A journey to the cloud
Long-form posts on Azure Local, Bicep, PowerShell and the HomeLab series — written from a working environment.
Using Azure Bicep will give you the the control of deployment of resources in Azure. Every time deploying the bicep will check if the desired state still is available or needs to be changed. Using it in a DevOps Pipeline is great for continuous deployment.
Read More
In this part we are going to get all RBAC roles for Azure Active Directory and their members. Some identities are Eligible and some are Active. An overview of the status is needed to see if there is no legacy permissions assigned.
Read More
In this part we will get an export of the Conditional Access Policies and App Regsitrations and Enterprise Applications with there API permissions. Also the client secret or certificate information will be exported to get a good sight on it.
Read More
In this part we will take a look how to retrieve the licenses and organization information. We are going to use this information to write a small report at the end of the assessment.
Read More
Starting the assessment is to get all the users, groups and devices and their attributes.
Read More
To start the assessment, there is a need of an app registration with the correct permissions. Creating it through portal and with PowerShell and saving the connection details to an XML file.
Read More
With the use of Azure Active Directory and multiple administrator, the chance that it is going to be messy is big. To check if everything is correct created and managed, you can do an assessment.
Read More
Using Azure Active Directory in a production environment is not a place to play around and to test. For that you can setup a new domain controller with some fictive users and groups. Let’s set it up quickly with PowerShell.
Read More
These days are more and more companies working in Azure Active Directory. They are using Azure AD Connect to synchronize those accounts from on-premises Active Directory to Azure Active Directory. When a company is acquiring a new company and they acquired ...
Read More
Being able to do a proper Exchange migration (on-premises to online or online to online), you will need a good inventory. Now we improved the scripting to speed it up.
Read More