Featured series
Series · 3 parts
Azure Virtual Desktop | Security Give Aways
Securing Azure Virtual Desktop layer by layer: the trust boundary, identity and OS, the network path and detection.
Series
Azure Local | HomeLab
Building, running and troubleshooting Azure Local at home, from the first node to backup and disaster recovery.
Series · 6 parts
Azure Active Directory Assessment
Assess an Entra ID tenant with PowerShell and Graph: users, groups, licenses, policies, apps and roles.
Series · 5 parts
M365 Cross Tenant Migration
Consolidating Microsoft 365 tenants with the cross-tenant migration feature, step by step.
Open-source tools
Tool
AVM Updater
Keeping Azure Verified Modules (AVM) up to date in Bicep and Terraform projects can be time-consuming and risky. AvmUpdater …
Tool
Azure Landing Zone Documenter
Azure Landing Zones are the foundation of secure and scalable Azure platforms, but documentation often falls behind as …
Tool
Azure Local Documenter
Azure Local (formerly Azure Stack HCI) is often deployed for very good reasons: data sovereignty, low latency, regulatory …
Tool
Azure Virtual Desktop Documenter
As AVD environments grow, documentation often falls behind—becoming outdated, incomplete, or missing entirely. Documenter for …
All posts by Alex ter Neuzen

News | Azure Local 2610
Azure Local 2610 brings practical improvements to cluster servicing, security management and SAN deployments. Operators get combined OS and OEM updates, a clearer solution health summary and more …

Azure Virtual Desktop | Security Give Aways
Part I of a three-part series on securing Azure Virtual Desktop. The trust boundary, the attack chain, and the takeaways worth acting on before you touch a single setting.

Azure Virtual Desktop | Security Give Aways – Part II
Part II of the AVD security series – closing the identity and operating system gaps, from RBAC and Conditional Access through Trusted Launch, local admin, Defender and the image pipeline.

Azure Virtual Desktop | Security Give Aways – Part III
Part III of the AVD security series – the network path, the session boundary, profile data protection, and building detection that somebody actually reads.

Azure Virtual Desktop | Sessionhost monitoring 2.0
The 2024 post made sure the data was there. This one makes it useful. A free Azure Monitor workbook for AVD session hosts with seven tabs, a supplemental Data Collection Rule in Bicep, the KQL behind …

News | Azure Local 2609
Microsoft has shipped Azure Local 2609 (solution version 12.2609.1003.7, OS build 26100.33438). It is a maintenance release: reliability fixes, refreshed .NET and PowerShell, and new private path …

Azure Local | Day 2 Operations
Azure Local Day 2 operations: a free Azure Monitor workbook for CPU, memory, storage, host balance and VM density, plus the DCR and KQL to validate it.

Azure Local | Why 8 GB of RAM Isn’t Enough for Production
Azure Local automatically deploys the Azure Resource Bridge (ARB) with 8 GB of memory, but is that really enough for production? In this article, I explore the often-overlooked control plane VM at the …

News | Azure Local 2608
The August 2026 release of Azure Local (version 12.2608.1003.8) updates the platform base to OS build 26100.33296 and delivers practical administrative updates for day-two operations. Key capabilities …

News | Azure Local 2607
Azure Local 2607 focuses on operational excellence rather than new features. Microsoft has delivered fixes for VM lifecycle management, networking, Arc Resource Bridge deployments and large-scale …
