All articles
Every article on the site, in one list. Use search to find a word inside an article.
- Azure Virtual Desktop · · 10 min read Choose a Network Topology and Plan IP Addresses for Azure Virtual Desktop Place AVD in a landing zone, choose hub and spoke or Virtual WAN, and plan address space so that overlap and exhaustion do not stop you later.
- Azure Virtual Desktop · · 12 min read Required Connectivity for Azure Virtual Desktop: Endpoints, Proxies, DNS and Private Link Know what the service must reach, why there is no IP allow list, how proxies and DNS affect it and what Private Link changes.
- Azure Virtual Desktop · · 8 min read Who Can Administer Azure Virtual Desktop: Roles, Scopes and Delegation Use the built-in AVD roles to give each person only what they need, at the right scope, and avoid the common role mistakes.
- Azure Virtual Desktop · · 9 min read Secure Access with Conditional Access and Multifactor Authentication Target the right Microsoft Entra applications, set sign-in frequency without causing prompt loops and know what to check when users are asked again and again.
- Azure Virtual Desktop · · 11 min read How Sign-in Works: Three Authentications and Single Sign-on Separate the three sign-ins in an AVD connection, turn on single sign-on in the right order and find out why a user is prompted twice.
- Azure Virtual Desktop · · 9 min read Choose the Client: Windows App, Remote Desktop and the Web Match user devices to the supported client, understand what the retirement of the older Remote Desktop clients means and plan a client change.
- Azure Virtual Desktop · · 10 min read Choose the Session Host Operating System and Licensing Pick a supported operating system, match it to a license route and know what each choice changes for multi-session, management and activation.
- Azure Virtual Desktop · · 11 min read Follow a Connection Step by Step: Reverse Connect, RDP Shortpath and Where It Breaks Walk the documented connection sequence, see which transport carries the session and learn which stage to check first when a connection fails.
- Azure Virtual Desktop · · 11 min read Host Pools, Application Groups and Workspaces: The Rules That Connect Them Learn how the AVD objects relate, which choices cannot be changed later and why a user sometimes sees nothing.
- Azure Virtual Desktop · · 13 min read How Azure Virtual Desktop Fails: The Control, Management and Data Planes Separate the parts Microsoft runs from the parts you run, and predict what each failure looks like to users.
- Azure Virtual Desktop · · 13 min read Decide Whether Azure Virtual Desktop Fits Compare Azure Virtual Desktop with Windows 365 and other options, and see when it is the wrong answer.
- Windows 365 · · 6 min read Windows 365 Enterprise: Point-in-Time Restore Read the restore points, plan the data window, and validate recovery without risking the only working Cloud PC.
- Azure Landing Zone · · 12 min read Landing Zone Use Cases Most real situations use the same landing zone and only need a different answer to one question: which group does this workload go in, or how many tenants and groups does my company need?
- Azure Virtual Desktop · · 25 min read Plan Your AVD Host Pools: Users, Applications, VM Sizing and Images Choose host pools, applications, images and capacity before deploying session hosts.
- Windows 365 · · 3 min read Windows 365 Enterprise: Operate, Roll Out and Extend Move from one verified pilot to a supportable service, then evaluate Boot, Switch and Offline as separate exercises.
- Windows 365 · · 3 min read Windows 365 Enterprise: An ANC Health Failure, Step by Step A real isolated network test, the observed health error, what remains unknown and how the temporary Azure resources were cleaned up.
- Windows 365 · · 3 min read Windows 365 Enterprise: Secure Access and Plan Recovery A safe sequence for Conditional Access, device security and Cloud PC recovery decisions.
- Windows 365 · · 6 min read Windows 365 Enterprise: Manage Settings, Apps, Updates and Restart Four practical management checks: settings, apps, updates and a controlled restart, with evidence limits.
- Windows 365 · · 6 min read Windows 365 Enterprise: Connect and Verify the Cloud PC Test the user session, Microsoft Entra join and Intune enrollment as separate checkpoints.
- Windows 365 · · 7 min read Windows 365 Enterprise: Provision a Microsoft Entra Joined Cloud PC Follow the license, group, network, image and provisioning policy in the order a first pilot needs them.
- Windows 365 · · 6 min read Windows 365 Enterprise: Choose Identity and Network Understand Microsoft Entra join, Microsoft-hosted networking and an Azure network connection before building a policy.
- Windows 365 · · 2 min read Windows 365 Enterprise: Plan a Pilot That You Can Verify A practical checklist for licensing, roles, assignments and evidence before the first Cloud PC is provisioned.
- Windows 365 · · 5 min read Windows 365 Enterprise: Start Here A beginner's route from the first Cloud PC decision through deployment, management and daily operations, with clearly labelled lab evidence.
- Azure Virtual Desktop · · 44 min read Plan Azure Virtual Desktop Networking: Address Space, Subnets, DNS and Connectivity Plan address space, subnets, DNS and hub connectivity before building session hosts.
- Azure Virtual Desktop · · 16 min read Choose the Right Identity Model for Azure Virtual Desktop Choose user identity, session-host join and the profile authentication path together.
- Azure Virtual Desktop · · 22 min read Prepare Your Azure Environment for Azure Virtual Desktop Prepare the tenant, subscription, access, licensing, quota and cost controls before deployment.
- Azure Virtual Desktop · · 19 min read Azure Virtual Desktop Architecture: From Sign-in to a Working Desktop Follow the components and connections from sign-in to a working Windows desktop.
- Azure Virtual Desktop · · 7 min read What Is Azure Virtual Desktop? Understand what AVD delivers, why a business would use it and who manages each part.
- Azure Landing Zone · · 27 min read Brownfield Rollout To bring an existing Azure environment to a landing zone, list what you have, build the landing zone beside it in the same tenant, try its policies in audit-only mode, and then move subscriptions in wave by…
- Azure Landing Zone · · 17 min read Greenfield Rollout To apply a landing zone to a brand-new Azure environment, get your tenant and permissions ready, decide each design area, choose a deployment tool, build the platform landing zone, check it, and then hand the…
- Azure Landing Zone · · 22 min read Minimum Viable Platform Landing Zone: What to Build First Start with a small first version of the platform landing zone, with seven capabilities, check that it works, and add more pieces only when workloads need them.
- Azure Landing Zone · · 22 min read Platform Automation and DevOps The Platform automation and DevOps design area of an Azure landing zone is about building, changing and running the landing zone through code, review and automatic pipelines, instead of clicking in the portal.
- Azure Landing Zone · · 17 min read Governance and Azure Policy The Governance design area of an Azure landing zone sets up the tools for cloud governance, compliance auditing and automated guardrails, mainly with Azure Policy, so rules are checked and enforced by…
- Azure Landing Zone · · 17 min read Management and Monitoring The Management design area of an Azure landing zone sets up the common tools for running the cloud every day (this is called the operations baseline), which means seeing what is happening, staying in the…
- Azure Landing Zone · · 19 min read Security The Security design area of an Azure landing zone sets up the tools for security operations and the controls for access. It lists what the platform team needs to decide: who gets security alerts, where logs…
- Azure Landing Zone · · 20 min read Network Topology and Connectivity Network topology and connectivity is the layout of your virtual networks and their links to on-premises networks, and the landing zone guidance offers two layouts, a traditional hub-and-spoke where you manage…
- Azure Landing Zone · · 14 min read Resource Organization Resource organization is how you arrange management groups, subscriptions, resource groups, names and tags so that rules, access and cost land in the right place, and the usual advice is to keep the hierarchy…
- Azure Landing Zone · · 12 min read Privileged Access: MFA, Conditional Access and PIM Administrator accounts are a frequent target for attackers, so protect them with three controls that work together: multifactor authentication to prove who is signing in, Conditional Access to set the rules,…
- Azure Landing Zone · · 16 min read Identity and Access in the Landing Zone Identity decides who can sign in and what they can change, so know where your identities live, give roles to groups at a scope that fits the job, protect privileged access, and let applications use managed…
- Azure Landing Zone · · 17 min read Billing and the Microsoft Entra Tenant, in Depth Your billing agreement decides how subscriptions are created and paid for, your Microsoft Entra tenant decides who can sign in, and the default is to build the landing zone in one tenant, with many…
- Azure Landing Zone · · 12 min read Business Requirements: Compliance, Region, Recovery, Connectivity and Cost Before you build a landing zone, you write down what the business needs, and five common requirements (compliance, region, recovery, connectivity and cost) each change a specific part of the landing zone.
- Azure Landing Zone · · 6 min read The Cloud Operating Model A cloud operating model is the answer to "who does what in the cloud?", and there are three models: centralized, shared management and decentralized.
- Azure Landing Zone · · 7 min read Tenant, Billing, Subscriptions and Management Groups Every Azure environment is built on four things: a Microsoft Entra tenant (the home of your organization's users and their sign-ins) for identity, a billing offer for payment, subscriptions that hold your…
- Azure Landing Zone · · 7 min read Platform Scope and Workload Boundaries The platform team owns the shared foundation, each workload team owns its own workload, and keeping that line clear is what lets many teams share one Azure environment safely.
- Azure Landing Zone · · 9 min read What Is an Azure Landing Zone An Azure landing zone is the prepared Azure environment where teams run what they build, under shared rules that help govern, secure and scale it.
No articles match that filter. Try the full-text search.