Kurt Shintaku's Blog

Discover an intelligent and scalable platform that is compatible across a broad array of SQL Server engines. Take an in-depth look at Azure SQL Database and Azure SQL Managed Instance—and see how to use your existing SQL Server skills to get started with your on-premises migration. Get the Professional Azure SQL Managed Database Administration e-book for detailed, easy-to-follow guidance and activity plans to help you deploy, configure, and manage your own SQL Databases with Azure. Read the technical implementation guide to learn how to:

• Migrate existing SQL Server instances to Azure SQL or provision a new Azure SQL database.
• Backup and restore Azure SQL databases.
• Monitor and optimize the performance of your cloud database to meet your needs.
• Automate common management tasks using PowerShell.
• Ensure your data and applications are highly available and have disaster recovery.
• Modernize your existing applications with Azure SQL Managed Instance.

Download here:

• DOWNLOAD: Free eBook, “Professional Azure SQL Managed Database Administration”
  https://azure.microsoft.com/en-us/resources/professional-azure-sql-managed-database-administration/

I’m excited to tell you about the new search, sort, and filter capability for Conditional Access. This feature is being rolled out incrementally to all tenants starting on 1^st February and will be available in all tenants in the next few weeks.

Search

The Conditional Access policy list page has been enhanced with the search bar so that you can quickly and easily find a particular policy by name. The search automatically performs a starts-with and substring search on the list of policy names. The substring search is performed on whole words, partial words, and includes support for special characters. The search is case-insensitive.

Read more about Sort & Filter here:

• BLOG: Search, Sort, and Filter for Conditional Access is now in public preview!
  https://techcommunity.microsoft.com/t5/azure-active-directory-identity/search-sort-and-filter-for-conditional-access-is-now-in-public/ba-p/1994699

Get help making the case for adopting Windows Virtual Desktop. Use this kit to show your stakeholders the benefits of desktop virtualization—like reduced costs and highly secure remote access anywhere—and get ready for a successful deployment. The kit includes:

• A quickstart guide that shows how to get the most out of Windows Virtual Desktop and tips for starting successfully. 
• A premade editable PowerPoint deck for you to present the benefits of desktop virtualization in a way tailored to your audience. 
• Real-world examples of how customers successfully deployed secure, remote work environments using Windows Virtual Desktop. 
• Free online learning courses that will show how to deploy and optimize Windows Virtual Desktop. 

Download the kit from here:

• DOWNLOAD: Windows Virtual Desktop Resource Kit
  https://azure.microsoft.com/en-us/resources/it-resource-kit-get-started-with-windows-virtual-desktop/

With many businesses transitioning to permanent remote work, a hybrid approach, or returning to the office, organizational efforts around protecting business-critical information is crucial.

Files from the internet and other potentially unsafe locations can contain viruses, worms, or other kinds of malware that can harm computers and data. To help protect your users against zero-day exploits and other advanced attacks no matter where your users work from, Office 365 opens files from potentially unsafe locations in Application Guard. To help enable you to deliver secure productivity regardless of the model your business chooses, we are pleased to announce that Application Guard for Office* is now generally available.

…

Application Guard will be off by default. Administrators will need to enable the feature and set the correct policy for users in their organization. To learn more about Application Guard, review the Installation Guide and check out the User Guide on the Office Support website. 

Continue the conversation and join us in the Microsoft 365 Tech Community. Whether you have product questions or just want to stay informed with the latest updates on new releases, tools, and blogs, Microsoft 365 Tech Community is your go-to resource to stay connected!

Application Guard is available to participating organizations that have Microsoft 365 E5 or Microsoft 365 E5 Security licenses.

• RELEASE: Application Guard for Office now generally available
  https://techcommunity.microsoft.com/t5/microsoft-security-and/application-guard-for-office-now-generally-available/ba-p/2007539

Watch now as CEO Satya Nadella introduces Microsoft Viva: Empowering every employee for the new digital age.

Today we’re introducing Microsoft Viva, the first employee experience platform built for the digital era.

Microsoft Viva brings together communications, knowledge, learning, resources and insights into an integrated experience that empowers people and teams to be their best, from anywhere.

Powered by the full breadth and depth of Microsoft 365, it is experienced through Microsoft Teams and other Microsoft 365 apps that people use every day.

Visit here:

• SITE: Microsoft Viva: empowering every employee for the new digital age
  https://news.microsoft.com/employee-experience/

Take a Zero Trust approach to secure your cloud and hybrid networks

Most organizations are facing challenges with the transition to remote work, acceleration of digital transformation, and rise in security threats.

A Zero Trust approach can help secure your network and protect against cyber security attacks. Azure network security is a secure platform with advanced cloud native networking, that can protect web applications and workloads sophisticated attacks.

Join us for this digital event and learn to:

• Protect and accelerate websites, apps, and content with the new Azure Front Door.
• Secure cloud perimeters and protect virtual networks with Azure Firewall and Azure Firewall Manager.
• Utilize Azure Web Application Firewall to protect from web vulnerabilities and bots.

Date/Time:
Thursday, February 18th, 2021 10:00 AM–11:00 AM Pacific Time

Registration:
https://info.microsoft.com/ww-landing-Network-Security-2021.html

Capture your notes and action items for every meeting using the “Meeting Capture” Power App!

Also, export & pin “Meeting Capture” to the Microsoft Teams App Bar!

• DOCUMENTATION: Meeting Capture sample template for Power Apps
  https://docs.microsoft.com/en-us/powerapps/maker/canvas-apps/sample-meeting-capture
• TEMPLATE: Meeting Capture – Power Apps
  https://aka.ms/previewmeetingcapture
• PORTAL: Teams App Studio Web
  https://aka.ms/TeamsAppStudioWeb

Microsoft has made available a “Power Platform Center of Excellence (CoE) Starter Kit” that provides an organization the ability deliver a framework for:

• Collaboration/sharing
• Standards
• Consistency
• Governance

…around the usage of Power Platform services like Power Apps, Power BI, Power Automate, and Power Virtual Agents.  (The Power Platform Center of Excellence Starter Kit is downloadable from here:
https://docs.microsoft.com/en-us/power-platform/guidance/coe/starter-kit)

Power Platform Center of Excellence (CoE) Starter Kit Training
To learn how to implement the Center of Excellence Starter Kit, please review the following videos:

• Overview
  https://www.youtube.com/watch?v=3eF__GY0Vzg
• Setup Instructions
  https://www.youtube.com/watch?v=L8gKjeE5GR4
• Admin (Core) Components
  https://www.youtube.com/watch?v=l0kJQAeKthw
• Governance Components
  https://www.youtube.com/watch?v=6bfaFsFtLow
• Nurture Components
  https://www.youtube.com/watch?v=StqxBgbt_ZM

Microsoft Defender Antivirus (formerly called “Windows Defender Antivirus”) is a tremendously powerful anti-malware, threat protection solution for Windows 10 workstations.  It is built into all versions of Windows 10 – Home, Professional, Enterprise – and provides the strongest antivirus protection that Microsoft offers.  (Microsoft internally relies on Microsoft Defender Antivirus for it’s Enterprise workstation malware protection – and the broader “Microsoft Defender for Endpoint” solution for it’s full  endpoint detect & response technology)

I was recently asked how to migrate from a 3rd party solution to Microsoft Defender Antivirus, so I thought I’d share what I gathered:

1. MIGRATION PROJECT PLAN
   We provide this guide for migrating from 3rd party AV solutions to our “Premium” Endpoint Detect & Response solution, “Microsoft Defender for Endpoint”, which is a superset of Microsoft Defender Antivirus and other endpoint protection technologies.  It may be of use to you as the general steps are all there.  (There are also explicit instructions available for switching from McAfee & Symantec)
   1. Make the switch from a non-Microsoft endpoint solution to Microsoft Defender for Endpoint (Generic plan)
      https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-migration
2. APPLICATION EXCLUSIONS
   Establishing application exclusions are documented in the link below:
   1. Configure and validate exclusions for Microsoft Defender Antivirus scans
      https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/configure-exclusions-microsoft-defender-antivirus
   2. Configure and validate exclusions based on file extension and folder location
      Configure and validate exclusions based on extension, name, or location – Windows security | Microsoft Docs
   3. Configure Microsoft Defender Antivirus exclusions on Windows Server
      https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus
3. “OTHER ELEMENTS” OF MICROSOFT DEFENDER ANTIVIRUS TO CONSIDER
   There is more to Microsoft Defender Antivirus than just malware filtering.  If you are interested in configuring & tuning “Cloud-delivered Protection”, for example, this is covered in this article, “Configure Microsoft Defender Antivirus features”.
   https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/configure-microsoft-defender-antivirus-features
4. EVALUATION ENVIRONMENT FOR MICROSOFT DEFENDER ANTIVIRUS
   You can also follow the document, “Evaluate Microsoft Defender Antivirus”.  We provide a demo environment online through VMs in Microsoft’s Azure cloud to experiment with if you’re interested.  See the link below.
   https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/evaluate-microsoft-defender-antivirus

DEPLOYMENT & MANAGEMENT

The following links are all the documentation you need to deploy and manage Microsoft Defender Antivirus:

• Deploy, manage, and report on Microsoft Defender Antivirus – Windows security | Microsoft Docs
• Manage Windows Defender in your business – Windows security | Microsoft Docs

(Side note: There is a rather exhaustive book available on Amazon that you might be interested in that goes over Microsoft Defender Antivirus management using SCCM.  This is called “System Center Endpoint Protection” and is really just SCCM used with a series of management templates to control Microsoft Defender Antivirus:

• Amazon.com: Microsoft System Center Endpoint Protection Cookbook – Second Edition (9781786464286): Henriksen, Nicolai: Books)

QUESTIONS & FAQs?

I’ve linked to a document called “Windows Defender Frequently Asked Questions” to review.  (“Windows Defender” is the previous name for “Microsoft Defender Antivirus”)  And adhoc questions can be addressed (no SLA) at the Community site:

• Microsoft Community – Virus & Malware – Microsoft Defender Antivirus
• Windows Defender Frequently Asked Questions (.PDF)

The following document also provides guidance on evaluating Microsoft Defender Antivirus for those looking for it:

• Windows Defender Evaluation Guide (.PDF)

Congratulations!  So you’ve setup an Enterprise Agreement-based Enrollment for Azure! (i.e. You established a contract that enables your organization to use Azure Commercial or Azure Government & bill your usage through Microsoft via a reseller.)

What’s next?  Well, you’ll want to set up your agreement on the https://ea.azure.com and start understanding how to delegate roles, setup subscriptions, and administer your enrollment for your organization.

Here’s resources for training, documentation, and support for your next steps in being an Azure EA Enrollment Administrator:

VIDEO TRAINING:

• EA Portal Onboarding Session (37min)
  Overview of the EA Portal walking through roles, and managing those roles, managing enrollment policies and settings, Seeing usage and costs
  https://www.youtube.com/watch?v=OiZ1GdBpo-I

DOCUMENTATION:

• DOWNLOAD: Azure EA Onboarding Guide (62 slide .PDF)
  https://ea.azure.com/api/v3Help/v2AzureEAOnboardingGuide
• DOCS: Get started with the Azure Enterprise portal
  https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/ea-portal-get-started
• DOCS: Understand admin roles for Enterprise Agreements (EA) in Azure
  https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/understand-ea-roles 
  

SUPPORT:
If you have any questions related to

• Agreements/ Orders
• Billing & Invoicing
• Enrollment administration
• Portal Access
• Reporting & Service Usage
• etc.

Submit a support request at the following portal.  Be prepared to submit your Azure Enrollment number which you will receive once the agreement is completed:

• Azure EA Portal Support
  https://support.microsoft.com/en-us/supportrequestform/e114582c-4e51-af46-10b1-1f0cc141e133