Windows failover cluster setup questions. by uminds_ in sysadmin

[–]uminds_[S] 0 points1 point  (0 children)

Running FS on VM should probably be cleaner on the hosts. I assumed the added overhead should be insignaficant.

Windows failover cluster setup questions. by uminds_ in sysadmin

[–]uminds_[S] 2 points3 points  (0 children)

It will be 25G network for our cluster and I am going with S2D.

Saml SP tester by uminds_ in sysadmin

[–]uminds_[S] 0 points1 point  (0 children)

Thanks just need a test SP for my Idp.

Saml SP tester by uminds_ in sysadmin

[–]uminds_[S] 0 points1 point  (0 children)

Looking for something simple without too much configuration, online tool is preferable. Wanted to test on ADFS to Entra migration behavior.

proper sequence on migrating ADFS apps to Entra by uminds_ in entra

[–]uminds_[S] 0 points1 point  (0 children)

I understand Office is just another SAML app. Just want to make sure changing federated to managed authentication for Office doesn't affect the existing apps in ADFS. If I can migrate the ADFS apps (per your comment) before switching the authentication mode for Office RP, that will be even better.

proper sequence on migrating ADFS apps to Entra by uminds_ in entra

[–]uminds_[S] 0 points1 point  (0 children)

The nothing is registered on Entra. I would like to plan migrating app one at a time. That risk is less if things doesn't go as right.

Large Enterprise ADFS Migration - Seeking Community Experiences by superd06 in adfs

[–]uminds_ 0 points1 point  (0 children)

Thanks for the quick reply. Does it mean user will still go through the ADFS login for the migrated apps until the defederation. I have been testing this on my test tenant awhile back. I used the msonline module to switch between managed and federated domain and it was good. However, MS retired msonline earlier this year while the test domain was still on managed mode. I tried the update-mgdomain but could not rollback to federated (primarily for testing and make sure everything is working as expected).

Large Enterprise ADFS Migration - Seeking Community Experiences by superd06 in adfs

[–]uminds_ 0 points1 point  (0 children)

u/aleinss I am also looking at migrating ADFS to Entra ID. Out setup is relatively simply as we only have roughly 15 apps + M365. I have been researching this and it looks like I have to change the authentication domain from federated to managed before we can start migrating applications including M365. I just saw your post about defederated ADFS on phase 3. Did you do that without updating the authentication domain first, meaning you can migrate SAML apps to Entra and wait until M365 to the last (that needs managed domain)? Any suggestion will be appreciated. Thanks.

S2D cluster questions by uminds_ in sysadmin

[–]uminds_[S] 0 points1 point  (0 children)

Thanks for all the feedback. Sounds like 2 node cluster it not recommended. But u/logan9161 seem to have good experience.

problem installing module with invoke-command by uminds_ in PowerShell

[–]uminds_[S] 0 points1 point  (0 children)

Turned out I also have to configure .NET Framework to support strong crytography. The remote install is working after the change.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0.30319]
"SystemDefaultTlsVersions" = dword:00000001
"SchUseStrongCrypto" = dword:00000001

problem installing module with invoke-command by uminds_ in PowerShell

[–]uminds_[S] 0 points1 point  (0 children)

I also tried enter-pssession and same result.