July 1, 2025
Effective access control is the keystone of any secure, well‑managed Microsoft Sentinel deployment. By carefully scoping permissions at each level—from your Azure tenant down to Continue […]
- Filter by
- Categories
- Tags
- Authors
- Show all
- All
- Azure App Service
- Azure Architecture
- Azure Updates
- Command Line
- Community
- Microsoft News
- Microsoft Security
- Tech Community
- All
- .NET
- ABAC
- Access Azure Cloud Shell from local device
- access control list
- acls
- Active Directory
- Active Directory Management
- Active Directory Sync
- AD DS
- AD DS Migration
- AD Health Check
- add-ons
- Adversary-in-the-middle (AiTM)
- Agentic AI
- agic
- AI
- AI + Machine Learning
- AI Chat Behavior
- ai foundry
- AI learning
- ai search
- ai services
- AI Skills fest
- AI Skillsfest
- AKS
- alerts
- AMA
- amba
- AML
- analytics
- Android
- api
- API Management
- API manager
- api-development
- APIs
- App Attach MSIX
- App Attach setup
- App Configuration
- App Control
- app development
- app service
- app-modernization
- Application Gateway
- application gateway for containers
- Application Insights
- application security groups
- Archive Storage
- Are agents free in Microsoft 365 Copilot chat
- are copilot pages free
- Are Microsoft Applied Skills Credentials free
- Article
- Artificial Intelligence
- ASP.NET Core
- aspire
- Audit Logs
- auth0
- authentication
- Authoring Best Practices
- authorization
- automate vm setup
- automation
- availability sets vs zones
- Availability Zones
- AVD
- AVD 2025
- AVD admin tips
- AVD beginner guide
- AVD best practices
- AVD changes 2025
- AVD clipboard redirection
- AVD configuration
- AVD demo
- AVD drive redirection
- AVD host pool settings
- AVD management
- AVD multiple desktop assignment
- AVD new features
- AVD personal host pool
- AVD printer redirection
- AVD redirection
- AVD security update
- AVD Setup
- AVD tutorial
- AVD USB redirection
- AVD user assignment
- AVM
- avnm
- aws
- AZ-104
- AZ-900
- Azure
- Azure Active Directory
- Azure Activity Logs
- Azure AD
- Azure AD Connect
- Azure AD Sync
- Azure Adaptive Cloud
- Azure Administration
- azure advisor
- Azure AI
- Azure AI Foundry
- Azure AI Search
- azure ai serach
- Azure ai-services
- azure application delivery
- Azure Application Gateway
- azure application gateway for containers
- Azure Automation
- azure availability sets
- azure availability zones
- Azure Backup
- azure basic vpn
- Azure Bastion
- Azure Bastion demo
- Azure Bastion Developer Tier
- Azure Bastion free tier
- Azure Bastion Linux
- Azure Bastion Setup
- Azure Bastion Tutorial
- Azure Bastion walkthrough
- Azure Bastion Windows
- Azure Best Practices
- Azure Bicep
- Azure Blob Storage
- Azure Blob vs File vs Disk
- Azure Certificate demo
- Azure Certification
- Azure Chaos Studio
- Azure CLI
- Azure CLI SSH
- Azure Cloud
- Azure cloud desktop
- Azure Cloud Identity
- Azure Cloud Security
- Azure Cloud Shell from laptop
- Azure Cloud Storage
- Azure Cloud Tutorial
- Azure Compute Fleet
- Azure confidential ledger
- Azure Container Apps
- Azure Container Instances
- Azure Container Registry
- azure copilot
- Azure Cosmos DB
- Azure Cost Management
- azure custom script
- Azure Data Box
- Azure Data Explorer
- Azure Data Lake Storage
- Azure Data Storage
- Azure Database for MySQL
- Azure Database for PostgreSQL
- Azure Database Migration service
- Azure Databricks
- Azure Dedicated HSM
- Azure default outbound access
- Azure Developers
- Azure DevOps
- Azure DevTest Labs
- Azure Disk Storage
- Azure DNS
- Azure Domain Services
- Azure Entra Migration
- azure essentials
- Azure Essentials Show
- Azure Event Hub
- Azure explicit internet access
- Azure ExpressRoute
- azure fault domains
- Azure File Share
- Azure File Storage
- Azure Files
- Azure Firewall
- azure fleet
- azure for beginners
- Azure Front Door
- Azure Functions
- Azure HDInsight on Azure Kubernetes Service (AKS)
- azure high availability
- azure home lab
- azure hybrid
- Azure Hybrid Benefit
- Azure Hybrid Identity
- Azure Identity Management
- Azure Identity Services
- Azure Image Builder
- Azure Infrastructure
- Azure Key Vault
- Azure Key Vault and Lets Encrypt certs demo
- Azure Key Vault demo
- Azure Kubernetes Fleet Manager
- Azure Kubernetes Service
- Azure Kubernetes Service (AKS)
- Azure Lab
- Azure Load Testing
- Azure Local
- Azure Log Analytics
- Azure Logic Apps
- Azure Machine Learning
- Azure Managed Lustre
- Azure Maps
- Azure Migrate
- Azure Modular Datacenter
- Azure Monitor
- Azure Monitor Agent
- azure monitor alerts
- azure monitor baseline alerts
- Azure Monitoring
- Azure NAT Gateway
- Azure Native Client
- Azure NetApp Files
- azure network monitoring
- Azure Network Security
- Azure Networking
- azure networking tutorial
- Azure Open AI
- azure openai
- azure openai service
- Azure outbound access
- Azure Platform
- azure point to site vpn
- Azure Policy
- Azure Portal
- Azure Portal Tutorial
- Azure PowerShell
- azure powershell tutorial
- azure powershell vpn
- Azure Private Link
- Azure Private Subnet
- azure rbac
- Azure RDP settings
- Azure RDP without public IP
- Azure Red Hat OpenShift
- azure regions
- Azure Resource Manager
- azure scripting
- Azure Security
- Azure Security Best Practices
- Azure Sentinel
- Azure September 2025 changes
- Azure Service Bus
- Azure Service Health
- Azure Setup
- Azure Site Recovery
- azure site to site vpn
- azure sla
- Azure SNAT
- Azure Spot Virtual Machines
- Azure Spring Apps
- Azure SQL
- Azure SQL Database
- Azure SQL DB
- Azure SQL Managed Instance
- Azure SSH without public IP
- Azure Stack HCI
- Azure Stack Hub
- Azure Storage
- Azure Storage Actions
- Azure Storage Best Practices
- Azure Storage Explained
- Azure Storage for Beginners
- Azure Storage Options
- Azure Storage Overview
- Azure Storage Performance
- Azure Storage Pricing
- Azure Storage Tutorial
- Azure Storage Types
- Azure subnet configuration
- Azure subnet demo
- Azure Subscription
- Azure Synapse Analytics
- azure sysadmin
- azure traffic analytics
- Azure Traffic Manager custom domain has not been configured in Azure
- azure training
- Azure Tutorial
- azure update domains
- Azure VDI
- Azure Virtual Desktop
- Azure Virtual Desktop apps
- azure virtual machine
- Azure Virtual Machines
- Azure Virtual Network
- azure virtual network manager
- Azure VM
- Azure VM connection
- azure vm deployment
- Azure VM Internet Access
- Azure VM RDP
- azure vm redundancy
- Azure VM Security
- Azure VM Setup
- Azure VNet Bastion
- Azure VNet default access
- Azure VPN
- azure vpn connection
- azure vpn demo
- Azure VPN Gateway
- azure vpn setup
- azure vpn tutorial
- azure-ad-b2c
- azure-arc
- azure-b2c
- azureai
- AzureAIFoundry
- AzureAISearch
- azurebicep
- azureverifiedmodules
- bash-script
- basic vpn gateway
- Bastion Host
- beginners
- best practices
- bginfo
- Bicep
- biceplang
- bike-shedding
- Bing Search
- Blizzard
- blog
- boolean-logic
- build
- Business
- Business Intelligence
- C#
- Canceled
- Chat GPT
- Chatmode
- chocolatey azure
- Claude Code
- client-credentials-flow
- Cloud
- cloud automation azure
- Cloud Directory Sync
- Cloud Foundation
- Cloud Mechanix
- Cloud Migration
- Cloud PC
- Cloud PC licensing
- Cloud Recovery
- Cloud Rewind
- cloud security
- Cloud Services
- Cloud Storage
- cloud terminology
- cloud vpn
- cloud-computing
- CloudFamily
- cmk
- code
- codegeneration
- coding
- Command Line
- command-line-interface
- community
- Community Contributions
- Community IT event
- Commvault
- Compliance
- compute
- Computer Vision
- Conditional Access
- connect azure to home network
- Connect to Azure VM
- container networking
- containers
- Content Delivery Network
- Contributor
- Convert EXE to MSIX
- Convert MSI to MSIX
- copilot
- Copilot pages explained
- Copilot pages simplified
- copilot pages step by step demo
- cosmosdb
- Cost Management
- Create MSIX package
- credential theft
- cryptocurrency mining
- cryptojacking
- csharp
- custom script extension
- custom-policies
- Cyberespionage
- Cybersecurity
- Cybersecurity trends
- D365
- D365 CE
- D365 F&O
- D365 Sales & CRM
- dashboards
- data
- Databases
- Databricks
- databricks devops
- Dayforce
- Defender for Identity
- Deleted
- deploy apps azure
- Deploy Azure Bastion
- deployment stacks
- dev-containers
- Developer
- Developer Life
- Developer Tools
- developers
- Development
- devops
- Diagnostic Settings
- diagnostics
- difference between Microsoft 365 Copilot Chat and Microsoft 365 Copilot
- disable default outbound
- distributed-systems
- DNS Configuration
- document-intelligence
- Documentation
- Documentation Standards.
- Does Microsoft 365 Copilot use company data to train LLM
- Domain Controller
- Domain Controller Demotion
- dotnet
- Easy MSIX tutorial
- ECMA2
- EF Core
- Elevate Access
- Encryption
- Endpoint management
- Enterprise File Sharing
- Enterprise IT
- enterprise-architecture
- entra
- Entra Connect
- Entra Connect High Availability
- Entra Connect Migration
- Entra Connect Staging Mode
- Entra Connect Step by Step
- Entra ID
- entra-external-id
- epac
- error
- error-message
- Event
- event hub
- Event Hubs
- event-driven-architecture
- Events
- Exchange Online
- Exec posts
- explore microsoft purview portal
- Expressions
- ExpressRoute
- Features
- Fedora
- File Sharing Security
- FIM
- finops
- Firewall
- firewall rules
- fleet manager
- Fortinet
- foundry
- Free AI learning
- free ai-3016 course
- free ai-900 course
- Free Assessments Microsoft
- Free AZ-104 course
- free az-2008 course
- free az-204 course
- free az-305 course
- free AZ-500 course
- free az-700 course
- Free Azure Bastion
- free dp-100 course
- free DP-3011 course
- free dp-605 course
- free md-4011 course
- Free Microsoft Asessmements
- Free Microsoft Certifications
- free microsoft course videos
- Free Microsoft Courses
- free ms-4023 course
- free pl-900 course
- Free sc-100 course
- Free SC-300 course
- free sc-900 course
- Frontline Cloud PC
- FSLogix profiles
- FSMO Roles
- Gartner Magic Quadrant
- gateway api
- genai
- General Development
- Generative AI
- getting started with Microsoft Purview
- GitHub
- GitHub Actions
- github copilot
- GitHub Spark
- GitHub Troubleshooting
- GitHub Workflows
- githubcopilot
- GitOps
- Google Cloud Platform
- governance
- Grafana
- grafana dashboards
- granfeldt
- Graph
- graph-explorer
- grok
- gwctl
- Hardening
- HashiCorp
- HashiCorp Ambassador
- Have I Been Pwned
- header
- high availability azure
- homelab
- host
- How to access Azure Cloud Shell locally
- how to setup vpn in azure
- How to take free Microsoft Certifications
- How-to
- http route
- hub
- Hub & Spoke
- hub-and-spoke
- Hugo
- Hybrid
- Hybrid + Multicloud
- Hybrid Cloud
- Hybrid Cloud Authentication
- Hybrid Identity
- hybrid network azure
- Hyper-V
- IaC
- identity
- Identity and access management
- In development
- In preview
- influencers
- Information Technology
- infrastructure
- Infrastructure As Code
- ingress controller
- Integration
- Internet of Things
- Intune
- Intune Cloud PC
- Intune tips
- Investor Relations
- ipam
- ipsec vpn azure
- Is Microsoft 265 Copilot free
- IT administration
- IT conference 2025
- IT networking event
- IT Pro
- IT Tutorials
- jfk-assassination
- John Towles interview
- jump box
- jwt-token
- K8s
- KDC Proxy
- KEMP
- Kerberos Authentication
- kinde
- kmsi
- kubernetes
- kubernetes fleet
- kubernetes gateway
- kubernetes gateway api
- kubernetes networking
- Kusto
- kusto query language
- Lab
- Landing Zones
- Language Understanding (LUIS)
- Launched
- Learn Azure
- learning
- linting
- LINUX
- Linux Virtual Machines
- Living off the land
- LLM
- Load Balancer
- load balancing
- Loadmaster
- Log Alerts
- Log Analytics
- Log Analytics Workspace
- Logic Apps
- Machine Learning
- macOS
- Managed Prometheus
- Management
- Management and Governance
- Management Groups
- Markdown Formatting
- masking
- maui
- MCP
- mcp-server
- Media
- mentorship
- metrics
- mfa
- micro-segmentation
- microsegmentation
- Microsoft
- Microsoft 365
- Microsoft 365 Copilot
- Microsoft 365 Copilot Chat and Microsoft 365 Copilot Explained
- Microsoft 365 Copilot Chat explained
- Microsoft 365 Defender
- Microsoft AI Skills Fest
- Microsoft Applied Skills
- Microsoft Azure
- Microsoft Azure Tutorial
- Microsoft Build
- Microsoft Cloud
- Microsoft Cloud PC
- Microsoft Copilot for Azure
- Microsoft Copilot for Security
- Microsoft Cost Management
- Microsoft Defender
- Microsoft Defender for Cloud
- Microsoft Defender XDR
- Microsoft Dev Box
- Microsoft Entra
- Microsoft Entra Domain Services
- Microsoft Entra ID
- Microsoft Entra ID (formerly Azure AD)
- Microsoft Fabric
- Microsoft Graph
- Microsoft Intune
- Microsoft Learn
- Microsoft licensing
- microsoft mvp
- Microsoft Purview
- Microsoft purview explained
- Microsoft Purview for beginners
- Microsoft Purview portal
- Microsoft Purview roles and scopes
- Microsoft purview step by step guide
- Microsoft Security
- Microsoft Sentinel
- Microsoft Threat Intelligence
- Microsoft Training
- Microsoft Writing Style Guide
- Migrate Entra Connect
- Migration
- MIM
- Minecraft
- Mint Sandstorm (PHOSPHORUS)
- Misc
- MITRE ATT&CK
- ML
- Mobile
- Modern Workplace
- modernization
- modules
- Most Valuable Professional
- msal
- MSIX
- MSIX certificate setup
- MSIX demo
- MSIX packaging explained
- MSIX Packaging Tool
- MSIX step by step
- MSIX tutorial for beginners
- multi session AVD
- multi-cluster load balancing
- multi-cluster networking
- mvp
- native-authentication
- network
- network rules
- Network security
- network security group
- network security rules
- Network Watcher
- networking
- Networking Basics
- new
- News
- NodeJS
- NoSQL
- NSG
- nuget
- observability
- On-Premises AD
- OneDrive KFR
- open source
- open-api
- openai
- OpenAPI
- opensource
- Operating System
- overlay cni
- PaaS networking
- Package apps for AVD
- Packer
- passwords
- patterns
- personal desktop Azure
- Personal Growth
- Pester
- Phishing
- PIM
- PIM Reauthentication
- Platform Engineering
- Pluralsight
- Point-to-Site VPN
- policy as code
- politics
- Portal
- postgresql
- postman-testing
- PowerAutomate
- powershell
- PowerShell Active Directory
- powershell azure
- precondition
- presentations
- Press Releases
- Pricing & Offerings
- Private Endpoint
- private link
- private networking
- privatelink
- privatelinkrealitybites
- profile-edit
- programming
- Progress
- Promote DC
- prompt
- prompt admin to reauthenticate when elevating role in PIM
- Prompt Engineering
- Prompt Flow
- Prototyping
- provisioning
- proxmox
- public cloud networking
- Public Speaking
- python
- ransomware
- Raspberry Pi
- RBAC
- RDP over TLS
- Reauthenticate conditional access policy
- reauthenticate PIM users in Azure
- Recent News
- recording
- Regions & Datacenters
- Reliability
- remediation
- Remote code execution
- Remote Desktop Azure
- Remove Domain Controller
- Resiliency
- Resource Health
- responsible-ai
- ResponsibleAI
- REST API
- Retirements
- reverse proxy
- Roles in Microsoft Purview explained
- route table
- routing
- SaaS
- SAML
- Sandstorm
- SDK and Tools
- SDKs
- Secure Azure VM Access
- Secure File Sharing
- Secure Future Initiative
- Secure SMB Access
- security
- security admin rules
- Security Baseline
- Securtiy
- Semantic Kernel
- Sentinel
- Server Manager
- serverless
- Service Endpoint
- service endpoint policy
- Service Health
- Service Management
- Services
- SIEM
- signature
- Simple MSIX guide
- site to site azure vpn
- site to site vpn
- site to site vpn tutorial
- Sleet
- SMB Configuration
- SMB over QUIC
- SMS
- SOAR
- software-architecture
- Software-Defined Networking
- software-design
- software-developer
- software-development
- software-engineering
- speaking
- spectral
- sql
- SQL Interview
- SQL Server
- SQL Server on Azure Virtual Machines
- SSH Azure VM
- Star Blizzard (SEABORGIUM)
- Static IP Azure
- Step by Step Azure Key Vault and certificate demo
- storage
- Storage Accounts
- Storm
- string split
- Summary Rules
- swagger
- system administrator
- Tech conference Dallas
- Tech Guide
- Tech Tutorial
- Technical
- Technical Writing
- Technology
- technology-ecosystem
- terminology
- Terraform
- Terraform Cloud
- Terraform Modules
- test-automation
- testing
- Thomas Maurer
- thought-leadership
- Threat Intelligence
- ThreatIntelindicators
- ThreatIntelObjects
- TLS 1.3 Encryption
- Token theft
- totp
- traffic analytics
- traffic filtering
- Traffic Manager
- Traffic Manager 404 Website not found
- traffic visibility
- troubleshooting
- tutorial
- ubiquiti cloud gateway
- ubiquiti vpn
- Uncategorized
- unit-testing
- updated
- user-defined route
- User-Defined Routing
- username
- validation
- vibe-coding
- Video
- Virtual desktop infrastructure
- virtual machine
- Virtual Machine Scale Sets
- Virtual Machines
- virtual network
- virtual network flow logs
- Virtual Network Peering
- virtual network service endpoint
- Virtual WAN
- Visual Studio Code
- vm extensions azure
- VNet
- VNet Flow Logging
- vnet flow logs
- vnet service endpoint
- vpn
- VPN Alternative
- vpn azure to on prem
- VPN Gateway
- vscode
- Web
- web app
- web application firewall
- web server
- webapp
- Well-Architected
- Well-Architected Framework
- WellArchitectedFramework
- What are adaptive scopes in Microsoft Purview
- what are Copilot pages?
- What are Microsoft Applied Skills Credentials
- what is Microsoft 365 Copilot chat
- what is Microsoft Purview
- What is MSIX
- Why Earn a Microsoft Applied Skills Credential?
- Windows
- Windows 11
- Windows 365
- Windows 365 Business
- Windows 365 Enterprise
- Windows 365 explained
- Windows 365 Frontline
- Windows 365 licensing
- Windows 365 management
- Windows 365 tutorial
- Windows 365 vs AVD
- Windows AD
- Windows Admin Center
- Windows app packaging
- Windows Server
- Windows Server 2022
- Windows Server 2025
- Windows Server Administration
- windows server azure
- Windows Server Summit
- Windows Server Tutorial
- Windows Subsystem for Linux (WSL)
- Windows Terminal
- Windows Terminal Azure Cloud Shell
- Windows Virtual Desktop
- Windows Virtual Machines
- Workbooks
- Workplace Ninjas
- Workplace Ninjas US
- workspace-ip-access
- WSL
- xai
- xamarin
- XDR
- Zero Trust
- Zero Trust Architecture
- Zero Trust Azure
- Zero Trust Networking Architecture
- zone redundant storage
- All
- Adrian Hills
- Aidan Finn
- Alan Kinane
- Az Advertizer
- Azure Community Enthusiasts
- azurefeeds
- Carlos Mendible
- Charbel Nemnom
- Cloud Native Weekly
- Dan Rios
- Daniel Bradley
- Daniel McLoughlin
- Daniel Scott-Raynsford
- Darren Robinson
- David O'Brien
- Dieter Gobeyn
- Freek Berson
- Greg Low
- Gregor Suttie
- Imran Rashid
- Jake Walsh
- Jaliya Udagedara
- James Cook
- Jamie Maguire
- Jesse (JSON) Loudon
- Joe Carlyle
- John Kilmister
- John Lokerse
- John Savill
- Jose Moreno
- Josh King
- Leo Visser
- Luke Murray
- Maik van der Gaag
- Mark Tinderholt
- Matt Felton
- Nicholas Chang
- Nicola Delfino
- Olivier Miossec
- Peter De Tender
- Pixel Roberts
- Rod Trent
- Rory Braybrook
- Roy Kim
- Sam Cogan
- Sarah Lean
- Simon Waight
- Stanislav Zhelyazkov
- Sucheta Gawade
- Tao Yang
- Thomas Maurer
- Thomas Thornton
- Tobias Zimmergren
- Travis Roberts
- Vukašin Terzić
- Will Velida
June 10, 2025
Published by Matt Felton on June 10, 2025
Categories
This is part of my series on Azure Authorization. Azure Authorization – The Basics Azure Authorization – Azure RBAC Basics Azure Authorization – actions and notActions […]
May 16, 2025
Published by Matt Felton on May 16, 2025
Categories
Hello again folks! Recently, I’ve been working with some far more intelligent peers (such as my buddy Jose Medina Gomez, you should definitely check out his […]
March 7, 2025
Published by Matt Felton on March 7, 2025
Categories
Hello fellow geeks! Today I’m going to take a break from my AI Foundry series and save your future self some time by walking you through […]