Category: Onpremise

Section 13 – Secure data and applications – Configure security for storage

Configure access control for storage accounts Configure storage account access keys Configure Azure AD authentication for Azure Storage and Azure Files Different Storage Accounts types The Azure Storage platform includes the following data services: Azure Blobs A massively scalable object…

Continue Reading Section 13 – Secure data and applications – Configure security for storage

2022 H1 Cumulative Updates for Exchange Server

What was released? With 2022 H1 there came some significant update to how You manage and license your Exchange-servers in a Hybrid setup. Exchange Management Tools Update You don’t anymore need Exchange Server for management purposes (Management Hybrid) you can…

Continue Reading 2022 H1 Cumulative Updates for Exchange Server

Azure AD connect version 2.1.1.0 released with bugfixes

Microsoft has released an updated version of AAD Connect om 24th of March and it isn’t available for auto upgrade. Retirement of AAD Connect versions On August 31, 2022, all 1.x versions of Azure AD Connect will be retired because…

Continue Reading Azure AD connect version 2.1.1.0 released with bugfixes

Azure AD certificate-based authentication (Preview) + Publishing CRL with Application Proxy

Azure AD CBA allows user to sign-in with a certificate. Microsoft has removed the need for external ADFS federation. You can see the situation before this change from Sami Lamppu’s post. Feature highlights Facilitates onboarding to Azure quickly without being…

Continue Reading Azure AD certificate-based authentication (Preview) + Publishing CRL with Application Proxy

SSPR writeback to disconnected forests using AAD cloud sync (Public preview)

What is AAD Cloud sync? Azure AD Connect Cloud sync is a light-weight agent that is commanded from the cloud. So there is no databases with the agent unlike with the old Azure AD Connect. I wrote a post about…

Continue Reading SSPR writeback to disconnected forests using AAD cloud sync (Public preview)

Moving from SfB Hybrid to Teams-only

Time to move from On-premises Hybrid to the cloud. What it takes and what could be the problems with the process? End of Life for On-premises versions Skype for Business 2015 mainstream end date was October 13, 2020. However, the…

Continue Reading Moving from SfB Hybrid to Teams-only

AIP Scanner and how to dig your content

What Is AIP scanner? Azure Information Protection Scanner is combination of Azure Information Protection Viewer, SQL DB and Azure App registration. It will discover the data from File shares, SharePoint content and it also has a network discovery functionality (that…

Continue Reading AIP Scanner and how to dig your content

Defender for Identity deep dive part 1 of 3

I decided to do a deep dive on Defender for Identity and this is part 1 of that series. What is (was) Defender for Identity? Defender ATP was before called Azure Advanced Threat Protection (Azure ATP) and Defender for Identity…

Continue Reading Defender for Identity deep dive part 1 of 3

Azure MFA Extensions and Network Policy Server

Half legacy but half cloud. Many organizations use NPS for securing their wlan and lan traffic or just to authenticate user based on their location inside AD or group memberships. NPS is Microsoft radius-based access management solutions that has been…

Continue Reading Azure MFA Extensions and Network Policy Server

Autodiscover redirect leakage

** This doesn’t concern Exchange Online in any way, only on-premise versions ** Today Guaricore lab team discovered on-premises Exchange autodiscover vulnerability. I want to call my blog post “Autodiscovering the Great Leak” but that seems like too much as…

Continue Reading Autodiscover redirect leakage