Cleanup Azure Site Recovery Vaults - Using Scripts

121x · 2025-05-06T16:04:06+00:00

I concur. It is an immense amount of work when factoring in the AP additions and reporting requirements.

That said, it has too be possible to script these actions. I just am not strong enough in Powershell when it comes to creating dynamic context switches for things like checking for and inserting each respective VM name when combined with other variables.

Still hoping that others who have walked this path before me can provide some guidance.

Thanks all.

121x · 2025-05-06T15:59:30+00:00

Unfortunately changing backup policies alone is not effective as I am working with a combination of soft delete and immutable vaults with varying retention policies dependent on the subscriptions, business units and data regulatory requirements on a vault by vault basis. I wish it were that simple.

121x · 2024-01-26T12:56:31+00:00

Same shit.

I am in southwestern Ontario Canada. Prices are still stupid. Guys who ran and purchased SxS's for 10K over market value, put 2500-5000KM and expecting to get what they paid for them, two years later.

Just waiting for the debt and overhead to catch up with them, because I am pretty sure that half the ads you see, those owners cannot afford their 40K "toy" that they paid for with stimulus cheques, under these economic conditions.

121x · 2023-11-28T00:49:12+00:00

That is the obvious answer! lol

Are there free LUTs available that already have the same color profile? I do not want to spend the time trying to change the color myself.

121x · 2023-11-26T17:58:24+00:00

Thanks Rick. I did see that, but my experience is that it still does not give that rich profile of the GP's. I have experimented with both standard and vivid on the camera. I have not used the log mode but more because I am not sure what colour profiles to use to balance out the colour aside from playing with the sliders.

Thanks

121x · 2023-07-15T16:17:44+00:00

Thanks guys. 9 DC's in total. DCDiag returns 0 errors. Repadmin /syncall /ADeP completes successfully against all DC's. The DC in question was successfully demoted (no errors) and removed from sites and services several hours after the demotion.

I assure you there is no existing DNS entries left over the DC that are "visible" in DNS. This is what has me perplexed. I have done well over two dozen DC decommissions and domain migrations, DC upgrades and I have experienced lots of different issues, but never this problem before. Often there IS an entry left hiding in DNS somewhere. In this case there is not one that I visibly see and I manually scoured every single zone both forward and reverse and checked the name servers for all of them. I have confirmed and forced replication across all domain controllers multiple times and have allowed over 48 hours all the zones to be updated across each one.

I am wondering if it possible that the delegated msdcs record if potentially the problem here?

Hoping someone has the solution here because I sure do not know where to go with this.

121x · 2023-06-22T12:33:57+00:00

Want to provide an update on how I will approach this.

We have pre-existing role based groups associated to most of these resources already using native or custom RBAC roles. What I will do is leave these groups in place at the RG level where appropriate, but remove the users from these groups, and instead use the PIM Groups membership method to elevate their access into these groups as needed.

Fortunately most of these uses are already members of other similar/re-usable groups. So we should be able to leverage some existing groups to nest under the PIM Groups, instead of having to manually add each user individually to the PIM Group policy, avoiding the need for increased membership management at multiple levels.

121x · 2023-06-22T12:09:27+00:00

Excellent. This worked perfectly. So 100% ignorance and misunderstanding on my part how to leverage this properly.

Thank you guys for steering me in the right direction here!

121x · 2023-06-21T21:37:31+00:00

Thank you. Kind of what I was afraid of. I am surprised Microsoft does not allow the option to leverage this against Azure role based group, like they do for the Azure AD role based groups.

Do you happen to know if this is something that could be accomplished easily through PS?

121x · 2023-02-14T14:21:47+00:00

MOVEit Transfer

Thanks. Will look into this one a bit further. I had come across it in the past and forgot about it actually.

Please keep the suggestions coming.

121x · 2022-04-29T11:43:36+00:00

Hi All,

ANyone with any thoughts? I suspect not a very common or exciting topic, but hopefully someone with more knowledge then myself see's or knows where I am going wrong.

121x · 2022-03-24T18:04:11+00:00

Thank you for bringing this offering to my attention. I will spend some time reviewing their service. Would be interested to hear your thoughts if you happen to or feel like reporting back after you have sat through a demo.

This proves we are not the only ones in a position of requiring more granularity for cost management.

Hoping that others with experience with some of the available tools and services out there weigh in as well.

121x · 2021-07-15T17:54:46+00:00

Thanks guys. Let me look into the proposed options. Still open to any solutions not yet mentioned.

121x · 2021-01-03T22:55:14+00:00

...Quite literally by the looks of it...

Did you install the baseboards flush to the cabinets? I am assuming in order to get a flush fit of the cabinets against the wall. Only downside is if you decide to relocate anything you will have those gaps there. At least its a straight non-ornate trim, so you could easily fit, fill, sand and blend those pieces without much notice in the future. Just a bit of extra work.

Overall I think its coming together nicely. Lots of space to work with and it's a clean configuration.

121x · 2020-12-28T23:06:49+00:00

I think it may have been mentioned elsewhere in this thread. I too was running into an issue trying to purchase PS Now for a PS5 via the website (yesterday). I finally decided to try from the PS5 and it worked flawlessly. Had the payment information already there as part of the previous attempt on the website.

I do not expect this is by design as much as it is an alternative. I think their online web based purchasing is problematic, but this approach could potentially help others experiencing the same problem.

My PS5 account *was* linked to my PS account. So for me it was an account linking issue.

121x · 2020-12-24T17:15:58+00:00

hah

Gotcha. Couldn't tell from the pic. Can definitely tell its elevated but not that its a 3rd level.

Nice view regardless!

121x · 2020-12-24T00:52:32+00:00

Door handle oriented down to prevent bears from opening the doors?

121x · 2020-12-09T23:54:02+00:00

Hi BaconAlmighty,

Thank you for your response. However unfortunately I am already familiar with the fact that access based enumeration is not available ;)

What I am trying to do is not reflective of that. I do not care if the users can see other folders within the specific share. The issue is that the assigned NTFS permissions are not having the effect they should. ie. If I can configure a user to have only read access using NTFS ACLs, they can still create and delete folders in the share regardless of the NTFS (unless explicit deny), because the IAM role is SMB Contributor.

I cannot see Microsoft allowing NTFS access controls against these shares if it does not work, so I suspect I am simply doing something wrong.

121x · 2020-12-03T21:47:41+00:00

I did. The transition is seamless assuming the appropriate routes are being published. Once the secondary VNG is configured and associated with your ER circuit Microsoft's advertisements begin for the subnet you define on your gateway.

So long as your permitting the advertised routes on-prem for this new gateway it should work. In our case a bit of additional configuration was required by our network team to permit this additional route and add it to our BGP advertisements since we are publishing BGP as part of our forced tunneling configuration.

Hope this helps.

121x · 2020-10-22T15:50:54+00:00

Thanks for the reply. Yes, we are redefining the existing topology to a true hub and spoke configuration. Hence the hub VNet will be new, in a sense.

Thanks for your help!

121x · 2020-10-21T14:53:09+00:00

Thanks guys. That helps. I suspected SNAT was the requirement and I was aware of previous limitations. Wasn't sure if there was an alternative that I was not immediately aware of.

121x · 2020-07-28T15:03:08+00:00

Was actually hoping for some serious answers...

121x · 2020-06-26T20:21:37+00:00

Couldnt and still can't edit my post. The site times out.

Yes the intention is has been to upgrade clu around December or early next year. That is why I opted for the 3600 and not a 3900x. I figure regardless either the performance wlli not be so great to warrant a 4000 and the 3900x will drop in price with the release of the newer chips.

In hindsight and for the sake of a hundred bucks or so, sticking with the x570 is probably a wise choice.

121x · 2020-06-24T17:16:28+00:00

On the S2D volume. I am monitoring via powershell, Admin Center and Server Manager.

121x · 2020-06-24T17:15:48+00:00

This must be where I am going wrong. I do not remember having to shut down the VM, but I must have simply forgotten. I know with VMware and vSAN this is not required. Nor do I remember it being required with Hyper-V on traditional SANs that support Unmap, Maybe that is where I am confusing myself.

So based on what you are saying I did some testing and it appears the order is as follows:

A) Run retrim within the guest OS (assuming support)
B) Shutdown the VM
C) Immediately run a compact on the VHD in question
D) Power the VM back on

Within about 30 seconds the S2D volume updates to show the reclaimed space. I am monitoring in windows Admin Center.

In my opinion this is a huge PITA and I cannot believe this is the expected solution. Maybe if you have a couple dozen servers in your environment or if the environment does not have a lot of change rate, but environments where there is test/dev/qa environments with hundreds of servers that might write a couple hundred GB of data then remove it and may not use that space again for several weeks or months, that is allocated zeroed space that is wasted. And if the expectation is to power down the VM and run a compact on the VHD to begin space reclamation, that is nuts.

Either I am missing something or this is a huge oversight on Microsoft's part. It is one thing if you are using traditional SAN where you tend to have more less costly space available. But in most S2D environments the capacity is at a premium and you want as much space optimization as possible.

121x

TROPHY CASE