markdowndocs

View project on GitHub

up

Intro

Azure is huge, so we can’t handle much of it here, but there are some things I need again and again that I forget.

One used to do things with PowerShell, but the Azure CLI 2.0 is a much better way, it is a python shell on top of PowerShell. See my page on the Azure CLI for more info here.

Latest login - keeps changing

  • https://ms.portal.azure.com
  • login with mwise@microsoft.com
  • Switch directory from default to microsoft.onmicrosoft.com directory

Services

  • What services are avalable in which region is here
  • In general these days (early 2018) West Europe has more things on offer than North Europe
  • South Central used to be my go-to region for new stuff, but I don’t think that is true anymore.
  • capacity problems abound…

Azure App Service for Linux

  • Docs here: https://politics.stackexchange.com/questions/39688/why-did-the-eu-agree-to-delay-the-brexit-deadline
  • Had to install App Service Extension 0.13.0:

Billing

Support Requests

Naming Conventions

Complicated topic because there are a lot of wierd restrictions and requirements that limit your flebility. See the Cogworks article or the Reddit discussion for a good discussion of these.

# Azure IoT Hub

  • I moved this stuff to a dedicated page on it

Azure AD

Options available

Acronyms

  • MDM means Mobile Device Managment
  • NgcSet means: “NgcSet refers to whether the user has provisioned Windows Hello for Business (WHfB). Azure AD joined devices provision WHfB by default when the user signs in for the first time to the device. Hybrid Azure AD joined devices is off by default. There is Group Policy that you can enable, however there is additional configuration needed on-prem to support WHfB authentication to DCs. When the user provisions WHfB, NgcSet must show YES.”

Joining AAD

C:\WINDOWS\system32>dsregcmd /status

+----------------------------------------------------------------------+
| Device State                                                         |
+----------------------------------------------------------------------+

          AzureAdJoined : NO
       EnterpriseJoined : NO
               DeviceId : a926cbb6-f302-4978-83d4-57ea3c3769d8
             Thumbprint : C0D030EEAA8F3145E2976E17A256ADF72220F253
         KeyContainerId : 9c83c8f4-a902-4b9e-bef1-fc1098cc8d91
            KeyProvider : Microsoft Platform Crypto Provider
           TpmProtected : YES
           KeySignTest: : PASSED
                    Idp : login.windows.net
               TenantId : 72f988bf-86f1-41af-91ab-2d7cd011db47
             TenantName : Microsoft
            AuthCodeUrl : https://login.microsoftonline.com/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
         AccessTokenUrl : https://login.microsoftonline.com/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/token
                 MdmUrl : https://enrollment.manage-beta.microsoft.com/EnrollmentServer/Discovery.svc
              MdmTouUrl : https://portal.manage-beta.microsoft.com/TermsOfUse.aspx
       MdmComplianceUrl :
            SettingsUrl : eyJVcmlzIjpbImh0dHBzOi8va2FpbGFuaS5vbmUubWljcm9zb2Z0LmNvbS8iLCJodHRwczovL2thaWxhbmkxLm9uZS5taWNyb3NvZnQuY29tLyJdfQ==
         JoinSrvVersion : 1.0
             JoinSrvUrl : https://enterpriseregistration.windows.net/EnrollmentServer/device/
              JoinSrvId : urn:ms-drs:enterpriseregistration.windows.net
          KeySrvVersion : 1.0
              KeySrvUrl : https://enterpriseregistration.windows.net/EnrollmentServer/key/
               KeySrvId : urn:ms-drs:enterpriseregistration.windows.net
     WebAuthNSrvVersion : 1.0
         WebAuthNSrvUrl : https://enterpriseregistration.windows.net/webauthn/72f988bf-86f1-41af-91ab-2d7cd011db47/
          WebAuthNSrvId : urn:ms-drs:enterpriseregistration.windows.net
 DeviceManagementSrvUrl : https://enterpriseregistration.windows.net/manage/72f988bf-86f1-41af-91ab-2d7cd011db47/
  DeviceManagementSrvId : urn:ms-drs:enterpriseregistration.windows.net
           DomainJoined : YES
             DomainName : WISEDOM

+----------------------------------------------------------------------+
| User State                                                           |
+----------------------------------------------------------------------+

                 NgcSet : NO
        WorkplaceJoined : YES
      WorkplaceDeviceId : a926cbb6-f302-4978-83d4-57ea3c3769d8
    WorkplaceThumbprint : C0D030EEAA8F3145E2976E17A256ADF72220F253
           WorkplaceIdp : login.windows.net
      WorkplaceTenantId : 72f988bf-86f1-41af-91ab-2d7cd011db47
    WorkplaceTenantName : Microsoft
        WorkplaceMdmUrl : https://enrollment.manage-beta.microsoft.com/EnrollmentServer/Discovery.svc
   WorkplaceSettingsUrl : eyJVcmlzIjpbImh0dHBzOi8va2FpbGFuaS5vbmUubWljcm9zb2Z0LmNvbS8iLCJodHRwczovL2thaWxhbmkxLm9uZS5taWNyb3NvZnQuY29tLyJdfQ==
          WamDefaultSet : YES
    WamDefaultAuthority : consumers
           WamDefaultId : https://login.microsoft.com
         WamDefaultGUID : {D7F9888F-E3FC-49B0-9EA6-A85B5F392A4F} (MicrosoftAccount)
             AzureAdPrt : NO
    AzureAdPrtAuthority : NO
          EnterprisePrt : NO
 EnterprisePrtAuthority : NO

+----------------------------------------------------------------------+
| Ngc Prerequisite Check                                               |
+----------------------------------------------------------------------+

          IsUserAzureAD : NO
          PolicyEnabled : YES
         DeviceEligible : NO
     SessionIsNotRemote : YES
         CertEnrollment : mobile device management
              ScepReady : YES
      AadRecoveryNeeded : NO
           PreReqResult : WillNotProvision


C:\WINDOWS\system32>