Hi Travis love your stuff didnt realize famous you are !

This guy i swear i recognize his voice he has courses on cloud academy he is a celebrity

Very good tutorial! Waiting for new one about Scrum project. thx

Awesome overview, Travis! Thank you so much for providing excellent Azure content. 😎

Hi Travis, B4 you missed it. MS is changing the cloud apps inclusion/exclusion in Entra Conditional Access with AVD. You have to add Windows Cloud Login

for the uninstall command why was % used in path name?

Thanks again for this video! Love it

Seems like a convoluted offering

Thanks a lot for the explanation; I really enjoyed the video

Great video, thank you!

"Talk nerdy to me"😁 love you Travis thank you for all the videos that you do, clear, concise and to the point. And extremely useful.

Excellent video!!! Thank you so much!!!

I really appreciate this playlist. I've watched many videos on how to learn Terraform and your examples and explanations have worked wonders for me in understanding the material and able to retain and work on it on my own.

This was super helpful. MS doesn't seem to have any documentation around using VS Code with Azure DevOps, but it's simple after watching this!

The time of hybrid joined clients should be over. We instead just EntraID join computers and use windows hello biometrics or pin for logins. Kerberos cloud trust solves SSO to on prem resources. EntraID AD DS solves the problem with legacy apps that vendors often without reason only support in an AD environment. When managing your hybrid users AD is still the master directory. This can be problematic especially when managing exchange aspects or customer properties in user objects we have to manage them on keen sometimes, most of the time in fact, and sometimes in the cloud for cloud only resources or groups. EntraID AD DS solves this by making EntraID master and then users and groups including group memberships can be synced to AD DS making management of daily user tasks move completely to the cloud. With EntraID joined client computers we get enhanced security and single pane intune management of clients and AS DS can support legacy apps on windows servers as before, but no EntraID connect, no poking around in AD group policies for the most part, no more dependency for clients on domain connectivity when changing and syncing back passwords. At this point, no matter what, we do not recommend anyone to use hybrid join and have moved to intune for all computer management. If customers have legacy needs they may keep them on prem and make sure Kerberos is supported for authenticating against these apps if SSO is wanted of just log on to these apps using the built in mechanism of the app. Printing, fileshares and even Remote Desktop works with this setup. AD DS can replace AD enable moving to the cloud for servers and reduce administrative headaches so I don’t agree with the conclusion in this video. The pros outweigh the cons.

You covered it all! Thanks. Like you, I'm an infrastructure guy who, from time-to-time, has to do developer things - with PowerShell. This bridged the gap!

Travis, Great content as usual. Would these exclusions apply if we are using Azure Files to store the Profiles?

quick question so in case of an intended failover , there is nothing else we need to do right? just prepare failover and actually do it. ?

Excellent video, thank you, so clear, and very well explained.

Thanks for this amazing post. Is there a way to force MFA for all VPN connections (as opposed to the just the original connection)? Ideally, when i remove a user from the group, I don't want them to still be able to connect to the VPN. Currently, when i remove a user from the group, that user can still connect to the VPN. Is there a way to force MFA for all VPN connections? Currently, theres a cookie on the client machine that will allow them to connect even after the user is removed from the group. I want to enforce for all VPN connections MFA (and not only during the initial connection). Also, I followed this youtube video setup for context

good video, just want to check what need to allow at VM NSG side to use azure update manager

What if we had done it and got stuck in all those limitations? I have three tenants like this. And i am looking for a solution to move to windows AD or a hybrid with least down time.

Wunderbar. Great explanation.

We are at the moment on a journey to replace Active Directory, but it will take years and lots of effort

Limitation: Lack of cloud Kerberos trust, in Entra Domain Services, blocks sign in to domain joined' resources in Entra DS from Entra Joined desktops. Would you loose directory event logs in Defender for Identity (which is amazing) if you can't install it's agent/Defender for Endpoint?

Thanks for this explanation. Very Helpful.

Great and clear to me!

I'm confused by your Intune Enrollment limitation point. Wouldn't devices be Entra joined, so the auto enrollment would still work?

Thanks for this nice guide!

thanks for posting this. I tried this example/ but am getting 403 permission denied. Any ideas why?

this is what im looking for.. thanks for the video! its now so easy to understand because of the way you explain things...

Great Video and would do you have anything regarding adding the Azure Security hub with the Azure firewall

Nice Video, One question. if there are 100 users that need to access in B2B model. You need to send 100 invitation requests. Also once project is over you need to delete all those user accounts. Can you please also shed light how to reduce this or automate this.

Great Video!

Super helpful. Thank you!

Thank you for the explanation. Anyone did the above things in python. Create an runbook in python and take two parameters as input. create another python script to POST HTTP the above webhook url and the parameters

Thanks man, for this thorough tutorial/ step-by-step guide. Really appreciate the effort you put into this. It helped me a lot. :)

Great teaching .to the point what is needed . Thanks for the content

20h1-evd is no longer available. I'm using 20h2-evd instead.

Thanks!

great explanation, thank you Travis.

Thank you, Travis..

I may have missed it from a previous video, but is vnet peering configured between the 3 vnets ?

Clear and straight to the point. I like how you talked about the TPM and gave useful information rather than some random definition found online.

Good job, I learnt a lot from you. Hope you make more videos on vpn point to site

I know this a while ago, but where'd you get that t-shirt? Love it.

is azure rm power shell module are not working now ? that's why you used new AZ modules or your script is based on new AZ module ?

Mine says "Install Pending" for the last 45mins but yours deployed right away?

TY Travis, Great demo as always!

Thanks for the video. Could you explain why someone would choose an Azure Static website in Azure Storage over Azure Static Web Apps?