Cloud(Azure/O365) implementation support guide https://docs.microsoft.com/archive/blogs/taehee/feed.xml Just another Technet site Wed, 23 Jan 2019 23:32:31 GMT en-US hourly 1 Workplace Join/Device Registration to Azure AD for Local Domain joined Windows 7 and 2012 https://docs.microsoft.com/archive/blogs/taehee/workplace-join-device-registration-to-azure-ad-for-local-domain-joined-windows-7-and-2012 Thu, 24 Jan 2019 08:32:31 GMT https://blogs.technet.microsoft.com/taehee/?p=1055
<A reference originated> https://jairocadena.com/2017/10/04/azuread-device-based-conditional-access-and-windows-78-1/https://azure.microsoft.com/en-us/documentation/articles/active-directory-conditional-access-automatic-device-registration-windows7/ https://azure.microsoft.com/en-us/documentation/articles/active-directory-conditional-access-automatic-device-registration/   <Pre-requisite> Accounts between On-premise and Azure AD must be synchronized via AAD connect   <System Configuration check> From DNS server,        From ADFS server, 1. O365 federation 2. Enable device registration Initialize-ADDeviceRegistration Enable-AdfsDeviceRegistration Set-AdfsDeviceRegistration -ServiceAccountIdentifier mfalab3\taehee Get-AdfsDeviceRegistration setspn -Q host/fs.mfalab3.com   3. Add claimrules c:[Type == "https://schemas.microsoft.com/claims/authnmethodsreferences"] => issue(claim = c); Open Powershell and run Set-AdfsRelyingPartyTrust -TargetName "Microsoft Office 365 Identity Platform" -AllowedAuthenticationClassReferences wiaormultiauthn   From Domain joined Win7, 1. Try login to "https://portal.office.com", enter current login domain user account - "must login in without redirecting ADFS login page!!" 2. Download and Install "Workplace Join agent" x64 x86 And run "C:\Program Files\Microsoft Workplace Join>AutoWorkplace.exe /join" To leave, "C:\Program Files\Microsoft Workplace Join>AutoWorkplace.exe /leave"   <Result> From Win7 and 2012 From Azure Portal
]]> ADFS Multiple Domain configuration steps - Simple guide https://docs.microsoft.com/archive/blogs/taehee/adfs-multiple-domain-configuration-steps-simple-guide Wed, 01 Nov 2017 15:48:04 GMT https://blogs.technet.microsoft.com/taehee/?p=1035 Query request for Azure Usage/Billing API using Postman https://docs.microsoft.com/archive/blogs/taehee/query-request-for-azure-usagebilling-api-using-postman Wed, 09 Aug 2017 12:51:18 GMT https://blogs.technet.microsoft.com/taehee/?p=1015 Reference Link to query report. https://msdn.microsoft.com/library/en-us/Mt218998.aspx  

Generate Bearer Token

Login-AzureRmAccount $AccountName ="azureauto@AADTenants.onmicrosoft.com" $Password = "UserPassword" $PayLoad="resource=https://management.core.windows.net/&client_id=xxxxxxxxxxxxxxxxxxxxx&grant_type=password&username="+$AccountName+"&scope=openid&password="+$Password $Response=Invoke-WebRequest -Uri "https://login.microsoftonline.com/Common/oauth2/token" -Method POST -Body $PayLoad $ResponseJSON=$Response|ConvertFrom-Json $ResponseJSON Results,  

From Postman

]]> Multi-Factor Authentication for Securing RD Gateway Server https://docs.microsoft.com/archive/blogs/taehee/multi-factor-authentication-for-securing-rd-gateway-server Tue, 01 Aug 2017 11:53:58 GMT https://blogs.technet.microsoft.com/taehee/?p=636 System Environment  

Configuration

1. Select MFA as an RADIUS Proxy

 

2. NPS server configuration

 

3. NPS server configuration - cont #1

 

4. NPS server configuration - cont #2

 

5. NPS server configuration – cont #3

 

6. NPS server configuration – cont #4

 

7. NPS server configuration – cont #5

 

8. MFA server configuration - Client

 

9. MFA server configuration - Target

10. Testing

When connecting Remote Computer via RD Gateway server, MFA will proceed upon entering login credentials.      ]]> HowTo : Azure Linux VM OS partition expansion https://docs.microsoft.com/archive/blogs/taehee/howto-azure-linux-vm-os-partition-expansion Mon, 28 Nov 2016 16:35:57 GMT https://blogs.technet.microsoft.com/taehee/?p=605
  • Run followin Azure powershell,
    • Login-AzureRmAccount Get-AzureRmSubscription $subscriptionId = "Your Subscription ID" $rgName = “YourResourceGroupName” $vmName = “th-centos” $vm = Get-AzureRmVM -ResourceGroupName $rgName -Name $vmName PS C:\> Stop-AzureRmVM -ResourceGroupName $rgName -Name $vmName OperationId : Status : Succeeded StartTime : 2016-11-28 PM 2:44:30 EndTime : 2016-11-28 PM 2:46:41 Error : PS C:\> $vm.StorageProfile.OSDisk.DiskSizeGB = 130 PS C:\> Update-AzureRmVM -ResourceGroupName $rgName -VM $vm RequestId IsSuccessStatusCode StatusCode ReasonPhrase --------- ------------------- ---------- ------------ True OK OK PS C:\Users\taelee> Start-AzureRmVM -ResourceGroupName $rgName -Name $vmName OperationId : Status : Succeeded StartTime : 2016-11-28 PM 3:07:53 EndTime : 2016-11-28 PM 3:08:26 Error :  
    • Ubuntu would not require the following, for CentOS in this example
    [taehee@th-centos ~]$ hostnamectl Static hostname: th-centos Icon name: computer-vm Chassis: vm Machine ID: e57a6b05e3d34a59b561f002e224d65a Boot ID: 7348830553774bbe90f54883d716ef2a Virtualization: microsoft Operating System: CentOS Linux 7 (Core) CPE OS Name: cpe:/o:centos:centos:7 Kernel: Linux 3.10.0-327.18.2.el7.x86_64 Architecture: x86-64 [root@th-centos /]# fdisk /dev/sda Welcome to fdisk (util-linux 2.23.2). Changes will remain in memory only, until you decide to write them. Be careful before using the write command. Command (m for help): u Changing display/entry units to cylinders (DEPRECATED!). Command (m for help): p Disk /dev/sda: 136.4 GB, 136365211648 bytes, 266338304 sectors Units = cylinders of 16065 * 512 = 8225280 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk label type: dos Disk identifier: 0x000dd16b Device Boot Start End Blocks Id System /dev/sda1 * 1 3917 31456256 83 Linux Command (m for help): d Selected partition 1 Partition 1 is deleted Command (m for help): n Partition type: p primary (0 primary, 0 extended, 4 free) e extended Select (default p): p Partition number (1-4, default 1): 1 First cylinder (1-16578, default 1): Using default value 1 Last cylinder, +cylinders or +size{K,M,G} (1-16578, default 16578): Using default value 16578 Partition 1 of type Linux and of size 127 GiB is set Command (m for help): w The partition table has been altered! Calling ioctl() to re-read partition table. WARNING: Re-reading the partition table failed with error 16: Device or resource busy. The kernel still uses the old table. The new table will be used at the next reboot or after you run partprobe(8) or kpartx(8) Syncing disks. [root@th-centos /]# shutdown -r -t 0 Shutdown scheduled for Mon 2016-11-28 06:35:04 UTC, use 'shutdown -c' to cancel. [root@th-centos /]# Broadcast message from root@th-centos (Mon 2016-11-28 06:34:04 UTC): The system is going down for reboot at Mon 2016-11-28 06:35:04 UTC!  
    • Log back in to "th-centos"
    [root@th-centos ~]# xfs_growfs -d /dev/sda1 meta-data=/dev/sda1 isize=256 agcount=4, agsize=1966016 blks = sectsz=512 attr=2, projid32bit=1 = crc=0 finobt=0 data = bsize=4096 blocks=7864064, imaxpct=25 = sunit=0 swidth=0 blks naming =version 2 bsize=4096 ascii-ci=0 ftype=0 log =internal bsize=4096 blocks=3839, version=2 = sectsz=512 sunit=0 blks, lazy-count=1 realtime =none extsz=4096 blocks=0, rtextents=0 data blocks changed from 7864064 to 33290440 [root@th-centos ~]# df -h Filesystem Size Used Avail Use% Mounted on /dev/sda1 127G 1.5G 126G 2% / devtmpfs 1.7G 0 1.7G 0% /dev tmpfs 1.7G 0 1.7G 0% /dev/shm tmpfs 1.7G 8.3M 1.7G 1% /run tmpfs 1.7G 0 1.7G 0% /sys/fs/cgroup /dev/sdb1 50G 53M 47G 1% /mnt/resource tmpfs 345M 0 345M 0% /run/user/1000]]>         Create a custom VM into Existing Resource Group using Azure RM PowerShell https://docs.microsoft.com/archive/blogs/taehee/create-a-custom-vm-into-existing-resource-group-using-azure-rm-powershell Mon, 21 Nov 2016 11:06:03 GMT https://blogs.technet.microsoft.com/taehee/?p=585 #Install Azure RM module if missing and Login to Azure Install-Module -name AzureRM -AllowClobber Login-AzureRmAccount Get-AzureRmSubscription   #Set Variables $subscriptionId =  'd855443e-XXXX-4a82-9a63-XXXXXXXXXXXX $storageAccountName = 'YourStorageAccountName' $sourceImageUri = https://YourStorageAccountName.blob.core.windows.net/vhds/YourUploadedVHDName.vhd'   $resourceGroupName     = "YourResourceGroupName" $locationName          = "YourLocationName"                                    => Ex) Japan East $vnetName              = "YourExistingVirtualNetworkName" $vmnetinf              = "YourNewNetworkInterfaceName" $backendSubnetName     = "YourExistingSubNetName" $remoteAccessNSGName   = "YourNewNSGName " $vmname                = "YourNewVMName" $vmSize                = "YourNewVMSize"                                               => Ex) Standard_D1 $osDiskName            = $vmname+'_osDisk'   $virtualNetwork = Get-AzureRmVirtualNetwork -ResourceGroupName $resourceGroupName -Name $vnetName   $publicIp = New-AzureRmPublicIpAddress -Name $vmname -ResourceGroupName $ResourceGroupName -Location $locationName -AllocationMethod Dynamic $networkInterface = New-AzureRmNetworkInterface -ResourceGroupName $resourceGroupName -Name $vmnetinf -Location $locationName -SubnetId $virtualNetwork.Subnets[0].Id -PublicIpAddressId $publicIp.Id   $vmConfig = New-AzureRmVMConfig -VMName $vmname -VMSize $vmSize $vmConfig = Set-AzureRmVMOSDisk -VM $vmConfig -Name $osDiskName -VhdUri $sourceImageUri -CreateOption Attach -Windows $vmConfig = Add-AzureRmVMNetworkInterface -VM $vmConfig -Id $networkInterface.Id   $vm = New-AzureRmVM -VM $vmConfig -Location $locationName -ResourceGroupName $resourceGroupName]]> Workplace Join/Device Registration to Azure AD for Local Domain joined Windows 7 https://docs.microsoft.com/archive/blogs/taehee/workplace-joindevice-registration-to-azure-ad-for-local-domain-joined-windows-7 Mon, 10 Oct 2016 11:08:53 GMT https://blogs.technet.microsoft.com/taehee/?p=446 <A reference originated> https://jairocadena.com/2017/10/04/azuread-device-based-conditional-access-and-windows-78-1/https://azure.microsoft.com/en-us/documentation/articles/active-directory-conditional-access-automatic-device-registration-windows7/ https://azure.microsoft.com/en-us/documentation/articles/active-directory-conditional-access-automatic-device-registration/   <Pre-requisite> Accounts between On-premise and Azure AD must be synchronized via AAD connect   <System Configuration check> From DNS server,        From ADFS server, 1. O365 federation 2. Enable device registration Initialize-ADDeviceRegistration Enable-AdfsDeviceRegistration Set-AdfsDeviceRegistration -ServiceAccountIdentifier mfalab3\taehee Get-AdfsDeviceRegistration setspn -Q host/fs.mfalab3.com   3. Add claimrules c:[Type == "https://schemas.microsoft.com/claims/authnmethodsreferences"] => issue(claim = c); Open Powershell and run Set-AdfsRelyingPartyTrust -TargetName "Microsoft Office 365 Identity Platform" -AllowedAuthenticationClassReferences wiaormultiauthn   From Domain joined Win7, 1. Try login to "https://portal.office.com", enter current login domain user account - "must login in without redirecting ADFS login page!!" 2. Download and Install "Workplace Join agent" x64 x86 And run "C:\Program Files\Microsoft Workplace Join>AutoWorkplace.exe /join" To leave, "C:\Program Files\Microsoft Workplace Join>AutoWorkplace.exe /leave"   <Result> From Win7, From Azure Portal ]]> How to request an Azure Support. https://docs.microsoft.com/archive/blogs/taehee/how-to-request-an-azure-support Fri, 09 Sep 2016 13:57:49 GMT https://blogs.technet.microsoft.com/taehee/?p=355    Please follow the simple procedure below to create an Azure Support for Technical, Billing and Subscription issues. To begin with, check the link to make sure if you have support plans https://azure.microsoft.com/en-us/support/plans/   1. Browse Azure Portal, https://portal.azure.com 2. Click “?” at top-right corner à New Support Request   3. Select Basic information, then Next   4. Fill up Problem information, then Next   5. Fill up Contact information, then Create   6. Support case has been created   That’s it !! You will be contacted by Microsoft Azure Support Engineer as your support plans. https://azure.microsoft.com/en-us/support/plans/]]> Powershell Script: Task scheduler - Scheduling shutdown Azure VMs https://docs.microsoft.com/archive/blogs/taehee/powershell-script-task-scheduler-scheduling-shutdown-azure-vms Mon, 05 Sep 2016 18:11:31 GMT https://blogs.technet.microsoft.com/taehee/?p=325

    Table of Contents

    1. Create a schedule
      2. Triggers(Daily in the example)   3. Enter “powershell.exe” and location of the script in “Add arguments”   Example of “PowerShell scripts to shutdown VM script” Download script from : https://social.technet.microsoft.com/wiki/contents/articles/30929.azure-automation-step-by-step-guide-for-auto-shutdown-virtual-machine.aspx]]>         How to guide : Graphical desktop (X Windows System) access to Azure Linux VM https://docs.microsoft.com/archive/blogs/taehee/how-to-guide-graphical-desktop-x-windows-system-access-to-azure-linux-vm Mon, 05 Sep 2016 18:10:10 GMT https://blogs.technet.microsoft.com/taehee/?p=305 From the client, Download x2goclient, https://wiki.x2go.org/doku.php/doc:installation:x2goclient From the server Install X2Go Server sudo apt-get install python-software-properties sudo apt-get install software-properties-common sudo add-apt-repository ppa:x2go/stable sudo apt-get update sudo apt-get install x2goserver x2goserver-xsession MATE Bindings sudo apt-get install x2gomatebindings KDE Plasma Bindings sudo apt-get install plasma-desktop XFCE Bindings sudo apt-get install xfce4 LXDE Bindings sudo apt-get all x2golxdebindings RDP Bindings sudo apt-get install xrdp Check if x2goserver is running ubuntu:~$ service --status-all | grep x2go  [ + ]  x2goserver]]>