Hot answers tagged

6

Azure active directory cannot be used like this. It is not a replacement for Active Directory (well, at least it isn't at the time of writing). What you want to do is use the intune service in combination with AAD to achieve what you want. I do not believe you will be able to do full GPO, but there are a ton of settings you can configure.


6

If you're referring specifically to Azure File Storage, which is an SMB 3.0 share that sits atop Azure Storage, then yes - you may mount this file storage to multiple VMs. Since you mentioned Linux: There's currently a limitation where the VM must be in the same region as the file share (see this article for more details). If you're referring to Azure blobs ...


5

You need to open endpoints for the services you want to make accessible from the Internet. In the old Azure portal these are listed under Endpoints. In the new portal under Inbound Security Rules.


5

If you control the environment, you should consider to set higher values for the DHCP leases (e. g. 7 Days) and lower the TTL values on your DNS server (e. g. 15m or 1 hour). In a well configured environment this behavior should not be observed.


4

a combination of two things will help you here. you should use a combination of .Json templates and PowerShell desired state configuration(PowerShell DSC) .json will allow you to deploy your VMs, Storage accounts, resource groups, Vnets etc. by defining each element in a .json file. you will build the .json files once and then use them to repeatedly role ...


3

The only built-in IP-filtering mechanism, external to a VM, is the network security group and related inbound rules, where you can specify IP ranges to allow or block. If you're using a Classic VM, this is represented as ACL's on the endpoints. Anything else will require you to deal with it yourself, whether in the web server VM itself or some other VM ...


2

Azure AD Directory Services is a new preview feature that functions more as a Domain Controller as a Service offering and does allow you push GPO's. The GPO and OU structure is more limited to classic AD, but it can be done. It is in preview so bear in mind the SLA consequences for that.


2

ASR has a few potential bottlenecks. Whether or not you can speed it up depends on where this is. If your on-prem process server is low on resources, that can cause slow replication. Identify what resources are being taxed and increase them (disk IO, RAM, network) Your WAN may be slow. Quick napkin math puts 128GB at 2 hours at just under 20Mbps. Do you ...


1

Do I have to put these commands in a script and run in daily basis? Definitely bad idea, see below. This should be treated as last resort. So what is best practise? Troubleshot your DNS server and network conectivity, configure your hosts' DNS client cache. Source: https://technet.microsoft.com/en-us/library/cc959309.aspx The resolver cache and ...


1

It appears that the issue turned out to be DNS related. When I changed the Availability Group Endpoint URL to be the internal IP address instead of the FQDN, the problem was resolved. So for anyone else who hits this, that is something to try (could apply to read only routing as well). A couple SQL statements that might help: Query Current Settings SELECT ...


1

So I changed the Azure Virtual Network Gateway to Policy based (static routing), and configured the router to use the specified IKEv1 settings that Azure supports. Those arecdetailed here: https://azure.microsoft.com/en-us/documentation/articles/vpn-gateway-about-vpn-devices/ The VPN connection now works.


1

you can use a custom script extension to run a PowerShell script. you will be able to call the custom script as part of your ARM Template http://blog.fullscale180.com/azure-arm-templates-tips-and-tricks-5-custom-script-extension-workaround-i-cannot-add-another-extension-to-a-vm-to-run-a-script-on-the-last-node-of-the-cluster/


1

Disabling the service should be enough because once the health check fails, the affected VM will be automatically "out" of the LB. However, you can use PowerShell or CLI to add or remove servers from the backend pool. ARM IaaS: Get started creating an Internet facing load balancer in Resource Manager using PowerShell ASM IaaS: Get started creating an ...


1

Putting MySQL on a server outside your data center is going to introduce significant latency. You need to put your database in the same data center as your app server. The problem here is your budget, which has affected your deployment architecture. The smallest AWS Linux instance can run a good sized blog, especially if you do caching (eg Nginx page ...


1

The only thing related to sessions, is the state-less nature of Azure VM's. This means that you could possibly lose one of the more popular ways of storing a session state. From the article you linked: The most frequently used provider is the in-process memory provider, which stores the state in the memory of the web server it is running on. It relies ...


1

Basically: Create a Premium Storage Use Azcopy or Storage Explorer to copy your VHD to the new premium storage Use template deployment to bring your VM back to life There's no GUI feature to help you on this job. Either use Template Deployment or Powershell/Cli to recreate the VM. I'm assuming you sysprep (Windows) or deprovision the agent (Linux) from ...


1

You can only access Azure File Storage through SMB or Rest API. That is, without the proper authorization headers, these files are not accessible. If you need anonymous HTTP access or even browser access then you need a blob, not file storage. You can, however, mount this file share to a web server and serve these files through it. This is also true to ...


1

At the time of backup the Azure Backup extension sends a command to the VM to flush all writes, then it takes a snapshot, this should mean that your backups are consistent. This is similar to the way VM backups are done in Hyper-V and VMWare and should allow you to restore VM's just fine. However, the only way to confirm all this is to test, restore your VM'...


1

I fixed the problem by deleting the Microsoft.OSTCExtensions.LinuxDiagnostic extension. The steps I took where: Start the VM even though it says there was an error. If I tired to remove the extension before starting the VM I got the following error: Failed to delete the virtual machine extension 'Microsoft.Insights.VMDiagnosticsSettings'. Error: ...


1

Try going into the virtual machine settings and then diagnostics, turn diagnostics off. If that doesn't let the machine boot then google how to use powershell or azure cli to login to azure and then remove the extension. Once the extension is removed you can then reboot the machine and turn diagnostics back on.


1

You are trying to use "a certificate valid for *.mysite.com" at bar.azurewebsites.net. Of course this doesn't work! The certificate is not valid. You need to either: load a valid separate certificate for bar.azurewebsites.net or replace the *.mysite.com with a multi-domain certificate valid for all of the mysite.com' sites _and_bar.azurewebsites.net` and ...


1

Currently changing the VMSS model from platform image to custom image isn't supported (this might change in the future as model changes are opened up more). One way to do this with minimal downtime would be to create the new scale set, and then change the load balancer settings (i.e. a manual form of VIP swap, like disassociate the IP address from one LB, ...


1

Using the new portal, you can move a resources in a resource group to another resource group. The capability only became available recently. You can read more about it here: Move resources to new resource group or subscription



Only top voted, non community-wiki answers of a minimum length are eligible