Forum Widgets
Latest Discussions
ARM template and how to test it partially
Hi all, If you have a long deployment template and performing that takes 10 - 15 minutes, what would be the best option for troubleshooting the process if that e.g fail at the end? At the moment I'm failing to the Access Denied (I believe so) when the deployment is trying to useARM Function: Reference to get the Key Vault SecretURI. Of course there is lot of different parameters on it to get that information, but the error message is "AccesstoKeyVaultDenied (code:BadRequest)". So far I have not been able get knowledge where the access denied is coming nor what resource that is trying to get. It is possible to manually test those ARM functions somehow, like with PS command? Or is the only option to Enable ARM debugging, and hope the best? It is just a bit hard to wait over 10min to see if the actions has been helpful or (as too often now) not :D
Function App Service
Hi, I'm having trouble deploying my Python script to an Azure Function App. Can someone help me troubleshoot the deployment process and ensure the function works correctly? I have followed all the articles available on the internet, I am not able to figure out , where is actual issue?
Azure VMs Not Applying GPOs Correctly
Hi everyone, Quick question… if my Azure VMs are joined to my domain, they should be applying all my configured GPOs, right? For some reason, my VMs are not applying the GPOs, even after running a GPUPDATE /force. At the moment, I am testing some simple GPOs like: Creating a folder on the desktop Setting the time format to Brazilian (dd/mm/yyyy) Adjusting the timezone to Brasília When I run gpresult /r, it shows that the GPOs are being applied, but for some reason, the VM just doesn’t reflect them. Any idea what might be causing this?
AZureADSSOACC and AES
I have been auditing event IDs 4768 and 4769 and noticed a few accounts with 0x17. I believe that to be related to RC4. One of the accounts is an AzureADSSOacc account that was created before the year 2020. Will this account use AES if we upgrade the DC to 2025 or will we have to force it?Enabling Azure Automanage or creating a custom configuration profile currently results in an error.
At the moment, enabling Azure Automanage for a new Azure VM or Arc-enabled server results in the following error: An error occurred while assigning the configuration profile named 'Azure best practices: Dev / Test'. Error details: The operation was not allowed because the subscription is not in a state to support it. Subscription state: -1 Additionally, attempting to create a custom configuration profile results in the following error: An error occurred while creating the configuration profile named 'amcp-prd-arc-infra-01'. Error details: The operation was not allowed because the subscription is not in a state to support it. Subscription state: -1 Has anyone encountered this issue before and found a solution?Azure Firewall DNAT not working
I have a typical Hub/Spoke Architecture with Azure Firewall in the Hub, VNEt peerings between Hub/Spoke, route table on Spoke with default route to Firewall in Hub, no NSGs currently applied. I have created DNAT rule for web site running on Windows Server VM (IIS) in Spoke. All as per documented setup e.g. https://learn.microsoft.com/en-us/azure/firewall/tutorial-firewall-dnat. But I cannot connect to the Web site! I have even tried a DNAT rule for RDP exactly as per the article but also not connecting. I can see in the firewall logs the DNAT rule being hit but nothing is getting to the Web Server as verified using packet capture. I have spun up VM in the Hub with a default route to the Firewall and Network rules to allow RDP and HTTPs to the Spoke Vnet. From this machine I can browse to the website and RDP to the Web Server with no issues with and have verified traffic is traversing the firewall OK. What am I missing to get access via firewall DNAT working? Any help/advise, what to try next, how to debug appreciated. Cheers Rich
Health state monitoring for a service hosted on Azure Virtual Machine
I have a virtual machine hosted on Azure cloud, I wanted to add some monitoring on the health state of a service deployed on the VM. I already enabled the health monitoring extension to keep pinging the health URL of the service and return 200 or otherwise when the service is down. It shows green "Healthy" or yellow "Unhealthy" on the VM's overview page, which is great. I was expecting to get some data in this Insight log table HealthStateEventChange, when the service is down, but the table is always empty. Anyone who worked with this table or can give any support I would appreciate any. https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/HealthStateChangeEvent
[Azure CLI] az sf application-type version create authentication
Hello, We're currently using `az sf application-type version create` to create a new application-type version, and then `az sf application upgrade` in our CI for Service Fabric deployments. The first comman, `az sf application-type version create` accepts a --package-url parameter. Currently, we're passing a package url with a SAS token. We want to stop doing this and to authenticate using something like a Managed Identity, but we can't get it to work (we keep authentication issues). Is there any guide on how to do this? Is it even a supported scenario?
