another boss video

thanks for your input - learned some stuff !

Hi Mr. Dean, I just wanted to say thank you for creating such valuable content! I have a Windows 365 VM and was wondering if it's possible to relocate it to a different subnet within the same Azure region without affecting its availability or performance?

Got my polo from your store!! Thanks!

Great!😎

Thank you for sharing the video. Great explaination.

All this and more in my new book! 👉👉a.co/d/05ERgjLv 👈👈

is it possible in 2024-Oct to have a 100% cloud only AVD with FSlogix ???

Jones Gary Johnson Deborah Hernandez Shirley

Excellent presentation!

4:05 Mine the "Staging Location" is not giving me any option. Do you know how to solve it?

where is the Azure academy store link?

Hi Dean, i have a physical server 2016 standard with AD and 30 users joined via Active Directory . The server is Proliant 350 with raid 5 (3 x900GB) and 1.2 TB used storage. The server is 7 years old, I want to migrate it to Azure and not create new profiles. Is Azure Stack a good solution? If no what is the best solution? if yes, can I ask help from you?

Hi Dean, I always enjoy your videos, and they’ve given me a lot of valuable experience in my job, so thanks for that! I’m currently looking to optimize FSLogix profiles by automating two tasks: Removing white space in FSLogix profiles to reduce unnecessary data. Dynamically adjusting storage quotas to minimize storage costs. Could you guide me on how to implement this using scripts? Any tips or resources would be really appreciated. Thanks again!

Thank you, that was excellent. I've watched this three times so far. 😄

These videos are great, easy to understand, no fluff. Very good stuff

Really good explanation, 😊

What about the internet access?

great vids! where can i find these scripts?

I strongly believe they should be making announcement on all social media out there

Great video Dean as usual ! I hope that we will able to meet you at Ignite ;)

Great Video, however m365maps.com/matrix.htm#100111000001001001000 is a better link

What happen if you have multiple resources in the same net but they want to use the same vpn from one resource is that possible?

Donyou have a Vid on ASR? On premises to Azure replication?

Great vid. I constantly have issues with this DHCP-based networking in Azure where my DNS records keep getting scavenge because Windows clients only refresh dns reg on ip renewal, which never happens in Azure due to the extremely long DHCP lease time, so the records expire. More of a Windows issue, but I can't find a solution outside of setting static dns entries for my servers.

We need native redirected printing like the windows Azure app handles now but on a tablet or web browser. No I cant have users download a pdf to print.

Thank you for sharing this valuable information. Easy to understand.

Since AVD private link has gone GA, any chance we can get an updated video with more demo? Pls!

I love those analogies they make it easier to understand. Great job

AVD network policy

Great work. Any recommendations where i should start on your channel when I know the basics but am rather new to correctly administering Azure? br

Great refresher

So I use all 3 of these, Delegation, Private Endpoints and service endpoints. I also have network security groups assigned to every machine network card and Vnet. I also already have all internet traffic routing out through a pair of VM's in their own subnet that feed through URL monitoring and virus scanning. The biggest issue I have is and suggestion would be to allow us to create our own Service Tags, and for Microsoft to do way better at keeping their own up to date. I have been set up this way for 4 years now and this is the biggest pain point. especially in GCCHigh. I have to download both the GCCHigh and Commercial endpoint lists and figure out and merge them in various ways. Sometimes just use Wireshark and discover what IP addresses it can't hit. Picture this simple scenario, I am locked down exactly as suggested and how Azure is going. With also network security groups set up on every machine, and Vnet. Last rule 4096 Source Any, All ports, Service tag "Internet" set to deny. These machine never need to connect to the "internet" however they do need to connect to Azure services like backup. So I add the service tag for Azurebackupservices and all and that's all good. However, the virtual machine is screaming at me that it can not verify it has a valid license. It can not reach the Commercial License servers. There is no commercial license server tag. I have to mess around maintaining thousands of route tables to allow Windows VM's to get licenses, then add in Office as well even though we have GCCHigh licenses you have to make route tables for sign and authentication to office365.us and and commercial as there is some redirect in there and so on and so on. Say you want to manage that VM with Intune, guess what else doesn't have a service tag. So now I got to go find the IP addresses of yes commercial and GCCHigh intune. Why it needs both I don't know. Maybe it doesn't anymore, it did a few years ago but because there is no official Azure Service tag maintained for this service to work in Azure I don't know if I can remove them or not. I had to use wireshark and trial and error to figure out some of these issues. Anyway to test this, put your outbound internet connection on one Vnet on it's own subnet, and for giggles put DNS, and Entra endpoints in that same Vnet in another subnet call it IT Infrastructure. Create another Vnet Just call it My Machines, peered with IT, shut off internet completely on that second Vnet as described avove and route all internet for those VM's through IT. Make sure you set up Network security groups on both Virtual Networks so only the minimal traffic needed is allowed. Now get everything to work in that isolated Vnet. Bring up some virtual machines, linux and windows desktop and servers. Then manage them using Intune, Defender, Windows Updates, Office, backup, onedrive, sharepoint etc. All of these are scenarios I have run into. You will be able to get it all running but only by allowing several MS endpoints via IP addresses and so on. Which is great you can do it, until MS changes IP addresses or adds more endpoints. Which has happened all of a sudden several VM's can no longer get licenses. Throw in my own applications where large groups of computer as in virtual desktops need to reach specific ports on specific servers in another Vnet. This is our own internal applications. It would be awesome if we could create our own service tags. Kind of like Condition Access policies has named locations. I mean allowing us to create our own would also solve the issue for the missing MS ones just we have to maintain them. Sorry if that's a bit long, but you said let you know what's not working. What might break. Basically network security groups and tags for all these specific Azure services that are missing and or wrong especially in GCC, GCCHigh and I would assume DOD.

Pure gold

❤❤❤❤❤❤❤

You should make a video on how to download and install windows app without the windows store :)

Thank you very much! Your content unlocked my project. congratulations on the content.

Nice

How long does is take that a client will apply the gpo settings? Is there also a way like gpupdate available?

I am late and loving your content.

thank you sir - i learned some stuff here

I can’t listen with that clicking