Azure Front Door Access Logs

📘 Log Query Used We ran the following Kusto query in Azure Log Analytics to search for specific access events through Azure Front Door: kustoCopyEditAzureDiagnostics| where Category contains “FrontDoorAccessLog”| where requestUri_s contains “<target-endpoint>”| where originIp_s contains “<origin-ip>”| where clientIp_s contains “<client-ip>”| project originIp_s, clientIp_s, requestUri_s 🧾 Query Breakdown

Register an Azure SQL Server VM with the SQL IaaS Agent Extension

How to Register an Azure SQL Server VM with the SQL IaaS Agent Extension Using PowerShell and CLI When we install SQL Server in Azure VM. The SQL IaaS Agent Extension enables advanced management capabilities for SQL Server Virtual Machines (VMs) in Azure, such as automated backups, patching, and simplified license management. In this article, … Read more

Change IP of a VM via Azure Serial Console Access (SAC)

Commands to Manage IP Configuration in SAC To work with the IP configuration, follow these steps: 1. Enter the Networking Context SAC uses command channels for different contexts. To switch to the network management context, use: SAC> cmdSAC> ch -si 1 This brings up the Command Line Interface of the Server. 2. View Network Interfaces … Read more

Create Self-Signed certificates for point-to-site in Azure

PowerShell commands to create Root and Child Certificate for the Azure P2S Create a self-signed root certificate Create a self-signed Child certificate on the PowerShell console session if it is still open On the new PowerShell console session Locate the root certificate Replace the THUMBPRINT And Execute the below script Export the root without a … Read more

Hyper-v or Vmware Esxi on Azure VMs

It is possible to implement Hyper-V on the Azure VM using the configuration called “Nested Virtualization”. Nested virtualization is a feature that lets you run Hyper-V inside a Hyper-V virtual machine (VM) or in an Azure VM. It is important to note the below factor before we conclude with the Nested Virtualization per Microsoft. PFA … Read more

Azure VPN client “Operation Canceled by user”

Try the following in the order. Method1: Open CMD as Admin in the affected client. Run,Copy In case the above does not help, Method2, Open elevated command prompt on the client Run, netsh int ip reset Reboot the client. https://learn.microsoft.com/en-us/answers/questions/1298950/azure-vpn-client-operation-canceled-by-user

Azure App Service Alert metrics

Metric Description Response Time The time taken for the app to serve requests, in seconds. Average Response Time (deprecated) The average time taken for the app to serve requests, in seconds. Average memory working set The average amount of memory used by the app, in megabytes (MiB). Connections The number of bound sockets existing in … Read more

Source Network Address Translation (SNAT) for outbound connections for

https://learn.microsoft.com/en-us/azure/load-balancer/load-balancer-outbound-connections Use Source Network Address Translation (SNAT) for outbound connections Feedback In this article Show 5 more Certain scenarios require virtual machines or compute instances to have outbound connectivity to the internet. The frontend IPs of a public load balancer can be used to provide outbound connectivity to the internet for backend instances. This configuration … Read more

AKS Cluster Outbound IP

https://learn.microsoft.com/en-us/azure/aks/load-balancer-standard Use a public standard load balancer in Azure Kubernetes Service (AKS) Feedback In this article Show 6 more The Azure Load Balancer operates at layer 4 of the Open Systems Interconnection (OSI) model that supports both inbound and outbound scenarios. It distributes inbound flows that arrive at the load balancer’s front end to the back end … Read more

Run As Account for Azure ASR

https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/site-recovery/azure-to-azure-autoupdate.md Automatic update of the Mobility service in Azure-to-Azure replication Azure Site Recovery uses a monthly release cadence to fix any issues and enhance existing features or add new ones. To remain current with the service, you must plan for patch deployment each month. To avoid the overhead associated with each upgrade, you can allow … Read more

Query to Check the Percent Complete of a Backup Query Execution (From Azure)

Monitoring the progress of a database backup or restore operation in Azure SQL Server is crucial for effective database management. Knowing how far along the operation is allows administrators to estimate completion times and plan their tasks accordingly. Below, we discuss a T-SQL query that provides real-time insights into the progress of backup or restore … Read more

NSG Flow Logs

https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics https://azure.microsoft.com/en-us/pricing/details/monitor/ https://learn.microsoft.com/en-us/azure/azure-monitor/logs/basic-logs-configure?tabs=portal-1#set-a-tables-log-data-plan https://learn.microsoft.com/en-us/azure/azure-monitor/logs/basic-logs-query?tabs=portal-1#kql-language-limits https://learn.microsoft.com/en-us/azure/azure-monitor/logs/basic-logs-configure?tabs=portal-1#when-should-i-use-basic-logs https://learn.microsoft.com/en-us/azure/network-watcher/network-watcher-nsg-flow-logging-overview#how-nsg-flow-logs-work

Password expiration policies in Azure AD

Check the expiration policy for a password Get-AzureADUser -ObjectId | Select-Object @{N=”PasswordNeverExpires”;E={$_.PasswordPolicies -contains “DisablePasswordExpiration”}} Get-AzureADUser -All $true | Select-Object UserPrincipalName, @{N=”PasswordNeverExpires”;E={$_.PasswordPolicies -contains “DisablePasswordExpiration”}} Set a password to expire Get-AzureADUser -ObjectId | Select-Object @{N=”PasswordNeverExpires”;E={$_.PasswordPolicies -contains “DisablePasswordExpiration”}} Get-AzureADUser -All $true | Select-Object UserPrincipalName, @{N=”PasswordNeverExpires”;E={$_.PasswordPolicies -contains “DisablePasswordExpiration”}} Set a password to expire Set-AzureADUser -ObjectId -PasswordPolicies None Get-AzureADUser -All … Read more