Protecting AAD identities with the right MFA method

It's no secret: cyberattacks are becoming more frequent and more sophisticated. But even the simplest techniques often lead the attackers to success. After all, the weakest link in the defense against cyber attacks is the human being. In this post, I show how you can protect Azure Active Directory (AAD) identities with the right MFA method without neglecting the human factor. Not only is the security aspect important to consider, but also user acceptance.

One year as a digital nomad

Ein Jahr als digitaler Nomade

Time for a post of a slightly different kind. Travel, adventure, uncertainty and part-time work... This was my life when I decided to try my luck as a digital nomad and leave my home country Switzerland for a year. In this short article, you'll learn what I consider to be the ten most important points to keep in mind as a digital nomad.

Azure Reserved Instance size flexibility

With cloud services now widely available on the market, flexibility for customers has multiplied. Quickly start a virtual test environment on Azure at the push of a button and then clean it up again. However, if you want to run several virtual machines on Azure continuously, it is worth planning and save costs by means of a reservation. In order not to have to sacrifice flexibility completely, there is the "Azure Reserved Instance size flexiblity" offer, which is used for VMs and scale sets. In this article, I will go into more detail about how Azure Reserved Instance size flexibility works and how you can use it to your advantage and save money.

Windows 365 - your computer from the Azure Cloud

As many have suspected for years, Microsoft now offers Windows 365, a computer from the Azure Cloud. Microsoft officially announced the product at Inspire 2021 and officially launched it on the second of August 2021. Windows 365 - your computer from the Azure Cloud - has been GA and available to everyone since then. In the following, you will learn more about important aspects of Windows 365.

Automatically audit and deploy Azure Resource Locks with Azure Policies

Banner - Auto Azure RG Lock with policies

You can create resources very easily on the Azure platform. This is great, but it also provides a few risks. For example, you can delete resources or entire environments just as easily. What is very helpful for tests and demos can be very dangerous for integration and production environments. So you don't have to manage this manually, I wrote an Azure Policy code. This defines the automatic auditing and provisioning of Azure Resource Locks with Azure Policies.

Become familiar with the Cloud Adoption Framework for Azure

get used to the Cloud Adoption Framework by Yannic Graber

The cloud continues to be on the unstoppable growth path and is an omnipresent topic to this day. However, there is no general answer to the question of whether and in what form the cloud is right for companies. This must be assessed on a case-by-case basis. And this is exactly where the difficulty lies, since companies have different levels of knowledge and are at a different point. Microsoft has recognized this and provides extensive help. No matter whether you and your company are still in the very beginning or already very advanced. Become familiar with the Cloud Adoption Framework for Azure (CAF) and use it to make the right decisions and standards.

The long awaited arrival of Azure Region Resource Mover

Azure Resource Region Mover

Mit dem an der Ignite 2020 angekündigten Azure Region Resource Mover kannst du wie der Name sagt, Azure Ressourcen in eine andere Region verschieben (offizielle Bekanntgabe). Der Service ist per sofort im Public Preview Modus verfügbar. Als Azure Advisor habe ich den Region Resource Mover bereits im Februar 2020 im Private Preview Modus für euch testen können. Erfahre mehr über meine ersten Erfahrungen und lerne, wie einfach es ist, deine Azure Ressourcen in eine andere Region zu verschieben. Es ist soweit – the arrival of Azure Region Resource Mover.

Azure Bastion - Secure access to Azure VMs

az bastion secure access vms

The work forms "home office", "remote work" or even "work anywhere" are becoming increasingly important, especially in recent months. This change affects not only users, but also IT staff and system administrators. However, I am often confronted with mistrust and security concerns when dealing with such issues. This is where Azure Bastion comes into play. Bastion not only enables "work anywhere" for system administrators, but also provides increased security and secure access to your Azure VMs without the need for a VPN!

MS Teams Meetings in separate windows

MS Teams separate windows

Already at the Microsoft Ignite in November 2019, the feature and support of multiple windows for Microsoft teams was announced. Since a few months this feature is already in rollout, but only for private chats (see post of 18.05.2020). Now the time has finally come and Microsoft is rolling out the feature of "MS Teams Meetings in separate windows". A long awaited feature on my part!

en_GBEnglish