Kurt Shintaku's Blog

This document is intended for administrators who may be deploying Virtual Desktop Infrastructure (VDI) systems and describes hardening steps specific to that workflow as well as general guidance that can be applied to any Azure deployment.

Independent Security Evaluators (ISE) reviewed VDI  architectures using the Microsoft Azure cloud computing environment to establish an Azure-specific hardening guide for the media and entertainment (M&E) industry.

• Azure Virtual Desktop AVD Infrastructure Hardening Guide
  https://azure.microsoft.com/en-us/resources/azure-virtual-desktop-infrastructure-hardening-guide/
  (Direct: https://azure.microsoft.com/mediahandler/files/resourcefiles/azure-virtual-desktop-infrastructure-hardening-guide/azure-virtual_desktop_infrastructure-hardening_guide.pdf)

Learn how to set up secure, remote work experiences in minutes from anywhere using Azure Virtual Desktop. Plan, deploy and optimise your virtual desktop infrastructure (VDI) to deliver Windows 10 desktops on any device—and reduce infrastructure costs. 

Read the latest edition of Quickstart Guide to Azure Virtual Desktop to:

• Plan for a successful deployment with updated features and guidance, including technical configurations and steps to get started.
• Set up and optimise your virtual desktops in the Azure portal with just a few clicks. 
• Explore the unique benefits of Azure Virtual Desktop, including cost-saving pricing options and advanced security and compliance features.
• Get best practices, recommendations and troubleshooting tips.

Download the eBook here:

• eBook: Quickstart Guide to Azure Virtual Desktop (.PDF, 54pg)
  https://azure.microsoft.com/en-in/resources/quickstart-guide-to-azure-virtual-desktop/

“Although many employees are ready to return to the workplace, more than 70 percent say they want flexible remote work options to continue. ¹ So how can you help them collaborate and stay productive without compromising security or increasing complexity for IT?

As you define your hybrid work strategy, consider a Cloud PC solution with Windows 365 or a virtual desktop solution optimized for flexibility with Azure Virtual Desktop (formerly Windows Virtual Desktop). Pairing one of these simple, flexible options with Surface devices will connect your people to the data and information they need while keeping your organization secure.

Whether you choose Windows 365 or Azure Virtual Desktop, you can provide your full-time employees, part-time employees, contractors, and interns with a highly flexible, simple, secure, and familiar experience using the Windows operating system on Microsoft Surface. The right approach and technology can help your organization embrace the hybrid era today to grow and innovate for tomorrow.

To learn more, see the following ebook:

• eBook: Connect your hybrid workplace with Windows 365 or Azure Virtual Desktop
  https://techcommunity.microsoft.com/t5/surface-it-pro-blog/connect-your-hybrid-workplace-with-windows-365-or-azure-virtual/ba-p/2819657
• DOWNLOAD: eBook: Open the doors to the hybrid workplace with Microsoft secure remote desktops
  https://cdn.techcommunity.microsoft.com/assets/Surface/Windows%20365%20or%20Azure%20Virtual%20Desktop%20on%20Microsoft%20Surface.pdf

Get more value from your existing Citrix investments by modernizing your virtual desktop infrastructure (VDI) with Azure Virtual Desktop—previously called Windows Virtual Desktop. Use this guide to learn about migrating your Citrix on-premises virtual desktop and app environment to Citrix Virtual Apps and Desktops for Azure.

Find out how to:

• Plan a successful move with migration prerequisites and insights for using Citrix and Azure Virtual Desktop solutions together. 
• Unify management and support more users across your hybrid environment by quickly deploying and scaling virtual desktops.
• Deliver secure, productive remote work experiences virtually anywhere using Azure Virtual Desktop and Citrix Virtual Apps and Desktops for Azure. 
• Optimize your VDI with best practices and familiar tools like Windows 10 Enterprise multisession, integrated security features, and Citrix App Layering.

Download the book here:

• eBook: Citrix Cloud Migration Guide with Azure Virtual Desktop
  https://azure.microsoft.com/en-us/resources/migration-guide-citrix-cloud-with-azure-virtual-desktop/

Learn how to strengthen business resilience by developing a disaster recovery strategy for your Azure Virtual Desktops—formerly called Windows Virtual Desktop—in Azure Virtual Desktop Handbook: Disaster Recovery. With this free handbook, you’ll:

Get step-by-step guidance to create a disaster recovery strategy for your Azure Virtual Desktop environment to keep users connected during an outage.

• Learn how to enable business continuity with tools like Azure Site Recovery, FSlogix, Azure NetApp Files, and Cloud Cache.
• Find recommendations for testing and optimizing your disaster recovery implementation.

Download the eBook here:

• eBook: Azure Virtual Desktop Handbook: Disaster Recovery
  https://azure.microsoft.com/en-us/resources/azure-virtual-desktop-handbook-disaster-recovery/

Ever heard of policy bloat?  Yeah, I know.  We don’t have time to worry about that… but as with all policies, in Windows there are policy settings that no longer work or have been phased out for other policies. We’ve documented 25 that you should review.

We have listened to your feedback and learned a lot about which experiences work and which don’t. We have also worked to evolve and simplify the controls needed to support these improved experiences, and identify which older policies have become irrelevant or replaced with a better option. As a result, the Windows update policy set contains policies that no longer have any impact; that don’t work as described on devices running Windows 10, version 20H2 or later; or that work but not as well as the policies that were added to accomplish a similar experience in a much better way.

Read about them here:

• BLOG: Why you shouldn’t set these 25 Windows policies
  https://techcommunity.microsoft.com/t5/windows-it-pro-blog/why-you-shouldn-t-set-these-25-windows-policies/ba-p/3066178

Struggling to align executes & solidify your cloud adoption strategy? Check out the new Cloud Adoption Strategy Evaluator on the assessment platform.

This new assessment will help find gaps in your strategy & provide relevant guidance to help your stakeholders align & commit to the changes you’re trying to drive.

Check it out here:

• RELEASE: Cloud Adoption Strategy Evaluator
  https://docs.microsoft.com/en-us/assessments/

For those looking for details around Microsoft’s commitment to privacy:

Your privacy is important to us. This privacy statement explains the personal data Microsoft processes, how Microsoft processes it, and for what purposes.

Microsoft offers a wide range of products, including server products used to help operate enterprises worldwide, devices you use in your home, software that students use at school, and services developers use to create and host what’s next. References to Microsoft products in this statement include Microsoft services, websites, apps, software, servers, and devices.

Please read the product-specific details in this privacy statement, which provide additional relevant information. This statement applies to the interactions Microsoft has with you and the Microsoft products listed below, as well as other Microsoft products that display this statement.

Young people may prefer starting with the Privacy for young people page. That page highlights information that may be helpful for young people.

• Personal data we collect
• How we use personal data
  
• Reasons we share personal data
  
• How to access and control your personal data
  
• Cookies and similar technologies
  
• Products provided by your organization—notice to end users
  
• Microsoft account
  
• Collection of data from children
  
• Other important privacy information

Product-specific details:

• Enterprise and developer products
  
• Productivity and communications products
  
• Search, Microsoft Edge, and artificial intelligence
  Windows
  
• Entertainment and related services

Contact us:
If you have a privacy concern, complaint, or question for the Microsoft Chief Privacy Officer or EU Data Protection Officer, please contact us by using our web form. For more information about contacting Microsoft, including Microsoft Ireland Operations Limited, see the How to contact us section of this privacy statement.

For our privacy information, visit:

• INFO: Microsoft Privacy Statement
  https://privacy.microsoft.com/en-us/privacystatement

Over a 100+ different instructor-led trainings for “modern worker” scenarios (read: Microsoft 365, Windows, Teams, Edge, Power Platform, Security, etc.) are now available from the Microsoft store trainers for everyone to sign up for at their leisure – at no cost to you.

These are scheduled courses that folks can join over Microsoft Teams.  Here are a few with multiple dates available:

• Get Started with Power BI Desktop
• Get Started with Power BI Service
• Get started with Microsoft Teams
• Cloud storage solutions with Microsoft 365
• Explore teams and channels in Microsoft Teams
• Introduction to Power Apps
• Work less, do more with Microsoft Power Automate
• Fundamentals of Microsoft Excel L100
• …

For the full catalog, visit:

• Online Professional Training from Microsoft Store
  https://www.microsoft.com/en-us/store/workshops-training-and-events/professionals

We have some big news for Microsoft Defender for Servers!  Yuri Diogenes, Microsoft’s Principal Program Manager for Cybersecurity talks with Aviv Mor about what new announcements were made including:

In this episode of Defender for Cloud in the field, Aviv Mor joins Yuri Diogenes to talk about Microsoft Defender for Servers updates, including the new integration with TVM. Aviv explains how this new integration with TVM works, the advantages of this integration, which includes software inventory and easy experience to onboard. Aviv also covers the integration with MDE for Linux and the Defender for Servers support for the new multi-cloud connector for AWS.

• 1:22 – Overview of the announcements for Microsoft Defender for Servers
• 5:50 – Migration path from Qualys VA to TVM
• 7:12 – TVM capabilities in Defender for Servers
• 8:38 – Threat detections for Defender for Servers
• 9:52 – Defender for Servers in AWS
• 12:23 – Onboard process for TVM in an on-premises scenario
• 13:20 – Demonstration

View the 22min video here:

• Jan 5, 2022: Microsoft Defender for Servers | Defender for Cloud in the Field #5
  https://www.youtube.com/watch?v=QXK9HEj_5FY