Tag: Windows AD

Private Endpoints and DNS Part Deux: Azure Private DNS Zones

Posted on by Travis Roberts

This is a second video on Azure Private Endpoints and DNS.  Previously, we reviewed options for DNS name resolution with Private Endpoint that included a forward lookup zone for the privatelink.file.windows.core.net zone. However, that option required manually adding hosts to the DNS zone.  This video reviews a hub-and-spoke configuration leveraging a forwarder server in Azure and conditional forwarding in Windows DNS.  Although slightly more complicated, this option does not require manually adding hosts to the DNS lookup zone.

Continue reading “Private Endpoints and DNS Part Deux: Azure Private DNS Zones” →

Private Endpoints with Azure Storage File Shares

Posted on by Travis Roberts

Azure services are publicly available over the internet by default.  That works for many services, but sometimes we need to limit access to internal networks only.  Private Endpoints provide a local, internal connection to resources in Azure.  It does this by adding a virtual NIC to a subnet.  From there, the NIC gets a private IP address where it can be accessed from the internal network.  This video goes over the configuration options to create a new storage account with an Azure File Share Private Endpoint as well as update an existing storage account with a private endpoint.

Links

Zero to Hero with Azure Virtual Desktop
Hybrid Identity with Windows AD and Azure AD
Private Endpoints and DNS in Azure

Private Endpoints and DNS in Azure

Posted on by Travis Roberts
Private Endpoint

Private Endpoints in Azure provide a secure way to access resources over the private, internal network.  But the options for configuring DNS for Private Endpoints is not as straight forward.  This video goes over the options available for DNS with Private Endpoints.  We start by crating a storage account with a Private Endpoint, the review the default DNS configuration.  We look at The WireServer and how it can be used with a Conditional Forwarder as well as using Forward Lookup Zones for name resolution.

Continue reading “Private Endpoints and DNS in Azure” →

Don’t Use Azure AD Domain Services to Replace Windows Domain Controllers

Posted on by Travis Roberts
Azure AD Domain Services

I’ve been sitting on this topic for a while.  I typically like to pass along information that helps people better understand Azure and other Microsoft products absent of my option.  However, this post is slightly opinionated, an opinion that was formulated after seeing problems users ran into while trying to use Azure AD as a replacement for Windows AD. 

Continue reading “Don’t Use Azure AD Domain Services to Replace Windows Domain Controllers” →

Deploy Azure AD Domain Service and Join a Server to the Domain

Posted on by Travis Roberts

In this video, I go over deploying Azure AD and configuring replication with an on-premises Windows Active Directory domain and Azure Active Directory.  I review deployment options and how to synchronize passwords from Windows and Azure directory services.  A server is deployed and joined to the Azure AD Domain Services domain and users source from Azure AD and Windows AD log in using same sign-on credentials.

Continue reading “Deploy Azure AD Domain Service and Join a Server to the Domain” →

Update an WVD Application Group Based on a Windows AD Security Group

Posted on by Travis Roberts
WVD Security Groups

One unfortunate aspect of working with Windows Virtual Desktop is the inability to assign users to an Application Group based on group management. Microsoft has heard this complaint and an upcoming version of WVD portal management will include App Group access based on group membership. Until that is available, I created a script that should help.

Continue reading “Update an WVD Application Group Based on a Windows AD Security Group” →