The playlist below is a three-part video series that takes a user through the process of using Azure Image Builder to create a custom Windows 10 multi-user image. The first video starts with an overview and configuring a subscription for Azure Image Builder. The second video demonstrates creating and deploying a template and building an image based on that template. The third video walks through the steps to add software to the image in the build pipeline.Continue reading “Azure Image Builder Trilogy”
In this video, we deploy an Azure Recovery Services Vault to back up an Azure File share. Protecting data is critical. Azure Storage accounts offer data resiliency, but replicating copies of the data inside a data center, region or across regions. Replication provides real-time protection, but there is no way to recover a previous version of the data. This capability is critical with Azure File Shares, especially when storing user data such FSLogix Profiles. Azure Backup provides the ability to restore previous versions using Azure Storage Snapshots to create and manage Azure File recovery points.
To learn more about Azure Storage Accounts:
To learn more about Azure SMB Shares with Azure Files:
This video goes over two ways of restricting access to Microsoft Azures PaaS services; Service Endpoints and Private Endpoints. Both are used to restrict access to PaaS serviced, but work differently. The video gives an overview if the differences and then does a walkthrough of deploying Service Endpoints and Private Endpoints using an Azure Storage account as an example.Continue reading “Azure Virtual Networking Service Endpoints and Private Endpoints”
Version 10 of AZCopy.exe can now delete files at the destination to keep it in complete sync with the source. This video shows how to use the delete-destination option to sync a local file structure to an Azure Storage Account. Used with Soft Delete on Azure Storage, this provides an interesting alternative to traditional backup solutions.
Link to AZCopy V10
A Content Delivery Network, or CDN, is a globally distributed network for delivering, well, content. Content can include images, videos, CSS and any other asset used for providing web services. The advantages to a CDN include: caching data closer to the users to increase web site performance, improving reliability by leveraging a global caching network and reducing bandwidth by shifting traffic to the CDN.Continue reading “How to configure an Azure CDN”
I got the a good question below from Zaniar this week:
My question —- If Azure VM’s are encrypted at rest now (SSE) does this mean the data on the volumes are also encrypted? and if we want a further layer of encryption should we use BEK or KEK which one is better?Continue reading “Is Azure Disk Encryption Necessary?”
As of today, Microsoft has a few different ways of encrypting Azure data. The options for Azure Data Encryption on servers include Storage Service Encryption and Azure Disk Encryption. Below is a quick summery of each.
Storage Service Encryption (SSE)
This is at the storage account level and encrypts data at rest. Encryption takes place as the data is written to storage and decrypted when it’s read. Continue reading “Azure Data Encryption”