SELECTED UPDATES FOR Microsoft Azure - Azure Files Active Directory (Azure AD) authentication with Azure AD domain services (General Availability) - Azure Dedicated Hosts (Public Preview) - Network security group improvements—ICMP support - DEMO : Dev/Test Lab

1. EP 11: MICROSOFT PRODUCTS
UPDATE
AUGUST 10, 2019
Speaker Name:
Bird : MVP :
Office Servers & Services
Thanyapon Sananakin
MVP (Microsoft Azure)

2. SELECTED UPDATES FOR MICROSOFT
AZURE
• Azure Files Active Directory (Azure AD) authentication with
Azure AD domain services (General Availability)
• Azure Dedicated Hosts (Public Preview)
• Network security group improvements—ICMP support
• DEMO : Dev/Test Lab
MVPSKILL SATURDAY EP. 11 – AUG 10, 2019 2

3. AZURE FILES ACTIVE DIRECTORY (AZURE
AD) AUTHENTICATION WITH AZURE AD
DOMAIN SERVICES
• Mount Azure file share over SMB using Azure Active Directory
(Azure AD) credentials
MVPSKILL SATURDAY EP. 11 – AUG 10, 2019 3
https://azure.microsoft.com/en-us/blog/better-security-with-
enhanced-access-control-experience-in-azure-files/

4. AZURE FILES ACTIVE DIRECTORY (AZURE
AD) AUTHENTICATION WITH AZURE AD
DOMAIN SERVICES
• Seamless integration with Windows File Explorer on permission
assignments
MVPSKILL SATURDAY EP. 11 – AUG 10, 2019 4
https://azure.microsoft.com/en-us/blog/better-
security-with-enhanced-access-control-
experience-in-azure-files/

5. AZURE FILES ACTIVE DIRECTORY (AZURE
AD) AUTHENTICATION WITH AZURE AD
DOMAIN SERVICES
• Benefits
• Support for Mapped Drive to Windows
• Support RBAC (Role-based Access Control)
• Limitation
• Support only Windows VM in Azure Virtual Network
• Cannot move on-premise file sharing to Azure File Share
MVPSKILL SATURDAY EP. 11 – AUG 10, 2019 5

6. AZURE DEDICATED HOSTS
• Enables you to run your organization’s Linux and Windows virtual
machines on single-tenant physical servers
• Visibility and control to help address corporate compliance and
regulatory requirements
• Extending Azure Hybrid Benefit to Azure Dedicated Hosts
• Save money by using on-premises Windows Server and SQL Server licenses
with Software Assurance or qualifying subscription licenses
• Pricing Model = Compute + Software Licensing
MVPSKILL SATURDAY EP. 11 – AUG 10, 2019 6
https://azure.microsoft.com/en-us/pricing/details/virtual-machines/dedicated-host/

7. AZURE DEDICATED HOSTS – HOST
TYPE
MVPSKILL SATURDAY EP. 11 – AUG 10, 2019 7
https://azure.microsoft.com/en-us/pricing/details/virtual-machines/dedicated-host/

8. AZURE DEDICATED HOSTS - PRICING
COMPUTE
MVPSKILL SATURDAY EP. 11 – AUG 10, 2019 8
https://azure.microsoft.com/en-us/pricing/details/virtual-machines/dedicated-host/

9. AZURE DEDICATED HOSTS – SW LICENSING
MVPSKILL SATURDAY EP. 11 – AUG 10, 2019 9
https://azure.microsoft.com/en-us/pricing/details/virtual-machines/dedicated-host/

10. AZURE DEDICATED HOSTS
MVPSKILL SATURDAY EP. 11 – AUG 10, 2019 10
https://azure.microsoft.com/en-us/pricing/details/virtual-machines/dedicated-host/

11. NETWORK SECURITY GROUP
IMPROVEMENTS—ICMP SUPPORT
• Specify ICMP as the protocol in your NSG rules, in addition to TCP,
UDP, or Any.
• Override the default Azure platform considerations by creating an
NSG rule with the following service tags. Please exercise caution
when using these tags.
• AzurePlatformDNS for DNS
• AzurePlatformLKM for Windows licensing (Key Management Service)
MVPSKILL SATURDAY EP. 11 – AUG 10, 2019 11
https://azure.microsoft.com/en-in/updates/network-security-group-improvements-now-available/

12. NETWORK SECURITY GROUP
IMPROVEMENTS—ICMP SUPPORT
MVPSKILL SATURDAY EP. 11 – AUG 10, 2019 12

13. DEV/TEST LAB
• Enables developers on teams to efficiently self-manage virtual machines
(VMs) and PaaS resources without waiting for approvals
• Creates labs consisting of pre-configured bases or Azure Resource
Manager templates
MVPSKILL SATURDAY EP. 11 – AUG 10, 2019 13

14. MVPSKILL SATURDAY EP. 11 – AUG 10, 2019 14
DEMO
DEV/TEST LAB DEMO

15. DEV/TEST LAB VS LAB SERVICES
MVPSKILL SATURDAY EP. 11 – AUG 10, 2019 15
DEV/TEST LAB LAB SERVICE
Lab Type Un-manage lab Managed lab
Supported Resources VM, PaaS resources VM Only
Scenario Software testing Classroom lab, training
Pricing Model pricing of each resource Lab Unit
Others Central IT define policy
for team
Lab owner can monitor
users' activities