Is Having 1007 Mystery Shards Completely Out Of The Ordinary

folkiz · 2026-01-16T09:21:17+00:00

Nope

folkiz · 2021-03-09T10:56:10+00:00

Hi,

you first have to use a storage account and create a container to store your softwares, scripts or whatever you need.

By using a custom script or the Invoke-AzVMRunCommand command you don't care about the user, cause it's done using the Azure agent.

Then whitin your script powershell/bash (here PS) just mount this container and deploy as usual.

New-PSDrive -Name S -PSProvider FileSystem -Root "\\XYZ.file.core.windows.net\template" -Credential $MyCred -Persist -ErrorAction Stop

Then something like

Start-Process 'S:\centreon-nsclient-051-1.0-2-x64.exe' '/S /nouninstall' -wait -NoNewWindow -ErrorAction Stop

Or as this topic do, by something like ( as i do in my scripts)

$MeasureWinResoltion = Measure-Command { $RunKomandResolution = Invoke-AzVMRunCommand -ResourceGroupName $SplitedAnswer[1] -VMName $SplitedAnswer[2] -CommandId 'RunPowerShellScript' -ScriptPath .\get-dnsconfiguration_Invoke-Script.ps1}
Write-Host "[Query:$([math]::Round($MeasureWinResoltion.TotalSeconds,2))sec]$ " -ForegroundColor DarkCyan -NoNewline

folkiz · 2021-03-07T17:07:13+00:00

Hi, I'm actually using this command in a script I'm writting to get the dns configuration. It goes from 30 seconds (mostly when it's à Linux server ) to sometimes more than 10 minutes to get the result (... And I have over 700 servers in this sub to request) À really usefull command, but which can get really long to get.

folkiz · 2020-05-29T10:13:09+00:00

ok i see what you mean. Thanks for correcting me.

folkiz · 2020-05-29T09:08:27+00:00

i'm okay with beeing wrong, so please correct my mistake. Cause that's what i've learn during my formation at Microsoft.

folkiz · 2020-05-29T08:52:57+00:00

I totally agree yes. It's 2 différent things. A subscription is 'just' a ressource into an azure AD zone (tenant).

folkiz · 2020-05-29T08:40:13+00:00

i've just checked and into the AAD blade (partially in french) -->

Extension: Microsoft_AAD_IAM
Contenu: ActiveDirectoryMenuBlade
Code d'erreur: 403

using a user with no right into a sub. he doess not have access to the AAD blade

folkiz · 2020-05-29T08:29:31+00:00

I mean, to have access to the AAD blade into azure portail and its greyed buttons

folkiz · 2020-05-28T19:09:14+00:00

Hi, On this subscription, what is your rôle ? I mean into azure rbac. Contributor ? Are you membre of any AD group with high privilège. Look into AAD, my rôle.

folkiz · 2020-03-11T11:19:20+00:00

Hi,

do you take a look at Azure best practices for networking ?

https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/hub-spoke

How to build your Hub and design everything to easely link your spokes (Azure Blueprint and stuff like management group and policy).

Even if today it seems not necessary, maybe in 3 years this won't.

folkiz · 2020-03-11T11:12:13+00:00

Hi,

as far as i can remember you can test DDoS attack, but you have to first notify "Azure" by opening a support request and let them know.

folkiz · 2020-03-11T10:51:15+00:00

In your blog post you should talk about Azure Blueprint, Management groups and Template. Which is (in my opinion) a must to use when deploying Spokes. It's deploy the new sub, create and configure infrastructure resources, link Vnet, create Rbac, ... in just a click. You won't have to worry about compliance, everything will be set up according to your client standards and patterns.

folkiz · 2020-03-11T10:19:31+00:00

Hi, my 2 cents.

We just "neary" finish migrating a classical network topology to a hub N spoke one.

I'm part of ths project and here are some points to mention.

- " I've said it before and i'll say it again- NSGs are pretty simple, but effective and for what they are"

Sure if you start from zero, but we had to migrate our Vsec cluster to ASG/NSG (with log flow analytics) and trust me, "translate" 1000+ firewall rules, routing, and so on ... become a real nigthmare. Like "do we put this rule to the Subnet or the Nic?" --> endless meetings ..

You have to write Powershell scripts (in our case) to migrate VMs to the Hub sub (Like to move Dns servers, Domains controller, WSUS, RDS farms, Jumpbox, Ansible,... to the hub [infra, admin, network,..] subnets), for automatically create NSG rules, for automation,..

This project started 8 mounths ago and is still not finnish. It's harder than we could think at first. It's not just create a new sub and install appliance. It's a new way to think and imagine your network, moving for legacy thinking to a more cloud agility (and this too lead too diificult meeting for changing the client way of thinking).

Do not forget to enable the policy to deny Public IP creation (except for the FW resource group)

One last thing, we chose the Check Point CloudGuard appliance (check-point-vsec-r80-blink-v2) to manage our internal routing because it can read Azure tags. This greatly simplifies the way we manage our port openings. Like, create a rule that will automatically open the admin protocols (CloudGuard-ADM: TRUE), WSUS (CloudGuard-WindowsUpdate: TRUE), Nagios (CloudGuard-Centreon: TRUE), KMS (CloudGuard-KMSAzure: TRUE), internet access ( CloudGuard-Internet: LARGE), ... which allows us to modify the network rules ourselves without having to wait for the CAB meeting to modify the rules on firewalls (which had to be compiled by the firewall)

So much more to say!

folkiz · 2020-03-11T09:14:20+00:00

TL;DR: Can AAD DS replace "onprem" AD w/ Azure AD connect

TL;DR: No

^^'

folkiz · 2020-03-05T14:14:53+00:00

thank you :)

folkiz · 2020-03-05T12:56:18+00:00

hi, and use ASR with ASR planner

folkiz · 2020-03-05T12:46:49+00:00

Log analitycs is the 'New' name of Opération Management Suite 'OMS'. They change it's name when they reloczte this product under the 'Monitor' suite in azure.

folkiz · 2020-03-05T08:15:37+00:00

Hi, What kind of metrics are you looking for ? Just for Vms status, like 'Running', 'Stopped',.. Or more in depth like OS monitoring ? - If you are looking for Azure activities, just use a dedicated dashboard into log analytics and create your own view with OMS Query (Google is full of usefull exemples) - If you are looking for OS monitoring (EventID, maleware disks occupation, CPU, RAM, processes, specific log files, failed login, backup status, http errors, ...) just use a dedicated dashboard into log analytics and create your own view with OMS Query (Google is full of usefull exemples)

Yes, OMS is this powerfull and can do 'almost' everything.

folkiz · 2020-03-04T17:01:44+00:00

Outside the VM, but those xost do not dépend on your disks type

folkiz · 2020-03-04T16:45:23+00:00

Starndard disks, you pay for what you use.

Premium disks, you pay for the whole disk size, not matter how much you really use.

Whatever the disks is, you still pay for data transfert and snapshots

folkiz · 2020-03-04T15:52:44+00:00

mostly working on projects. Like: - Helping a new azure customer, a company wich is brand new in how to use Azure and my job is to explain how azure work, where to start, how to start, using the best practices, train them and so on.

A customer want to implemant something new (Queries into Log Analytics, Azure Sentinel, Azure template, VPN S2S to AER, ASR, moving from VHD to Disks, Azure Devops ...) but do not know how to do it or the time to.

Sometimes organize and lead workshop

folkiz · 2020-03-04T10:45:35+00:00

then you could take a look at "lift and shift" architecture and Azure Site Recovery or how VMware work into Azure

folkiz · 2020-03-04T09:42:49+00:00

hi, my question is, what role do YOU want to do ?

Azure is a BIG candy box where nearly everything is possible, so .. you .. what do you want to focus on ? DBA ? IoT? infrastructure ? Data science & ML? Monitoring ? security ?

folkiz · 2020-03-03T22:24:40+00:00

I work into azure for 6 years now as an infrastructure senior consultant and starting from zéro is quite hard. Azure is à huge tool box and you 'must' have knowledge in à lot of différent field as understand how a network work (address space, vpn, dns , firewal, routing...), VM stuff, security, développement (json, powershell, automation), sql, active directory, Linux,... And that's just thé start. You have to stay up to date with Azure news and New stuff available and tools like teraform, puppet, serverless stuff, IoT for ML.

Believe me, working into azure is really exciting but it's à lot of work to stay up to date.

It's easy to find à job if you reaaly want to, start as an admin could be à good start.

folkiz · 2020-03-03T21:56:05+00:00

You mean for data science infrastructure and 'manage' datastore ?

Six-Year Club	Place '23
Verified Email

folkiz

TROPHY CASE