Hey everyone, I'm trying to solve a question for a customer that uses Azure/Entra ID wherein the Application ID field value is associated to an unique alphanumeric ID. Is anyone aware of a way to map/correlate the value of the alphanumeric ID to the application name? This would specifically be for an integration between QRadar and Azure. Thanks in advance ..read more

We use text and Authenticator for our MFA.  When we setup a new user or have them reconfigure their MFA.  We were having them setup Authenticator and then their phone number.  Now it's just the authenticator app. We still have an option for adding the phone number, but it's missing from the registration.  I would have thought it was under registration campaign, but I don't see an option to force both options at registration ..read more

Simple question, you would have thought... Is the Azure Security Center, Secure Score being fully depreciated? As per guidance, we have transitioned away from the Qualys scanner in favor of "Defender for Cloud unified Vulnerability Assessment powered by Defender Vulnerability Management". As per Transition to Microsoft Defender Vulnerability Management for servers Opens a new window, I have enabled the policy and deployed, subscription wide. This happened last Friday. Qualys agent removed. Policy assigned. As of this week - this is now showing again in our portal. "fix" remediation does nothin ..read more

Hello, I have an azure site to site vpn, I have bgp enabled over the vpn tunnel. I am trying to connect and peer with my palo alto on prem. Essentially we will have the ipsec connectivity and be bgp peering over the tunnel. The vpn tunnel is up, no traffic passes. In azure, the bgp peering stays "connecting". for bgp we are peering using apipa addresses, i already have my azure vpn gteway set to respond. On the palo, bgp is showing connected but not established. On the azure ike diagsnotics I see a traffic selector mismatch as well and packet drops. I have gone throuhg azure, configured custom ..read more

Hi all, Has anyone ever seen issues with pushing an app to endpoints based on a dynamic security group, where endpoints that are not UK side of the pond get the app, but others elsewhere don't? MDM platform is Intune. Endpoints are all Win 11 laptops. Deployment is against a dynamic security group with users objects in, where the query for membership is based against department i.e. Sales. When you run a query against the security group, all users are listed in the membership list. I can also see all machines checking into Intune just fine (and can force a check in with 100% success). O ..read more

Hello, can you explain how this possibility works ?  "OMA-URI setting to Rotate Local Admin Password Another method for rotating the local admin password is by using the OMA-URI setting “Actions/ResetPassword.” This approach allows you to immediately change the password of the managed local admin account without having to wait for the “Password age days” value to expire, providing." - Where should I insert this line ? - at what time it is triggered ? - can i enable and disable at any time ? I want every hour or every 2 hours the chosen laptop group, should receive the new rotated passwor ..read more

Hi We are using AD on prem with AD Sync. Two of our users are not being updated in 365 with the additional proxy email addresses and not sure why. When I check the AD Connect app, it shows the changes been made and successful. When I check Admin Center for 365, they are not. How can I force this update ..read more

Good day fellow spiceheads I recently signed up for Azure to learn more about it, how it functions, how we can utilize it for our clients. I have got AAD and AADDS configured and deployed several Azure VMs with the AADLogin extension. When I got to add my VMs to the domain it can see it but won't accept the credentials and tells me it is unable to connect because the device is joined to Azure AD. Then it refers to steps to join an Active Directory Domain (on-premise) which is not what we want. I have confirmed the device does show joined to the domain via Entra device list but I cannot login a ..read more

Hey all, is the switch of a storage account from PMK to CMK key vault (with a private endpoint) transparent for the most part, or will apps be impacted? Thanks ..read more

When I try and check the Azure AD Configuration in preparation for moving to a new 2016 Server (current Server is 2012 and not working) I get the message " Unable to retrieve the azure active directory configuration." There is nothing more, other than a Learn More link that doesn't actually list this specific error. The password should be correct as we changed it, logging in as the relevant User (after some considerable pain, since the details on the O365 Admin account were all out of date). Do we need to do anything else? I have seen that we need to check that a number of links are available ..read more