https://www.gettothe.cloud/author/alex-ter-neuzen/Latest Alex ter Neuzen posts on GetToTheCloudHugoenFri, 23 Oct 2026 08:12:28 +0200https://www.gettothe.cloud/news-azure-local-2610/Fri, 23 Oct 2026 08:12:28 +0200https://www.gettothe.cloud/news-azure-local-2610/Azure LocalNewsAzure Local 2610 brings practical improvements to cluster servicing, security management and SAN deployments. Operators get combined OS and OEM updates, a clearer solution health summary and more control over security baseline settings. Microsoft has also fixed several upgrade, storage and networking problems. There are no new release-specific known issues, but important older issues still apply. …https://www.gettothe.cloud/azure-virtual-desktop-security-give-aways/Thu, 22 Oct 2026 10:00:00 +0200https://www.gettothe.cloud/azure-virtual-desktop-security-give-aways/AzureAzure Virtual DesktopSecurityPart I of a three-part series on securing Azure Virtual Desktop. The trust boundary, the attack chain, and the takeaways worth acting on before you touch a single setting.https://www.gettothe.cloud/azure-virtual-desktop-security-give-aways-part-ii/Thu, 22 Oct 2026 09:59:00 +0200https://www.gettothe.cloud/azure-virtual-desktop-security-give-aways-part-ii/AzureAzure Virtual DesktopSecurityPart II of the AVD security series – closing the identity and operating system gaps, from RBAC and Conditional Access through Trusted Launch, local admin, Defender and the image pipeline.https://www.gettothe.cloud/azure-virtual-desktop-security-give-aways-part-iii/Thu, 22 Oct 2026 09:58:00 +0200https://www.gettothe.cloud/azure-virtual-desktop-security-give-aways-part-iii/AzureAzure Virtual DesktopSecurityPart III of the AVD security series – the network path, the session boundary, profile data protection, and building detection that somebody actually reads.https://www.gettothe.cloud/azure-virtual-desktop-sessionhost-monitoring-2-0/Thu, 24 Sep 2026 10:09:11 +0200https://www.gettothe.cloud/azure-virtual-desktop-sessionhost-monitoring-2-0/Azure Virtual DesktopThe 2024 post made sure the data was there. This one makes it useful. A free Azure Monitor workbook for AVD session hosts with seven tabs, a supplemental Data Collection Rule in Bicep, the KQL behind every chart and the validation queries to run before you trust it.https://www.gettothe.cloud/news-azure-local-2609/Wed, 16 Sep 2026 09:32:00 +0200https://www.gettothe.cloud/news-azure-local-2609/Azure LocalNewsMicrosoft has shipped Azure Local 2609 (solution version 12.2609.1003.7, OS build 26100.33438). It is a maintenance release: reliability fixes, refreshed .NET and PowerShell, and new private path network guidance. Two Azure Local VM issues are fixed, including the CLI stop failure on pre-2604 clusters. No new known issues were logged, but the carried-over list still matters: Windows Admin Center …https://www.gettothe.cloud/azure-local-day-2-operations/Thu, 03 Sep 2026 09:54:00 +0200https://www.gettothe.cloud/azure-local-day-2-operations/AzureAzure LocalInfrastructureAzure Local Day 2 operations: a free Azure Monitor workbook for CPU, memory, storage, host balance and VM density, plus the DCR and KQL to validate it.https://www.gettothe.cloud/azure-local-why-8-gb-of-ram-isnt-enough-for-production/Thu, 20 Aug 2026 09:58:00 +0200https://www.gettothe.cloud/azure-local-why-8-gb-of-ram-isnt-enough-for-production/AzureAzure LocalInfrastructureAzure Local automatically deploys the Azure Resource Bridge (ARB) with 8 GB of memory, but is that really enough for production? In this article, I explore the often-overlooked control plane VM at the heart of every Azure Local deployment. Learn why larger clusters, Arc integrations, monitoring, and platform services can create memory pressure, how to spot the warning signs, and why right-sizing …https://www.gettothe.cloud/news-azure-local-2608/Wed, 19 Aug 2026 09:59:00 +0200https://www.gettothe.cloud/news-azure-local-2608/Azure LocalNewsThe August 2026 release of Azure Local (version 12.2608.1003.8) updates the platform base to OS build 26100.33296 and delivers practical administrative updates for day-two operations. Key capabilities include graceful VM shutdowns from the Azure portal, guided node scale-out, Arc Site Manager for multi-site management, and cloud-managed GPU partitioning. Operators should audit BitLocker TPM PCR7 …https://www.gettothe.cloud/news-azure-local-2607/Thu, 23 Jul 2026 08:57:02 +0200https://www.gettothe.cloud/news-azure-local-2607/Azure LocalNewsAzure Local 2607 focuses on operational excellence rather than new features. Microsoft has delivered fixes for VM lifecycle management, networking, Arc Resource Bridge deployments and large-scale environment stability. The release also addresses several issues affecting deployments with thousands of virtual machines. Administrators should review the documented Azure Key Vault extension issue …https://www.gettothe.cloud/azure-local-downloading-just-the-update-for-offline-installation/Tue, 21 Jul 2026 10:01:00 +0200https://www.gettothe.cloud/azure-local-downloading-just-the-update-for-offline-installation/Azure LocalInfrastructureRunning Azure Local at the edge or in a disconnected, sovereign site? Since version 2411.3 you can download just the solution update, not the whole OS, and install it offline. This walkthrough covers the new portal Download package option and the full PowerShell flow: grab the CombinedSolutionBundle, verify the hash, import it, and run the update without saturating your link. Plus the gotchas, …https://www.gettothe.cloud/tool-avm-updater/Tue, 30 Jun 2026 09:54:00 +0200https://www.gettothe.cloud/tool-avm-updater/AzureCodePowerShellToolsKeeping Azure Verified Modules (AVM) up to date in Bicep and Terraform projects can be time-consuming and risky. AvmUpdater simplifies the process by automatically detecting new module versions, validating Azure Verified status, and generating safe update recommendations. Whether you’re managing a single deployment or a large platform landing zone, AvmUpdater helps you stay current, improve …https://www.gettothe.cloud/azure-local-homelab-troubleshoot-windows-update/Thu, 25 Jun 2026 09:44:00 +0200https://www.gettothe.cloud/azure-local-homelab-troubleshoot-windows-update/Azure LocalInfrastructureThis deep-dive shows how a misleading Azure Local health fault — “KeyVaultDoesNotExist” — can block cluster updates even when everything appears healthy. The issue isn’t a missing Key Vault, but missing RBAC permissions for the cluster’s managed identity. By validating identity access (not just functionality), you can quickly resolve the fault and restore operations. A practical troubleshooting …https://www.gettothe.cloud/news-azure-local-2606/Fri, 19 Jun 2026 10:52:17 +0200https://www.gettothe.cloud/news-azure-local-2606/Azure LocalNewsAzure Local’s June 2026 update (version 2606, build 12.2606.1003.205) is a maintenance release focused on reliability and bug fixes, moving the OS to build 26100.32995 and refreshing the .NET runtimes. No new features or known issues ship this month, but carried-over items still bite: update Windows Admin Center before deleting volumes to avoid data loss, and watch Defender settings that can block …https://www.gettothe.cloud/azure-local-the-sovereign-cloud-reality-check/Thu, 04 Jun 2026 09:53:00 +0200https://www.gettothe.cloud/azure-local-the-sovereign-cloud-reality-check/Azure LocalCloudWhen Microsoft renamed Azure Stack HCI to Azure Local, the rebrand felt cosmetic. It was not. Azure Local has become the foundation of Microsoft’s Sovereign Cloud, with connected, hybrid, and fully disconnected modes covering everything from edge sites to air-gapped government workloads. But how does running it in your own datacenter actually hold up against the US CLOUD Act when GDPR and NIS2 are …https://www.gettothe.cloud/microsoft-mvp/Mon, 01 Jun 2026 16:55:02 +0200https://www.gettothe.cloud/microsoft-mvp/AzureAs of today I (Alex ter Neuzen) am a Microsoft MVP in the category Microsoft Azure. I have been writing these blogs lately and Microsoft gave me the…https://www.gettothe.cloud/news-azure-local-2605/Fri, 29 May 2026 09:19:02 +0200https://www.gettothe.cloud/news-azure-local-2605/Azure LocalNewsAzure Local 2605 is out (12.2605.1003.210, OS 26100.32860, released 28 May 2026). It closes out the unintended Azure Local VM deletion incident and unblocks Solution and SBE updates. Same-day hotfixes for 2603 and 2604 add a second layer of automated remediation as you update. 2601 and 2602 are no longer valid update targets, so plan a move to 2603 or later. Feature detail to follow once Microsoft …https://www.gettothe.cloud/news-azure-local-urgent-heads-up/Fri, 22 May 2026 13:04:51 +0200https://www.gettothe.cloud/news-azure-local-urgent-heads-up/Azure LocalNewsAzure Local moves fast, and most of the time that is a good thing. Every few weeks there is a new release, a new feature, a new way to make life on-prem feel a bit more like Azure. But once in a while the news isn’t a shiny new capability, it’s a “stop what you are doing and check your clusters” moment.https://www.gettothe.cloud/azure-local-homelab-fixing-a-failed-cluster-build/Thu, 21 May 2026 09:58:00 +0200https://www.gettothe.cloud/azure-local-homelab-fixing-a-failed-cluster-build/AzureAzure LocalPowerShellValidation passed. The build didn’t. Deploying Azure Local 2604 with Local Identity and Azure Key Vault through the portal looked straightforward — until step 0.16 hit a wall and refused to move. What followed was a six-issue deep dive into the EceStore config, the deployment engine’s PowerShell modules, and some fundamental gaps in how the 2604 release handles ADLess, DNS-based workgroup …https://www.gettothe.cloud/azure-local-homelab-restore-vm/Thu, 14 May 2026 09:48:00 +0200https://www.gettothe.cloud/azure-local-homelab-restore-vm/AzureAzure LocalPowerShellWhen you restore a virtual machine on Azure Local using Azure Backup or Veeam, you get the Hyper-V workload back, but the Arc object is gone. Microsoft does not support ReHydration, meaning the VM never re-appears as an Azure Local managed machine. This post walks through exactly why that happens, and how to manually recover the full Arc VM object by re-registering your restored VHDX and …https://www.gettothe.cloud/azure-local-homelab-local-identity-with-azure-keyvault/Tue, 28 Apr 2026 10:08:00 +0200https://www.gettothe.cloud/azure-local-homelab-local-identity-with-azure-keyvault/AzureAzure LocalInfrastructureOnpremisesThis setup is used to validate a new feature and is part of a dedicated test environment. Please note that this functionality is still in preview. More details…https://www.gettothe.cloud/azure-local-homelab-disaster-recovery/Wed, 22 Apr 2026 09:30:00 +0200https://www.gettothe.cloud/azure-local-homelab-disaster-recovery/AzureAzure LocalCloudInfrastructureOnpremisesThe Disaster Recovery capability for Azure Local is currently in preview, but it already offers enough functionality for meaningful evaluation and testing. Exploring this feature early provides valuable…https://www.gettothe.cloud/news-azure-local-2604/Sun, 19 Apr 2026 10:27:17 +0200https://www.gettothe.cloud/news-azure-local-2604/Azure LocalNewsAzure Local 2604 lifts a lot of historical ceilings. SAN storage and disaggregated deployments go GA, breaking the 16 node limit and letting compute and storage scale independently. GPU acceleration and Key Vault local identity reach GA too. Validation time drops by up to 50%, deployment by 40%. AKS on Arc moves to Kubernetes 1.31 to 1.33, with 1.30 deprecated. A solid release for operators …https://www.gettothe.cloud/tool-azure-landing-zone-documenter/Tue, 14 Apr 2026 10:24:45 +0200https://www.gettothe.cloud/tool-azure-landing-zone-documenter/AzureAzure Landing ZoneToolsAzure Landing Zones are the foundation of secure and scalable Azure platforms, but documentation often falls behind as environments evolve. Azure Landing Zone Documenter is an open‑source tool that inspects your actual Landing Zone and turns real configurations into clear, structured documentation. No assumptions and no outdated diagrams, just evidence. It helps architects, consultants, and …https://www.gettothe.cloud/azure-azure-landing-zone-test-purposes/Tue, 14 Apr 2026 10:10:00 +0200https://www.gettothe.cloud/azure-azure-landing-zone-test-purposes/AzureCloudCodeInfrastructureOnpremisesAn Azure Landing Zone provides a secure, scalable foundation for deploying workloads in Azure. In this post, we explore how a well‑designed landing zone helps organizations establish governance, networking, identity, and security from day one, enabling teams to move faster while staying compliant and in control.https://www.gettothe.cloud/azure-local-homelab-azure-backup/Tue, 24 Mar 2026 10:05:00 +0100https://www.gettothe.cloud/azure-local-homelab-azure-backup/AzureAzure LocalCloudInfrastructureOnpremisesAzure Local brings cloud innovation closer to your datacenter, and pairing it with Azure Backup through a Recovery Services Vault delivers a robust, enterprise‑grade protection strategy. By integrating native Microsoft backup capabilities, organizations can securely safeguard virtual machines and workloads without relying on third‑party tools. This hybrid approach ensures resilient data …https://www.gettothe.cloud/news-azure-local-2603/Wed, 18 Mar 2026 08:39:42 +0100https://www.gettothe.cloud/news-azure-local-2603/Azure LocalNewsAzure Local 2603 continues Microsoft’s push toward a fully cloud‑consistent hybrid platform. With a new OS baseline aligned to Windows Server 2025, .NET 8.0 updates, and improved AKS support, this release strengthens security, lifecycle management, and operational reliability—while remaining transparent about current known issues.https://www.gettothe.cloud/azure-local-bicep-virtual-machines/Tue, 17 Mar 2026 10:10:00 +0100https://www.gettothe.cloud/azure-local-bicep-virtual-machines/AzureAzure DevOpsAzure LocalCodeInfrastructureOnpremisesDeploying virtual machines to Azure Local becomes far more reliable and repeatable when using Azure Bicep together with Azure DevOps. By defining your infrastructure as code and automating deployment through pipelines, you ensure consistent environments, secure parameter handling, and streamlined governance. This approach removes manual steps, reduces errors, and provides full visibility into each …https://www.gettothe.cloud/tool-azure-local-documenter/Tue, 10 Mar 2026 13:49:25 +0100https://www.gettothe.cloud/tool-azure-local-documenter/AzureAzure LocalToolsAzure Local (formerly Azure Stack HCI) is often deployed for very good reasons: data sovereignty, low latency, regulatory requirements, or hybrid resilience. But once it’s live, a familiar…https://www.gettothe.cloud/tool-azure-virtual-desktop-documenter/Tue, 10 Mar 2026 13:31:19 +0100https://www.gettothe.cloud/tool-azure-virtual-desktop-documenter/AzureAzure Virtual DesktopToolsAs AVD environments grow, documentation often falls behind—becoming outdated, incomplete, or missing entirely. Documenter for Azure Virtual Desktop solves this by automatically inventorying your AVD setup straight from Azure, giving you clear, structured, and audit-ready documentation based on real deployments, not assumptions.