Kurt Shintaku's Blog

This is a wrap up of what was launched at the recent Microsoft event – some on stage & some backstage.

Surface Laptop Studio 2
The most powerful Surface ever built.

• More choices for connectivity with 2x Thunderbolt 4 USB-C®, USB-A and microSD reader
• Faster DDR5X RAM with up to 64GB configurations
• Over 2X the power with the latest 13th Gen Intel® processors and cutting-edge GPUs from NVIDIA® with more vRAM
• New Wide-FOV camera & NPU bringing AI Windows Studio Effects to x86 for the 1st time
• More accessible haptic touchpad

Learn More about Surface Laptop Studio 2>

Surface Laptop Go 3
Go faster. With up to 32% more power.

• ~35% faster with Intel Core i5 processors and longer battery life
• 12.4” PixelSense touchscreen for intuitive and natural interaction 
• Increased RAM and storage options that offer more space for important apps
• Lightweight at only 2.48 lb

Learn More about Surface Laptop Go 3>

Surface Go 4
The most secure Surface Go ever.

• New Intel® processor N200 with 50% increase CPU, 50% increase GPU performance, and faster memory for snappy multitasking
• Ultra-portable and versatile at just 1.2 lb with tablet to laptop flexibility
• Touch and pen enhancements in Windows and Microsoft 365 for more natural interaction

Learn More about Surface Go 4>

Surface Hub 3
Bridging Workforce Collaboration with Microsoft Teams Rooms

• New hybrid work scenarios with Portrait Mode: new 50” Surface Hubs will support Portrait Mode and snap rotation, allowing you to use the device in different

• Increased compute and improved graphics: enable faster multi-tasking and support for line-of-business applications with the latest Intel® processors and NVIDIA® GPUs
• Streamlined management & support: use the same tools to manage Hub as your other meeting room devices, such as Microsoft Endpoint Manager and Microsoft 365 Admin Center.

Learn more about Surface Hub 3>

Complete the steps below in order to enable Active Directory for all shares in this storage account. Watch the video below for an end-to-end walkthrough

• Step 1: Enable Active Directory authentication
• Step 2: Enable share-level permissions
• Step 3: Assign directory/file-level permissions
• Step 4: Mount files share using AD credentials

Video tutorial on enabling identity-based access
Watch the video below an end-to-end walkthrough of how to configure on-premises Active Directory to enable identity-based access all file shares in this storage account as documented at “Overview – On-premises AD DS authentication to Azure file shares”.

• Replace an on-premises file server with Azure file shares
  An end-to-end demo and description of the various Azure file share features that enable an IT Admin to understand and configure identity-based authentication "AD authentication", networking, private endpoint and other features of an Azure file share.
  https://youtu.be/a-Twfus0HWE

Did you know that in Windows 11 you can hit WIN-ALT-K to MUTE your microphone for any app that leverages the Taskbar Mute button ("Call Mute") like Microsoft Teams. (As of Windows 11 version 22H2)

• Keyboard Shortcuts in Windows
  https://support.microsoft.com/en-us/windows/keyboard-shortcuts-in-windows-dcc61a57-8ff0-cffe-9796-cb9706c75eec

Alternatively, there’s a more comprehensive tool within Windows PowerToys that accomplishes the same thing and supports Windows 10 called “Video Conference Mute”:

• PowerToys Video Conference Mute
  https://learn.microsoft.com/en-us/windows/powertoys/video-conference-mute

#microsofteams #teams #powertoys #keyboardshortcuts #windows #windows11 #mute

The July 2023 announcement around the coming Azure AD Multi-factor Authentication “registration campaign” that will be pushed to end users on Sept 25th, 2023 to have them register for Microsoft Authenticator app-based MFA… caught several Microsoft 365 Admins I’ve talked to by surprise.  The only reason they were alerted to the campaign was because there was a last minute email that was sent directly to M365 Admins.

WAYS TO STAY UP TO DATE WITH MESSAGE CENTER
The announcement was made in the Microsoft 365 Message Center and underlines the importance of reviewing alerts posted there.  The following are best practices, as a Microsoft 365 Admin, for staying up to date with Message Center notices.

• Get Message Center posts emailed to you
• “You can select to have a weekly digest emailed to you and up to two other email addresses. The emailed weekly digest is turned on by default. If you aren’t getting your weekly digests, check your spam folder. See the Preferences section of this article for more information on how to set up the weekly digest.”
• Track new and changed features in the Microsoft 365 Message center
• See snapshot above for where to configure email notifications.
• Sync Message Center messages to Microsoft Planner
• “Keep track of which Message Center changes require tasks to be done, when, and by whom, and to track each task to completion… Make a note of something and tag it to check on later. Sync your messages from the Microsoft 365 admin center to Microsoft Planner.”
• Track message center tasks in Microsoft Planner
• Automate alerts of key notices from Message Center using Microsoft Power Automate
• Use Microsoft Power Automate to send an alert with key notices from the Office 365 Message Center
• Microsoft 365 message center – Connectors
• Review Message Center posts from the mobile Microsoft 365 Admin App
• Track message center notifications from the mobile the Microsoft 365 Administration App

THE “OFFICE 365 UPDATE SCOUT” POST
A very good summary of these techniques and more are available at:

• Staying on top of Microsoft 365 / Office 365 Updates
  https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/staying-on-top-of-microsoft-365-office-365-updates/ba-p/1201118

Recently, folks using Azure AD Multi-factor Authentication (MFA) have started receiving “last chance” emails (like that in the snapshot to the left) about the Authenticator App Registration Campaign that is being launched on all Microsoft-managed Azure AD tenants starting Sept 15th. (Note: This date has since been pushed out to Sept 25th – see below)

WHAT IS THIS?
This is an urgent initiative to drive Azure AD users to transition from SMS/Voice-based Multi-factor Authentication to Microsoft Authenticator app-based MFA. 

These telephony-based methods of MFA can be circumvented through SIM-swapping and other techniques bad actors use. The frequency of breaches led by the fallibility of SMS/Voice MFA has been increasing throughout the world and it is considered in trending threat to identities such as those in Azure AD tenants.

WHEN DID THIS GET ANNOUNCED?
This Microsoft Authenticator “registration campaign” to drive users to move off of SMS/Voice MFA was announced in the Message Center (MC650420) back in July. 

It has since been UPDATED on Sept 18th, 2023 to announce that the registration campaign will launch from Sept 25th to Oct 20th. (Changed from Sept 15th)

Here’s the current Message Center message:

(Updated) Changes to the registration campaign feature in Microsoft Entra (previously Azure Active Directory)

MC650420 · Published Jul 20, 2023 · Last updated Sep 18, 2023

MAJOR UPDATE | ADMIN IMPACT | NEW FEATURE | USER IMPACT

Message Summary

Updated September 18, 2023: Deployment will begin September 25th and will run to October 20th. These dates replace the dates mentioned in the email "We’re enabling a stronger form of multifactor authentication beginning September 15, 2023" that you might have received. We apologize for the inconvenience.

Publicly switched telephone networks (PSTN) such as SMS and voice authentication are the weakest forms of MFA. To help your users move away from these less secure MFA methods we are introducing changes to the Microsoft managed state of the registration campaign (aka Nudge) feature in Microsoft Entra (previously Azure Active Directory).

When this will happen:

Starting late September 2023 and expect to complete by late October 2023.

How this affects your organization:

Users in your organization who are relying on PSTN (SMS and/or voice) for MFA will be prompted to use the Microsoft Authenticator app. Users can skip this prompt for a maximum of 3 times, after which registration of the app will be required by default. Note: admins can decide it they want to opt out of the “limited” 3 snooze configuration or give their end users the ability to snooze indefinitely.

What you can do to prepare:

We urge you to motivate your users to immediately stop using SMS and voice for MFA. You can take advantage of several new admin levers to achieve this such as system-preferred MFA and Microsoft Authenticator Lite, in addition to registration campaign. However, if some of your users require more time you can exempt them for now. Sign in as Global Administrator or Authentication Policy Administrator and go to Microsoft Entra > Identity > Protection > Authentication methods > Registration campaign and exclude these user groups.

Stay alert, stay secure!

Microsoft Identity & Network access (IDNA) product group

HOW DO I DISABLE THIS FOR OUR TENANT?
For folks that have situations that prevent the mandated use of Authenticator apps (Union rules, lack of phones, etc.)  I wrote up some instructions on how to disable the MFA/Microsoft Authenticator App registration campaign for all users:

1. Go to https://entra.microsoft.com/
2. Go to Identity –> “Protection”
3. Click “Authentication Methods”
4. Click “Registration Campaign”
5. Click “Edit”
6. Set the State drop down from “Microsoft Managed” to “Disabled”
7. Click “Save”

ALTERNATIVES TO DEPLOYING THE AUTHENTICATOR APP FOR MFA
Organizations need to transition from SMS/Voice MFA – not just because it puts your organization at risk, but because Microsoft will be pulling the plug on the service in the future.

So what does one do?  The answer for many organizations in either Windows Hello for Business or FIDO2 keys – like those from Yubico.  These device are durable, portable, and act like the keys to the ignition of your PC.

• Yubico – FIDO2 Authentication Keys
  https://www.yubico.com/

Today’s Microsoft enterprise customers are looking to accelerate their migration to the cloud so they can modernize their IT environments and take advantage of Azure infrastructure, tooling, and services. Oracle customers are looking for:

• PERFORMANCE: The highest level of Oracle database performance, scale, and availability, as well as feature and pricing parity
• SECURITY: The simplicity, security, and latency of a single operating environment (datacenter) within Azure
• APP & AI SERVICES: The ability to build new cloud native applications using OCI and Azure technologies, including Azure’s best-in-class AI services
• SUPPORT: The assurance of an architecture that is tested and supported by two of the most trusted names in the cloud

NATIVE ORACLE DATABASE SERVICES IN MICROSOFT AZURE
That’s why we are expanding our partnership with Oracle, enabling Oracle’s 430,000 customers[i] to apply the unique services of the Microsoft cloud to Oracle’s mission-critical databases through a new service, “Oracle Database@Azure”.

Oracle Database@Azure delivers all the performance, scale, and workload availability advantages of Oracle Database on OCI with the security, flexibility, and best-in-class services of Microsoft Azure, including best-in-class AI services like Azure OpenAI. This combination provides customers with more flexibility regarding where they run their workloads. It also provides a streamlined environment that simplifies cloud purchasing and management between Oracle Database and Azure services.

With this new offering, Azure is the only cloud provider other than Oracle Cloud Infrastructure to host Oracle services, including Oracle Exadata Database Service and Oracle Autonomous Database on Oracle Cloud Infrastructure in Azure datacenters.

Our deep partnership with Oracle continues to focus on reducing the common hurdles customers face when migrating workloads to the public cloud. Oracle Database@Azure is our new offering to bring Oracle Database services inside Azure. With the ability for customers to migrate Oracle databases “as is” to OCI and deploy them in Azure alongside their current workloads in the Microsoft Cloud, organizations can create new solutions and further competitive differentiation.

VIDEO: Watch Oracle Chairman & CTO, Larry Ellison & Microsoft CEO Satya Nadella talk with Alysa Taylor, Microsoft CVP of Azure & Industry about this revolutionary new offering from Oracle & Microsoft.

(Fun Fact: This is the first time Larry Ellison has ever set foot on Microsoft’s campus.)

—————————-

For more information, on this exciting new announcement, please visit:

• Azure.com/oracle: “Migration and modernization for Oracle workloads”
• Oracle.com/azure: “Oracle and Microsoft expand partnership to deliver Oracle database services on Oracle Cloud Infrastructure in Microsoft Azure”
• Partnership news page: “Accelerating cloud transformation with Microsoft and Oracle”
• Press release: “Microsoft and Oracle expand partnership to deliver Oracle Database Services on Oracle Cloud Infrastructure in Microsoft Azure”
• Announcement blog: “Microsoft expands partnership with Oracle to bring customers’ mission-critical database workloads to Azure”

Large organizations frequently provision a singular instance of Azure OpenAI Service that is shared across multiple internal departments. This shared use necessitates an efficient mechanism for allocating costs to each business unit or consumer, based on the number of tokens consumed.

This article delves into how chargeback is calculated for each business unit based on their token usage.

• Calculating Chargebacks for Business Units/Projects Utilizing a Shared Azure OpenAI Instance
  https://techcommunity.microsoft.com/t5/apps-on-azure-blog/calculating-chargebacks-for-business-units-projects-utilizing-a/ba-p/3909202

To help every customer get AI-ready, we’re rolling out Semantic Index for Copilot, which connects you with your organization’s most relevant and actionable information.

Semantic Index for Copilot is a sophisticated map of your user and company data. For example, when you ask it about the “March Sales Report,” it doesn’t simply look for documents with those words in the file name or body. Instead, it understands that “sales reports are produced by Kelly on the finance team and created in Excel.”

And it uses that conceptual understanding to determine your intent and help you find what you need. The Semantic Index for Copilot is critical to getting relevant, actionable responses to prompts in Microsoft 365 Copilot. And it enhances enterprise search results for E3 and E5 customers—whether they are using Copilot or not.

Learn more about this new capability in Microsoft 365 E3 and E5:

https://msft.it/60499jBCt

#Microsoft365

<stolen from Samir Saini>

Attention State, County, Local Government IT Innovators! September has arrived, and I’m thrilled to share my lineup of the Top 5 Must-Attend Microsoft virtual training & learning events for you. Get ready to supercharge your digital transformation journey with the Microsoft Cloud!

🔒 9/5 – CYBERSECURITY – Protect Data and Mitigate Risk: https://mktoevents.com/Microsoft+Event/405792/157-GQE-382 Learn how to secure data and reduce risks with Microsoft Purview Information Protection and risk mgmt. solutions. Explore how to manage data protection policies across your organization and protect your people and data against cyberthreats.

☁ 9/7 – INFRASTRUCTURE – Modernize Your Infrastructure and Workloads https://msevents.microsoft.com/event?id=2286485869
Learn about the benefits of migrating and modernizing your workloads in the Azure cloud or in an hybrid cloud environment to strengthen reliability and security and accelerate innovation!

🤖 9/14 – GENERATIVE AI – The Future of Work with AI! https://msevents.microsoft.com/event?id=1453252446
Learn about our Azure OpenAI service, how to fine-tune language models to your specific needs across a variety of use cases, from summarization to content and code generation…and so much more!

💻 9/19 – MODERN WORK – Evolving Work with Windows in the Cloud https://msevents.microsoft.com/event?id=4226906705
Learn about the evolution of Windows, including our Windows 365 Cloud PC offering and Azure Virtual Desktop, and how these solutions are helping to manage hybrid work setups while safeguarding data across devices.

⚙ 9/21 – LOW-CODE/NO CODE – Power Platform & Copilot https://msevents.microsoft.com/event?id=4046052840
Learn more about the Power Platform with Azure, helping you do more with less by modernizing legacy apps, building new ones, automating manual processes, or generating insights for anyone in our organization.

Microsoft continues to develop and advance cloud services to meet the full spectrum of government needs while complying with United States regulatory standards for classification and security. The latest of these tools, generative AI capabilities through Microsoft Azure OpenAI Service, can help government agencies improve efficiency, enhance productivity, and unlock new insights from their data.

Many agencies require a higher level of security given the sensitivity of government data. Microsoft Azure Government provides the stringent security and compliance standards they need to meet government requirements for sensitive data.

Currently, large language models that power generative AI tools live in the commercial cloud. For government customers, Microsoft has developed a new architecture that enables government agencies to securely access the large language models in the commercial environment from Azure Government allowing those users to maintain the stringent security requirements necessary for government cloud operations.

If you’re an Azure Government customer (United States federal, state, and local government or their partners), you now have the opportunity to use the Microsoft Azure OpenAI Service through purpose-built, AI-optimized infrastructure providing access to OpenAI’s advanced generative models.

…

Read the full article at:

BLOG: Unlock new insights with Azure OpenAI Service for government

https://azure.microsoft.com/en-us/blog/unlock-new-insights-with-azure-openai-service-for-government/