Tag: PowerShell Page 1 of 2

Are you looking for information about PowerShell in Microsoft Azure and Microsoft 365? In this archive you will find all our posts about PowerShell.

Kerberos Cloud Trust and Windows Hello for Business: Secure and Seamless Authentication in Hybrid Environments

By Oliver Müller

On 3. September 2024

In Microsoft 365, Microsoft Azure

Kerberos Cloud Trust is a hybrid authentication protocol developed by Microsoft to enable secure and passwordless sign-ins. Kerberos Cloud Trust combines the strengths of Kerberos and Windows Hello for Business to offer a modern, secure, and user-friendly authentication solution. It is particularly useful in hybrid environments where both cloud and on-premises resources are utilized. Users authenticate securely and seamlessly both locally and in the cloud.

Microsoft Entra ID: Automatically roll over Kerberos decryption key

By Oliver Müller

On 6. August 2024

In Microsoft Azure

The regular roll over of the Kerberos decryption key is crucial to ensure the security and integrity of seamless Single Sign-On (SSO) in hybrid IT environments. Microsoft recommends rolling over this key every 30 days to close potential security gaps and ensure smooth integration between on-premises Active Directory and Microsoft Entra ID. This process can be automated to minimize administrative effort and ensure continuous security.

Microsoft Entra Conditional Access: Block Authentication Flows

By Oliver Müller

On 2. April 2024

In Microsoft Azure

The Microsoft Entra Conditional Access for authentication flows regulates the use of the device code flow and authentication transfer. The device code flow is used to authenticate devices that do not have a browser or whose input is restricted, such as smart TVs, IoT devices, or printers. The device code flow represents a high-risk authentication flow, which could be exploited in phishing attacks or to gain access to corporate resources on unmanaged devices. The authentication transfer is a new flow that provides a seamless way to transfer the authenticated state from one device to another. In the desktop version of Outlook, users might be presented with a QR code. When they scan it on their mobile device, their authenticated state is transferred to the mobile device.

SMB over QUIC and Azure Server: empowering secure and lightning fast file sharing

By Oliver Müller

On 16. September 2023

In Microsoft Azure

SMB over QUIC is a network protocol used by Windows. It allows secure, shared use of resources such as files on the network. To use SMB (Server Message Block) without QUIC, TCP port 445 is required. Some Internet providers block TCP port 445 for security reasons. Therefore, it is not possible to connect to a file share on Azure by SMB successfully.

To bypass the blocking of TCP port 445, there are several options to choose from, including the following:

VPN (Virtual Private Network), e.g. AlwaysOnVPN
Third party software, e.g. MyWorkDrive
SMB over QUIC (Quick UDP Internet Connection)

Azure Arc and Windows Server: The perfect pair for the hybrid cloud

By Oliver Müller

On 29. July 2023

In Microsoft Azure

Microsoft Azure Arc is a solution that enables resources to be centrally managed and monitored across multiple environments. Azure Arc extends the management capabilities of Azure to on-premises resources or other cloud providers such as Amazon Web Services (AWS) or Google Cloud Platform (GCP).

Resources integrated into Azure Arc are administered via the unified Azure Portal. Regardless of where they are physically or geographically located. Overall, Azure Arc provides consistent, centralized and simplified management of resources.

This guide describes how to deploy a Windows Server hosted outside the Azure Cloud step-by-step using the Azure Connected Machine Agent in Azure Arc.