https://www.gettothe.cloud/category/cloud/Latest Cloud posts on GetToTheCloudHugoenThu, 04 Jun 2026 09:53:00 +0200https://www.gettothe.cloud/azure-local-the-sovereign-cloud-reality-check/Thu, 04 Jun 2026 09:53:00 +0200https://www.gettothe.cloud/azure-local-the-sovereign-cloud-reality-check/Azure LocalCloudWhen Microsoft renamed Azure Stack HCI to Azure Local, the rebrand felt cosmetic. It was not. Azure Local has become the foundation of Microsoft’s Sovereign Cloud, with connected, hybrid, and fully disconnected modes covering everything from edge sites to air-gapped government workloads. But how does running it in your own datacenter actually hold up against the US CLOUD Act when GDPR and NIS2 are …https://www.gettothe.cloud/azure-local-homelab-disaster-recovery/Wed, 22 Apr 2026 09:30:00 +0200https://www.gettothe.cloud/azure-local-homelab-disaster-recovery/AzureAzure LocalCloudInfrastructureOnpremisesThe Disaster Recovery capability for Azure Local is currently in preview, but it already offers enough functionality for meaningful evaluation and testing. Exploring this feature early provides valuable…https://www.gettothe.cloud/azure-azure-landing-zone-test-purposes/Tue, 14 Apr 2026 10:10:00 +0200https://www.gettothe.cloud/azure-azure-landing-zone-test-purposes/AzureCloudCodeInfrastructureOnpremisesAn Azure Landing Zone provides a secure, scalable foundation for deploying workloads in Azure. In this post, we explore how a well‑designed landing zone helps organizations establish governance, networking, identity, and security from day one, enabling teams to move faster while staying compliant and in control.https://www.gettothe.cloud/azure-local-homelab-azure-backup/Tue, 24 Mar 2026 10:05:00 +0100https://www.gettothe.cloud/azure-local-homelab-azure-backup/AzureAzure LocalCloudInfrastructureOnpremisesAzure Local brings cloud innovation closer to your datacenter, and pairing it with Azure Backup through a Recovery Services Vault delivers a robust, enterprise‑grade protection strategy. By integrating native Microsoft backup capabilities, organizations can securely safeguard virtual machines and workloads without relying on third‑party tools. This hybrid approach ensures resilient data …https://www.gettothe.cloud/azure-secure-azure-virtual-desktop-with-mfa-update/Thu, 13 Jun 2024 14:50:57 +0200https://www.gettothe.cloud/azure-secure-azure-virtual-desktop-with-mfa-update/AzureAzure Active DirectoryAzure Virtual DesktopCloudSecuritySince my last post in 2023 there is something changed. You are able to set SSO for Entra ID to login to Azure Virtual Desktop. If you have a Conditional Access Policy which is targeted to Azure Virtual Desktop, these changes are required before 26 June 2024.https://www.gettothe.cloud/azure-virtual-desktop-sso-for-entra-joined-avd/Tue, 11 Jun 2024 16:47:17 +0200https://www.gettothe.cloud/azure-virtual-desktop-sso-for-entra-joined-avd/AzureAzure Virtual DesktopCloudInfrastructureEverytime a user connects to a new sessionhost within Azure Virtual Deskop, it will need to provide consent. It’s annoying and frustrating for a user and only remembered for x amout of days. User a dynamic group of users and make the switch.https://www.gettothe.cloud/azure-virtual-desktop-intune-set-timezone/Tue, 28 May 2024 10:03:50 +0200https://www.gettothe.cloud/azure-virtual-desktop-intune-set-timezone/AzureAzure Virtual DesktopCloudIntunePowerShellSetting the correct timezone and formatting of time using Intune for Azure Virtual Desktop session hosts.https://www.gettothe.cloud/azure-virtual-desktop-fslogix-app-masking-with-entra-joined-devices-iv/Tue, 28 May 2024 10:02:57 +0200https://www.gettothe.cloud/azure-virtual-desktop-fslogix-app-masking-with-entra-joined-devices-iv/AzureAzure Virtual DesktopCloudUsing Local security groups with AzureAD members which are attached to app masking assignment rules. Get those users from a CSV and add them to the local groups.https://www.gettothe.cloud/azure-virtual-desktop-fslogix-app-masking-with-entra-joined-devices-iii/Tue, 28 May 2024 10:02:10 +0200https://www.gettothe.cloud/azure-virtual-desktop-fslogix-app-masking-with-entra-joined-devices-iii/AzureAzure Virtual DesktopCloudAfter the creating of the function app, we need to create the app masking rules and assignments. Create local groups and the rules to upload to the blob storage.https://www.gettothe.cloud/azure-virtual-desktop-fslogix-app-masking-with-entra-joined-devices-ii/Tue, 28 May 2024 10:01:39 +0200https://www.gettothe.cloud/azure-virtual-desktop-fslogix-app-masking-with-entra-joined-devices-ii/AzureAzure Virtual DesktopCloudCreate an Azure Function to get all members of application security groups and upload csv’s with UPN’s to Azure Blob Storage.https://www.gettothe.cloud/azure-virtual-desktop-fslogix-app-masking-with-entra-joined-devices-i/Tue, 28 May 2024 10:00:58 +0200https://www.gettothe.cloud/azure-virtual-desktop-fslogix-app-masking-with-entra-joined-devices-i/AzureAzure Virtual DesktopCloudUsing FSLogix AppMasking on Entra Joined Azure Virtual Desktop. Not supported, but hey there is a work around. Using Azure Function and some PowerShell, you can use AppMasking within Azure Virtual Desktop without a hybrid join.https://www.gettothe.cloud/azure-virtual-desktop-schedule-image-builds/Tue, 28 May 2024 09:58:33 +0200https://www.gettothe.cloud/azure-virtual-desktop-schedule-image-builds/AzureAzure Image BuilderAzure Virtual DesktopCloudIn previous posts we have seen how to create a vanilla image build. It’s recommended to keep your image as vanilla as possible. That means there are no…https://www.gettothe.cloud/azure-virtual-desktop-image-builder-part-iii/Tue, 28 May 2024 09:58:01 +0200https://www.gettothe.cloud/azure-virtual-desktop-image-builder-part-iii/Azure Image BuilderAzure Virtual DesktopCloudCodeInfrastructurePowerShellUsing the first and the second post, concludes how this all comes together with the ImageBuilder and its process. Finish the ImageBuild template and start building a GoldenImagehttps://www.gettothe.cloud/azure-virtual-desktop-image-builder-part-ii/Tue, 28 May 2024 09:56:43 +0200https://www.gettothe.cloud/azure-virtual-desktop-image-builder-part-ii/Azure Image BuilderAzure Virtual DesktopCloudCodeInfrastructurePowerShellThe second part of Azure Image Builder and how to setup a correct build for a GoldenImage. Preparations in Azure are needed.https://www.gettothe.cloud/azure-virtual-desktop-image-builder-part-i/Tue, 28 May 2024 09:55:30 +0200https://www.gettothe.cloud/azure-virtual-desktop-image-builder-part-i/Azure Image BuilderAzure Virtual DesktopCloudCodeInfrastructurePowerShellAzure Virtual Desktop (AVD) is a desktop and app virtualization service running on the cloud. It’s the only virtual desktop infrastructure (VDI) that delivers simplified management, multi-session Windows 10/11,…https://www.gettothe.cloud/azure-virtual-desktop-the-complete-setup-guide/Tue, 28 May 2024 09:53:22 +0200https://www.gettothe.cloud/azure-virtual-desktop-the-complete-setup-guide/Azure Virtual DesktopCloudInfrastructureIn the last few months it was a journey to get to know about all the inns and outs of azure virtual desktop. During my journey I have written blogs about it and share them with you.https://www.gettothe.cloud/microsoft-teams-create-channel-from-microsoft-teams-form/Tue, 25 Jul 2023 07:37:47 +0200https://www.gettothe.cloud/microsoft-teams-create-channel-from-microsoft-teams-form/AzureCloudCodeM365Microsoft TeamsPower AutomateAs an admin you want control over the creation of Teams channels or folder structures. Not every user is capable to provision channels the correct way. Disable the default for users to create but provide them a solution to create channels through a form. Use Azure Functions and Microsoft Teams Forms for the self-service.https://www.gettothe.cloud/azure-active-directory-cloud-only-administrative-accounts/Tue, 06 Jun 2023 09:00:00 +0200https://www.gettothe.cloud/azure-active-directory-cloud-only-administrative-accounts/Azure Active DirectoryCloudIdentitySecurityComing from an on-premises environment, it can be hard how to setup administrative accounts. On-premises was the default to have certain permissions. In Azure Active Directory that is a bit changed. This blog explains how to approach and why you should use Cloud-Only administrative accounts.https://www.gettothe.cloud/azure-get-notified-when-break-glass-account-is-used/Thu, 04 May 2023 08:00:00 +0200https://www.gettothe.cloud/azure-get-notified-when-break-glass-account-is-used/AzureAzure Active DirectoryCloudIdentitySecurityA Break Glass Account is an emergency account that grants access to critical resources when regular credentials are unavailable. It plays a vital role in ensuring business continuity during a crisis and enables a response strategy for cybersecurity threats. Shared and privileged accounts are the two types of Break Glass Accounts, and their use must be controlled and monitored to avoid security …https://www.gettothe.cloud/terraform-deploy-virtual-machines-to-aws-2/Fri, 24 Mar 2023 11:08:05 +0100https://www.gettothe.cloud/terraform-deploy-virtual-machines-to-aws-2/AWSCloudInfrastructureTerraformBefore we used Terraform to deploy virtual machines with needed resources to Azure. Now we are using Terraform to accomplish the same to AWS. A Blogpost about the ins and outs.https://www.gettothe.cloud/terraform-deploy-virtual-machines-to-azure/Fri, 17 Mar 2023 13:03:01 +0100https://www.gettothe.cloud/terraform-deploy-virtual-machines-to-azure/AzureCloudCodeInfrastructureTerraformBefore we used Azure Bicep to deploy virtual machines with needed resources to Azure. Now we are using Terraform to accomplish the same. A Blogpost about the ins and outs.https://www.gettothe.cloud/azure-bicep-deploy-virtual-machines/Mon, 13 Mar 2023 11:46:19 +0100https://www.gettothe.cloud/azure-bicep-deploy-virtual-machines/AzureCloudCodeInfrastructureUsing Azure Bicep will give you the the control of deployment of resources in Azure. Every time deploying the bicep will check if the desired state still is available or needs to be changed. Using it in a DevOps Pipeline is great for continuous deployment.https://www.gettothe.cloud/azure-active-directory-assessment-part-vi/Fri, 10 Mar 2023 11:57:43 +0100https://www.gettothe.cloud/azure-active-directory-assessment-part-vi/Azure Active DirectoryCloudIdentityMicrosoft Graph APIPowerShellIn this part we are going to get all RBAC roles for Azure Active Directory and their members. Some identities are Eligible and some are Active. An overview of the status is needed to see if there is no legacy permissions assigned.https://www.gettothe.cloud/azure-active-directory-assessment-part-v/Sun, 05 Mar 2023 12:00:00 +0100https://www.gettothe.cloud/azure-active-directory-assessment-part-v/Azure Active DirectoryCloudIdentityMicrosoft Graph APIPowerShellIn this part we will get an export of the Conditional Access Policies and App Regsitrations and Enterprise Applications with there API permissions. Also the client secret or certificate information will be exported to get a good sight on it.https://www.gettothe.cloud/azure-active-directory-assessment-part-iv/Wed, 01 Mar 2023 12:00:00 +0100https://www.gettothe.cloud/azure-active-directory-assessment-part-iv/Azure Active DirectoryCloudM365PowerShellIn this part we will take a look how to retrieve the licenses and organization information. We are going to use this information to write a small report at the end of the assessment.https://www.gettothe.cloud/azure-active-directory-assessment-part-iii/Sat, 25 Feb 2023 12:00:00 +0100https://www.gettothe.cloud/azure-active-directory-assessment-part-iii/Azure Active DirectoryCloudIdentitySecurityStarting the assessment is to get all the users, groups and devices and their attributes.https://www.gettothe.cloud/azure-active-directory-assessment-part-ii/Fri, 24 Feb 2023 08:22:35 +0100https://www.gettothe.cloud/azure-active-directory-assessment-part-ii/Azure Active DirectoryCloudIdentitySecurityTo start the assessment, there is a need of an app registration with the correct permissions. Creating it through portal and with PowerShell and saving the connection details to an XML file.https://www.gettothe.cloud/azure-active-directory-assessment-part-i/Fri, 24 Feb 2023 08:22:02 +0100https://www.gettothe.cloud/azure-active-directory-assessment-part-i/Azure Active DirectoryCloudIdentitySecurityWith the use of Azure Active Directory and multiple administrator, the chance that it is going to be messy is big. To check if everything is correct created and managed, you can do an assessment.https://www.gettothe.cloud/m365-migration-exchange-inventory-v2/Fri, 27 Jan 2023 16:13:28 +0100https://www.gettothe.cloud/m365-migration-exchange-inventory-v2/CloudExchangeIdentityM365PowerShellBeing able to do a proper Exchange migration (on-premises to online or online to online), you will need a good inventory. Now we improved the scripting to speed it up.https://www.gettothe.cloud/azure-active-directory-authentication-policies/Tue, 24 Jan 2023 09:19:51 +0100https://www.gettothe.cloud/azure-active-directory-authentication-policies/Azure Active DirectoryCloudIdentitySecuritySSPR and MFA policies are changing. Security levels must increase. Microsoft has announced that legacy multifactor authentication and self-service password reset policies will be deprecated in January 2024. The new Microsoft Entra Admin center will provide with a wizard to migrate the legacy policies to the new Authentication methods policies.