Summary: Microsoft Intune will end support for EnterpriseEnrollment DNS CNAME-based auto-discovery in Windows MDM-only enrollment on January 15, 2027. Organizations using this method may need users to manually enter the Microsoft enrollment URL: https://enrollment.manage.microsoft.com/enrollmentserver/discovery.svc. Existing enrolled devices aren’t affected, and Windows MDM-only enrollment remains supported. Microsoft Entra join, hybrid join, and other non-CNAME methods are likely unaffected. Organizations should identify impacted workflows, review DNS records, update enrollment and support documentation, train help desk teams, test enrollment scenarios, and communicate any new steps to users before the change takes effect. Require Google Workspace authentication on Android Enterprise devices with Microsoft Intune Team Blog: Intune Customer Success Author: Intune_Support_Team Published: 10/19/2026 Summary: Microsoft Intune now generally supports requiring users on supported Android Enterprise devices to authenticate with a managed Google Workspace account. This applies to corporate-owned fully managed devices and corporate-owned devices with a work profile, but not dedicated devices. Organizations must verify their Google Workspace domain, upgrade to a managed Google domain enterprise if needed, and create managed Google accounts. Admins configure the setting in Intune’s Android Enterprise Settings catalog. Users receive a prompt to sign in with their work Google account, replacing the managed Google Play account while Microsoft Entra remains the device management identity. Bracing for BlockNtlmv1SSO Team Blog: Core Infrastructure and Security Author: JerryDevore Published: 10/23/2026 Summary: Microsoft’s October 2026 update blocks NTLMv1-derived credentials by default via BlockNtlmv1SSO, impacting environments still using MS-CHAPv2 for VPN, Wi‑Fi, NPS, or RADIUS because its challenge response is equivalent to NTLMv1. Organizations should audit for dependencies before enforcement, using NTLM events such as 4024/4025 on clients or enhanced 4033 events on domain controllers. To avoid disruption, set BlockNtlmv1SSO to 0 for audit mode before updating. Apply updates to domain controllers, forward NTLM operational logs to SIEM, and consider increasing NTLM log size if not forwarding. Finding the Elusive MDE PUA Audit Events on Linux Team Blog: Core Infrastructure and Security Author: Vytas_Boyev Published: 10/08/2026 Summary: The article explains how Microsoft Defender for Endpoint on Linux handles Potentially Unwanted Applications (PUA), especially in Audit mode. Unlike Block mode, Audit detections are not shown in the Defender portal or threat history; they are written only to local product logs. Testing with the AMTSO PUA file showed detections in `/var/log/microsoft/mdatp/microsoft_defender_core_err.log`, searchable via `potentially_unwanted_application`. The article recommends using grep for validation and Azure Monitor Agent or Log Analytics to centralize and query events at scale, making PUA Audit useful for assessing impact before enabling enforcement. Introducing the Microsoft Sentinel ASIM EmailEvent schema Team Blog: Microsoft Sentinel Author: JamesAde Published: 10/07/2026 Summary: Microsoft Sentinel has introduced the ASIM EmailEvent schema, a normalized model for email delivery and inspection events. It standardizes fields such as sender, recipients, subject, URLs, attachments, authentication results, delivery actions, and threat details across email security products. This helps analysts write consistent queries, build reusable detections, investigate faster, and integrate new email telemetry more easily. EmailEvent does not replace native product data but provides a common security layer. Version 1.0.0 includes schema definitions, parser frameworks, deployment templates, and validation support in the Azure-Sentinel repository. Manage all your Microsoft Sentinel data in one place with Unified Data Management (Public Preview) Team Blog: Microsoft Sentinel Author: amybook Published: 10/20/2026 Summary: Microsoft announced the public preview of Unified Data Management for Microsoft Sentinel in the Microsoft Defender portal. Available under Setup & configuration > Data & connectors, it centralizes connector, table, ingestion, health, schema, transformation, retention, and cost insights. The experience includes Overview, Connectors, and Tables tabs to monitor ingestion trends, troubleshoot connector issues, identify stale or high-volume tables, and manage unified and classic connectors together. It supports SIEM and XDR data operations in one place. Prerequisites include Sentinel onboarding to Defender, URBAC enabled, Data manage permissions, and appropriate Log Analytics workspace permissions.Check This Out! (CTO!) Guide (October 2026)
Member: TysonPaul | Microsoft Community Hub Azure Key Vault Control Plane API Update: Required Upgrade for Azure CLI and Azure PowerShell Users Team Blog: Azure Tools Author: Alex-wdy Published: 09/01/2026 Summary: Azure Key Vault control plane API versions before 2026-02-01 will stop working on February 27, 2027. This affects only management operations, such as creating/updating vaults, network rules, access policies, and RBAC settings—not data plane operations like reading or writing secrets, keys, or certificates. Users of Azure CLI or Az PowerShell must upgrade before the deadline: Azure CLI to 2.90.0+ using `az upgrade`, or Az.KeyVault to 6.6.1+ / Az package to 16.3.0+ using `Update-Module`. Without upgrading, Key Vault management operations using older APIs will fail, with no opt-out or extension available. Introducing bicep docs: generate documentation from your Bicep modules Team Blog: Azure Tools Author: jaredfholgate Published: 09/24/2026 Summary: Bicep CLI v0.47.16 introduces the experimental `bicep docs generate` command, which creates documentation directly from Bicep modules. It generates README files covering resources, parameters, types, outputs, examples, references, and metadata, helping prevent documentation drift. Users can preview output, customize destinations, document multiple modules with patterns, and enforce freshness in CI. Documentation can be customized with Scriban templates, custom values, and alternative outputs like JSON or HTML. Usage examples are automatically discovered, and the feature is also available via JSON-RPC. Microsoft is seeking feedback as the feature evolves. System Center 2022 Update Rollup 4 Team Blog: System Center Author: AakashMSFT Published: 09/29/2026 Summary: System Center 2022 Update Rollup 4 delivers stability, security, and compatibility improvements across the suite. Virtual Machine Manager adds support for newer Linux distributions, improves VM deployment/networking, console stability, authentication, and SCOM integration. Operations Manager gains OpenSSL 3.x distro support, Ubuntu 26 support, improved web console reliability, Linux monitoring, and admin-only PowerShell widget editing. Service Manager adds MSOLEDBSQL19 and Microsoft Graph API support. Orchestrator improves runbook parameter handling and updates its command-line wizard to 64-bit. Data Protection Manager enhances SQL encryption support, recovery reliability, console/PowerShell stability, and accessibility. You Get One Exchange Left: Rethinking Azure Commitments Before February 2027 Team Blog: FinOps Author: Madhura Amlekar Published: 09/20/2026 Summary: Starting February 1, 2027, Azure reservations for services covered by savings plans can no longer be exchanged, except for one final exchange on reservations bought before that date. New reservations bought afterward get no exchanges. Reservations still offer deeper discounts for stable workloads, while savings plans provide flexibility across regions and SKUs. Teams should clean up unused resources, avoid committing against messy environments, and use savings plans for changing workloads before moving settled workloads to reservations. Buying at business-unit level improves chargeback and avoids duplication. The key shift is sequencing: optimize first, then commit carefully. Now Available: Management Group–Scoped Savings Plan and Reservation Recommendations in Azure Team Blog: FinOps Author: Obinna_Nwokolo Published: 09/29/2026 Summary: Azure now offers savings plan and reservation recommendations, including P3, at the management group scope in the Azure Portal and via REST API. This lets organizations assess commitment opportunities across entire subscription hierarchies in one view. The feature supports aggregated purchasing power, governance-aligned decision-making, and reduced analysis overhead for FinOps and central IT teams. Recommendations analyze historical usage, model optimal commitments, and estimate savings versus pay-as-you-go pricing. Users can access them through Azure Portal purchasing experiences or relevant Savings Plan and Reservation Recommendations API endpoints. Microsoft and IBM bring enterprise-scale workload orchestration to Azure with IBM Spectrum Symphony Team Blog: Azure Compute Author: DanaCozmei Published: 09/30/2026 Summary: Microsoft and IBM announced the IBM Spectrum Symphony Provider Plugin for Microsoft Azure Compute Fleet, enabling enterprises to extend and burst Symphony-managed HPC, AI, and analytics workloads into Azure. The integration connects Symphony’s workload orchestration with Azure’s scalable compute capacity, dynamically provisioning and releasing VMs based on demand. It supports multiple VM families, Spot and pay-as-you-go instances, and workload-based infrastructure selection to improve performance, availability, and cost efficiency. The solution helps organizations with established Symphony environments handle peak demand and large-scale batch workloads without permanently overprovisioning infrastructure. Announcing General Availability of Azure Lasv5 and Laosv5 VMs Based on 5th Gen AMD EPYC™ processors Team Blog: Azure Compute Author: sarah-zhou Published: 09/29/2026 Summary: Microsoft announced general availability of Azure Lasv5 and Laosv5 local storage-optimized VMs powered by 5th Gen AMD EPYC “Turin” processors. Built for data-intensive workloads, they offer faster compute, expanded local NVMe SSD capacity, higher IOPS, and up to 200 Gbps networking. Compared with prior generations, Lasv5 provides up to 30.7 TB local storage and 9.6M read IOPS, while Laosv5 reaches 138 TB and 20.7M read IOPS. Both support encryption by default and remote disk options. Lasv5 is available in five regions; Laosv5 is available in East US. Automating Private Endpoint DNS Across Azure Tenants with Azure Policy and Azure Lighthouse Team Blog: Azure Infrastructure Author: abhilashasr Published: 09/17/2026 Summary:In multi-tenant Azure environments, application tenants can't update the central tenant's Private DNS zones when they create Private Endpoints. The article proposes an Azure-native alternative to custom sync services. A DeployIfNotExists Azure Policy creates the private DNS zone group, using a user-assigned managed identity. Azure Lighthouse delegates that identity only Private DNS Zone Contributor on a dedicated central DNS resource group. Terraform and GitHub Actions with OIDC federation automate the rollout without long-lived secrets. The authors stress that this is a proposed design, not an official reference architecture, and should go through security review and a proof of concept first. Expanding access to specialized GPU infrastructure through Dapple and Azure Team Blog: Azure Infrastructure Author: Trinidad_Salazar Published: 09/22/2026 Summary: Microsoft is expanding access to specialized, topology-aware GPU infrastructure through Dapple integrated with Azure. Modern AI workloads depend not just on compute, but on GPU proximity, InfiniBand fabrics, low-latency networking, storage design, and cluster topology. Dapple’s Private AI Cloud provides dedicated GPU clusters while preserving Azure governance, security, and operations. Azure Kubernetes Service acts as the workload control plane, while Dapple manages infrastructure topology, maintenance, recovery, and lifecycle events. The Dapple Operator bridges both layers, enabling enterprises to run large-scale training, fine-tuning, and inference on purpose-built AI infrastructure without creating a separate operational domain. Dell Managed PowerScale for Microsoft Azure is now generally available Team Blog: Azure Storage Author: AzureAndrewChen Published: 09/10/2026 Summary: Dell Managed PowerScale for Microsoft Azure is now generally available in the East US region. Developed by Microsoft and Dell, the Azure Native ISV Service lets customers provision and manage Dell PowerScale through the Azure portal, CLI, PowerShell, and Marketplace billing while Dell operates the infrastructure, upgrades, maintenance, and support. The service offers OneFS file capabilities, private VNet access, up to 8.4 PB in a single namespace, NFS/SMB/S3 support, replication, compression, deduplication, and tiering to Azure Blob Storage. It supports hybrid data architectures, disaster recovery, analytics, and data-intensive workloads. Accelerated AI & Analytics workload on Azure Blob Storage: Up to 25x faster List Blobs operations Team Blog: Azure Storage Author: wolfgangdesalvador Published: 09/03/2026 Summary: Azure Storage is previewing an optimized List Blobs capability that returns results in Apache Arrow format, improving listing speed by up to 25x and reducing client-side CPU use by up to 15x. Enabled through a simple header or updated SDK option, it preserves existing API behavior and strong consistency while remaining opt-in. rclone testing showed 100K-object listings dropping from 24 seconds to 1.1 seconds with Arrow and parallelism. The feature is available in preview across major Azure Blob SDKs and REST, supports flat namespace accounts, and encourages parallel listing strategies for best performance. Locking down PAWs internet access when GSA drops Team Blog: Core Infrastructure and Security Author: ChristianFriedel-Jain Published: 09/14/2026 Summary: The article explains how to make Microsoft Global Secure Access (GSA) “fail-close” for Privileged Access Workstations, since GSA currently fails open if its client, tunnels, or services stop. The authors propose an Intune-deployable defense-in-depth design: Windows Defender Firewall switches between Private and Public profiles based on GSA event logs, restricting internet access to essential Microsoft endpoints when GSA drops; and Intune custom compliance with Conditional Access blocks cloud access if GSA is missing or services are not running. Dynamic Keywords, scheduled tasks, scripts, firewall rules, and Defender hunting support deployment, maintenance, and monitoring. MDATP Linux agent latest release reporting Team Blog: Core Infrastructure and Security Author: edgarus71 Published: 09/01/2026 Summary: The article describes a PowerShell 7 automation that runs on Windows to identify the latest Microsoft Defender for Endpoint (MDATP) Linux packages available in Microsoft repositories. It checks RPM and APT metadata across RHEL, Rocky, Amazon Linux, Ubuntu, Debian, and SLES for prod, insiders-slow, and insiders-fast channels. Results are exported to an Excel workbook with release details, source URLs, timestamps, status, and errors. The report supports operational release visibility, not endpoint inventory, compatibility validation, or deployment guidance. It includes setup, scheduling via Windows Task Scheduler, validation steps, risks, and timestamp clarification. Foundry IQ with D365F&O and Fabric IQ Team Blog: Azure Architecture Author: Sayanika Published: 09/18/2026 Summary: The article describes building a Microsoft Foundry agent for a retailer using Foundry IQ, Fabric IQ ontology, Web IQ, SharePoint policies, Azure AI Search, and D365 Finance & Operations via ERP MCP. The solution connects customer, store, product, sales event, procurement, inventory, policy, and external market data to answer cross-domain business questions. It helps identify procurement risks affecting promotions, recommend cities for marketing spend, validate country-specific campaign rules, assess supplier or market disruptions, and determine store/event performance. The approach enables proactive, AI-driven decisions by unifying operational, contextual, and real-time external insights. AI Agent ROI Framework Team Blog: Azure Architecture Author: Yagneswari Published: 09/10/2026 Summary: The article presents a practical framework for measuring and maximizing ROI from AI agents. It emphasizes selecting high-impact, measurable use cases; accounting for full costs including infrastructure, development, data, talent, and operations; and evaluating value beyond labor savings through productivity, financial impact, risk reduction, and strategic benefits. It recommends ROI, NPV, and sensitivity analysis for investment decisions, supported by governance models such as AI Centers of Excellence, AI FinOps, and GenAIOps. Continuous dashboards, adoption tracking, and maturity models help organizations optimize AI agents over time and treat AI as a measurable business asset. Azure Delivers Strong MLPerf Inference v6.1 Results with NVIDIA GB300 & GB200 Team Blog: Azure High Performance Computing (HPC) Author: Mark_Gitau Published: 09/16/2026 Summary: Azure reported strong MLPerf Inference v6.1 results for DeepSeek-R1 on NVIDIA GB300 NVL72 and GB200 NVL72 platforms. It submitted rack-scale and cross-rack benchmarks, including GB200 at 18 and 72 nodes and GB300 at 18 nodes. Azure achieved the top reported Interactive score on GB300 and top Server and Offline scores on GB200 at both scales. The results show Azure’s infrastructure can sustain high throughput across latency-sensitive and batch workloads, reflecting the strength of its full AI system stack, including compute, networking, memory, and serving software. Scaling AI Storage: Azure Managed Lustre excels in MLPerf Storage v3.0 Team Blog: Azure High Performance Computing (HPC) Author: wolfgangdesalvador Published: 09/02/2026 Summary: Azure Managed Lustre achieved leading MLPerf Storage v3.0 results among major hyperscalers for AI training and checkpointing. In CLOSED-division tests, it sustained high accelerator utilization across five service tiers and file systems from 40 TiB to 25 PiB, delivering hundreds of GiB/s over five hours. For checkpointing, it reached 642.2 GiB/s write throughput and 489.6 GiB/s recovery throughput across Llama3 model scales up to 1T. The results show Azure Managed Lustre can provide scalable, predictable POSIX storage for large AI workloads while helping reduce accelerator stalls and optimize performance, capacity, and cost. Why long-running tasks on Linux Batch pools can restart daily and how to prevent it Team Blog: Azure PaaS Author: Sithu Published: 09/01/2026 Summary: Long-running tasks on Azure Batch Ubuntu pools may restart daily because Ubuntu’s default unattended-upgrades job installs OS updates and can restart core services such as systemd. This also restarts the Batch node agent, causing Batch to treat the running task lease as lost and re-queue the task from the beginning. It is not a workload bug, Spot eviction, or Batch platform failure. You can confirm via systemd timers, apt logs, and node agent journal logs. To prevent this, disable apt daily timers using a pool start task or custom image, while managing security updates through planned maintenance. Troubleshooting Azure Storage Deletion: Immutability, WORM, and Version Retention Team Blog: Azure PaaS Author: carlosbermudezlopez Published: 09/24/2026 Summary: Azure Storage accounts can become undeletable when immutable storage, WORM retention, legal holds, or version-level immutability protect underlying blobs. Even “empty” containers may contain hidden blob versions, snapshots, or soft-deleted objects that block deletion. Unlocked policies can be removed or changed, but locked policies cannot be bypassed until retention expires. ImmutableStorageWithVersioning cannot be disabled once enabled, and all protected versions must be cleaned up. Reducing version retention triggers Lifecycle Management rules, but cleanup is asynchronous and may take 24–48+ hours. Deletion must follow the order: blobs and versions, containers, then storage account. What’s new in Azure Firewall: Recent innovations Team Blog: Azure Networking Author: devanshirastogi Published: 09/04/2026 Summary: Azure Firewall has introduced five key enhancements to support modern cloud networking. Explicit proxy is now generally available, enabling centralized HTTP/HTTPS egress control without separate proxy infrastructure. IPv6 support is in public preview, helping organizations secure dual-stack and hybrid environments. HTTP header insertion is generally available for enforcing tenant restrictions, compliance, and downstream access controls. Auto-learn SNAT routes is generally available, reducing manual No-SNAT configuration by learning routes via Azure Route Server. Azure Firewall Premium also gains IDPS performance improvements, supporting higher throughput for TLS inspection, Deny mode, and high-bandwidth enterprise workloads. Adding network intelligence into a network-ready Azure migration plan Team Blog: Azure Networking Author: Sudha_Mahajan Published: 09/09/2026 Summary: Azure Migrate is adding Network Planning to make VMware lift-and-shift migrations network-aware. The feature helps teams discover and validate source network resources, map dependencies, assess readiness, recommend Azure networking approaches such as hub-and-spoke, NSGs, Azure Firewall, load balancing, and WAF, and include network costs in business cases. It aims to reduce migration risk by connecting application, security, networking, and migration stakeholders around shared evidence. The preview focuses on practical lift-and-shift planning, not advanced modernization or automation, helping customers and partners build more complete, costed, network-ready migration plans. Microsoft Azure Virtual Desktop Hybrid is now generally available Team Blog: Azure Virtual Desktop Author: Steve_Downs Published: 09/01/2026 Summary: Microsoft announced general availability of Azure Virtual Desktop Hybrid, enabling organizations to run Azure Virtual Desktop session hosts on-premises or at the edge using existing hardware and hypervisors such as VMware vSphere, Nutanix AHV, and Hyper-V. Connected through Azure Arc, session hosts are managed from Azure while desktops and apps are delivered via the Azure Virtual Desktop cloud service over outbound HTTPS. The offering supports phased cloud migration, compliance and cost constraints, and existing infrastructure investments. It uses per-user pricing, with infrastructure costs remaining on-premises. Microsoft also highlights partner support and Windows 365 Reserve for resilience. Now generally available: Regional resiliency for Azure Virtual Desktop Team Blog: Azure Virtual Desktop Author: Vidya_Iyer Published: 09/30/2026 Summary: Microsoft announced general availability of regional host pools for Azure Virtual Desktop in East US 2 and Central US. This new deployment type stores host pool metadata in the selected Azure region, reducing cross-region dependencies and improving resiliency by containing outages to a single region. Regional host pools preserve local replicas and paired-region failover where applicable. They can be created via Azure portal or PowerShell and must be used with regional workspaces, app groups, and App Attach packages. Microsoft recommends using regional host pools for new deployments in supported regions, with migration support for existing host pools coming later. Generally Available: Certificate Management for Azure Arc-enabled Kubernetes Team Blog: Azure Arc Author: NicolasMondada Published: 09/01/2026 Summary: Microsoft has announced general availability of Certificate Management for Azure Arc-enabled Kubernetes. The new Microsoft-supported Arc extension bundles cert-manager and trust-manager to automate TLS certificate issuance, renewal, rotation, and trusted CA distribution across edge Kubernetes fleets. It supports self-signed CAs for development and enterprise CA issuers for production, reducing operational overhead and security risk. GA adds production support, offline functionality during Azure disconnection, broad regional and Kubernetes distribution coverage, and ARM64 support. Existing preview users can update to the latest version without configuration changes. Episode 2: Reduce restarts with Hotpatch for Windows Server 2025 | The Azure Arc Check-In Team Blog: Azure Arc Author: Mason_Torres Published: 09/30/2026 Summary: Hotpatch for Azure Arc-enabled Windows Server 2025 helps reduce restart-driven maintenance by applying eligible security updates in memory without rebooting. It is available at no extra charge for qualifying Standard or Datacenter servers connected to Azure Arc and meeting prerequisites such as VBS/Virtual Secure Mode, UEFI Secure Boot, supported builds, and GA releases. Enrollment is done through the Azure portal, but updates are still managed separately through tools like Windows Update or Azure Update Manager. Hotpatch does not eliminate restarts: quarterly baseline updates, unplanned baselines, and non-Hotpatch updates such as .NET, drivers, and firmware may still require rebooting. Microsoft Intune Settings Catalog updated to support Windows 11, version 26H2 Team Blog: Intune Customer Success Author: Intune_Support_Team Published: 09/29/2026 Summary: Microsoft Intune now supports Windows 11, version 26H2 in the Settings Catalog, including day-zero support for validated Windows policy settings and updates to existing settings. New manageable areas include lock screen audio, MSIX allowed zones, password policies, printer driver ranking, privacy controls, and Windows Update pause/group policy settings. Administrators can configure these via the Intune admin center and should review, test, confirm compatibility, and monitor deployments. The Windows 11 26H2 security baseline is also now available, adding updated recommendations for printer driver ranking, TLS encryption support, and future NetBIOS settings. Moving from Windows Autopilot to Windows Autopilot device preparation Team Blog: Intune Customer Success Author: Intune_Support_Team Published: 09/16/2026 Summary: Microsoft recommends moving eligible user-driven Windows 11 Microsoft Entra join deployments from Windows Autopilot to Windows Autopilot device preparation. The new model simplifies provisioning through unified device preparation policies, enrollment time grouping, clearer OOBE progress, and better reporting. Organizations should transition in phases, keeping unsupported scenarios—like pre-provisioning, self-deploying, hybrid join, and co-management—on Windows Autopilot. The article outlines an eight-step migration approach: define eligible populations, design groups, map policies, assess device association, pilot, expand in waves, and retire old flows only after validation. Existing devices can be pre-associated without disruption until their next reset. Automating Compliance Scope Enforcement with Azure Policy Team Blog: Azure Governance and Management Author: gurjsing Published: 09/01/2026 Summary: The article explains how to enforce Azure compliance scope using Azure Policy, using Microsoft’s C5 certification as an example. It stresses that certifications cover only specific Azure services, not the whole platform, and customers remain responsible for implementation controls. The proposed process identifies the authoritative compliance document, extracts service-scope data into JSON/CSV, chooses allow-list or deny-list enforcement, maps services to ARM resource types, and deploys parameterized Azure Policy rules. Automation via GitHub workflows keeps scope data current, opens reviewed pull requests, and redeploys approved policy updates, turning compliance into repeatable “compliance as code.” Public Preview Annoucement: Azure Policy Custom Policy Versioning! Team Blog: Azure Governance and Management Author: stevenbucher Published: 09/14/2026 Summary: Azure Policy custom policy versioning is now in public preview, allowing custom definitions and initiatives to store multiple versions under one definition ID. Existing policies are backfilled to version 1.0.0. Users can create higher versions, pin assignments to major or minor versions, roll back by changing assignment references, and view version history and compliance by version. Versioning is supported in the portal, CLI, PowerShell, and REST APIs. Patch pinning is not supported, and preview limits each custom definition or initiative to four versions. Resource Provider modes and custom version overrides are not yet supported. This Cybersecurity Awareness Month, build skills to secure the future Team Blog: Microsoft Learn Author: philevans Published: 09/29/2026 Summary: Microsoft is marking Cybersecurity Awareness Month with role-based learning, events, challenges, and credentials to help people build practical security skills for an AI-powered future. Offerings include curated playlists for security, IT, developer, data, business, executive, and student audiences; the Defend the Tenant Challenge in a Microsoft 365 environment; and Cyber Genius hands-on training with Microsoft security tools. Participants can also watch “Ask a Cybersecurity Pro,” attend free global events, join the Microsoft Cybersecurity Pros community, and pursue Applied Skills or certifications to strengthen security habits, technical expertise, and organizational resilience. Skill vs. will: What leaders must solve for AI adoption Team Blog: Microsoft Learn Author: WilliamNations Published: 09/30/2026 Summary: AI adoption requires more than tool access and training. Leaders must diagnose whether barriers stem from skill gaps, employee willingness, or organizational systems. Research cited by Microsoft shows culture, manager support, and talent practices influence AI impact more than individual skill alone. Effective adoption starts with a priority workflow, role-based practice, clear responsible-use boundaries, manager modeling, aligned incentives, and outcome measurement. Hesitation may reflect unclear processes, weak governance, lack of psychological safety, or poor workflow design—not resistance. Leaders should remove system barriers and build practical capability tied to real business problems. Bring Azure AI to your private workloads on Azure VMware Solution Team Blog: Azure Migration and Modernization Author: rvandenbedem Published: 09/15/2026 Summary: The article explains how to make private Azure VMware Solution workloads accessible to Azure AI without moving data or re-platforming. It proposes using Azure AI Foundry managed agents connected through lightweight Model Context Protocol (MCP) servers running on VNet-integrated Azure Container Apps, with private ExpressRoute connectivity to VMware workloads. A SQL example shows read-only querying across two private databases using managed identity, Key Vault, and strict governance controls. The pattern can extend to file shares, APIs, NoSQL, and legacy systems, enabling secure, repeatable AI access to private enterprise data in place.Check This Out! (CTO!) Guide (September 2026)
Member: TysonPaul | Microsoft Community Hub Retirement of Microsoft HPC Pack Team Blog: Azure High Performance Computing (HPC) Author: XinXin Published: 08/25/2026 Summary: Microsoft HPC Pack, a Windows-based HPC scheduler, will be retired, with support ending August 27, 2027. No new updates, features, or enhancements will be provided after this date, and only limited security support is available during the retirement period. Customers are advised to migrate to Azure Batch or other Azure services for HPC workloads. Existing deployments will not be forcibly disabled but will be unsupported after the retirement date. Microsoft encourages early migration planning and feedback to facilitate a smooth transition and address customer concerns. Azure DNS + Traffic Manager linked records Team Blog: Azure Networking Author: atiy Published: 08/26/2026 Summary: Azure DNS Traffic Manager linked records allow direct, managed integration between Azure DNS and Traffic Manager profiles, enabling endpoint IP addresses to be returned without an intermediate CNAME. This improves DNS responses, supports zone-apex routing, and enhances DNSSEC compatibility while preserving Traffic Manager’s routing intelligence, health monitoring, and failover. The article provides a practical guide for configuring, validating, and testing this feature, currently in public preview, using a multi-region Contoso scenario. The feature simplifies DNS architecture and client experience, making global routing more seamless and secure, especially for root domains. Azure Virtual Network routing appliance is now generally available Team Blog: Azure Networking Author: Anshu_Verma Published: 08/04/2026 Summary: Azure Virtual Network routing appliance is now generally available, offering a managed, platform-native routing service for high-performance connectivity across Azure virtual networks. Designed for modern cloud demands—including AI, private connectivity, IPv6 adoption, and multi-region architectures—it enables scalable hub-and-spoke and private network models, simplifies operations, and supports both IPv4 and IPv6. With built-in resiliency, Azure-native management, configurable bandwidth, and integrated monitoring, it helps organizations build large-scale, efficient, and innovative network infrastructures, accelerating cloud and AI initiatives while reducing operational complexity. Introducing the new Microsoft 365 Setup experience: A personalized dashboard for admins Team Blog: FastTrack Author: johnvincent Published: 08/31/2026 Summary: Microsoft is launching a redesigned Microsoft 365 Setup experience for admins, featuring a personalized dashboard that centralizes deployment progress, onboarding, licensing, and readiness insights. The new setup offers tailored recommendations, direct product configuration, and easy access to guides and support, streamlining the deployment process. Admins can now spend less time searching and more time taking action, with integrated training, migration resources, and FastTrack support. This update aims to simplify Microsoft 365 deployments, making them more intuitive and efficient, with future enhancements planned based on admin feedback, including AI-powered insights and assistance. Building a Fully Automated Azure Landing Zone Deployment Using Azure DevOps and Terraform Team Blog: Azure Tools Author: Rajasekharvemula Published: 08/18/2026 Summary: The article explains how to build a fully automated Azure Landing Zone using Azure DevOps and Terraform. It outlines best practices for deploying standardized cloud environments, including structured Git workflows, automated CI pipelines, environment promotion strategies, governance integration, identity and access management, and monitoring. Storing Terraform state in Azure Storage ensures collaboration and recovery. Automation from the start enables consistent, secure, and auditable cloud foundations, reducing operational effort and improving compliance. Combining Azure DevOps and Terraform transforms cloud deployment into a scalable, governed, and enterprise-ready platform engineering practice. Cost Management with Azure Resource Manager MCP Team Blog: FinOps Author: demiajayi Published: 08/25/2026 Summary: Microsoft has announced new Cost Management features in Azure Resource Manager MCP, providing default tools for AI agents to integrate cost insights into Azure workflows. These tools help with cost estimation, budget tracking, and identifying savings opportunities, while optional advanced tools enable deeper analysis, forecasting, and optimization. AI agents can query costs, analyze AKS workloads, and recommend savings, streamlining financial decision-making in cloud operations. Installation and configuration details are provided for VS Code and GitHub Copilot. Microsoft plans to expand agentic cost capabilities and invites user feedback on the new tools. Who Ordered All These Tokens? Giving AI Spend a Name in FOCUS Team Blog: FinOps Author: Dirk_Brinkmann Published: 08/19/2026 Summary: The article discusses the challenge of accurately attributing AI-related costs, such as Copilot and agent spend, within enterprise billing systems. Existing cost reports scatter AI expenses across ambiguous categories, making analysis difficult. The proposed solution is to create a custom “meter map” that classifies each billing meter into meaningful attributes (like token type, provider, Copilot, or agent). This enables clear reporting and chargeback, aligning spend with business questions. The approach is flexible, ongoing, and requires ownership, but solves the gap until vendor-neutral standards evolve further. Zonal Resiliency in Azure: Application-Centric Goals, Recovery Plans, and Drills Team Blog: ITOps Talk Author: Pierre_Roman Published: 08/06/2026 Summary: The article introduces “Resiliency in Azure” (formerly Azure Business Continuity Center), a unified platform for managing and validating zonal resiliency at the application level across IaaS, PaaS, and shared services. Key features include application-centric recovery plans, tailored Azure Advisor recommendations, Copilot-guided remediation, and automated zone-down drills via Azure Chaos Studio. This approach streamlines resiliency management, supports compliance, and enables realistic failover testing, reducing manual effort and uncertainty. While not all services are supported and costs may vary, it offers a significant improvement in visibility, confidence, and operational readiness for Azure applications. Operating Azure Backup at Scale: Day-2 Excellence for IaaS, PaaS, and Storage Workloads Team Blog: ITOps Talk Author: Pierre_Roman Published: 08/11/2026 Summary: The article summarizes advancements in Azure Backup, highlighting its unified, application-centric approach for protecting IaaS, PaaS, AKS, PostgreSQL, and storage workloads. Key features include a single vault model, built-in cyber resiliency with immutability and multi-user authorization, threat detection, agentless backups, and conversational configuration via VS Code. Azure Backup offers granular restores, compliance-friendly retention tiers, and robust protection against ransomware. Real-world scenarios and actionable steps demonstrate improved operational efficiency, security, and reliability for IT professionals managing large-scale Azure environments. Expanding the Azure Local Security Ecosystem with IBM QRadar and Splunk Team Blog: Azure Arc Author: Ariel Netz Published: 08/07/2026 Summary: Microsoft has announced new integrations for Azure Local with IBM QRadar and Splunk, enabling organizations in regulated and sovereign environments to incorporate Azure Local security signals into their existing security operations platforms. This enhances monitoring, investigation, and compliance while preserving established tools and processes. Azure Local’s built-in security controls and audit logs now work seamlessly with these partner solutions, supporting flexible and resilient security operations. Microsoft is also working to expand its security ecosystem with additional partners in areas like endpoint detection, vulnerability management, and container security for Azure Local and Sovereign Private Cloud deployments. Episode 1: Onboarding Azure Arc at Scale | The Azure Arc Check-In Team Blog: Azure Arc Author: Mason_Torres Published: 08/18/2026 Summary: Episode 1 of The Azure Arc Check-In discusses strategies for onboarding large fleets of Windows and Linux servers to Azure Arc at scale. It emphasizes automation and non-interactive authentication to minimize manual effort and errors. For Linux servers, Ansible with managed identity streamlines agent deployment, while Windows servers can be onboarded using Active Directory Group Policy. The episode provides step-by-step guidance for both approaches, highlighting the importance of aligning onboarding methods with existing management tools and enabling consistent configuration and governance from day one. Announcing General Availability of Disable Multithreading and Configurable Constrained Cores Team Blog: Azure Compute Author: misha-bansal Published: 08/19/2026 Summary: Microsoft Azure has launched two new features: Disable Simultaneous Multithreading/Hyper-Threading (SMT/HT Off) and Configurable Constrained Cores. These allow customers to optimize VM performance and reduce software licensing costs by customizing vCPU configurations and disabling SMT/HT for improved performance and latency. Users can select specific vCPU counts without altering memory or storage, aiding compliance and cost efficiency. The features are available in all Azure regions, with no changes to VM pricing, and help customers tailor compute resources to their workloads, maintaining performance while controlling costs. The OpenVMM Project Team Blog: Windows OS Platform Author: Caroline_Perezvargas Published: 08/17/2026 Summary: OpenVMM is an open-source, cross-platform Virtual Machine Manager (VMM) written in Rust and released under the MIT license. It offers broad support for multiple architectures, host operating systems, and virtualization backends, and features a modular, flexible design. Since becoming open source in 2024, OpenVMM has grown with contributions from major industry partners, expanding device emulation, testing infrastructure, and confidential computing capabilities. Its modern security architecture leverages Rust, process sandboxing, and user-mode virtualization. OpenVMM is used in various environments, including Azure, and aims to provide secure, high-performance virtualization for diverse workloads. Azure Managed Redis Deployment Automation Team Blog: Azure PaaS Author: LuisFilipe Published: 08/21/2026 Summary: The article introduces a PowerShell script for automating Azure Managed Redis (AMR) deployments, especially when facing regional capacity restrictions. The script retries cache creation at random intervals, cycling through specified SKUs and configurations, and cleans up failed resources before each attempt. It supports geo-replication, clustering, high availability, and custom eviction policies. Authentication, logging, and parameter validation are included. The script is provided as-is, without support or guarantees, and users are advised to test before production use due to potential costs and risks. Tracking Batch node state and duration in Log Analytics Team Blog: Azure PaaS Author: Ahmed_Khaled Published: 08/25/2026 Summary: The article addresses gaps in Azure Batch node monitoring, such as identifying nodes stuck in certain states and automating alerts. Since Azure Monitor lacks per-node granularity, the proposed solution uses a Python script to poll Batch REST API and ingest node-level data into Log Analytics. Custom KQL queries and alerts enable precise tracking of node state, duration, and errors. The solution supports dashboards, automated remediation, and actionable alerts, and can be deployed via Azure Functions, Container Apps, or VMs. It enhances monitoring without replacing built-in metrics, providing detailed, per-node visibility for customers. Beyond Deployment: What It Really Takes to Run GitHub Actions Runners on AKS Team Blog: Azure Infrastructure Author: aparnabadireddigari Published: 08/17/2026 Summary: Deploying GitHub Actions runners on Azure Kubernetes Service (AKS) with Actions Runner Controller (ARC) is straightforward, but running it as a production platform requires much more. Key challenges involve managing authentication, network dependencies, workload isolation, image lifecycle, and observability. Production readiness demands clear ownership, validated connectivity, strong operational practices, and reliable monitoring. Naming conventions and image management become platform contracts. Ultimately, success depends on operational excellence, governance, and ownership—moving beyond a working deployment to a mature, dependable platform that reliably supports multiple teams and business-critical workflows. Azure Copilot Introduces Direct Access to Agents Team Blog: Azure Infrastructure Author: artigulwadi Published: 08/18/2026 Summary: Azure Copilot now offers direct access to specialized agents for troubleshooting, deployment, optimization, and resiliency, allowing cloud operations teams to quickly engage relevant expertise. This update streamlines workflows by matching tasks with purpose-built agents, enhancing efficiency and tailored guidance. Administrators can manage agent availability flexibly, enabling incremental adoption and better governance. Pricing remains unchanged, with most agents available at no extra cost. This evolution supports agentic cloud operations, empowering teams to operate more effectively across application and infrastructure lifecycles, with future enhancements and administrative controls expected. Accelerate Inference on AKS with Azure Blob Storage and NVIDIA Dynamo Team Blog: Azure Storage Author: Vishnu Charan TJ Published: 08/11/2026 Summary: The article details how integrating Azure Blob Storage with NVIDIA’s Dynamo stack accelerates AI inference on Azure Kubernetes Service (AKS). By using Dynamo ModelExpress and Run:ai Model Streamer, model weights are loaded up to 7.3x faster, reducing cold start latency by up to 4.6x. Offloading KV cache via NIXL to Blob Storage further lowers time-to-first-token latency by 2.8x and optimizes GPU memory use. These enhancements enable faster scaling, operational simplicity, and improved reliability for large AI models, streamlining inference workflows on AKS. Unified AI Defense: Security Copilot, Project Perception, and MDASH Team Blog: Core Infrastructure and Security Author: edgarus71 Published: 08/24/2026 Summary: The article outlines Microsoft’s unified AI security platform, comprising Security Copilot, Project Perception, and MDASH. Security Copilot assists security analysts via AI-driven workflows and investigations. Project Perception orchestrates multi-agent defense, coordinating Red, Blue, and Green agents to proactively identify, validate, and remediate threats. MDASH specializes in code vulnerability discovery, validation, and remediation guidance, feeding findings into broader defense workflows. Each tool serves distinct roles—analyst assistance, coordinated defense, and deep application security—but together provide a comprehensive, layered AI security solution with human oversight and governance. AI Skills Navigator is now available in Microsoft Copilot Team Blog: Microsoft Learn Author: MattErni Published: 08/27/2026 Summary: Microsoft has integrated AI Skills Navigator into Copilot's Learning Agent, enabling users to ask questions and receive personalized AI skill recommendations directly in their workflow. This new feature tailors training, learning paths, and credentials to individual roles and goals, streamlining skill development for both individuals and organizations. Progress is tracked automatically, and learning resources from various platforms are accessible within Copilot. This integration helps connect real work tasks to relevant learning opportunities, making AI upskilling more efficient and accessible across organizations. From GPO to Microsoft Intune: A practical guide to cloud-first policy management Team Blog: Intune Customer Success Author: Intune_Support_Team Published: 08/31/2026 Summary: The article offers a practical guide for organizations transitioning from Group Policy Objects (GPOs) to Microsoft Intune for cloud-first policy management. It outlines three migration paths—starting fresh for cloud-native devices, selectively transitioning necessary settings, or coordinating GPO and Intune for hybrid environments. Key recommendations include assessing and rationalizing existing policies, avoiding direct lift-and-shift, leveraging security baselines, piloting changes, and coordinating targeting to prevent conflicts. The guide stresses the importance of tailoring management strategies to device populations and business needs, ensuring a streamlined, secure, and efficient move to modern policy management. Introducing device association for Windows Autopilot device preparation Team Blog: Intune Customer Success Author: Intune_Support_Team Published: 08/27/2026 Summary: Device association for Windows Autopilot device preparation enables organizations to securely bind Windows 11 devices to their tenant before enrollment, using hardware-backed attestation. This ensures devices are recognized as corporate-owned, allowing IT admins to apply targeted policies and configurations early, streamlining the out-of-box experience for users. The association persists through resets and reinstallation, supporting consistent lifecycle management. Device association integrates with existing Autopilot strategies, offering improved security, predictability, and a device-centric onboarding process, while simplifying setup for employees and enhancing control for IT teams. From Features to Flow: How Real-World Adoption Reshaped the Azure Architecture Diagram Builder Team Blog: Azure Architecture Author: arturoqu Published: 08/13/2026 Summary: The article discusses how real-world adoption of the open-source Azure Architecture Diagram Builder led to a shift from feature-focused development to a guided, four-stage workflow: Create, Refine, Validate & Improve, and Share or Build. User feedback revealed the importance of preserving human edits, improving diagram integrity, and ensuring validation continuity. Adoption data showed users required more than simple diagram generation—they needed iterative refinement, validation, and artifact export. The product now emphasizes workflow coherence, human judgment, and clear boundaries between logical and physical architecture, while maintaining privacy-safe feedback and ongoing open-source development. Choosing the Right Agent in Microsoft Foundry Team Blog: Azure Architecture Author: supriyas Published: 08/19/2026 Summary: The article discusses how to choose between Prompt Agents and Hosted Agents in Microsoft Foundry Agent Service. Prompt Agents are simpler, managed by Foundry, and suitable for straightforward tasks with clear instructions. Hosted Agents offer greater control, supporting complex workflows, custom code, and orchestration logic, but require more engineering responsibility. The key decision factor is runtime control—teams should start with Prompt Agents and switch to Hosted Agents only when customization or advanced orchestration is needed. Identifying runtime requirements clarifies which agent type is appropriate, minimizing risk and operational overhead. [Now Generally Available] What-If for Azure Deployment Stacks Team Blog: Azure Governance and Management Author: torreyt Published: 08/18/2026 Summary: Azure’s Stacks What-if feature is now generally available, providing detailed previews of changes before deploying Azure Deployment Stacks. It shows resource-level actions (create, modify, delete, detach), filters out false positives, and stores results as retrievable resources for use in CI pipelines. This enables safer updates by clarifying impacts, especially deletions or detachments, and supports review and approval workflows. Available across all regions and scopes via CLI, PowerShell, and SDKs, Stacks What-if addresses a top user request by enhancing deployment stack transparency and reliability.Check This Out! (CTO!) Guide (August 2026)
Member: TysonPaul | Microsoft Community Hub Enhanced host pool management for Azure Virtual Desktop is now generally available Team Blog: Azure Virtual Desktop Author: NeoCai Published: 07/09/2026 Summary: Azure Virtual Desktop has introduced enhanced host pool management, now generally available, featuring session host configuration and update, dynamic autoscale, and ephemeral OS disks. These improvements streamline management, reduce operational overhead, and support secure, reliable, and scalable virtual environments. Session host configuration enables centralized settings and easy updates, ephemeral OS disks improve performance and rapid refresh for stateless workloads, and dynamic autoscale optimizes resource allocation and cost efficiency based on demand. Administrators can easily configure these features through the Azure portal for more efficient and consistent host pool management. How SCBX built AI literacy at scale and made AI part of daily work Team Blog: Microsoft Learn Author: ToddMinor Published: 07/30/2026 Summary: SCBX partnered with Trainocate and Microsoft to boost AI literacy and embed AI in daily work across thousands of employees. Through a phased, role-based training approach—combining foundational learning, practical application, and advanced technical tracks—SCBX ensured adoption at scale while maintaining governance standards. Over 15,000 participants engaged, with measurable gains in productivity and satisfaction as teams automated repetitive tasks and applied AI in their roles. SCBX’s experience highlights the value of structured, outcome-focused skilling to drive AI readiness and business transformation across a regulated enterprise. New Microsoft 365 Certified: AI Services Administrator Associate Certification Team Blog: Microsoft Learn Author: LibertyMunson Published: 07/28/2026 Summary: Microsoft has launched the Microsoft 365 Certified: AI Services Administrator Associate certification, validating skills to configure, manage, secure, and optimize Microsoft 365 and AI services like Copilot at enterprise scale. Candidates must pass Exam AB-650 (beta), which is discounted 80% for the first 300 test-takers before August 18, 2026, using code AB-650SkyClub. The certification is designed for experienced Microsoft 365 administrators with knowledge of Entra ID, Defender XDR, and Microsoft Graph PowerShell. Preparation resources and exam details are available online, with general availability expected in October 2026. Hunting Local AI Tools on macOS with Microsoft Defender for Endpoint Team Blog: Core Infrastructure and Security Author: Vytas_Boyev Published: 07/14/2026 Summary: The article discusses emerging security challenges as developers increasingly run AI tools locally on macOS, expanding the attack surface for organizations. It outlines how Microsoft Defender for Endpoint (MDE) can detect and inventory local AI agents, such as Ollama and OpenClaw, using advanced KQL queries for process, file, and network telemetry. Recommendations include establishing a baseline inventory, monitoring new AI tool usage, skill file changes, suspicious behaviors, and external network connections. The article emphasizes a layered, tuned detection strategy, practical limitations, and the importance of visibility over default blocking to manage AI risks effectively. Azure Database Security Newsletter - July 2026 Team Blog: Core Infrastructure and Security Author: PieterVanhove Published: 07/07/2026 Summary: **Summary:** The July 2026 Azure Database Security Newsletter highlights the evolving impact of AI agents on database security, emphasizing identity-first access, least privilege, data-aware protection, and continuous monitoring. Key updates include support for AES keys in Transparent Data Encryption, Microsoft Entra server principals for Azure SQL Database, cross-tenant key management for PostgreSQL, and Defender security posture assessments. Best practices urge secure-by-default configurations, data classification, and ongoing vulnerability assessments. The newsletter also features recent blogs, events, and calls to review agent access as AI-driven workloads increase, stressing proactive database security adaptation. Agent governance is organizational readiness Team Blog: FastTrack Author: AuzinAhmadi Published: 07/30/2026 Summary: The article emphasizes that effective agent governance is essential for scaling AI in healthcare organizations. It argues that success depends less on technology and more on readiness—specifically, whether governance structures ensure agents fit clinical workflows, assign clear accountability, manage risk, and secure stakeholder trust. A governance triad (IT, Legal, Business) is needed to vet, approve, and monitor agents before deployment. A checklist ensures readiness by confirming ownership, data access, measurable outcomes, and shutdown conditions. Ultimately, strong governance—not just technical capability—determines whether AI agents are safely and successfully integrated into healthcare operations. Understanding Copilot Risk: Mapping Exposure Across Zero Trust Pillars Team Blog: FastTrack Author: AuzinAhmadi Published: 07/06/2026 Summary: The article examines Microsoft 365 Copilot’s impact on organizational data security, highlighting how Copilot accelerates data discovery based on existing user permissions. It maps Copilot-related risks across four Zero Trust pillars—identity, endpoints, apps, and data—emphasizing the importance of access governance, permission hygiene, and data protection. Copilot doesn’t grant new access but amplifies the exposure of overshared or poorly governed content. Organizations should assess who can access Copilot and what data it surfaces, using Zero Trust strategies to identify and mitigate risks before scaling deployments. Azure Arc Server June Forum Team Blog: Azure Arc Author: Aurnov_Chattopadhyay Published: 07/29/2026 Summary: The June 2026 Azure Arc Server Forum covered updates on Arc Server AI Agent integration, new multicloud connectors for GCP and EKS clusters, and ESU timelines for Windows Server 2016 and SQL Server 2016. Attendees received guidance on enrollment and licensing, and were informed about upcoming end-of-support dates. The forum will pause for July and August, resuming in September. Leadership of the community calls is transitioning to Mason Torres, Yunis Hussein, and Meagan McCrory. Registration and agent release notes are available online. Plan for Upcoming Changes to Extended Security Updates on Azure Local Team Blog: Azure Arc Author: sydbruck Published: 07/09/2026 Summary: Starting April 1, 2026, Microsoft will implement a uniform pricing model for Extended Security Updates (ESU) for SQL Server and Windows products, regardless of deployment location or purchasing channel. This affects new ESU offerings, such as Windows 10 Enterprise LTSB 2016 and Windows Server 2016, but not existing ESUs. Customers are encouraged to upgrade to newer versions before end of support; further ESU pricing and availability details will be announced. Existing ESUs remain free on Azure Local via Azure Verification for VMs. Beyond the Canvas: The Azure Architecture Diagram Builder Becomes Agent-Ready Team Blog: Azure Architecture Author: arturoqu Published: 07/10/2026 Summary: The Azure Architecture Diagram Builder has evolved from a click-based app to an agent-ready platform. Key updates include Architecture Chat for iterative, conversational design, Blueprint Diagrams for whiteboard-style visuals, and support for 14 AI models. The tool now operates as a Model Context Protocol (MCP) server, enabling agents to generate, validate, estimate costs, and render Azure architectures programmatically. Enhancements include deployment guides grounded in Microsoft Learn, cost badges, theme options, and metadata panels. The platform remains open-source, offering evidence-based model comparison and integration for both human users and AI agents. Skill or Sub-Agent. Choosing AI Capabilities You Will Actually Reuse Team Blog: Azure Architecture Author: KishoreKumarPattabiraman Published: 07/30/2026 Summary: The article advises cloud architects and engineering leaders to prioritize choosing the right AI capability shape—skill or sub-agent—over model selection. Skills are iterative, voice-driven, and require ongoing human involvement, ideal for craft and subjective tasks. Sub-agents handle structured, repeatable work with one-off outputs and minimal human gating. The recommended approach is to match the capability to the work's nature, sometimes combining both, to maximize reuse and effectiveness. Teams should assess iteration, output, blast radius, and frequency before building, avoiding the mistake of forcing all tasks into a single delivery shape. Introducing Kubernetes-Native Policy Validation with CEL and VAP in Azure Policy Team Blog: Azure Governance and Management Author: stevenbucher Published: 07/23/2026 Summary: Azure Policy for Kubernetes now supports Kubernetes-native policy validation using Common Expression Language (CEL) and Validating Admission Policy (VAP) with Gatekeeper integration. This enables faster, in-process policy enforcement directly in the Kubernetes API server, improving reliability and latency over previous OPA Rego-based webhook methods. Users write CEL constraint templates, package them as Azure Policy definitions, and deploy them for governance, audit, and enforcement. This approach enhances compliance tracking and centralized management for AKS clusters running Kubernetes v1.30+, combining native validation logic with Azure Policy’s robust governance capabilities. Introducing Compliance Substate for Azure Policy Exemptions! Team Blog: Azure Governance and Management Author: stevenbucher Published: 07/28/2026 Summary: Azure Policy now introduces a compliance substate for exempted resources, revealing their underlying compliance status even when exemptions are applied. Previously, exemptions hid whether a resource was compliant or not, making audits difficult. Now, resources show "Exempt" plus a substate ("Compliant" or "Non-compliant"), enabling easier exemption management and cleanup. The compliance substate can be viewed in the Azure Policy blade, added as a column, and queried across subscriptions using Azure Resource Graph, improving governance visibility and confidence in policy enforcement. Reservation exchanges for Azure services covered by savings plans end starting Feb. 1, 2027 Team Blog: FinOps Author: kyleikeda Published: 07/30/2026 Summary: Starting February 1, 2027, Azure reservation exchanges will no longer be available for services covered by savings plans, aligning policies for greater clarity. Impacted services include several compute and database offerings. Existing reservations purchased before this date retain one final exchange right. Reservations remain available for stable workloads, while savings plans offer flexibility for dynamic needs. Instance size flexibility and cancellation policies are unchanged. Customers should review their reservation portfolios and consider savings plans for future flexibility. Policy details may evolve as savings plan coverage expands. Introducing Cost Management and Pricing Toolsets in Azure Resource Manager MCP Server Team Blog: FinOps Author: demiajayi Published: 07/29/2026 Summary: Microsoft has integrated Cost Management and Pricing toolsets into Azure Resource Manager MCP, allowing AI agents to access and analyze Azure cost, pricing, budget, and optimization data directly within cloud workflows. This enables users to estimate costs before deployment, track and explain spending, manage budgets, identify savings, and analyze AKS workloads without switching tools. The release provides APIs for querying costs, managing budgets, reviewing savings opportunities, and retrieving pricing details, making cloud operations more cost-aware and efficient. Installation requires VS Code, an Azure account, and specific configuration steps. Future enhancements and feedback opportunities are planned. From hours to minutes: Rethinking Microsoft Intune compliance reporting with the Export API Team Blog: Intune Customer Success Author: Intune_Support_Team Published: 07/24/2026 Summary: The article explains how Microsoft Intune’s Export API dramatically improves compliance reporting for large device fleets. By replacing thousands of per-device Graph API calls with a single bulk export, reporting jobs drop from ~100,000 calls and 2.5 hours runtime to ~15 calls and 15 minutes. The Export API delivers identical data in one file, simplifying maintenance, reducing failure points, and enabling scalability without downstream changes. It’s ideal for scheduled, bulk reports, while traditional endpoints remain best for real-time, single-device queries. Overall, the Export API offers faster, more reliable, and scalable compliance reporting. Build a patch strategy for today’s threat pace with Microsoft Team Blog: Intune Customer Success Author: Intune_Support_Team Published: 07/09/2026 Summary: Microsoft outlines a modern patch strategy to address today’s fast-paced threat landscape, leveraging AI and integrated tools like Intune and Microsoft Defender. The approach focuses on three stages: automating updates for quick mitigation, prioritizing remediation based on risk and exposure, and enforcing compliance to contain unpatched vulnerabilities. Intune centralizes management for Windows, Apple, and Android devices, supporting automated updates, risk assessment dashboards, and compliance controls. This operational discipline helps organizations reduce risk, accelerate response times, and maintain secure, up-to-date endpoints across diverse device fleets. Licensing requirements for advanced features vary by Microsoft 365 subscription. Azure Elastic SAN: Pooled, Cloud-Native Block Storage That Actually Acts Like a SAN Team Blog: ITOps Talk Author: Pierre_Roman Published: 07/17/2026 Summary: Azure Elastic SAN is Azure’s fully managed, cloud-native SAN storage, offering pooled block storage accessible via iSCSI. It enables IT pros to provision combined capacity and performance, dynamically sharing resources across multiple workloads, reducing over-provisioning and costs. Supporting up to petabyte-scale, millions of IOPS, and high throughput, Elastic SAN integrates with Azure VMs, Kubernetes, VMware, and container storage. It provides familiar SAN resource hierarchy, network isolation, encryption, snapshots, and cost-effective scaling. Best suited for consolidating many IO-intensive workloads, Elastic SAN delivers significant TCO savings and simplifies migration from on-prem SANs. Premium SSD v2 and Instant Access Snapshots: A Better, Faster, Cheaper Disk for Your Azure VMs Team Blog: ITOps Talk Author: Pierre_Roman Published: 07/20/2026 Summary: Premium SSD v2 (PV2) for Azure VMs offers significant improvements over Premium SSD v1, delivering up to 4x more IOPS, 2x more throughput, and 42% lower costs. Key features include independent scaling of capacity, IOPS, and throughput, sub-millisecond latency, and live resizing without VM downtime. Instant Access Snapshots enable near-instant restores and faster, lower-latency hydration. PV2 is ideal for I/O-intensive workloads like SQL, SAP, and analytics, and supports efficient scaling, rapid recovery, and cost optimization. However, it cannot be used as an OS disk or with host caching. Microsoft Discovery: Where HPC meets agentic AI for the next era of EDA Team Blog: Azure High Performance Computing (HPC) Author: richpaw Published: 07/21/2026 Summary: Microsoft Discovery is an enterprise agentic AI platform designed to enhance electronic design automation (EDA) by combining high-performance computing (HPC) with intelligent orchestration. Built on Azure, it coordinates specialized AI agents to reason, plan, execute, and learn across complex engineering workflows, optimizing tasks such as simulation, analysis, and documentation. Discovery integrates seamlessly with Azure HPC, storage, and automation tools, enabling hybrid workflows and improving engineering productivity. Its human-in-the-loop approach ensures transparency and validation through established EDA practices, allowing engineers to focus on creative problem-solving while repetitive tasks are automated. Connecting Microsoft Discovery App to Azure HPC with Azure NetApp Files and CycleCloud Team Blog: Azure High Performance Computing (HPC) Author: richpaw Published: 07/21/2026 Summary: The article outlines how to integrate Microsoft Discovery, an AI platform for R&D, with traditional Azure HPC environments using Azure NetApp Files and CycleCloud. By running Discovery on a Windows VM within the Azure network, mapping shared storage, and utilizing SSH for job submission, users can bridge AI-native and HPC workflows. This enables Discovery agents to manage files, submit jobs, and interact securely with HPC clusters, leveraging AI to automate and enhance engineering workloads without disrupting existing processes, while maintaining security, performance, and operational best practices. Move a live GitLab project between groups without breaking Terraform state or CI/CD Team Blog: Azure Infrastructure Author: HimanshuYadav Published: 07/31/2026 Summary: Moving a live GitLab project between groups can disrupt Terraform state, CI/CD variables, runners, and cloud authentication if paths are hardcoded or inherited resources aren’t handled. The project ID remains unchanged, but group-level variables and runners must be recreated or reconfigured. Key the Terraform backend to the project ID, not the project path, and update any cloud credentials mapped to the old namespace. Thorough inventory, backups, and a freeze window ensure a safe transfer and rollback. Validate everything post-move to avoid drift or broken pipelines. Proper preparation and verification prevent common pitfalls. Azure Cobalt: Workload-Aware Power Management for More Efficient Datacenters Team Blog: Azure Infrastructure Author: redsa Published: 07/16/2026 Summary: Microsoft’s Azure Cobalt CPUs introduce industry-first, per-VM power monitoring and capping, achieved through hardware/software co-design. This enables fine-grained, workload-aware power management, selectively throttling non-critical VMs while preserving performance for priority workloads. The approach allows up to 20% more power oversubscription and 24% higher performance compared to software-only capping, supporting more efficient datacenter operations and sustainability. End-to-end integration across Azure infrastructure enables optimized VM placement and real-time telemetry, demonstrating the benefits of deep hardware/software collaboration for balancing performance, efficiency, and sustainability in cloud environments. Microsoft is headed to VMware Explore 2026 in Las Vegas Team Blog: Azure Migration and Modernization Author: KirstenMegahan Published: 07/28/2026 Summary: Microsoft will participate in VMware Explore 2026 in Las Vegas, offering breakout sessions and expert roundtables focused on Azure and its partnership with VMware by Broadcom. Attendees can learn about streamlined migration of VMware workloads to Azure, maximizing on-premises investments, and leveraging AI innovation. Sessions will cover migration best practices, security, and unlocking data and AI capabilities, along with enticing migration offers. The event aims to help businesses gain a competitive edge by transitioning from on-premises to Azure. Azure Front Door edge actions: programmable compute for a secure, resilient, AI-ready edge Team Blog: Azure Networking Author: AbhishekTiwari Published: 07/30/2026 Summary: Azure Front Door edge actions introduces programmable compute at Microsoft's global edge, enabling customer-defined logic for secure, low-latency web experiences. Its architecture prioritizes hyperscale performance, strong security, tenant isolation, and resiliency using Hyperlight micro-VMs for hardware-backed isolation. Edge actions maintains local execution to minimize latency, employs fast-fail and circuit-breakers for stability, and continuously validates resiliency through Game Days. Designed for current and future intelligent workloads, it ensures programmability without compromising Azure Front Door’s reliability, security, or performance, making edge programmability a foundational capability for modern applications. Scale limits in network security perimeter Team Blog: Azure Networking Author: shashankamalladi Published: 07/31/2026 Summary: The article outlines updated hard limits for network security perimeters in PaaS deployments, including 1,000 perimeters per subscription, 200 profiles per perimeter, 200 rule elements per profile, and 2,500 associated PaaS resources. Rule elements per profile are now capped at 200 for new customers. Existing customers exceeding 200 can edit or reduce rules until October 31, 2026; after that, only reductions are allowed. These changes aim to enforce consistent security scalability and operational boundaries. Secure Native Access to Azure Kubernetes Service (AKS) Private Clusters with Azure Bastion Team Blog: Azure Network Security Author: saikishor Published: 07/09/2026 Summary: The article explains how Azure Bastion's native client tunneling (now in public preview) enables secure, simplified access to private Azure Kubernetes Service (AKS) clusters without needing VPNs or jump hosts. Bastion establishes an encrypted tunnel from engineers’ local machines to the private AKS API server, maintaining strong network isolation. It supports modern authentication methods, including Microsoft Entra ID and Azure RBAC, for centralized, auditable access control. This approach streamlines cluster management while enhancing security by removing public endpoints and reducing exposure to credential theft or infrastructure compromise. Optimize Oracle workloads on Azure with Azure NetApp Files Team Blog: Azure Storage Author: GeertVanTeylingen Published: 07/09/2026 Summary: The article details recent advancements in Azure NetApp Files that optimize Oracle workloads on Azure, focusing on predictable performance, flexible scaling, and enhanced data protection. Key features include flexible service level capacity pools, automated application volume group deployment, availability zone-aware volume placement, integrated migration tools, space-efficient short-term clones, cool access tiering, and rapid backup and test/dev refreshes. These improvements enable easier Oracle environment sizing, deployment, protection, and scaling, reducing costs and complexity while supporting business continuity and modernization of Oracle workloads in the Azure cloud. Terraform AzureRM provider 5.0 now generally available Team Blog: Azure Tools Author: stevenjma Published: 07/29/2026 Summary: Terraform AzureRM Provider 5.0 is now generally available, offering major improvements for managing Azure infrastructure as code. Key updates include greater control over Azure Resource Provider registration, optional Azure preflight validation to catch issues earlier, and removal of deprecated resources and properties. Users are advised to carefully review their configurations before upgrading due to breaking changes. The release aims to provide clearer provider behavior, faster feedback during workflows, and a cleaner foundation for future Azure features. Detailed migration guidance and changelog are available to assist with upgrading.Check This Out! (CTO!) Guide (May/June 2026)
Member: TysonPaul | Microsoft Community Hub Triggering Azure Functions from Blob Storage Using Event Grid Team Blog: Core Infrastructure and Security Author: AndrewCoughlin Published: 05/11/2026 Summary: The article explains how to trigger Azure Functions from Blob Storage events using Azure Event Grid for real-time file processing. It outlines a step-by-step approach: create and deploy an Azure Function with an Event Grid trigger, set up an Event Grid subscription for BlobCreated events, and validate the process by uploading a blob. The method minimizes latency and avoids polling, making it suitable for enterprise scenarios. Key pitfalls include creating subscriptions before the function exists and misconfigurations. The article provides sample code and emphasizes the solution's simplicity, reliability, and operational transparency. TLS Certificate Pinning and Best Practices in Azure Open-Source Relational Databases Team Blog: Core Infrastructure and Security Author: TameikaL Published: 05/13/2026 Summary: The article explains TLS certificate pinning and its implications for Azure open-source relational databases (PostgreSQL, MySQL). Certificate pinning enhances client-side security but increases operational risk, especially during certificate rotations, by causing connection failures if certificates change. Unlike Azure SQL, where certificate validation is platform-managed, Azure OSS databases use client-managed trust. The article advises against certificate pinning and recommends trusting documented root CAs, using standard TLS validation modes, and maintaining up-to-date trust stores to ensure secure and resilient client connections during certificate updates. Azure DDoS Protection & Azure WAF: A Layered Defense for Modern DDoS Attacks Team Blog: Azure Network Security Author: saikishor Published: 05/28/2026 Summary: The article explains how Microsoft Azure provides a layered defense against modern DDoS attacks by combining platform-level infrastructure protection, Azure DDoS Protection for network-level threats (Layers 3/4), and Azure Web Application Firewall (WAF) for application-layer (Layer 7) attacks. This multi-tiered approach ensures comprehensive mitigation by addressing both high-volume network floods and sophisticated application-level threats, using adaptive techniques, rate limiting, bot protection, and real-time analytics. The article emphasizes that a defense-in-depth strategy—leveraging both Azure DDoS Protection and WAF—is essential for safeguarding internet-facing applications and maintaining service availability. Scaling GitHub Advanced Security in Azure DevOps with a single reusable YAML template Team Blog: Azure Infrastructure Author: Paulams732 Published: 05/11/2026 Summary: The article describes how to streamline GitHub Advanced Security (GHAS) integration in Azure DevOps by using a single, reusable YAML pipeline template. This approach dynamically detects repository content, runs only relevant security scans for application code and infrastructure-as-code, and centralizes configuration and reporting. It eliminates the need for multiple pipelines, reduces maintenance, ensures consistent security coverage, and supports polyglot and mixed repositories, resulting in a scalable and efficient DevSecOps process. Key lessons include the importance of detection-driven execution, dynamic configuration, and unified workflows for effective security management across diverse codebases. Building AI Guardian Extension: AI Detection and Enterprise AI Security Team Blog: Azure Infrastructure Author: ranjsharma Published: 05/19/2026 Summary: The article discusses the security and governance challenges posed by rapid enterprise adoption of generative AI tools, focusing on the risks of "Shadow AI"—the unauthorized use of AI platforms that can lead to data leakage and compliance violations. It introduces the AI Guardian Extension, a platform that autonomously detects and protects against Shadow AI by monitoring AI interactions, preventing sensitive data exposure, blocking risky prompts, and generating compliance reports, thereby enabling safe, compliant, and visible enterprise AI usage. Public Preview: Migrate your regional virtual machines to availability zones Team Blog: Azure Compute Author: micahmckittrick Published: 05/07/2026 Summary: Microsoft has announced a public preview feature enabling Azure users to migrate regional (nonzonal) Virtual Machines (VMs) and VM Scale Sets (VMSS Flex) into specific availability zones without rebuilding resources. The migration preserves VM names, disks, IPs, and other properties. This improves fault isolation, compliance, and disaster recovery. The process involves deallocating the VM, assigning it to a zone, and restarting it. Migration is one-way and must be done per VM. Certain configurations, like Basic SKU IPs and unmanaged disks, are not supported. Users are advised to roll out migrations in batches for production workloads. Use Azure Container Registry as an Upstream Source for Artifact Cache Team Blog: Azure Compute Author: toddysm Published: 05/05/2026 Summary: Azure Container Registry (ACR) now supports using another ACR as an upstream source for artifact cache, enabling secure image promotion and distribution within organizations. This feature allows registries to cache images from other ACRs, with user-assigned managed identities (UAMI) supported for authentication, improving security by eliminating credential management. Common scenarios include promoting images between Dev and Prod registries and implementing hub-and-spoke registry topologies. The setup uses Azure CLI, requires proper RBAC permissions, and works best within the same tenant. Cross-tenant and some network configurations have limited support; portal integration is coming soon. How to use Instance Mix with Azure Virtual Machine Scale Sets Team Blog: ITOps Talk Author: OrinThomas Published: 05/24/2026 Summary: Instance Mix for Azure Virtual Machine Scale Sets allows you to specify up to five compatible VM sizes in a single scale set (Flexible orchestration mode), enhancing scalability, cost optimization, and provisioning success. Azure selects VM sizes during scale-out based on your chosen allocation strategy (LowestPrice, CapacityOptimized, or Prioritized). Best for stateless, horizontally scalable workloads, Instance Mix requires similar VM types, compatible architectures, and pre-checked quotas. It’s configured via Azure CLI or portal, with operational tips for optimal use. Avoid mixing very different VM types, and always verify availability and quotas before production deployment. The End is Nigh for DES and an Update for hunting down RC4 Team Blog: Ask the Directory Services Team Author: Chris_Cartwright Published: 05/08/2026 Summary: Microsoft is finalizing the removal of DES and RC4 encryption types from Windows Kerberos authentication to enhance security. The article provides updated XML filters and event forwarding methods to help administrators identify and track the use of DES and RC4 in their environments. It also includes resources, scripts, and guidance for transitioning to stronger cryptography, with references to related Microsoft support articles and previous blog posts. Note: The described Event Forwarding methods are not yet compatible with Server 2025 but will be updated in the future. Windows 365 for Agents: run AI agents in Cloud PCs across real applications Team Blog: FastTrack Author: JulieHersum Published: 05/27/2026 Summary: Windows 365 for Agents, now in public preview, enables AI agents to autonomously execute real workflows across applications—including legacy and UI-based systems—within secure, policy-controlled Cloud PCs. This represents a shift from API-based automation, allowing agents to complete complex tasks like processing invoices or updating CRM data while maintaining enterprise security and control. Administrators can define boundaries and monitor agent activity, ensuring agents operate safely without impacting production systems. Windows 365 for Agents thus offers a secure, dedicated environment for scalable, autonomous AI workflow automation across diverse software environments. From Scale to Breakthrough: Azure NetApp Files Sets a New Cloud Benchmark for EDA Performance Team Blog: Azure Storage Author: GeertVanTeylingen Published: 05/22/2026 Summary: The article highlights Azure NetApp Files’ new “large volume breakthrough mode,” which sets a benchmark for cloud storage in Electronic Design Automation (EDA) workloads. Independently validated SPECstorage® 2020 benchmarks show this mode enables exceptional scalability and consistent sub-millisecond latency, supporting thousands of parallel EDA jobs without performance bottlenecks. Both single and scaled configurations demonstrated linear scaling in throughput and concurrency, empowering faster, more efficient chip design cycles. As a result, Azure NetApp Files transforms cloud storage from a limiting factor to a strategic enabler for modern, high-performance semiconductor design workflows. Modernizing Azure Virtual Desktop with Nerdio and Azure Files Team Blog: Azure Storage Author: Vybava_Ramadoss Published: 05/04/2026 Summary: The article discusses how organizations scaling Azure Virtual Desktop (AVD) face challenges with user profile storage, identity management, and cost efficiency. Nerdio Manager streamlines AVD deployment by integrating compute, storage, and identity management, reducing complexity and configuration drift. Azure Files Provisioned v2 enhances storage performance and cost efficiency, while Entra ID authentication simplifies identity architecture. Together, Nerdio and Azure Files enable faster, more reliable, and cost-effective AVD environments with improved user experience, especially during peak loads, and ensure consistent, audit-ready governance at enterprise scale. Cutover Strategy for Azure PaaS Services: A Step-by-Step Guide to Near Zero-Downtime Migrations Team Blog: Azure Migration and Modernization Author: lapadman Published: 05/06/2026 Summary: The article outlines a step-by-step cutover strategy for migrating enterprise applications to Azure PaaS with near zero downtime. Emphasizing phased parallel cutover, it recommends gradual traffic shifts, robust rollback plans, and continuous monitoring to minimize risk. High availability (HA) and disaster recovery (DR) must be integrated into each phase. Messaging systems, particularly Azure Service Bus, are highlighted as the most complex component. The guide details essential roles, tools, metrics, and checklists to ensure a safe, controlled migration, concluding that cutover and HA/DR should be treated as a unified process for successful Azure transitions. [Preview] CIS Benchmarks on Azure; Now for Windows Server Team Blog: Azure Governance and Management Author: AmirB Published: 05/28/2026 Summary: Microsoft is announcing the preview of built-in CIS Benchmarks for Windows Server within Azure Policy and Machine Configuration, initially supporting Windows Server 2025. This expands their compliance offerings, which already cover Linux, to Windows environments managed by Azure and Arc. The solution allows flexible configuration, exportable compliance as code, and unified management across machine types. The preview starts in audit-only mode, with auto-remediation and enforcement planned. Future updates will add support for more Windows editions, granular rule enforcement, STIG baselines, and retire older, overlapping policies for streamlined compliance management in Azure. Introducing the Azure Resource Manager MCP Server! Team Blog: Azure Governance and Management Author: stevenbucher Published: 05/07/2026 Summary: The article announces the public preview of the Azure Resource Manager MCP Server, a tool enabling AI agents to interact with Azure infrastructure via Azure Resource Manager. It allows agents to generate, validate, and execute Azure Resource Graph queries, deploy and manage ARM templates, and monitor deployments—all from natural language prompts. The server supports compliance audits, rapid provisioning, and policy checks, and integrates with GitHub Copilot. It respects Azure security policies and is initially available for VS Code, with more features and client support planned. Users can install and provide feedback during the preview phase. The power behind AI: Your brain Team Blog: Microsoft Learn Author: Nency_Yera Published: 05/11/2026 Summary: The article shares Nency Yera’s journey as a neurodivergent professional with ADHD who, despite having no coding background, leveraged AI tools like GitHub Copilot and VS Code by customizing them to fit her thinking style. With supportive leadership and a personalized, step-by-step approach, she built practical solutions for her workplace. The story emphasizes that neurodivergent brains are assets, and that AI becomes powerful when adapted to individual needs, enabling anyone—regardless of technical background—to create impactful tools and unlock new potential. New Microsoft Certified: Intelligent Applications Builder Associate Certification Team Blog: Microsoft Learn Author: LibertyMunson Published: 05/27/2026 Summary: Microsoft has introduced the Certified: Intelligent Applications Builder Associate Certification, aimed at professionals building AI-powered business solutions using Microsoft Power Platform, Copilot, and natural language tools. To earn the certification, candidates must pass Exam AB-410 (beta), which validates skills in creating intelligent applications, automation, data models, and integrating AI agents. The first 300 test-takers before June 17, 2026, receive an 80% discount. Candidates should have experience with Dataverse, Power Apps, Power Automate, and Copilot features. The certification becomes generally available in July 2026, with preparation resources and study guides provided by Microsoft. Ansible + Azure Arc: Use Ansible modules to deploy and manage Azure Arc machine extensions at scale Team Blog: Azure Arc Author: alinetran Published: 05/20/2026 Summary: Microsoft has introduced new Ansible modules in the azure.azcollection for managing Azure Arc machine extensions at scale. These modules allow teams to automate the deployment, update, and removal of Azure Arc extensions through Ansible playbooks, streamlining extension lifecycle management across hybrid and multicloud environments. This integration eliminates the need for separate tools, enforces consistent configurations, supports compliance scenarios like centralized SSH access, and enhances visibility into extension states. The update strengthens Azure Arc’s position as a unified management platform for Windows and Linux servers using familiar automation workflows. Simplified access to Hotpatching enabled by Azure Arc for Windows Server 2025 Team Blog: Azure Arc Author: sharmajyoti Published: 05/19/2026 Summary: Windows Server 2025 introduces hotpatching enabled by Azure Arc, allowing security updates without reboots across hybrid and multicloud environments at no extra cost. Eligible servers must be connected to Azure Arc and have Virtualization-based Security enabled. Azure Update Manager and other tools enable centralized patch management, improving uptime and simplifying compliance. Hotpatching delivers monthly security updates, with quarterly cumulative updates requiring a restart. Existing enrolled machines continue receiving hotpatches without additional action, and hotpatching remains free for Azure-hosted servers. Azure Arc also provides unified governance, monitoring, and lifecycle management for diverse server environments. What's new in FinOps toolkit 14 – April 2026 Team Blog: FinOps Author: Michael_Flanakin Published: 05/13/2026 Summary: FinOps toolkit 14 introduces AI integration via a Copilot Studio agent template, enabling users to query FinOps hub data in natural language. It adds support for ingesting Azure Advisor and custom optimization recommendations, simplifies hub deployment options, and previews a new dataset for commitment discount eligibility. The release also delivers various fixes and enhancements across guides, Power BI, workbooks, and the PowerShell module. Looking ahead, the toolkit will deepen AI features, expand data support, and offer premium services to further help organizations optimize and manage cloud costs in Microsoft Azure environments. Azure CLI on macOS: Upcoming Installation Changes Team Blog: Azure Tools Author: Alex-wdy Published: 05/11/2026 Summary: Microsoft is updating how Azure CLI is installed on macOS to better meet security and enterprise requirements. Starting with version 2.86.0 (Preview), Azure CLI will shift from Homebrew Core to new options: Homebrew Cask (recommended) and an offline tarball for air-gapped environments. These changes enable distribution of precompiled, signed, and notarized binaries, aligning with macOS security standards. Homebrew Core remains available during the transition, but users are encouraged to adopt the new methods and provide feedback. Full rollout details and installation instructions are available on Microsoft Learn. From Prompt to Production: Open in VS Code for Terraform in Azure Copilot Team Blog: Azure Tools Author: Jingwei_Wang Published: 05/12/2026 Summary: Microsoft has introduced "Open in VS Code" for Terraform in Azure Copilot, enabling users to move seamlessly from AI-generated Terraform code in Azure Portal to real deployments within an integrated, guided workflow. This feature supports immediate editing, validation, and deployment in a browser-based VS Code environment, with built-in guidance for backend configuration and deployment. Users can select from Azure Storage, Terraform Cloud, or a temporary workspace for state management. The solution streamlines Infrastructure as Code processes for both beginners and enterprises, now in public preview, with future plans for enhanced CI/CD and editor integrations. Understanding and building an Azure Hybrid Meshed Hub-Spoke Topology Team Blog: Azure Networking Author: Svenbaeck Published: 05/18/2026 Summary: The article explains how to design a secure, scalable Azure hybrid network using a meshed hub-spoke topology. Centralized hubs control all traffic and security, preventing uncontrolled lateral communication between spokes and supporting hybrid connectivity. Key design principles include controlled routing in gateways and spokes, proper VNet peering, and meshing hubs for multi-region setups. Azure Firewalls or NVAs in the hub enable traffic inspection and policy enforcement. The approach simplifies management, enhances security, and supports regional independence and fault isolation, making it suitable for enterprise-scale Azure environments. Clear address planning and consistent configuration are emphasized for effective operation. Simplify Virtual WAN Spoke Connectivity at Scale with Azure Virtual Network Manager Team Blog: Azure Networking Author: Jay-Li Published: 05/26/2026 Summary: Azure Virtual Network Manager (AVNM) integrates with Azure Virtual WAN to simplify and automate spoke connectivity, routing, and security policy management across large-scale hub-and-spoke network architectures. By grouping virtual networks and applying centralized connectivity and routing policies, AVNM reduces repetitive manual configuration, ensures operational consistency, and enables bulk onboarding, dynamic updates, and incremental deployments. This integration streamlines operations, enhances scalability, and provides robust security controls, making it easier for organizations to manage complex Azure networking environments confidently and efficiently. Building resilient networks for AI supercomputers Team Blog: Azure High Performance Computing (HPC) Author: jithinjose Published: 05/06/2026 Summary: The article details Microsoft’s networking innovations for the Fairwater AI supercomputer, focusing on resilience and efficiency at extreme GPU scale. Central to this is the Multipath Reliable Connection (MRC), a new, open-source transport protocol that distributes data across multiple paths, enabling robust, high-utilization GPU clusters even during routine network faults. Combined with a two-tier multiplane topology and static SRv6 routing, this approach minimizes disruptions, improves training throughput, and simplifies failure recovery. Microsoft, in partnership with industry leaders, is open-sourcing MRC and related tools to advance resilient AI infrastructure across the ecosystem. Distributing model weights to your AI cluster: a faster pre-flight on AKS and Slurm Team Blog: Azure High Performance Computing (HPC) Author: pauledwards Published: 05/06/2026 Summary: The article introduces "azcp-cluster", a tool for efficiently distributing large AI model checkpoints across multi-node GPU clusters on Azure. Instead of each node downloading the full dataset separately—causing slowdowns, increased costs, and potential Azure storage throttling—azcp-cluster shards the download across nodes, then broadcasts data at high-speed over InfiniBand. This approach reduces egress costs, maximizes fabric speed, and simplifies cluster setup on Slurm and AKS. Practical deployment examples, Docker integration, and Kubernetes scheduling strategies are provided, with recommendations for both merged-image and init-container patterns. Benchmarks show significant speedups and cost savings. Share the Moment: Listen Together with Shared Audio Team Blog: Windows OS Platform Author: Steven Ilami Published: 05/26/2026 Summary: The article introduces “Shared Audio,” a new Windows 11 feature that enables two users to wirelessly listen to audio from the same PC using separate Bluetooth LE Audio accessories, like headphones or hearing aids. This solves the longstanding limitation of one-audio-device connections, enhancing shared experiences during flights, study sessions, or road trips. Users can easily manage connections and individual volumes through Quick Settings. Shared Audio requires compatible LE Audio devices, Windows 11 (version 24H2 or newer), and suitable hardware. The feature aims to make group listening more accessible, convenient, and customizable for entertainment, productivity, and accessibility needs. How to Secure Azure Databricks without Public Exposure using WAF + Private Endpoints Team Blog: Azure Architecture Author: FaizaanMerchant Published: 05/11/2026 Summary: The article outlines how to secure Azure Databricks using a Zero Trust Architecture by combining Azure Application Gateway with Web Application Firewall (WAF) and Private Endpoints. This approach eliminates public internet exposure, ensures all traffic is inspected and routed securely, and aligns with strict compliance requirements. The recommended architecture uses a Hub-and-Spoke model, disabling public access and enforcing internal and external access through WAF and private endpoints, respectively. Key considerations include proper DNS configuration, SSL setup, and custom WAF rules, ensuring secure, compliant, and seamless access for both internal and external users. Cloud Native Platforms: Evolve Team Blog: Azure Architecture Author: KishoreKumarPattabiraman Published: 05/21/2026 Summary: The article argues that AI is transforming software engineering by augmenting workflows across the entire software development lifecycle—not just code generation. Success depends on disciplined adoption: turning individual AI prompts into reusable workflows, implementing robust guardrails, and maintaining clear boundaries for human judgment. Responsible AI, with practices ensuring fairness, transparency, safety, and accountability, is essential. Teams should measure AI by outcomes (like defect rates and lead time), not usage. The key is evolving engineering practices to leverage AI safely and effectively, making workflows, not individual suggestions, the core unit of value. New Platform SSO with registration during Automated Device Enrollment on macOS Team Blog: Intune Customer Success Author: Intune_Support_Team Published: 05/14/2026 Summary: Microsoft Intune now supports Platform Single Sign-On (PSSO) registration during Automated Device Enrollment (ADE) setup for macOS 26 and newer. With the new “Enable Registration During Setup” setting and Intune Company Portal version 5.2604.0+, users register their devices and sign in with Microsoft Entra credentials during Setup Assistant, enabling immediate access to work resources. This streamlines onboarding, reduces compliance gaps, authentication issues, and IT helpdesk tickets. The feature requires coordinated policies assigned to static user groups. Future updates aim to reduce multiple sign-in prompts for an even smoother enrollment experience. Migrating frontline mobile devices: Aligning stakeholders before real-world testing Team Blog: Intune Customer Success Author: Intune_Support_Team Published: 05/01/2026 Summary: The article outlines the crucial steps for migrating frontline mobile devices by emphasizing the need to align stakeholders and processes before conducting real-world testing with Microsoft Intune. It highlights translating discovery findings into actionable decisions, identifying and aligning key operational and technical stakeholders, and ensuring readiness across licensing, identity, and device lifecycle areas. Real-world testing should validate end-to-end workflows, security, and supportability in operational conditions, not just device enrollment. Standardization can evolve post-testing, and clear ownership of success criteria is essential to achieve meaningful pilot outcomes and support future device management decisions.Check This Out! (CTO!) Guide (March 2026)
Member: TysonPaul | Microsoft Community Hub Automating Large‑Scale Data Management with Azure Storage Actions Team Blog: ITOps Talk Author: 1Nataraj Published: 02/25/2026 Summary: Azure Storage Actions is a fully managed, serverless automation platform that simplifies large-scale data management in Azure Blob and Data Lake Storage. It enables users to automate tasks such as tagging, tiering, deletion, and applying immutability based on customizable conditions—without custom code or infrastructure. Administrators can centrally define tasks and assign them across multiple storage accounts, with built-in preview, monitoring, and audit features. Use cases include compliance, cost optimization, and metadata management, making it ideal for organizations managing millions of items across vast storage estates. Azure Storage Actions is available in over 40 Azure regions. Migration, Modernization & Agentic Tools Team Blog: ITOps Talk Author: OrinThomas Published: 02/25/2026 Summary: The article discusses how agentic tools, such as those in Azure Copilot and GitHub Copilot, transform cloud migration and modernization from one-time projects into ongoing, autonomous systems. These tools dynamically discover environments, recommend modernization paths, automate migration steps, and continuously optimize workloads for cost, performance, security, and compliance. By embedding governance and leveraging real-time telemetry, agentic tools reduce manual effort, minimize errors, and ensure migrations are efficient, secure, and aligned with enterprise standards, providing continuous improvement post-migration. What’s new in FinOps toolkit 13 – January 2026 Team Blog: FinOps Author: Michael_Flanakin Published: 02/09/2026 Summary: The January 2026 update to the FinOps toolkit focuses on stability, usability, and community engagement. Key enhancements include improved documentation, new features like configurable Key Vault purge protection, and expanded support for Parquet format and compression in Cost Management exports via PowerShell. Security, reliability, and extensibility have been strengthened for FinOps hubs, with numerous bug fixes across Power BI reports, workbooks, and the Azure Optimization Engine. The release highlights ongoing community involvement, upcoming features like AI automation, and premium services to help organizations deploy and scale the toolkit effectively. Managed Identity on SQL Server On-Prem: The End of Stored Secrets Team Blog: Core Infrastructure and Security Author: RyadB Published: 02/23/2026 Summary: **Summary:** The article explains how SQL Server 2025 on-premises, when connected to Azure Arc, can use Managed Identity to access Azure resources without storing secrets like SAS tokens or keys. This approach eliminates risks of secret storage, rotation, and auditing complexity by leveraging Microsoft Entra ID for identity management and RBAC for permissions. The article details configuration steps, migration from stored credentials, troubleshooting, and current limitations, highlighting improved security and simplified management for on-prem SQL Server accessing Azure services. Running Text to Image and Text to Video with ComfyUI and Nvidia H100 GPU Team Blog: Core Infrastructure and Security Author: HoussemDellai Published: 02/27/2026 Summary: This article provides a step-by-step guide for setting up and running ComfyUI, a node-based interface for AI-powered text-to-image and text-to-video generation, on Azure VMs with Nvidia H100 GPUs. It details both automated (Terraform) and manual setup methods, including installing drivers, dependencies, and downloading required models. The guide explains accessing ComfyUI’s web portal, workflow configuration, and model management to create high-quality images and videos efficiently. It also includes important notes about GPU driver compatibility and offers links to official documentation and scripts for further reference. Unlock outbound traffic insights with Azure StandardV2 NAT Gateway flow logs Team Blog: Azure Networking Author: cozhang Published: 02/06/2026 Summary: The article introduces Azure’s StandardV2 NAT Gateway, highlighting its new features such as zone-redundancy, enhanced performance, dual-stack support, and, notably, flow logs. Flow logs provide detailed visibility into outbound traffic, enabling security auditing, compliance, usage analytics, and troubleshooting. The article explains how to enable and use flow logs to diagnose connectivity issues and optimize network architecture. It emphasizes the importance of flow logs for monitoring established outbound connections and offers troubleshooting steps for connection drops, recommending best practices for resilient Azure deployments. Centralized cluster performance metrics with ReFrame HPC and Azure Log Analytics Team Blog: Azure High Performance Computing (HPC) Author: jimpaine Published: 02/06/2026 Summary: The article outlines how to integrate ReFrame HPC, a flexible high-performance computing testing framework, with Azure Log Analytics for centralized performance monitoring across diverse clusters and environments. It details deploying necessary Azure resources, configuring ReFrame for HTTP logging, and running performance tests with results sent to Log Analytics. This integration enables unified, standardized metrics collection, cross-cluster comparisons, trend analysis, and improved system visibility—supporting migration, development, and operational assurance in heterogeneous HPC environments. Azure Recognized as an NVIDIA Cloud Exemplar, Setting the Bar for AI Performance in the Cloud Team Blog: Azure High Performance Computing (HPC) Author: Fernando_Aznar Published: 02/18/2026 Summary: Microsoft Azure has been recognized as the first NVIDIA Exemplar Cloud for its world-class, end-to-end AI workload performance, now validated for both H100 and next-generation GB300 (Blackwell) systems. This designation reflects Azure’s optimized full-stack infrastructure—including compute, networking, and software integration—delivering predictable, efficient, and scalable AI training at production scale. Customers benefit from faster time-to-train, improved ROI, and confidence in Azure’s readiness for advanced AI workloads, ensuring consistent high performance from proof-of-concept to deployment without sacrificing cloud flexibility or manageability. Reference Architecture for Highly Available Multi-Region Azure Kubernetes Service (AKS) Team Blog: Azure Architecture Author: rgarofalo Published: 02/03/2026 Summary: The article presents a reference architecture for highly available, multi-region Azure Kubernetes Service (AKS) deployments. It compares active/active, active/passive, and deployment stamp models, detailing their trade-offs in availability, complexity, and cost. Key components include Azure Front Door for global traffic routing, geo-replicated data services, centralized monitoring, and consistent security controls. The architecture emphasizes resilience through fault isolation, automated recovery, and regular testing. It offers practical guidance for cloud architects to design AKS platforms that withstand regional outages, ensuring business continuity and scalable operations across Azure regions. Reactive Incident Response with Azure SRE Agent: From Alert to Resolution in Minutes Team Blog: Azure Architecture Author: Sabyasachi-Samaddar Published: 02/18/2026 Summary: **Summary:** The article details how Azure SRE Agent revolutionizes incident response by automating investigation and triage as soon as an alert fires, reducing resolution times from hours to minutes. Through two real-world scenarios—a SQL connectivity outage and a VM CPU spike—the agent autonomously diagnosed issues, proposed remediations, and required minimal human intervention. Custom Incident Response Plans and instructions enable context-aware, consistent, and rapid resolutions, with automated post-incident documentation. Key benefits include faster MTTR, reduced manual toil, and improved knowledge capture, though some technical challenges remain. Azure SRE Agent is currently in preview. Cross Forest Enrollment – PKISync.PS1 Team Blog: Ask the Directory Services Team Author: Manuel_Alvarez_V Published: 02/19/2026 Summary: The article explains how to use the PKISync.ps1 PowerShell script for cross-forest certificate enrollment in Active Directory environments. PKISync synchronizes PKI-related objects, such as certificate templates and CA configurations, from a source forest to a target forest, enabling certificate requests across forests. It details the setup requirements, including two-way forest trusts, LDAP referral configuration, and certificate publishing. Although PKISync is considered legacy, automating its use can facilitate simple cross-forest enrollment, but CEP/CES is recommended for modern, secure deployments. The article concludes with best practices and automation tips for PKISync. What’s New in Windows Group Policy Preferences Debug Logging Team Blog: Ask the Directory Services Team Author: TagoreN Published: 02/27/2026 Summary: The article outlines a new feature in Windows 11 24H2 and 25H2 (from February 2026 preview updates) that allows administrators to enable Group Policy Preferences (GPP) debug logging directly through Local Group Policy, not just domain-based GPOs. This simplifies troubleshooting by allowing detailed logging on client devices without domain reliance. The article explains how to configure logging, manage trace file locations, and set necessary permissions. Overall, this update enhances flexibility and efficiency for IT professionals managing and debugging GPP issues on Windows client devices. Public Preview: Restrict usage of user delegation SAS to an Entra ID identity Team Blog: Azure Storage Author: ellievail Published: 02/26/2026 Summary: Microsoft has announced the public preview of user-bound user delegation SAS for Azure Storage, enhancing security by restricting SAS token usage to a specific Microsoft Entra ID identity. This feature extends user delegation SAS, requiring the end user to authenticate with Entra ID to access storage resources. It supports cross-tenant scenarios and incurs no additional cost beyond standard storage transactions. User-bound SAS is available via REST APIs, SDKs, PowerShell, and CLI for all GPv2 storage accounts in public regions, with detailed steps provided for setup and role assignment. Azure Migrate: Now Supporting Premium SSD V2, Ultra and ZRS Disks as Targets Team Blog: Azure Storage Author: Lakshya_Jalan Published: 02/18/2026 Summary: Azure Migrate now supports Premium SSD v2, Ultra Disk, and ZRS Disks as migration targets, with Premium SSD v2 and ZRS generally available and Ultra Disk in public preview. This update enhances assessment and migration by enabling tailored recommendations based on workload performance needs, offering greater flexibility, performance, and resiliency. Users can now migrate demanding, mission-critical workloads to Azure using these advanced disk options, benefiting from features like zonal redundancy and customizable performance. The enhancements streamline migrations and ensure optimal resource alignment, supporting petabytes of data already migrated during the preview phase. Public Preview: Automatic zone balance for Virtual Machine Scale Sets Team Blog: Azure Compute Author: HilaryWang Published: 02/17/2026 Summary: Azure has introduced the public preview of automatic zone balance for Virtual Machine Scale Sets, which automatically monitors and redistributes VM instances across availability zones to maintain optimal resiliency. This feature addresses imbalances that can occur over time, minimizing the impact of zone failures without manual intervention. The system uses health checks, respects instance protection policies, and ensures workload capacity during rebalancing. Automatic instance repair is also enabled by default. Users can join the preview by enabling the feature and meeting specific prerequisites. This capability reduces operational overhead while enhancing workload reliability and zone-level resilience. Azure Automated Virtual Machine Recovery: Minimizing Downtime Team Blog: Azure Compute Author: Jon_Andoni_Baranda Published: 02/04/2026 Summary: Azure Automated Virtual Machine Recovery is a built-in Azure feature that minimizes VM downtime through fast, intelligent, and automated recovery processes. Without requiring customer setup, it continuously monitors VM health, rapidly detects failures, diagnoses issues, and applies the optimal recovery action, all without customer intervention. Leveraging detailed recovery event annotations, it provides deep visibility into incident timelines and helps optimize recovery strategies. Over the past 18 months, this system has halved average VM downtime, strengthening business continuity, reducing financial impact, and reinforcing customer trust in Azure’s reliable cloud platform. Support tip: Resolve device noncompliance with Mobile Threat Defense partner apps Team Blog: Intune Customer Success Author: Intune_Support_Team Published: 02/02/2026 Summary: This article provides guidance for resolving device noncompliance issues when using Mobile Threat Defense (MTD) partner apps, like Microsoft Defender for Endpoint, with Microsoft Intune. It outlines troubleshooting steps for users to restore compliance—installing, activating, refreshing, or reinstalling the MTD app—and checking compliance status. It also details simplified remediation workflows for iOS/iPadOS and methods for resetting the MTD connection on Android if sign-out is blocked, helping users regain access to work or school resources and reducing support overhead. How to enable HTTPS support for Microsoft Connected Cache for Enterprise and Education Team Blog: Intune Customer Success Author: Intune_Support_Team Published: 02/20/2026 Summary: Starting June 16, 2026, Intune will require HTTPS for Microsoft Connected Cache when delivering Win32 apps. To maintain caching benefits and reduce bandwidth, administrators must configure HTTPS on Connected Cache nodes using a CA-signed TLS certificate. The guide details generating a CSR on the node, signing and importing the certificate, and validating HTTPS on both Windows and Linux hosts. It also covers troubleshooting, maintenance, and renewal. Without HTTPS, devices will revert to using the CDN for Intune app downloads. Other content types remain unaffected. Early configuration ensures seamless transition and continued performance benefits. The Copilot resource guide to share with your employees Team Blog: FastTrack Author: JulieHersum Published: 02/19/2026 Summary: The article introduces the "Essential Copilot resource hubs for employees," a centralized guide designed to streamline Microsoft Copilot onboarding and support. It helps adoption leaders structure learning paths, IT admins share resources efficiently, and all employees access consistent guidance. The guide consolidates key Microsoft Copilot resources, making it easier for organizations to accelerate adoption and customize internal policies. Additional support is available through FastTrack and the Microsoft 365 Accelerator site, offering expert guidance, templates, and personalized assistance to boost Copilot deployment and change management efforts. Copilot adoption: Move your org from pilot to production with this guide Team Blog: FastTrack Author: JulieHersum Published: 02/19/2026 Summary: The article introduces a comprehensive guide for IT admins and Copilot adoption leads to streamline the rollout of Microsoft 365 Copilot. Organized around the adoption lifecycle (plan, build, operate), the guide highlights eight essential resource hubs, practical rollout steps, and audience-specific resources to ensure effective, governed adoption. It also promotes Microsoft FastTrack, which offers expert support, self-service resources, and personalized assistance to accelerate and scale Copilot deployment at no extra cost. Azure Virtual Desktop is now available in US Gov Texas in Azure Government Team Blog: Azure Virtual Desktop Author: Ron_Coleman Published: 02/04/2026 Summary: Azure Virtual Desktop is now available in the USGov Texas region of Azure Government, offering customers a new option for deploying secure and flexible virtual desktop environments. This expansion enables improved connection performance, reduced latency, and enhanced responsiveness by allowing host pool creation directly in the region. It supports mission needs, geographic distribution, and regulatory requirements, while maintaining Azure Government’s compliance and security standards. Customers can now leverage multiple regions for greater flexibility and performance in their virtual desktop deployments. RDP Shortpath (UDP) over Private Link is now generally available Team Blog: Azure Virtual Desktop Author: Rinku_Dalwani Published: 02/17/2026 Summary: Azure Virtual Desktop now supports UDP-based RDP Shortpath over Private Link, enabling direct, high-performance RDP connections between session hosts and clients using private IPs. This complements existing TCP connectivity, helping customers with strict private network boundaries. Administrators must explicitly enable UDP in Azure portal settings to use this feature. The opt-in model ensures secure and predictable transport, giving full control over UDP introduction. This enhancement is recommended for customers needing precise routing and policy enforcement in regulated environments, while standard AVD connectivity remains suitable for most deployments. Full configuration guidance is available in Azure documentation. Migrating Workloads from AWS to Azure: A Structured Approach for Cloud Architects Team Blog: Azure Migration and Modernization Author: rhack Published: 02/18/2026 Summary: The article outlines a structured, five-phase approach for migrating workloads from AWS to Azure, emphasizing a like-for-like architecture to minimize risk and maintain operational stability. Key phases include planning, preparation, execution, evaluation, and decommissioning, each requiring thorough documentation, stakeholder alignment, testing, and validation. The recommended migration strategy is blue/green deployment for risk mitigation. The workload team should lead the migration, supported by external Azure experts. Success depends on careful planning, phased execution, and post-migration optimization, with organizational knowledge-sharing encouraged for future improvements. Modernizing for the AI Era: Accelerating Application Transformation with Agentic Tools Team Blog: Azure Migration and Modernization Author: MarcoB Published: 02/12/2026 Summary: The article highlights the urgent need for organizations to modernize legacy applications to thrive in the AI era. Legacy systems drain resources and hinder innovation, but new agentic tools—such as GitHub Copilot, Azure Migrate, and Azure Copilot—use AI to automate and accelerate application transformation. These tools reduce manual effort, boost accuracy and safety, and make modernization accessible, empowering teams to focus on innovation. The result is faster, safer, and more consistent modernization, enabling organizations to continuously evolve their applications for intelligent, cloud-optimized environments. Practical steps and resources are provided to guide organizations in getting started. Secure DNS with DoH: Public Preview for Windows DNS Server Team Blog: Networking Author: JorgeCañas Published: 02/09/2026 Summary: Microsoft has launched a public preview of DNS over HTTPS (DoH) for Windows DNS Server, enabling encrypted and authenticated DNS queries within on-premises networks. This upgrade enhances security and privacy by preventing DNS traffic from being exposed or intercepted, aligning with Zero Trust principles and U.S. federal requirements. The DoH feature, included in the February 2026 update for Windows Server 2025, is disabled by default and currently intended for evaluation only. Existing DNS functionality remains unchanged, with new tools added for DoH management. Feedback is encouraged to improve the feature before general availability. Announcing Public Preview: Simplified Machine Provisioning for Azure Local Team Blog: Azure Arc Author: PragyaDwivedi Published: 02/26/2026 Summary: Microsoft has announced the Public Preview of Simplified Machine Provisioning for Azure Local, streamlining edge infrastructure deployment. The new process centralizes configuration in Azure, requiring minimal on-site expertise—staff only need to rack, power on hardware, and insert a prepared USB. Secure provisioning uses industry standards like FIDO Device Onboarding and Azure Arc Site for consistent, automated deployments across multiple locations. IT teams manage and monitor provisioning remotely, reducing errors and speeding up setup. Once complete, machines are ready for cluster creation and workload deployment, significantly simplifying and scaling Azure Local deployments. Azure CLI Windows MSI Upgrade Issue: Root Cause, Mitigation, and Performance Improvements Team Blog: Azure Tools Author: Alex-wdy Published: 02/03/2026 Summary: The article discusses a critical issue affecting Azure CLI upgrades on Windows using the MSI installer, where users upgrading from version 2.76.0 (or earlier) to 2.77.0 (or later) encountered startup crashes due to missing Python extension files. The root cause was a versioning conflict during upgrade, leading to incomplete installations. The article details recovery steps, recommends upgrading to version 2.83.0, and highlights improvements to the MSI upgrade process, making installations faster and more reliable by simplifying file replacement logic and eliminating slow version checks. Users are encouraged to upgrade and report issues if encountered. Navigating the 2025 holiday season: Insights into Azure’s DDoS defense Team Blog: Azure Network Security Author: Jdasari Published: 02/18/2026 Summary: During the 2025 holiday season, Azure observed a rise in burst-style DDoS attacks, with high-intensity, short-lived surges targeting packet processing and connection-handling layers. Most attacks were automated and brief, but the cumulative impact was operationally draining, especially for latency-sensitive sectors like gaming. Botnet-driven attacks rapidly shifted targets, exploiting inconsistent defenses. Azure DDoS Protection mitigated over 174,000 attacks, underscoring the need for always-on, automated, and layered security. Organizations are urged to standardize protections, proactively monitor, and adopt Zero Trust and multi-layered defense strategies to ensure resilience against evolving threats in 2026. A Practical Guide to Azure DDoS Protection Cost Optimization Team Blog: Azure Network Security Author: SaleemBseeu Published: 02/18/2026 Summary: The article provides strategies for optimizing Azure DDoS Protection costs. It explains the differences between DDoS Network Protection (best for large-scale, centralized management) and DDoS IP Protection (for few, specific endpoints). Key recommendations include consolidating protection plans to reduce base costs, selectively applying protection based on workload exposure, preventing unnecessary spend via regular reviews, and using cost management tools and tagging for visibility. The guide emphasizes aligning protection with actual risk and criticality, and offers scripts and checklists to support ongoing cost-efficient DDoS defense.Check This Out! (CTO!) Guide (February 2026)
Member: TysonPaul | Microsoft Community Hub Secure DNS with DoH: Public Preview for Windows DNS Server Team Blog: Networking Author: JorgeCañas Published: 02/09/2026 Summary: Microsoft has launched a public preview of DNS over HTTPS (DoH) for Windows DNS Server, available in the February 2026 update for Windows Server 2025. DoH encrypts DNS queries and responses, enhancing authentication and privacy while maintaining existing server functions. This move aligns with Zero Trust security principles and supports U.S. federal cybersecurity requirements. The feature is disabled by default, is not production-ready, and currently only encrypts client-to-server traffic. Feedback is encouraged during the preview phase, with future updates planned for upstream encryption support. Azure Blob Tiering: Clarity, Truths, and Practical Guidance for Architects Team Blog: Azure Infrastructure Author: nehatiwari1994 Published: 02/06/2026 Summary: The article explains Azure Blob Storage tiering for backup architects, debunking common misconceptions about tier performance and access. Hot, Cool, and Cold tiers are online and offer immediate data access; minimum retention is a billing rule, not a technical limit. Archive tier requires rehydration before restores. Restore speed depends on throughput architecture, not tier. Cost is influenced by both storage and access patterns. Effective tiering strategies and lifecycle policies are essential for scaling backup repositories from terabytes to petabytes, ensuring operational safety and cost control. The article offers practical design recommendations and clarifies Azure tier behaviors. AKS Tenant Migration: Considerations and Approach Team Blog: Azure Infrastructure Author: SoumyaShet05 Published: 02/05/2026 Summary: 321: No summary could be found for article: [AKS Tenant Migration: Considerations and Approach] [https://techcommunity.microsoft.com/blog/azureinfrastructureblog/aks-tenant-migration-considerations-and-approach/4415198]. What’s new in FinOps toolkit 13 – January 2026 Team Blog: FinOps Author: Michael_Flanakin Published: 02/09/2026 Summary: FinOps toolkit 13 (January 2026) delivers stability and usability improvements for cloud cost management, including enhanced documentation, Key Vault purge protection options, Power BI report fixes, and streamlined Cost Management exports via PowerShell with Parquet support. The release strengthens security, reliability, and extensibility for enterprise-scale deployments. Community engagement is emphasized with new office hours. Future plans include AI-driven automation, expanded recommendations, and premium support services. The toolkit remains open-source and continues to evolve with community contributions and ongoing enhancements across Microsoft Cloud environments. Reading GPSVC Like a Crime Novel Team Blog: Ask the Directory Services Team Author: Chris_Cartwright Published: 02/25/2026 Summary: The article, "Reading GPSVC Like a Crime Novel," explains how to troubleshoot Group Policy issues using the enhanced GPSVC debug log in modern Windows 11 versions. It details the two core phases of Group Policy processing, emphasizes the importance of following log threads, and highlights the benefit of new date and time stamps for better correlation with other events. The post also covers enabling verbose logging, interpreting log entries, and using additional tools like TSS for deeper analysis, ultimately making GPSVC logs more powerful for diagnosing Group Policy problems. What’s New in Windows Group Policy Preferences Debug Logging Team Blog: Ask the Directory Services Team Author: TagoreN Published: 02/27/2026 Summary: The article outlines enhancements to Windows Group Policy Preferences (GPP) debug logging in Windows 11 versions 24H2 and 25H2 (from February 2026 preview updates). Administrators can now enable verbose GPP debug logging directly via Local Group Policy, not just domain-based GPOs. This change simplifies troubleshooting, reduces reliance on domain controllers, and allows easier, flexible diagnostic workflows on client devices. The article explains how to configure logging settings, log locations, and necessary permissions, highlighting a significant quality-of-life improvement for IT professionals managing GPP issues. Azure Landing Zone and compliance for Banks (Indian Banks) Team Blog: Azure Migration and Modernization Author: srhulsus Published: 02/12/2026 Summary: **Summary:** Azure Landing Zone (ALZ) provides Indian banks with a secure, compliant, and auditable cloud foundation, aligning with RBI and global standards (ISO 27001, PCI-DSS, FFIEC). It features subscription isolation, centralized IAM, robust network and data security, mandatory encryption, continuous monitoring, and business continuity controls. ALZ ensures India data residency, policy automation, regulatory audit support, and secure exit management. The architecture is regulator-accepted and proven by major banks, supporting governance, risk, and compliance mandates for hosting sensitive, regulated banking workloads on Azure. Migrating Workloads from AWS to Azure: A Structured Approach for Cloud Architects Team Blog: Azure Migration and Modernization Author: rhack Published: 02/18/2026 Summary: The article outlines a structured, five-phase approach for migrating workloads from AWS to Azure, emphasizing a “like-for-like” architecture to minimize risk and complexity. Key phases include planning, preparation, execution, evaluation, and decommissioning, with blue/green deployment recommended for risk reduction. Success hinges on comprehensive documentation, stakeholder alignment, phased validation, and having the current workload team lead the migration. External partners can assist with planning but should not execute cutovers. Once stability on Azure is achieved, optimization can begin. Thorough preparation and collaboration are essential for a confident, disruption-free migration. How to enable HTTPS support for Microsoft Connected Cache for Enterprise and Education Team Blog: Intune Customer Success Author: Intune_Support_Team Published: 02/20/2026 Summary: Starting June 16, 2026, Intune will require HTTPS for Microsoft Connected Cache nodes serving Win32 apps. To retain bandwidth savings and localize content, admins must configure HTTPS on their Connected Cache servers by preparing a TLS certificate, generating a CSR on the node, signing it with a CA, importing the certificate, and validating HTTPS. The process is similar for Windows and Linux hosts. Regular certificate monitoring and renewal are necessary. Without HTTPS, devices will fall back to CDN. Improvements and fixes are underway, and early setup ensures readiness for the upcoming enforcement. Support tip: Resolve device noncompliance with Mobile Threat Defense partner apps Team Blog: Intune Customer Success Author: Intune_Support_Team Published: 02/02/2026 Summary: The article explains how to resolve device noncompliance issues in Microsoft Intune when using Mobile Threat Defense (MTD) partner apps like Microsoft Defender for Endpoint. It outlines steps for users to restore compliance, including installing or activating the MTD app, refreshing the app’s connection, or reinstalling it. It also details simplified remediation for iOS/iPadOS and steps to refresh the MTD connection on Android if sign-out is blocked. The guidance helps organizations ensure device compliance and secure access to work or school resources while reducing support overhead. Announcing Public Preview: Simplified Machine Provisioning for Azure Local Team Blog: Azure Arc Author: PragyaDwivedi Published: 02/26/2026 Summary: Microsoft has announced the public preview of Simplified Machine Provisioning for Azure Local, streamlining edge infrastructure deployment by shifting configuration to Azure. IT teams can now centrally define and automate provisioning using Azure Arc, with minimal onsite interaction—staff only need to rack, power on hardware, and use a prepared USB. Built on the FIDO Device Onboarding standard, this approach ensures secure, consistent device onboarding and management at scale, with end-to-end deployment visibility. This new process enables faster, less error-prone deployments, allowing organizations to efficiently provision and manage Azure Local infrastructure across multiple sites. Unlock outbound traffic insights with Azure StandardV2 NAT Gateway flow logs Team Blog: Azure Networking Author: cozhang Published: 02/06/2026 Summary: The article introduces the Azure StandardV2 NAT Gateway, highlighting new features such as zone-redundancy, enhanced throughput, dual-stack IP support, and the availability of flow logs. Flow logs provide detailed outbound traffic data, improving security, compliance, and troubleshooting. They help monitor traffic patterns, identify issues like connection drops, and optimize network architecture. The article explains enabling and using flow logs for diagnostics, emphasizing their value in validating connectivity and auditing outbound flows, and encourages users to leverage these insights for resilient Azure deployments. Migration, Modernization & Agentic Tools Team Blog: ITOps Talk Author: OrinThomas Published: 02/25/2026 Summary: The article discusses how agentic tools are transforming cloud migration and modernization by introducing autonomy, continuous optimization, and context-aware decision-making. Rather than a one-time process, migration becomes an ongoing, self-improving system with tools like Azure Copilot and GitHub Copilot. These tools automate environment discovery, recommend modernization paths, execute migrations, validate and optimize workloads, and ensure governance. They classify workloads, automate migration waves, and continuously enhance cost, performance, security, and compliance, reducing manual effort and errors while enabling safe, efficient, and policy-driven cloud transitions. Automating Large‑Scale Data Management with Azure Storage Actions Team Blog: ITOps Talk Author: 1Nataraj Published: 02/25/2026 Summary: Azure Storage Actions is a fully managed, serverless automation platform that enables customers to automate large-scale data management tasks—such as tiering, tagging, deletion, and applying immutability policies—across Azure Blob Storage and Data Lake Storage without custom code or infrastructure. It uses reusable, condition-based storage tasks and assignments, supporting compliance, cost optimization, and operational efficiency. The platform provides built-in monitoring, auditing, and preview features, making it suitable for scenarios requiring traceability. Common use cases include regulatory compliance, cost control, and metadata management across industries like finance, airlines, and manufacturing. Securing A Multi-Agent AI Solution Focused on User Context & the Complexities of On-Behalf-Of. Team Blog: Azure Architecture Author: Charles_Chukwudozie Published: 02/11/2026 Summary: The article outlines how an enterprise-grade multi-agent AI system was designed to securely preserve user identity and enforce access controls when AI agents interact with backend services like Databricks. By implementing Microsoft Entra ID’s On-Behalf-Of (OBO) flow, each AI agent operates strictly within the authenticated user’s permissions, maintaining RBAC policies and an audit trail. The solution uses a custom OAuth provider, per-user agent instances, and human-in-the-loop approval for sensitive operations, aligning with Zero Trust principles and ensuring robust AI governance for enterprise applications. Reference Architecture for Highly Available Multi-Region Azure Kubernetes Service (AKS) Team Blog: Azure Architecture Author: rgarofalo Published: 02/03/2026 Summary: This article presents a reference architecture for deploying Azure Kubernetes Service (AKS) across multiple Azure regions to maximize availability and resilience. It compares active/active, active/passive, and deployment stamp patterns, detailing trade-offs in availability, complexity, and cost. Key components include Azure Front Door for global routing, geo-replicated data services, centralized monitoring, and consistent security. The article emphasizes clear design choices, regular testing, and operational preparedness, highlighting that multi-region resilience requires coordinated patterns, not a simple switch, and should align with business RTO/RPO objectives and operational maturity. Public Preview: Restrict usage of user delegation SAS to an Entra ID identity Team Blog: Azure Storage Author: ellievail Published: 02/26/2026 Summary: Microsoft has announced the public preview of user-bound user delegation SAS for Azure Storage, enhancing security by restricting SAS token usage to a specific Microsoft Entra ID identity. This extension of user delegation SAS ensures only the designated user can access storage resources, reducing the risk of unintended access. The feature is available at no additional cost in all public regions and supports cross-tenant scenarios. It integrates with existing Azure RBAC and is accessible via REST APIs, SDKs, PowerShell, and CLI. Setup involves assigning the correct roles, obtaining user IDs, and generating the SAS token. Azure Migrate: Now Supporting Premium SSD V2, Ultra and ZRS Disks as Targets Team Blog: Azure Storage Author: Lakshya_Jalan Published: 02/18/2026 Summary: 321: No summary could be found for article: [Azure Migrate: Now Supporting Premium SSD V2, Ultra and ZRS Disks as Targets] [https://techcommunity.microsoft.com/blog/azurestorageblog/azure-migrate-now-supporting-premium-ssd-v2-ultra-and-zrs-disks-as-targets/4495332]. Bringing AI fluency to every corner of the organization (even yours!) Team Blog: Microsoft Learn Author: AshleyMastersHall Published: 02/19/2026 Summary: The article emphasizes the importance of AI fluency for all roles within organizations, likening AI’s impact to the transformative effect of GPS on navigation. It defines AI fluency as understanding and effectively using generative AI in care tasks, now a critical skill for the modern workplace. The author provides practical, approachable steps to integrate AI into daily workflows, recommends starting small, and highlights Microsoft’s AI Skills Navigator as a resource. The core message: AI is already changing work, and building fluency—starting with familiar tasks—ensures continued relevance and success. Microsoft Credentials roundup: February 2026 edition Team Blog: Microsoft Learn Author: PujaA Published: 02/26/2026 Summary: Microsoft’s February 2026 Credentials roundup introduces four new AI-focused Certifications and six new Applied Skills, targeting both technical and business professionals. These credentials validate expertise in AI integration, Copilot, and agent solutions, enhancing career prospects in an AI-powered workplace. Applied Skills offer quick, practical assessments in real-world AI tasks. Several older Certifications and Applied Skills are being retired, reflecting Microsoft’s ongoing commitment to current, relevant skills. Additional AI-focused updates are planned for March 2026 and beyond, further expanding learning and credentialing opportunities in AI and cloud technologies. Public Preview: Automatic zone balance for Virtual Machine Scale Sets Team Blog: Azure Compute Author: HilaryWang Published: 02/17/2026 Summary: Azure has introduced the public preview of automatic zone balance for Virtual Machine Scale Sets, which ensures VMs are evenly distributed across availability zones with no manual intervention. This feature continuously monitors and rebalances VMs, minimizing the impact of zone failures and maintaining optimal resiliency. It uses a create-before-delete approach with health checks and built-in safety measures, reducing operational overhead and ensuring workload stability. Automatic instance repairs are enabled by default. To use this feature, register for the preview, meet prerequisites, and enable it via the Azure portal, CLI, PowerShell, or REST API. Azure Automated Virtual Machine Recovery: Minimizing Downtime Team Blog: Azure Compute Author: Jon_Andoni_Baranda Published: 02/04/2026 Summary: Azure Automated Virtual Machine Recovery is a built-in Azure feature designed to minimize VM downtime by automatically detecting, diagnosing, and mitigating failures within seconds, without customer intervention. It operates continuously, leveraging multiple detection mechanisms and optimized recovery paths, ensuring business continuity and consistent SLA compliance. Recovery Event Annotations provide deep visibility into the recovery process, helping identify bottlenecks and improve reliability. Over the past 18 months, this system has halved average VM downtime, empowering customers to confidently run resilient applications with reduced risk of service disruption and financial loss. No setup is required; all Azure VMs benefit automatically. Azure CLI Windows MSI Upgrade Issue: Root Cause, Mitigation, and Performance Improvements Team Blog: Azure Tools Author: Alex-wdy Published: 02/03/2026 Summary:Check This Out! (CTO!) Guide (January 2026)
Member: TysonPaul | Microsoft Community Hub From classroom to workforce: Helping higher ed faculty prepare students for what’s next Team Blog: Microsoft Learn Author: RWortmanMorris Published: 01/15/2026 Summary: Microsoft is partnering with higher education institutions to prepare students and faculty for an AI-driven workforce. Through tools like AI Skills Navigator, Microsoft Learn for Educators, and the Microsoft Student Ambassadors program, they offer free, flexible training, credentials, and community support to develop practical AI and digital skills. These initiatives help faculty integrate AI into teaching, empower students with job-ready skills, and provide recognized certifications valued by employers. Microsoft also provides free access to Microsoft 365 and LinkedIn Premium, aiming to support lifelong learning, teaching innovation, and successful career pathways in the evolving educational landscape. Azure Arc Portal Update: Simplifying Onboarding and Management at Scale Team Blog: Azure Migration and Modernization Author: MarcoB Published: 01/16/2026 Summary: The updated Azure Arc portal streamlines onboarding and management of hybrid and multi-cloud resources. Key improvements include a redesigned landing page, guided onboarding via interactive questionnaires, and unified machine onboarding flows for greater simplicity. Navigation is reorganized for better clarity, and dashboards now offer adaptive summaries and actionable insights, transforming management tasks into intuitive actions. These enhancements aim to make Azure Arc more accessible and scalable, enabling users to efficiently manage external resources and focus on delivering business value instead of dealing with complexity. Resolve-DnsName vs. nslookup in Windows Team Blog: Networking Author: JamesKehr Published: 01/08/2026 Summary: The article compares nslookup and Resolve-DnsName for DNS troubleshooting in Windows. Nslookup is widely used but operates independently of Windows DNS client resolver, potentially causing inaccurate results due to quirks like DNS suffix handling and lack of support for modern DNS features. Resolve-DnsName, a PowerShell cmdlet, integrates with Windows DNS-CR, providing accurate results, support for DNSSEC, secure DNS, and flexible parameters. For Windows-centric troubleshooting and automation, Resolve-DnsName is recommended, while nslookup remains useful for basic queries and diagnosing DNS client issues. Understanding their differences ensures reliable DNS troubleshooting. Data Center Quantized Congestion Notification: Scaling congestion control for RoCE RDMA in Azure Team Blog: Azure Networking Author: VamsiVadlamuri Published: 01/13/2026 Summary: Microsoft Azure uses Data Center Quantized Congestion Notification (DCQCN) to enable high-throughput, low-latency RDMA-based storage across its global data centers. DCQCN, combined with Priority Flow Control, dynamically manages congestion using ECN-based feedback, ensuring reliable performance even with diverse hardware and network conditions. Azure addressed interoperability challenges between NIC generations by tuning DCQCN parameters and optimizing feedback mechanisms. As a result, Azure achieves line-rate RDMA performance, significant CPU savings, reduced latency, and near-zero packet loss, making DCQCN essential for scalable and resilient cloud storage infrastructure. What is going on with RC4 in Kerberos? Team Blog: Ask the Directory Services Team Author: WillAftring Published: 01/26/2026 Summary: Microsoft is phasing out RC4 usage in Kerberos authentication due to security concerns, with major changes starting in January 2026. RC4 will be removed as a default encryption type, and new auditing tools will help identify dependencies. Enforcement begins April 2026, with rollback options until July 2026. While DES is already removed, RC4 remains supported for critical legacy needs if properly configured. Microsoft encourages users to migrate away from RC4 and offers resources and support for environments still dependent on it. Redis Keys Statistics Team Blog: Azure PaaS Author: LuisFilipe Published: 01/21/2026 Summary: The article explains how to gather Redis key statistics, focusing on Time-to-Live (TTL) and key size, to troubleshoot cache usage and performance. It provides two Bash+LUA script solutions: one for key statistics (counting keys by TTL and size thresholds), and another for listing key names meeting specified TTL and size criteria. The article highlights the importance of managing TTL and key sizes for optimal Redis performance and warns that running these scripts can impact Redis workloads due to their need to scan all keys. Usage instructions, parameters, and performance considerations are detailed. Azure Arc Server Jan 2026 Forum Recap Team Blog: Azure Arc Author: Aurnov_Chattopadhyay Published: 01/20/2026 Summary: The January 2026 Azure Arc Server Forum highlighted new machine management features in Azure Compute Hub, updates on Windows Server Hot Patch and its billing, a preview of TPM-based onboarding to Azure Arc, and a recap of major 2025 SQL Server announcements. Attendees are encouraged to stay updated with the latest Arc agent, provide feedback, and register for SQL Con 2026. The session’s recording is available on YouTube, and registration for future forums and newsletters is open, with the next session scheduled for February 19, 2026. Azure File Sync: Azure Arc Integration, Additional Regions, and Secure Syncing Team Blog: Azure Storage Author: grace_kim Published: 01/16/2026 Summary: Azure File Sync now integrates with Azure Arc, enabling simplified deployment and management of hybrid file services. The service expands to four new regions—Italy North, New Zealand North, Poland Central, and Spain Central—offering improved regional data residency and performance. Enhanced security is provided through managed identities, eliminating the need for manual credential management. From January 2026, File Sync will incur no per-server cost for Windows Server Software Assurance customers using Azure Arc and File Sync agent v22+. These updates streamline onboarding, ensure secure access, and support scalable, predictable hybrid storage solutions. Announcing Public Preview of User delegation SAS for Azure Tables, Azure Files, and Azure Queues Team Blog: Azure Storage Author: ellievail Published: 01/16/2026 Summary: Microsoft has announced the public preview of user delegation SAS (UD SAS) for Azure Tables, Azure Files, and Azure Queues in all regions, expanding secure access beyond Azure Blobs. UD SAS ties SAS tokens to user identities via Entra ID and RBAC, enabling more granular, delegated access to storage resources. There’s no additional cost, and it’s available through REST APIs, SDKs, PowerShell, and CLI. Eligible storage accounts can use UD SAS without special settings, and setup involves assigning RBAC roles, obtaining a user delegation key, creating the SAS token, and sharing it securely. Deploy PostgreSQL on Azure VMs with Azure NetApp Files: Production-Ready Infrastructure as Code Team Blog: Azure Architecture Author: GeertVanTeylingen Published: 01/15/2026 Summary: The article details how deploying PostgreSQL on Azure VMs with Azure NetApp Files is simplified using production-ready Infrastructure as Code (IaC) templates. These templates automate setup, optimize storage performance, and enhance security, eliminating manual configuration and reducing deployment time from hours to minutes. Teams can use Terraform, ARM templates, or PowerShell for flexible, repeatable workflows across development and production environments. Key benefits include consistent environments, enterprise-grade features, rapid provisioning, cost efficiency, and support for AI/ML workloads and database migrations. The solution ensures scalable, secure, and high-performance PostgreSQL deployments on Azure. Unlocking Advanced Data Analytics & AI with Azure NetApp Files object REST API Team Blog: Azure Architecture Author: GeertVanTeylingen Published: 01/15/2026 Summary: The article details how the Azure NetApp Files object REST API enables S3-compatible object access to enterprise file data stored on Azure NetApp Files, eliminating the need for data copying or restructuring. This dual-access approach allows analytics and AI platforms, including Azure Databricks and Microsoft OneLake, to operate directly on NFS/SMB datasets, preserving performance, security, and governance. Integration scenarios, technical implementation, and video guides are provided to help organizations streamline data architectures, minimize data movement, and accelerate real-time insights across analytics and AI workflows. Release of Bicep Azure Verified Modules for Platform Landing Zone Team Blog: Azure Tools Author: ztrocinski Published: 01/20/2026 Summary: **Summary:** Microsoft has released Azure Verified Modules (AVM) for Platform Landing Zones using Bicep, providing a modular, customizable, and officially supported approach to Infrastructure as Code (IaC). The framework features 19 independently managed modules, supports full configuration, and integrates Azure Deployment Stacks for improved resource lifecycle management. Bicep AVM replaces classic ALZ-Bicep, which will be deprecated by 2027. Key benefits include end-to-end customization, faster innovation, independent policy management, and modernized parameter files, making Azure deployments more flexible, maintainable, and aligned with enterprise best practices. Migration guidance will be provided for existing users. Improving Efficiency through Adaptive CPU Uncore Power Management Team Blog: Azure Compute Author: PulkitMisra Published: 01/21/2026 Summary: The article discusses Microsoft Azure’s adoption of adaptive CPU uncore power management, focusing on Efficiency Latency Control (ELC) co-designed with Intel for Xeon 6 processors. ELC enables dynamic adjustment of uncore frequency based on CPU utilization, improving power efficiency without sacrificing performance. Real-world tests show up to 11% power savings at moderate loads and 1.5× performance-per-watt improvements at low loads. This approach allows Azure to deploy more servers within existing datacenter power constraints, enhancing sustainability and responsiveness to evolving cloud workload demands through hardware–software co-design. Announcing General Availability of Azure Da/Ea/Fasv7-series VMs based on AMD ‘Turin’ processors Team Blog: Azure Compute Author: ArpitaChatterjee Published: 01/27/2026 Summary: Microsoft has announced the general availability of Azure’s new AMD-based Da/Ea/Fasv7-series Virtual Machines powered by 5th Gen AMD EPYC ‘Turin’ processors. These VMs offer improved CPU performance, scalability, memory capacity, network, and storage throughput, with up to 35% better price-performance than previous AMD v6 VMs. They cater to diverse workloads, including general, memory, and compute-intensive tasks, and feature enhanced security and flexible configurations. Available across multiple Azure regions, these VMs deliver significant workload-specific gains and are praised by customers and technology partners for performance and efficiency improvements. Determine Defender for Endpoint offboarding state for Linux devices Team Blog: Core Infrastructure and Security Author: edgarus71 Published: 01/21/2026 Summary: The article describes a method for quickly determining the Microsoft Defender for Endpoint onboarding or offboarding state on Linux devices. Since the Defender portal can take up to 7 days to update offboarding status, a provided Bash script checks key indicators such as the onboarding file, Defender package installation, and service status. The script outputs whether the device is "ONBOARDED" or "OFFBOARDED," streamlining endpoint management and troubleshooting. It can be deployed at scale via Linux management tools and also run remotely from the Live Response console for onboarded devices. Conditional Access for Agent Identities in Microsoft Entra Team Blog: Core Infrastructure and Security Author: Farooque Published: 01/27/2026 Summary: Microsoft Entra introduces Agent Identities for AI systems and extends Conditional Access to them, but with limited controls compared to human users. Currently, Conditional Access only allows blocking agent identities and assessing agent risk during token acquisition, without supporting MFA, device compliance, or session controls. This is due to agents’ machine-driven authentication methods. Despite limitations, Conditional Access helps prevent compromised agents, enforce separation of duties, and manage AI sprawl. Agent Blueprints are not governed by Conditional Access. Future enhancements are expected, but for now, CA remains a minimal, identity-focused security layer for AI agents. Announcing Azure CycleCloud Workspace for Slurm: Version 2025.12.01 Release Team Blog: Azure High Performance Computing (HPC) Author: xpillons Published: 01/07/2026 Summary: The 2025.12.01 release of Azure CycleCloud Workspace for Slurm introduces integrated Prometheus monitoring with managed Grafana dashboards, Entra ID Single Sign-On for secure authentication, support for ARM64 compute nodes, and compatibility with Ubuntu 24.04 and AlmaLinux 9. These enhancements streamline HPC cluster management, improve security, and offer real-time performance insights, empowering technical teams to build scalable and efficient environments. The update simplifies monitoring setup and user access, reinforcing Azure’s commitment to flexible, secure, and innovative HPC solutions for scientific and technical communities. Scaling physics-based digital twins: Neural Concept on Azure delivers a New Record in Industrial AI Team Blog: Azure High Performance Computing (HPC) Author: lmiroslaw Published: 01/12/2026 Summary: Neural Concept, leveraging Azure HPC infrastructure, achieved record-breaking accuracy and efficiency in automotive aerodynamic predictions using MIT’s DrivAerNet++ dataset. Their geometry-native Geometric Regressor outperformed all previous methods in predicting surface pressure, wall shear stress, velocity fields, and drag coefficients. The workflow transformed 39TB of CFD data into a production-ready model within a week, enabling real-time predictions and significantly shortening design cycles. Customers have realized up to 30% faster development and $20M savings per 100,000 vehicles. This demonstrates the industrial impact of scalable, AI-driven engineering workflows in automotive design. Intune my Macs: Accelerating macOS proof of concepts with Microsoft Intune Team Blog: Intune Customer Success Author: Intune_Support_Team Published: 01/22/2026 Summary: Intune my Macs is an open-source starter kit from Microsoft that streamlines macOS management proof of concepts using Intune. It deploys over 31 recommended enterprise configurations—including security, compliance, identity, and applications—via a single PowerShell script, operating in dry-run mode by default. The project helps organizations quickly evaluate and implement Intune for macOS, offers practical configuration examples, reduces setup time to minutes, and includes documentation and analysis tools. It’s ideal for learning, testing, and customizing Intune policies for macOS environments, saving significant time and effort. Silicon to Systems: How Microsoft Engineers AI Infrastructure from the Ground Up Team Blog: Azure Infrastructure Author: Alistair_Speirs Published: 01/27/2026 Summary: The article details how Microsoft engineers its AI infrastructure by designing custom silicon, servers, accelerators, and data centers as an integrated system optimized for performance, power efficiency, and cost. Highlighting custom chips like Cobalt 200 and the Maia AI Accelerator platform, Microsoft emphasizes purpose-built hardware, advanced cooling solutions, and end-to-end system integration. This approach ensures reliable, efficient AI workloads at global scale, powering services like Copilot and Teams. The engineering process involves close coordination between hardware and software development, from silicon design to datacenter deployment, prioritizing power and thermal management throughout. Deep dive into the Maia 200 architecture Team Blog: Azure Infrastructure Author: sdighe Published: 01/26/2026 Summary: Maia 200 is Microsoft’s first custom AI inference accelerator, designed for efficiency and scalability in Azure. It features advanced silicon, memory hierarchy, and data movement architecture, delivering 30% better performance per dollar than previous hardware. Optimized for narrow precision arithmetic and large language models, Maia 200 supports high-throughput, low-latency inference, and integrates seamlessly with Azure’s cloud infrastructure and developer tools. Its innovative interconnect and software stack enable reliable, scalable multi-tenant AI deployments, powering workloads like GPT-5.2 in Microsoft Foundry and 365 Copilot. Maia 200 sets a new standard for cloud-native, cost-effective AI inference.Check This Out! (CTO!) Guide (December 2025)
Member: TysonPaul | Microsoft Community Hub System Center 2025 Update Rollup 1 and more Team Blog: System Center Author: AakashMSFT Published: 12/11/2025 Summary: System Center 2025 Update Rollup 1 (UR1) is now available, delivering enhanced security with TLS v1.3, support for SQL Server 2025, and expanded monitoring for new Linux distributions. Key improvements include issue fixes and new features across Operations Manager, Data Protection Manager, Service Manager, and Orchestrator, such as selective Hyper-V disk backup, Exchange Subscription Edition support, and improved stability. Updates also ensure GB18030-2022 compliance for Chinese characters. Ongoing hotfixes for System Center 2022 maintain security and compatibility. An Update Rollup for Virtual Machine Manager 2025 is forthcoming. Automating Windows Server Licensing Benefits with Azure Arc Policy Team Blog: Core Infrastructure and Security Author: jpigott Published: 12/22/2025 Summary: The article explains how automating Windows Server licensing with Azure Arc Policy streamlines compliance and management across hybrid environments. By deploying the policy, organizations can automatically enable licensing benefits—such as Azure Update Manager and Windows Admin Center—for all eligible Arc-enabled Windows Servers. The policy evaluates license status, applies appropriate profiles for Software Assurance or Pay-As-You-Go, and enables remediation for non-compliant machines. This reduces manual effort, minimizes errors, and ensures consistent, scalable licensing compliance for large server estates. Deployment and remediation steps are provided using Azure Policy and PowerShell. Empower Your Cloud Identity: How to Convert User SOA from AD to Entra ID Team Blog: Core Infrastructure and Security Author: Farooque Published: 12/15/2025 Summary: The article explains how shifting the Source of Authority (SOA) for users from on-premises Active Directory (AD) to Microsoft Entra ID enables organizations to fully leverage cloud-based identity management, security, and governance. This change removes AD dependencies, streamlines HR provisioning, and reduces the attack surface. The technical process is simple—a single attribute change via API—but requires careful planning, especially as changes in Entra ID won’t sync back to AD. Organizations must consider scenarios for retaining on-premises access and follow a checklist for a successful migration to a cloud-first identity model. Private Preview: Azure Managed Prometheus on VM / VMSS Team Blog: Azure High Performance Computing (HPC) Author: Daramfon Published: 12/11/2025 Summary: Azure Managed Prometheus now supports monitoring for virtual machines (VMs) and virtual machine scale sets (VMSS), extending beyond container workloads. This private preview enables unified, scalable metric collection—including GPU and InfiniBand—for HPC scenarios. Metrics are stored in Azure Monitor, and users gain a fully managed Prometheus experience with scraping, PromQL, alerting, and dashboards via Azure Managed Grafana. Customers can monitor mixed environments (AKS, VMSS, VMs) without managing backend infrastructure. Access requires subscription allowlisting, with onboarding and feedback managed through a GitHub repository. Automating HPC Workflows with Copilot Agents Team Blog: Azure High Performance Computing (HPC) Author: xpillons Published: 12/03/2025 Summary: Copilot Agents use AI to automate the creation of Slurm job submission scripts for High Performance Computing (HPC) workflows, reducing manual effort, errors, and delays. By interpreting user-provided context and applying best practices, Copilot quickly generates precise scripts, enabling researchers to focus on analysis rather than troubleshooting. The system supports iterative improvement and validation, increasing reliability and scalability. Automation benefits include faster script generation, minimized errors, improved consistency, and greater accessibility for new users, making HPC workloads more efficient and user-friendly. Deploying Windows Servers in an Azure Availability Set Team Blog: ITOps Talk Author: OrinThomas Published: 12/08/2025 Summary: This guide explains how to deploy Windows Server virtual machines in an Azure Availability Set to enhance reliability for IIS workloads. It details creating a resource group, configuring VMs with Premium SSDs for high SLAs, and assigning them to availability sets at creation for fault and update domain protection. Security settings such as disabling inbound ports and boot diagnostics are recommended. The process is repeated for additional VMs within the same set and network. Future guidance will address load balancing with Azure Application Gateway and security against DDoS and OWASP threats. Anatomy of an Outage: How Microsoft focuses on Transparency during and post incident Team Blog: ITOps Talk Author: Rick Claus Published: 12/16/2025 Summary: The article details Microsoft Azure’s approach to outage transparency, emphasizing rapid detection, clear communication, and post-incident learning. It highlights Azure’s five communication pillars—speed, accuracy, discoverability, parity, and transparency—and the importance of Azure Service Health for tailored incident alerts. The process covers pre-incident monitoring, equitable real-time updates, and thorough, blame-free post-incident reviews. Microsoft’s transparency culture and tools like Service Health empower infrastructure teams to respond effectively to outages. The key recommendation: proactively configure Azure Service Health to ensure timely, actionable notifications for your organization’s critical workloads. Protect against React RSC CVE-2025-55182 with Azure Web Application Firewall (WAF) Team Blog: Azure Network Security Author: yuvalpery Published: 12/04/2025 Summary: On December 3, 2025, a critical remote code execution vulnerability (CVE-2025-55182) was disclosed in React Server Components, affecting several React versions. Attackers can exploit unsafe deserialization to execute arbitrary server code. Immediate upgrading to patched React releases is strongly advised. For additional protection, Azure Web Application Firewall (WAF) users should enable the latest Default Rule Set (DRS) 2.1 or implement provided custom WAF rules to block exploit patterns. The article details rule configurations for Azure Application Gateway, Containers, and Front Door, and recommends validating custom rules before production deployment. Application layer DDoS protection using the HTTP DDoS Ruleset in Azure WAF Team Blog: Azure Network Security Author: saikishor Published: 12/18/2025 Summary: The article discusses Azure Application Gateway WAF’s HTTP DDoS Ruleset, which provides adaptive, application-layer protection against sophisticated HTTP-based DDoS attacks, such as floods, API abuse, and slow HTTP attacks. By learning normal traffic baselines, using dynamic detection, and leveraging Microsoft’s global threat intelligence, the ruleset can automatically identify and block abnormal client behavior. Metrics and logs offer visibility into mitigated threats. Sensitivity settings balance detection and false positives. The solution is easy to enable and integrates with existing WAF policies, helping organizations proactively defend against evolving application-layer DDoS threats. Scaling Azure Compute for Performance Team Blog: Azure Compute Author: DanaCozmei Published: 12/02/2025 Summary: The article highlights Azure Compute’s new features unveiled at Ignite 2025, aimed at supporting demanding workloads like AI, analytics, and globally distributed apps. Key advancements include Direct Virtualization for low-latency GPU/NVMe access, large containers for accelerated AI/ML, VM Applications for streamlined global deployments, Scheduled Actions for automation, enhanced resiliency via Azure Compute Gallery, and flexible VMSS Instance Mix for capacity scaling. These innovations enable intelligent, adaptive infrastructure, simplifying operations and boosting performance, cost-efficiency, and reliability for customers driving next-generation cloud solutions. Windows on Arm runs more apps and games with new Prism update Team Blog: Windows OS Platform Author: Marc_Sweetgall Published: 12/05/2025 Summary: The latest Prism update boosts Windows on Arm devices by expanding support for more x86 instruction set extensions, including AVX and AVX2, enabling additional apps and games—especially creative tools—to run under emulation. This update allows previously incompatible software, such as Ableton Live 12, to install and operate smoothly. The improvements are available for all Windows on Arm devices running Windows 11, version 24H2 or later, with enhanced emulation for 64-bit apps by default and optional support for 32-bit apps. Microsoft remains committed to further enhancing Prism emulation capabilities. Announcing Support for S2D and SAN Coexistence Team Blog: Failover Clustering Author: Rob-Hindman Published: 12/04/2025 Summary: Microsoft has announced support for using Storage Spaces Direct (S2D) and SAN storage together in a single Windows Server 2022/2025 failover cluster. This allows customers to combine S2D Cluster Shared Volumes (CSVs) with SAN CSVs, enabling flexible migration, backup, and data management for workloads, including AI and ML. Both storage types can be validated and managed in one cluster, with specific formatting requirements for each. This update responds to customer feedback and enhances options for virtualization and data protection without VM disruption. Announcing Support for S2D Campus Cluster on Windows Server 2025 Team Blog: Failover Clustering Author: Rob-Hindman Published: 12/11/2025 Summary: Microsoft announced support for S2D Campus Cluster in Windows Server 2025, enabling resilient storage solutions across two racks within a campus, such as hospitals or schools. With the 2025-12 Security Update (KB5072033), features like Rack Level Nested Mirror (RLNM) enhance data resiliency, allowing survival of rack and node failures. The configuration offers tradeoffs between cost and performance, requires SSD/NVMe drives, and specific networking setups. Guidance and PowerShell scripts are provided for deployment. The article acknowledges MVP contributions and addresses FAQs about supported cluster sizes, volume limits, and infrastructure recommendations. Key Considerations for Modernizing and Migrating Custom Applications to Azure Team Blog: Azure Migration and Modernization Author: srhulsus Published: 12/12/2025 Summary: The article outlines essential steps for migrating and modernizing custom applications to Azure. Key considerations include assessing current applications, choosing suitable migration strategies, modernizing compute and databases, designing secure architectures, ensuring high availability, adopting DevOps, monitoring operations, managing costs, and conducting thorough testing. Azure’s cloud-native services and AI-driven tools, such as Azure Migrate and GitHub Copilot, streamline migration, optimize performance, enhance security, and accelerate modernization, helping organizations transition smoothly while improving reliability, scalability, and cost efficiency. Migrate from Amazon API Gateway to Azure API Management Team Blog: Azure Migration and Modernization Author: dan_lepow Published: 12/04/2025 Summary: The article provides a comprehensive guide for migrating from Amazon API Gateway to Azure API Management. It includes detailed feature mapping between AWS and Azure, covers infrastructure, API workloads, and configurations, and offers workarounds where direct equivalents are lacking. The guide outlines assessment and preparation steps, a phased migration process to minimize risk, and post-migration optimization. It features an architecture-focused example for healthcare APIs and references additional resources for migrating other AWS workloads to Azure. The guide aims to help teams plan, implement, and validate a seamless API migration. Azure Arc Server Forum: 2026 Updates Team Blog: Azure Arc Author: Aurnov_Chattopadhyay Published: 12/08/2025 Summary: The Azure Arc Server Forum enters its fourth year in 2026, with monthly sessions held every third Thursday (except July and December) featuring live demos, Q&A, and feedback opportunities on Windows, Linux, and SQL Server management across hybrid, multicloud, and edge environments. Participants receive a monthly newsletter with updates on new capabilities, agent improvements, and opportunities to influence the product roadmap. Forum recordings are available on YouTube within 2-3 weeks, and registration is open via the provided link. Azure Arc Monthly Forum Recap – November 2025 Team Blog: Azure Arc Author: yunishussein Published: 12/17/2025 Summary: The November 2025 Azure Arc Monthly Forum recap covers key previews and updates: Auto Agent Upgrade (public preview) enables automatic AZCM agent updates; Essential Machine Management (private preview) offers unified machine management; Machine Configuration – CIS Baseline Compliance (public preview) allows advanced baseline management via Azure Policy. FAQs clarify EMM coverage, Operations Center branding, training resources, and cost details. Security baseline updates and Linux support in guest configuration are planned. Feedback channels and documentation links are provided for each feature. Verified skills, real impact: Microsoft Credentials help you get AI-ready Team Blog: Microsoft Learn Author: ElisaGraceffo Published: 12/12/2025 Summary: AI is transforming business across all roles, making verified skills essential for individuals and organizations. Microsoft Credentials—including Certifications and Applied Skills—help validate and showcase AI expertise, boosting career growth and organizational readiness. Microsoft has expanded its credentials portfolio to include business-focused and technical AI skills, now accessible to a broader audience. EPAM Systems demonstrates how these credentials create competitive advantage. The new AI Skills Navigator streamlines skill development, helping users build personalized learning paths and ensuring teams are AI-ready in today’s rapidly evolving workplace. Secure, Seamless Access using Managed Identities with Azure Files SMB Team Blog: Azure Storage Author: Priyanka-Gangal Published: 12/15/2025 Summary: Azure Files SMB now supports Managed Identities in public preview, enabling secure, credential-free, identity-based access integrated with Microsoft Entra ID. This eliminates the need for storage account keys, aligns with Zero Trust principles, and provides built-in RBAC, compliance with FIPS, and multi-client support across Windows and Linux. Key benefits include enhanced security for CI/CD pipelines and AKS workloads, simplified compliance, and streamlined configuration. The feature is available at no additional cost and aims to help organizations achieve enterprise-grade security and governance for file share access across cloud-native and hybrid environments. Transforming Data migration using Azure Copilot Team Blog: Azure Storage Author: madhurinrao Published: 12/11/2025 Summary: Azure Copilot’s new Storage Migration Solutions Advisor streamlines data migration to Azure by providing conversational, AI-driven guidance. It recommends optimal migration tools—both Microsoft-native and third-party—based on user-specific scenarios, such as data size, protocol, and bandwidth. This reduces complexity, speeds decision-making, and minimizes migration risks across on-premises, cloud-to-cloud, and hybrid environments. Users interact via prompts, receive tailored recommendations, and access relevant documentation, making migrations more efficient and less error-prone. Pro tips include running proof-of-concept migrations and leveraging Azure Storage Discovery for post-migration insights. Azure Policy: Required Actions for Docker Content Trust Deprecation in Azure Container Registry Team Blog: Azure Governance and Management Author: ShannonHicks Published: 12/17/2025 Summary: Azure Container Registry (ACR) is deprecating the Docker Content Trust (DCT) feature over three years, which will remove the trustPolicy property from APIs and affect related Azure Policy aliases. No built-in policies use these aliases, but custom policies referencing them must be updated or removed to avoid compliance issues. Policies using trustPolicy.status will break when the property is deleted. Users should identify affected policies, update or remove them, test changes, and monitor Azure documentation for further updates on transitioning to the Notary Project. Announcing General Availability for Azure Resource Graph (ARG) GET/LIST API Team Blog: Azure Governance and Management Author: JaspreetKaur Published: 12/03/2025 Summary: The Azure Resource Graph (ARG) GET/LIST API is now generally available, offering a 10X increase in throttling quotas for resource lookups compared to standard ARG queries. This API enables scalable, high-performance GET and LIST operations, reducing read throttling and improving reliability for high-volume scenarios. By appending the “useResourceGraph=true” parameter, users can route requests to the optimized ARG backend. It’s ideal for retrieving or listing resources within a single scope and is currently supported for the resources and computeresources tables. The switch to ARG GET/LIST API is fully controlled by the caller. Microsoft Agent Pre-Purchase Plan: One Unified Path to Scale AI Agents Team Blog: FinOps Author: kyleikeda Published: 12/08/2025 Summary: The Microsoft Agent Pre-Purchase Plan (P3) offers organizations a unified, upfront payment model for deploying AI agents across both Microsoft Foundry and Copilot Studio, leveraging Work IQ, Fabric IQ, and Foundry IQ. P3 simplifies procurement, budget management, and access to over 32 agentic services, while delivering predictable savings and flexibility. With a single pool of credits, customers can efficiently scale intelligent, context-driven agents without platform limitations, streamlining AI adoption and governance. The plan is designed to support innovation, cost-effectiveness, and enterprise-wide AI deployment, as announced at Microsoft Ignite 2025. Network Detection and Response (NDR) in Financial Services Team Blog: Azure Networking Author: Marc de Droog Published: 12/18/2025 Summary: Financial Services organizations must comply with PCI DSS v4.0.1, which demands robust network monitoring and intrusion detection. Traditional tools often fall short; Network Detection and Response (NDR) solutions use advanced analytics to monitor, detect, and respond to threats in real-time, supporting key PCI requirements. In Azure, native tools (VTAP, Flow Logs, Traffic Analytics), third-party NDR platforms, Microsoft Sentinel (SIEM), and Defender for Cloud (compliance monitoring) together enable a layered, PCI-compliant defense. NDR provides deep visibility and automated incident response, enhancing both security and compliance for cardholder data environments in the cloud. Azure Networking 2025: Powering cloud innovation and AI at global scale Team Blog: Azure Networking Author: Sudha_Mahajan Published: 12/18/2025 Summary: In 2025, Azure Networking powered major cloud and AI innovations, notably enabling Microsoft’s Fairwater AI datacenter’s ultra-fast GPU interconnects. Key advancements included higher-capacity ExpressRoute and VPN gateways, simplified global connectivity via Virtual WAN, enhanced multicloud integration, and robust resiliency tools. Security was strengthened with DNS Security Policies and threat intelligence. AI-driven management tools like Azure Copilot made network operations more intelligent. These investments ensured Azure could meet unprecedented hybrid and AI workload demands, delivering secure, high-performance connectivity and setting the stage for self-optimizing, AI-powered networks in the future. How to Modernise a Microsoft Access Database (Forms + VBA) to Node.JS, OpenAPI and SQL Server Team Blog: Azure Architecture Author: anthkernan Published: 12/08/2025 Summary: The article details the modernization of Microsoft Access databases—traditionally reliant on forms and VBA—to scalable, standards-based architectures using Node.js, OpenAPI, SQL Server, and optionally MongoDB. Key steps included migrating data to SQL Server (via SSMA and Liquibase), generating RESTful APIs, translating business logic to Node.js, and recreating user interfaces with accessibility in mind. GitHub Copilot dramatically accelerated development, automating code, documentation, and testing. The approach reduced delivery time from months to weeks, preserved business functionality, and offers a blueprint for organizations seeking efficient, AI-powered legacy system upgrades. From Large Semi-Structured Docs to Actionable Data: Reusable Pipelines with ADI, AI Search & OpenAI Team Blog: Azure Architecture Author: anishganguli Published: 12/09/2025 Summary: The article outlines a robust, reusable pipeline for extracting actionable data from large, semi-structured documents—such as contracts, invoices, and compliance records—using Azure Document Intelligence, OpenAI, and AI Search. It details challenges like inconsistent layouts and cross-page dependencies, then presents a chunking, OCR, context-aware analysis, entity grouping, and extraction workflow. The solution emphasizes data stewardship, deterministic outputs, and rigorous evaluation for precision and reliability, supporting scalable downstream integration. Various deployment models and alternative approaches are discussed, making the architecture adaptable for enterprise compliance, analytics, and automation across industries.Check This Out! (CTO!) Guide (November 2025)
Member: TysonPaul | Microsoft Community Hub Getting Started with Windows Admin Center Virtualization Mode Team Blog: ITOps Talk Author: OrinThomas Published: 11/23/2025 Summary: Windows Admin Center Virtualization Mode is a new, preview web-based tool for managing large Hyper-V virtualization environments. It centralizes compute, networking, and storage management for thousands of hosts within the same Active Directory domain. The article outlines installation prerequisites, step-by-step setup, and onboarding of Hyper-V hosts into resource groups. Users configure networking, storage, and compute properties, then manage hosts and virtual machines through a streamlined UI. The guide emphasizes certificate setup, domain requirements, and initial firewall adjustments for onboarding. Links to public preview and documentation are provided for further exploration. Microsoft Entra Domain Services: Deploy, Join a VM, and Use Classic AD Tools Team Blog: ITOps Talk Author: OrinThomas Published: 11/24/2025 Summary: Microsoft Entra Domain Services (Entra DS) enables managed Active Directory domain controller functionality in Azure, allowing you to domain-join Windows Server VMs, use Group Policy, and manage DNS without maintaining your own DC VMs. The article guides you through setting up a virtual network, deploying Entra DS, configuring DNS, joining a VM to the domain, and using classic AD and DNS management tools, streamlining identity and access management for cloud workloads while retaining familiar AD capabilities. Azure Governance @ Ignite 2025 Team Blog: Azure Governance and Management Author: jodiboone Published: 11/22/2025 Summary: Azure Governance at Ignite 2025 introduced significant updates, including the public preview of Service Groups for flexible resource hierarchies and low-privilege management. New integrations with Azure Monitoring and Resiliency were announced. Azure Policy enhancements feature Identity Based Exemptions and a revamped UX for improved compliance and policy lifecycle management. Machine Configuration now offers an extensibility framework for customizable Windows and Linux baselines aligned with CIS standards. These updates aim to simplify governance, boost security, and improve policy management for deploying secure applications in Azure environments. Empower Smarter AI Agent Investments Team Blog: Azure Governance and Management Author: Fernando_Vasconcellos Published: 11/05/2025 Summary: The article presents a series of modules designed to help technical and business leaders make cost-effective decisions throughout the AI agent lifecycle on Azure. Covering topics from use case selection and understanding cost drivers to forecasting ROI, adopting best practices, choosing development approaches, architecting scalable solutions, and ongoing optimization, the learning path offers actionable strategies for building, deploying, and managing AI agents. By aligning innovation with financial discipline, these modules ensure sustainable value, operational excellence, and long-term success for enterprise AI initiatives. Using Packet Capture for troubleshooting Azure Firewall flows Team Blog: Azure Network Security Author: ShabazShaik Published: 11/10/2025 Summary: The article introduces Azure Firewall’s new Packet Capture feature, now generally available, which enables detailed troubleshooting by capturing network packets traversing the firewall. It explains how packet capture aids in diagnosing connectivity issues, outlines setup steps, and demonstrates real-world scenarios including VNET-to-VNET, DNAT, outbound internet access, and application rule traffic. The captured data allows administrators to analyze bidirectional flows, correlate requests and responses, and pinpoint network or application issues. Overall, packet capture significantly enhances network visibility, security, and operational reliability within Azure environments. General Availability of JavaScript Challenge in Azure Front Door WAF Team Blog: Azure Network Security Author: andrewmathu Published: 11/11/2025 Summary: Microsoft has announced the general availability of the JavaScript Challenge feature for Azure Front Door’s Web Application Firewall (WAF). This feature adds an automated, browser-based anti-bot layer to distinguish legitimate users from malicious scripts, enhancing protection against modern bot attacks while maintaining user experience. The challenge is lightweight and invisible to users, can be flexibly applied to specific endpoints, and is easily configured via WAF policies. Existing preview configurations remain supported, and comprehensive documentation is available for setup and best practices. Announcing Public Preview of Window Server 2025 on Azure Kubernetes Service Team Blog: Containers Author: Akarsh Published: 11/18/2025 Summary: Microsoft has announced the public preview of Windows Server 2025 support on Azure Kubernetes Service (AKS), offering enhanced security, performance, and compatibility. Users can deploy Windows Server 2025 node pools alongside other OS options, run Windows Server 2022 containers on 2025 hosts, and benefit from improved portability. Nano Server now supports more applications and Feature on Demand, optimizing resource use. Additionally, Windows Server 2025 enables GPU acceleration for containerized workloads. Customers can test Windows Server 2025 in AKS and provide feedback to help shape future container offerings. AI and human potential: Advancing skills, innovation, and outcomes Team Blog: Microsoft Learn Author: ToddMinor Published: 11/21/2025 Summary: Organizations worldwide are partnering with Microsoft to upskill employees in AI, driving innovation, efficiency, and business growth across sectors. Through initiatives like AI Skills Navigator, companies such as Albertsons, Levi Strauss, Vodafone, and Danone are integrating AI into daily work, fostering resilient, future-ready teams. Real-world examples from banking, retail, energy, and technology highlight that true transformation starts with people, not just technology. Empowered employees use AI to reimagine work, enhance productivity, and deliver meaningful outcomes, proving that continuous learning and AI adoption are key to unlocking human and organizational potential. Powering career and business growth through AI-led, human-enhanced skilling experiences Team Blog: Microsoft Learn Author: jeanaj Published: 11/18/2025 Summary: The article introduces Microsoft’s AI Skills Navigator, a unified, AI-powered learning platform designed to help individuals and organizations rapidly build and validate essential AI and human skills for career and business growth. Integrating content and credentials from Microsoft, LinkedIn, and GitHub, it offers personalized, interactive, and shareable learning experiences. Strategic partnerships with LinkedIn, GitHub, and Pearson further expand access to verified credentials and tailored training. The initiative aims to address the challenge of keeping pace with AI-driven changes, making upskilling accessible, relevant, and collaborative for the global workforce. Azure NCv6 Public Preview: The new Unified Platform for Converged AI and Visual Computing Team Blog: Azure High Performance Computing (HPC) Author: rishabv90 Published: 11/24/2025 Summary: Microsoft has announced the Azure NCv6 series, now in public preview, featuring NVIDIA RTX PRO 6000 Blackwell GPUs and Intel Granite Rapids CPUs. The NCv6 offers a unified platform for converged AI and visual computing, supporting digital twins, LLM inference, agentic workflows, and high-fidelity rendering. With scalable sizing, massive memory, and fractional GPU options, it caters to diverse workloads in AI, simulation, media, and remote desktops. This platform delivers breakthrough performance, cost-effective infrastructure, and seamless upgrades, empowering enterprises to innovate in the era of converged AI and industrial digitalization. Azure ND GB300 v6 now Generally Available - Hyper-optimized for Generative and Agentic AI workloads Team Blog: Azure High Performance Computing (HPC) Author: Nitin_Nagarkatte Published: 11/19/2025 Summary: Microsoft has announced the general availability of Azure ND GB300 v6 virtual machines, featuring thousands of NVIDIA GB300 NVL72 Blackwell Ultra GPUs and next-gen InfiniBand networking. These VMs deliver major performance improvements for generative and agentic AI workloads, including frontier model training and large-scale inference. With record-breaking throughput, scalable architecture, and advanced management tools, ND GB300 v6 enables efficient deployment and scaling of trillion-parameter models, long-context, and multimodal AI tasks, reaffirming Microsoft’s leadership in AI infrastructure and partnership with NVIDIA. Deriving expiry days and remaining retention days for blobs through blob inventory Team Blog: Azure PaaS Author: Harshi_mrinal Published: 11/11/2025 Summary: The article explains how to derive expiry days and remaining retention days for blobs in Azure Blob Storage and Data Lake Gen2 accounts using Blob Inventory reports. It outlines steps to set blob expiry, generate inventory CSV files, and use Azure Synapse SQL queries to list expiry times and retention days for soft-deleted blobs. The process helps organizations manage data lifecycle, optimize storage, and ensure compliance. Alternative methods such as PowerShell and Azure CLI are also suggested for similar tasks. Reference links for further learning are provided. Update Coverage Workbook in Microsoft Defender for Cloud to Include Defender for AI Plan status Team Blog: Core Infrastructure and Security Author: SantoshPargi Published: 11/03/2025 Summary: The article outlines two methods to track Defender for AI plan status in Microsoft Defender for Cloud. Option 1 involves updating the existing Coverage Workbook to display Defender for AI data, offering centralized visibility but needing manual maintenance. Option 2 uses Azure Resource Graph Explorer to run queries for AI plan status across subscriptions, providing flexibility and easier automation but separate from the workbook interface. The recommendation: update the Coverage Workbook for unified dashboards, or use Resource Graph Explorer for quick or automated checks. Platform SSO for macOS Team Blog: Core Infrastructure and Security Author: Farooque Published: 11/10/2025 Summary: Microsoft’s Platform SSO for macOS enables secure, passwordless authentication using Touch ID, smart cards, and passkeys, leveraging Apple’s SSO framework and integrating with Entra ID. Supporting macOS 13+, it streamlines device and app sign-in, offers centralized identity management, and requires no additional agent. Deployment involves Intune policies, device enrollment, and configuration of authentication methods. Administrators can customize login experiences and should align password policies and group assignments for compliance. Platform SSO improves security, user experience, and operational efficiency for organizations transitioning to modern authentication solutions. Announcing Network HUD: Operational Network Monitoring for Windows Server 2025 Team Blog: Networking Author: Basel_Kablawi Published: 11/18/2025 Summary: Network HUD is a new operational network monitoring tool for Windows Server 2025 clusters, offering real-time health checks and actionable insights to prevent networking issues. It detects adapter instability, driver incompatibility, storage inconsistencies, and misconfigured VLANs, reducing troubleshooting time. Integrating with physical switches via LLDP, Network HUD ensures host and network fabric alignment. Delivered as an Arc extension, it enables easy deployment and alerting through Windows Admin Center and PowerShell, helping administrators proactively maintain stable, high-performing server environments and avoid costly downtime. Announcing General Availability for AccelNet on Windows Server 2025 Team Blog: Networking Author: Basel_Kablawi Published: 11/18/2025 Summary: Microsoft has announced the general availability of Accelerated Networking (AccelNet) for Windows Server 2025 Datacenter. AccelNet uses SR-IOV technology to bypass the virtual switch, reducing CPU overhead and delivering predictable, low-latency performance for demanding workloads. It enables higher VM density per host and integrates seamlessly with Hyper-V and Failover Clustering. Deployment is simplified via Windows Admin Center and PowerShell, ensuring easy, scalable, and consistent configuration. AccelNet provides a consistent operational model across hybrid environments, benefiting scenarios like OLTP, in-memory caching, and dense virtualization. Azure Local 22H2 Clusters: End of Service and Feature Degradation Team Blog: Azure Arc Author: Arpita Duppala Published: 11/25/2025 Summary: Azure Local version 22H2 reached End of Service on May 31, 2025. Starting February 23, 2026, Microsoft will begin degrading features, including disabling Extended Security Updates (ESU) and Windows Server Subscription (WSS) benefits. Customers cannot renew or purchase ESU/WSS, risking security vulnerabilities and compliance issues. Microsoft will not restore degraded features or provide remediation for risks. To maintain support and security, customers are urged to upgrade to version 24H2 promptly to avoid service disruptions and compliance violations. Transforming City Operations: How Villa Park and DataON Deliver Real-Time Decisions with Edge RAG Team Blog: Azure Arc Author: moran_assaf Published: 11/18/2025 Summary: The article details how Villa Park, California, in partnership with DataON and Microsoft, leverages Edge Retrieval-Augmented Generation (Edge RAG) to modernize city operations. Using Azure Local infrastructure, Edge RAG enables fast, secure, and offline AI-powered workflows for zoning, compliance, and permitting, drastically reducing processing times. New features include advanced document parsing, multimodal search, SharePoint integration, and autonomous workflows. Villa Park serves as a model for smart city transformation, demonstrating how edge AI enhances operational resilience, data security, and efficiency, while allowing municipalities to maintain data sovereignty and tailor AI solutions to their needs. Announcing Cobalt 200: Azure’s next cloud-native CPU Team Blog: Azure Infrastructure Author: sebilgin Published: 11/18/2025 Summary: Microsoft has announced Azure Cobalt 200, its next-generation Arm-based CPU for cloud-native workloads, offering up to 50% better performance than Cobalt 100. Featuring 132 cores, advanced memory encryption, custom compression and cryptography accelerators, and built-in Azure Boost networking and storage capabilities, Cobalt 200 is designed for optimized efficiency, security, and workload compatibility. The CPU leverages extensive real-world benchmarking and AI-powered simulations to achieve optimal performance and energy savings. Cobalt 200 servers are now live in datacenters, with broader customer availability expected in 2026. Enabling Private Connectivity for Microsoft Fabric: A Practical Guide Team Blog: Azure Infrastructure Author: mohit-kanojia Published: 11/19/2025 Summary: The article outlines strategies for securely integrating Microsoft Fabric—a unified analytics SaaS platform—into large, security-sensitive enterprise environments with private-only, Zero-Trust architectures. It details how Fabric’s components (Lakehouse, Warehouse, Spark, Workspaces) can be accessed via private endpoints, managed private endpoints, VNet data gateways, and private DNS, ensuring no public exposure. The author shares a practical architecture using Azure’s hub-spoke model and highlights governance, automation with Terraform, and robust network controls, demonstrating that with careful planning, Fabric can operate securely within strict enterprise boundaries. Pure Storage Cloud, Azure Native evolves at Microsoft Ignite! Team Blog: Azure Storage Author: Aung_Oo Published: 11/19/2025 Summary: Microsoft has expanded its Azure Native Pure Storage Cloud integration, enabling customers to provision Pure Storage volumes to Azure Virtual Machines for both Linux and Windows applications. This partnership leverages Pure Storage’s enterprise-grade features, cost efficiency, and resilience, simplifying deployment and management via Azure Portal tools. Organizations have reported significant cost savings and improved performance, with benefits like advanced data management, rapid restores, and enhanced security. The service is available as a fully managed, Azure-native solution, now supporting both Azure VMware Solution and Azure VMs, with a 30-day free trial offered for new users. Reduce latency and enhance resilience with Azure Files zonal placement Team Blog: Azure Storage Author: hanagpal Published: 11/18/2025 Summary: Azure Files Premium LRS now supports zonal placement, allowing users to pin storage accounts to a specific Azure Availability Zone. This feature reduces latency by co-locating storage and compute resources, optimizes performance for latency-sensitive workloads, and enhances resilience by isolating failure domains. Zonal placement is available for both SMB and NFS shares and can be configured during storage account creation or update. It is ideal for databases, enterprise platforms, and business applications, and is currently available in select regions supporting Premium LRS and Availability Zones. Streamline Analytics Spend on Microsoft Fabric with Azure Reservations Team Blog: FinOps Author: kyleikeda Published: 11/24/2025 Summary: Microsoft Fabric is an integrated SaaS data platform offering unified analytics and AI, powered by OneLake. Organizations can optimize their analytics spend by purchasing Azure reservations for Fabric Capacity Units, which provide significant discounts for predictable workloads. Reservations simplify purchasing, offer flexible payment options, and can be managed via the Azure Portal. Best practices include careful usage estimation, enabling auto-renewal, monitoring with Azure Cost Management, and choosing appropriate scopes. By leveraging reservations, businesses can maximize savings while maintaining performance and scalability. For more details, visit the Microsoft Marketplace or Azure Portal. Accelerating HPC and EDA with Powerful Azure NetApp Files Enhancements Team Blog: Azure Architecture Author: GeertVanTeylingen Published: 11/14/2025 Summary: Azure NetApp Files introduces major enhancements for High-Performance Computing (HPC) and Electronic Design Automation (EDA) workloads, offering breakthrough petabyte-scale storage, high throughput, and advanced data management. New features include large volume support (up to 7.2 PiB), cool access for cost savings, user/group quota reporting, robust backup and single-file restore, hybrid cloud data mobility, cache volumes for burst-to-cloud, and AI-ready object REST API integration. These innovations boost scalability, reliability, operational efficiency, and security, enabling teams to accelerate time-to-market, optimize costs, and confidently manage complex, data-intensive workloads in the cloud. Introducing Local Identity with Azure Key Vault in Build 2510 Team Blog: Azure Architecture Author: ShireenIsab Published: 11/07/2025 Summary: Microsoft has announced a public preview of local identity integration with Azure Key Vault in Build 2510, enabling Azure local clusters to operate without Active Directory, simplifying deployments and backup processes. Key Vault integration allows seamless backup of keys, with compatibility efforts underway with partners like Veeam, Commvault, Dell, and Lenovo. Additionally, private previews introduce a Management Toolkit for secure cluster administration and Internal DNS for simplified name resolution, both designed to work without Active Directory. Users are encouraged to upgrade, test features, and provide feedback via email. Migrate or modernize your applications using Azure Migrate Team Blog: Azure Migration and Modernization Author: Shikher Published: 11/10/2025 Summary: Azure Migrate is Microsoft’s free platform for migrating and modernizing applications to Azure, offering features like application-aware migration, multi-server dependency mapping, software and security insights, and code-level analysis integration. It enables holistic migration planning by grouping workloads into applications, providing ROI analysis, and supporting phased wave planning for execution. The platform integrates with tools like GitHub Copilot and CAST for code assessment, facilitating collaboration among IT, security, and development teams, and supports a wide range of workloads and migration strategies for a seamless cloud transition. Migration Agent - Unlocking transformation Team Blog: Azure Migration and Modernization Author: SShastri Published: 11/18/2025 Summary: The article highlights how IT modernization is an ongoing transformation, driven by cloud-native architectures and innovations like AI. Central to this journey is the new Migration Agent powered by Azure Migrate, which provides actionable insights, security assessments, and evidence-backed recommendations for migration. It automates infrastructure deployment, ensures governance, and supports wave-based migration planning. Integration with tools like GitHub Copilot and CAST Highlight accelerates modernization, making cloud migration a continuous, developer-driven process that enhances agility, security, and business alignment, positioning Azure as a strategic launchpad for digital transformation. Azure CLI and Azure PowerShell Ignite 2025 Announcement Team Blog: Azure Tools Author: Alex-wdy Published: 11/19/2025 Summary: At Microsoft Ignite 2025, Azure CLI and Azure PowerShell announced major updates focused on quality, security, and AI integration. Key enhancements include MFA enforcement, Python 3.13 compatibility, new "What-If" and "Export Bicep" features, expanded service and extension support, and improved endpoint discovery. MFA claims challenges and optional pagination for large datasets were also addressed. These updates aim to streamline user workflows, bolster security, and leverage AI for smarter cloud management. Full release notes and migration guides are available for users to ensure smooth upgrades. Gaining Confidence with Az CLI and Az PowerShell: Introducing What if & Export Bicep Team Blog: Azure Tools Author: stevenbucher Published: 11/21/2025 Summary: Azure CLI and Azure PowerShell now offer “What if” and “Export Bicep” features in private preview, letting users safely preview command impacts and export actions as Bicep templates before making changes. These tools reduce risk, boost confidence, and accelerate infrastructure-as-code adoption by validating scripts and converting commands into reusable templates. Supported for select commands, users can sign up for early access and provide feedback, improving productivity and minimizing deployment errors in Azure environments. Support tip: Aligning network policy with Microsoft Intune and Zero Trust Team Blog: Intune Customer Success Author: Intune_Support_Team Published: 11/03/2025 Summary: The article discusses aligning network policies with Microsoft Intune and Zero Trust principles, emphasizing the limitations of traditional perimeter-based architectures in supporting cloud services and hybrid work. It outlines three models—endpoint, domain, and domain/IP enforced access—for managing outbound traffic, recommending automation and bypassing inspection for Microsoft traffic. Adopting cloud-native tools and Zero Trust controls improves security, reliability, and user experience. The article encourages modernizing network architecture to support cloud services and details Microsoft’s ongoing enhancements, such as moving Intune endpoints to Azure Front Door for better performance and security. Debunking the myth: Cloud-native Windows devices and access to on-premises resources Team Blog: Intune Customer Success Author: Intune_Support_Team Published: 11/14/2025 Summary: The article debunks the myth that cloud-native Windows devices can’t access on-premises resources. It explains that, with minimal configuration, these devices can connect to file shares and legacy apps using NTLM or Kerberos authentication. By leveraging Microsoft Entra ID, Intune, and solutions like Windows Hello for Business and Zero Trust Network Access, organizations can maintain security and user experience while accessing on-premises resources. The article also recommends adopting modern identity and security frameworks and offers resources such as Microsoft’s Zero Trust Workshop for effective implementation. Reimagining VM Application Management for an AI-Powered, Secure Future Team Blog: Azure Compute Author: tanmay-gore Published: 11/18/2025 Summary: The article discusses the transformation of virtual machine (VM) application management amid increasing AI-driven automation and security demands. Traditional deployment methods are inadequate for modern needs. Azure VM Applications offers a managed, end-to-end solution, enabling rapid, secure, and version-controlled deployment of diverse workloads. Key features include modular packaging, fast publishing, seamless CI/CD integration, regional replication, granular security controls, and unified monitoring. These capabilities improve resilience, compliance, and operational efficiency, allowing organizations to safely manage and scale VM applications for AI-powered workloads while streamlining software lifecycle management. Introducing Metadata Security Protocol (MSP): Elevating Platform Security for Azure VMs Team Blog: Azure Compute Author: Amjad_Shaik Published: 11/19/2025 Summary: Microsoft has announced the General Availability of Metadata Security Protocol (MSP) for Azure VMs, providing industry-first authentication and authorization for metadata service endpoints. MSP introduces a default-closed security model, enforcing access controls and zero-trust principles for Instance Metadata Service (IMDS) and WireServer. Key features include HMAC-based authentication, process-level RBAC, eBPF-powered request verification, and granular allowlisting. MSP significantly reduces attack surfaces such as SSRF and nested tenancy bypasses. Adoption involves auditing current access, creating an allowlist, and enforcing restrictions, enhancing defense-in-depth for sensitive VM metadata. Simplify container network metrics filtering in Azure Container Networking Services for AKS Team Blog: Azure Networking Author: KhushbuP Published: 11/08/2025 Summary: Azure Container Networking Services for AKS now offers container network metrics filtering in public preview, allowing users to control which metrics are collected at the pod level using Kubernetes custom resources. This feature reduces metrics bloat, lowers storage and ingestion costs, and improves dashboard clarity by filtering data before it reaches observability tools. Filters can be dynamically updated without downtime and target specific namespaces or pod labels, ensuring only relevant metrics are captured. Users can enable this by defining filters with the ContainerNetworkMetric CRD and validating settings, streamlining network observability and cost management. Integrating Azure Application Gateway v2 with Azure API Management for secure and scalable API Team Blog: Azure Networking Author: ranjsharma Published: 11/18/2025 Summary: Integrating Azure Application Gateway v2 with Azure API Management secures and scales API access, combining WAF protection, advanced routing, and API governance features. The article details various deployment scenarios (public, private, hybrid), network/DNS requirements, security hardening (TLS, WAF, mTLS, private endpoints), and observability best practices. It covers Terraform deployment, CI/CD automation, diagnostics, cost optimization, troubleshooting, and a production readiness checklist. This integration enables robust security, scalability, and centralized API management for cloud, hybrid, and on-premises backends. Announcing new hybrid deployment options for Azure Virtual Desktop Team Blog: Azure Virtual Desktop Author: SteveDMSFT Published: 11/18/2025 Summary: Microsoft has announced a limited preview of Azure Virtual Desktop for hybrid environments, enabling organizations to run cloud-native virtual desktops and applications on existing on-premises infrastructure via Azure Arc. This expands support to various hypervisors and hardware, allowing businesses to leverage current investments while maintaining unified management. Key partners—ControlUp, LoginVSI, Nerdio, and Nutanix—are providing integration and support. The solution offers flexibility, optimized management, and a clear path to cloud migration, addressing performance, compliance, and data residency needs for hybrid IT environments. Interested organizations can enroll via Microsoft’s preview interest form.
