Microsoft has released the version 2111 for Configuration Manager (Current Branch) which is now available as in-console update and is currently via opt-in script. You can apply this update on sites that run version 2006 or later. If you are running older versions of the configuration manager, you will need to update the site to the supported version which you can see it in the console then update to 2111. For a list of new features and improvements in configuration Manager 2111, please read https://docs.microsoft.com/mem/configmgr/core/plan-design/changes/whats-new-in-version-2111 Just like any other configuration manager build release , this build has some new features,enhancement,…
Author: Eswar Koneti
Microsoft has released the update 2107 for Configuration Manager (Current Branch) which is now available as in-console update. You don’t need to run opt-in script. You can apply this update on sites that run version 2002 or later. If you are running older versions of the configuration manager, you will need to update the site to the supported version which you see in the console then update to 2107. For a list of new features and improvements in configuration Manager 2107, please read https://docs.microsoft.com/en-us/mem/configmgr/core/plan-design/changes/whats-new-in-version-2107 Just like any other configuration manager update release, i always try to look and see what…
Note: This article was first published on www.procloudguru.com by Alpesh .Since the website is down, I am publishing the content here. This post talks about the Administrative Units in Azure AD. I will also touch upon delegating mail recipients’ task for exchange online for one such similar AU. In an hybrid Exchange scenario where you sync your identities from your on-prem AD to Azure AD its a very important task to achieve to maintain the same level of delegation as you had on-prem for managing exchange mailboxes. You would probably wish to have similar controls delegated to your support staff on Exchange Online as well.…
Note: This article was first published on www.procloudguru.com by Alpesh .Since the website is down, I am publishing the content here. This article is about Azure AD integration with Qualys which is not formally documented with Qualys and is not listed as on Azure AD App gallery. That being said, not just Qualys but any SAML aware app can be integrated with Azure AD. I am listing down a few benefits of doing this. Frankly, I don't see a downside to this in anyway because if you are already paying for the Azure AD premium licenses then this is the…
Note: This article was first published on www.procloudguru.com by Alpesh .Since the website is down, I am publishing it here. In this blog post, i would like to discuss with you about a peculiar issue that I went through and had couple of reasons. a) Microsoft worked on this case for 2-3 days and they had all necessary logs right in front of them to nail this issue. But could not. (Not criticizing. They are humans too, I get it). b) It may be a rare scenario for the world but will be a very common scenario in Asia. Especially…
Note: This article was first published on www.procloudguru.com by Alpesh .Since the website is down, I am publishing it here. This blog has taken long to write as compared to the other blogs I usually write. I was unable to foresee how to write this as the topic is vast and the scenarios can be unlimited. However, I am going to try my best to not confuse you and I hope to meet the objective that I set before writing this blog (which is to share a sample design for Azure AD Conditional Access Policies aka AAD CP). I trust…
Note: This article was first published on www.procloudguru.com by Alpesh .Since the website is down, I am publishing it here. The reason behind writing of this blog is to share my view on how the traditional authentication/authorization can be modernized. Gone are the days of monolithic apps which shared a common security portal or user repository. With the microservices architecture it will be grossly ineffective to have a security firewall at each service level in the microservices architecture and very inefficient to have it tied down to each service. Rather, it should be decoupled from services. The whole rationale behind…
Last week, I was having a discussion with the manager about the User IE Home page/Start page to get a report on, how many users are set to Company intranet Page. I then asked him, what is the process/method that company currently follows to set IE Home page .He then replied, GPO ? my response for this was ,if GPO, then the Home page for IE should be set to the required one for all Domain Users (Domain users: where ever the GPO applied to) and using GPO, will have more control to restrict user to not to change the…