RunAs Radio

Is your Exchange server one of the vulnerable ones? Richard talks to Gareth Gudger about the ongoing security concerns around on-premises Exchange servers. The conversation addresses a blog post by the Exchange server team about restricting access of potentially vulnerable Exchange servers to Exchange Online. But, as Gareth explains, this has to do with hybrid Exchange, where your on-premises server can access Exchange Online in a privileged state. What is the right thing to do to limit exploits in Exchange? Keeping up with the latest versions, patching, and ultimately maintaining your entire infrastructure, especially Active Directory - all play a role in securing on-premises infrastructure. Stay vigilant!Links:Blocking Email from Vulnerable Exchange ServersTony Redmond's Comment on the Blog PostDeprecation of Remote PowerShellRe-enabling or Extending RPSExchange Online PowerShell v3Exchange Server 2013 End of SupportTurning off your Last Exchange ServerOffice 365 for IT ProsRecorded April 4, 2023

Moving to Azure Virtual Desktop (AVD) has never been easier! Richard talks to Jen Sheerin about her work with the Azure Virtual Desktop Accelerator tools. Jen describes how moving workloads to AVD is part of the Cloud Adoption Framework that helps you integrate virtual desktop workloads with standard security and licensing practices. The conversation explores the different folks who use the accelerator - even for greenfield implementations of new virtual desktops! There are more great tools to help you optimize your AVD implementation. Check the links in the show notes!Links:Azure Virtual DesktopRemote Desktop ServicesMicrosoft Cloud Adoption FrameworkAVD Remote Desktop Web ClientBicepAzure Virtual Desktop AcceleratorVirtual Desktop Optimization ToolWindows 10 vs Windows 11 BenchmarkLicense Universal PrintRecorded April 7, 2023

Large Language Models like ChatGPT are all the rage, but how will they impact work going forward? Richard chats with Paul Thurrott about the role of LLMs in the Windows ecosystem. Paul digs into the history of ChatGPT and how this whole wave of technology started more or less by accident until Microsoft grabbed on and created BingAI. Now with announcements for Copilot for security and M365, where else can the technology go? The conversation digs into the power of having a tool that can help you make sense of all the products you own and to go down the checklist of the right things to do when taking on a new task. We're still in the early days for large language models - the next version of Windows should be interesting!Links:OpenAIMicrosoft Security CopilotMicrosoft VivaMicrosoft 365 CopilotRemoving the Bing Button from Microsoft Edge 111Recorded April 3, 2023

The demand for effective data analytics within organizations continues to grow – how do you build your analytics team? While at SQLBits in Wales, panelists Maria Zakourdaev, Falek Miah, and Anupama Natarajan discussed their experiences with building teams - from recruiting to training, up-skilling, and retention. The discussion spans the different roles, including architects and data modelers, that help to provide the data sets analysts need. Do you train from within, hire into the role, or use consultants? There are many choices for growing your data analytics team!Links:SQLBitsRecorded March 18, 2023

Ready to get some zero trust security inspiration? Richard chats with George Finney, author of Project Zero Trust, a fictional narrative about a company dealing with a security breach and the efforts to make the company more secure. George talks about the challenges of being a security professional and learning to speak to leadership in terms they can appreciate in their efforts to improve security overall. The conversation digs into the reality that security is about people, most of all, not so much as the problem but as the only viable solution. Want some help getting more resources for security? Read and share this book!Links:Project Zero TrustZero Trust Maturity ModelWell Aware SecurityRecorded March 21, 2023

How do you measure the productivity of your team? Richard talks to Angela Dugan about her work at 3Cloud, supporting groups that are primarily work-from-home and working with remote clients. What do you measure when you can't be face-to-face? Angela talks about using objective and subjective measures - time spent on a project- and how people feel about the work they are doing and the people they are doing it with. The conversation also turns to skill growth as part of measuring a team - making new skills portion of the work, sharing them with the team, and growing your value as an employee!Links:Microsoft VivaRecorded February 23, 2023

Are you ready for more IPv6 in your life? Richard talks to Pierre Roman about recent support added to Azure Active Directory for IPv6 - specifically around Conditional Access. Pierre talks about how in the past, IPv6 addresses weren't a part of Conditional Access - but now they are. This could cause problems for folks connecting to an Azure tenant via IPv6 if those IPv6 ranges aren't included as named locations. Even if this update hasn't impacted you yet, it can - changes to your ISP or when connecting to the internet can result in IPv6 access being required - don't get locked out!Links:Google IPv6 AdoptionPierre's Blog Post on IPv6IPv6 Support in Azure Active DirectoryAzure DNS FAQRecorded March 27, 2023

Does multi-cloud make sense? Richard chats with Phoummala Schmitt about her explorations into building workloads that can survive a cloud outage. Phoummala begins the conversation with some definitions because most organizations are multi-cloud already, using more than one cloud provider. Referencing Gartner and Thoughtworks, the term "polycloud" covers that idea. Then the hard part - a workload that needs perfect uptime, even in the face of a cloud provider outage. That is a more complex and expensive proposition, but it is possible once you work through the details. The question is - is it worth it?Links:PolycloudKubernetesKubernetes Cloud Controller ManagerAzure ArcRecorded February 16, 2023

Secure remote file access without OneDrive or VPNs? Richard chats with Ned Pyle about the power of SMB over QUIC. Ned talks about the ongoing battle to put older versions of SMB to bed and how QUIC is becoming the de facto standard for moving files around, both within the network and across the internet. While a lot of business files can be served effectively from OneDrive for Business, often, you have applications and infrastructure that depend on UNCs and other file mapping approaches. SMB for QUIC through Azure VMs and Azure Stack HCI allows the same UNC paths to work securely inside and outside your office network. Check it out!Links:SMB1 Product ClearinghouseWindows ServerSMB CompressionSMB SigningSMB over QUICAzure Stack HCILearn SMB over QUICSMB Insecure Guest AuthRecorded February 3, 2023

What is your approach to incident management? While at NDC London, Richard talks to Hila Fish about her work in incident management. Hila talks about understanding when you have an incident and trying to grasp the scope before acting - is it impacting customer value? The goal is to learn from an incident to stop them from happening, and often immediate mitigations, like rebooting, destroy information needed for later analysis. Making the dashboard lights turn green is not enough - you want to get to a place where they never turn red!Links:Jira TicketingPagerDutyGrafanaSwimm Documentation EngineRecorded January 27, 2023