Kurt Shintaku's Blog

Today, we are announcing that Microsoft has been named a Leader in The Forrester Wave™: Streaming Analytics, Q2 2021.

We believe this report truly reflects the market momentum of Azure Stream Analytics, satisfied customers, a growing partner ecosystem, and the overall strength of our Azure cloud platform. Take a look at the Forrester Wave™: Streaming Analytics, Q2 2021 report.

• Microsoft named a Leader in The Forrester Wave™: Streaming Analytics, Q2 2021
  https://azure.microsoft.com/en-us/blog/microsoft-named-a-leader-in-the-forrester-wave-streaming-analytics-q2-2021/

Forrester has recognized Microsoft as a Leader in The Forrester Wave™: Augmented BI Platforms, Q3 2021.

Microsoft received the highest score of any vendor in both the strategy and current offering categories. Further, Forrester noted in the report, “It is hard not to consider Power BI as your top choice for an enterprise BI platform.”

To review the Forrester report, visit:

• Microsoft named a Leader in The Forrester Wave™: Augmented BI Platforms, Q3 2021
  https://powerbi.microsoft.com/en-us/blog/microsoft-named-a-leader-in-the-forrester-wave-augmented-bi-platforms-q3-2021/

Azure customers being managed by Azure Lighthouse… rejoice!  If you’ve been using Azure Lighthouse to allow others to manage your department or organization’s Azure subscriptions/enrollments, you’ll be able to use privileged access using Azure AD PIM to:

• Only allow others to access your Azure environment when necessary
• Use “just-in-time” access controls to permit service providers to make changes to your Azure cloud
• Reduce access to your Azure environment to “least privilege” access

Today we are very excited to announce the latest iteration in our journey towards Zero Trust and least privilege access: The preview of Azure Active Directory Privileged Identity Management (Azure AD PIM) integration with Azure Lighthouse.

To understand how this integration enables least privilege access, consider the example of the company Contoso, which partners with a service provider to manage their network security. Contoso wants to make sure that this partner is following best practices around least privilege. In particular, Contoso doesn’t want the partner to have standing access to their resources. Instead, the partner should gain access only when it is necessary for them to perform some operation.

To achieve this, the service provider crafts their offer in Azure Lighthouse so that it requires their operators to elevate their access to a privileged role before they can work on Contoso’s network. This just-in-time (JIT) access only lasts for a limited period (up to eight hours), after which the access for that operator is automatically removed, and they go back to having read-only access to Contoso’s delegated resources. Additionally, Contoso can require that the service provider obey a defined set of policy options when authenticating, such as requiring multifactor authentication. These capabilities are free to Contoso as a customer because they are granted as part of the service provider’s tenant.

…

Read more here:

• Privileged Identity Management with Azure Lighthouse enables Zero Trust
  https://azure.microsoft.com/en-us/blog/privileged-identity-management-with-azure-lighthouse-enables-zero-trust/

Attention contracts administrators: Did you know there is a page on our web site that has a summary of changes and updates made to Microsoft’s product & services licensing terms. (since June 2020 when the page was created)

For example, on July 1, 2021, the following change was made to the Windows Desktop Operating System Product Licensing Terms:

• Windows Desktop Operating System: Updated all instances of Windows Virtual Desktop (and/or WVD) to Azure Virtual Desktop. Clarified Windows 10 entitlements that allow users to access Windows desktops on Azure VMs or Azure Virtual Desktops are entitlements for Customers’ own tenants. Added a clause for the new Get Genuine offer in CSP/Microsoft Customer Agree

To see other changes made since June 2020, visit:

• Summary of Commercial Licensing Terms Changes
  https://www.microsoft.com/licensing/terms/product/changes/all

We’ve recently announced the coming inclusion of Microsoft Nucleus to the OneDrive sync app.  In June 2021, we published message center notification MC261538 which highlighted the coming availability of the technology to Office 365 E3 & E5 subscribers.

WHAT IS NUCLEUS?
Announced at Ignite 2020, Nucleus is a sync engine for data in databases and other data repositories like Microsoft Lists – which is it’s initial use case. Because it is similar to differential synchronization for files, it makes for easy inclusion into the OneDrive synchronization client, already used for efficient file sync between disconnected laptops.

For Microsoft Lists, users can add, remove, and update list items when working offline and Nucleus will synchronize the changes with the Microsoft Lists in Office 365.

HOW DOES IT WORK?
Project Nucleus enables the caching of web content on local machines in the name of improving performance. It’s not just caching data; it is also synching changes to the local cache leveraging some of the underlying technology that Microsoft uses in OneDrive sync. Project Nucleus uses SQL Lite as a metadata store and for lightweight processing.

LICENSING?
Microsoft Nucleus will be available as a service plan at no additional cost to Office 365 E3 or E5 licensing.  Disabling the service plan within the M365 Admin Console will disable the service for end users.

RELEASE TIMEFRAME
On August 11, we published MC277196 to announce the introduction of a Nucleus service plan to roll-out in September 2021 (Microsoft 365 roadmap item 68809).

Interested in downloading some professionally created Microsoft Teams virtual backgrounds from:

• FOX
• FOX Sports
• NBC
• NBC Sports

Also some other backgrounds like:

• Pride
• Xbox
• Holidays
• Black History Month
• Women’s History Month

And a really cool one:

• Nostalgia

  (Featuring “Clippy”, Windows XP’s “Bliss” background, “Solitaire”, & “MSPaint”)

Download them all for free here:

• Virtual Meeting Background Images, Background Blur for Teams
  https://www.microsoft.com/en-us/microsoft-teams/background-blur#coreui-heading-vscefb9

Ransomware attacks deliberately encrypt or erase data and systems to force your organization to pay money to attackers. These attacks target your data, your backups, and also key documentation required for you to recover without paying the attackers (as a means to increase the chances your organization will pay).

This article addresses what to do before an attack to protect your critical business systems and during an attack to ensure a rapid recovery of business operations.

• Backup and restore plan to protect against ransomware
  https://docs.microsoft.com/en-us/azure/security/fundamentals/backup-plan-to-protect-against-ransomware

Also review:

• Human-Operated Ransomware Mitigation Project Plan (PowerPoint)
  https://download.microsoft.com/download/7/5/1/751682ca-5aae-405b-afa0-e4832138e436/RansomwareRecommendations.pptx

Hey you. We’re getting rid of Azure MFA Server.  Get off of it. You know who you are.  Learn how to Migrate from Azure MFA Server to Azure multi-factor authentication – Azure Active Directory.

Multi-factor authentication (MFA) is important to securing your infrastructure and assets from bad actors. Azure MFA Server isn’t available for new deployments and will be deprecated. Customers who are using MFA Server should move to using cloud-based Azure Active Directory (Azure AD) multi-factor authentication.

…

Read how here:

• Migrate from Azure MFA Server to Azure multi-factor authentication – Azure Active Directory
  https://docs.microsoft.com/en-us/azure/active-directory/authentication/how-to-migrate-mfa-server-to-azure-mfa

Learn to unify and simplify your data management at this free digital event.

Get a holistic, up-to-date map of all your on-premises, multicloud, and software as a service (SaaS) data with Azure Purview, a unified data governance solution. Join Microsoft Corporate Vice President Rohan Kumar at this free digital event for demos and deep dives—and be among the first to hear major product announcements.

Register now to:

• Learn to create a comprehensive, automated map of all your data.
• See how Azure Purview works with Azure Synapse Analytics, Power BI, and the rest of your data estate to deliver timely, reliable insights.
• Watch in-depth demos of product features including Azure Purview Data Map and Data Catalog.
• Ask Azure experts your data governance questions in the live Q&A.

Details below:

• Date/Time:
  Tuesday, September 28, 2021 | 9:00 AM-10:00 AM
• Registration:
  https://azuredatagovernance.eventcore.com/auth/login

Microsoft has been named a Leader in the 2021 Gartner Robotic Process Automation (RPA) Magic Quadrant. Gartner recognized several of Power Automate’s strengths.

We have continued to make significant investments in RPA capabilities with the acquisition of Softomotive in 2020, which resulted in the general availability of Power Automate Desktop. This evolution continued as we added the powerful process advisor capability, and offered Power Automate Desktop for Windows 10 at no additional cost.

For more information & to see the new Gartner Report, visit:

• Microsoft named a Leader in the 2021 Gartner Magic Quadrant for Robotic Process Automation
  https://flow.microsoft.com/en-us/blog/microsoft-named-a-leader-in-the-2021-gartner-magic-quadrant-for-robotic-process-automation/