Month: October 2025

🔹 Feature: Azure Relay – Live without VPN 🔹What It Does: Enables secure, direct connections between systems even when they’re behind firewalls using HTTPS. What is it giving you: ✅ Built on the well-known Azure Service Bus for reliability and scalability. ✅ No need to open inbound ports, enhancing security. ✅ Seamless communication across distributed applications. ✅ Supports a variety of communication patterns (request/response, one-way, relayed messaging). ✅ Eliminates complex network configurations. Easy step by step: https://github.com/MariuszFerdyn/Tunnel-via-Azure-Relay

🔹 Feature: Container Insights Segregation by Namespace 🔹What It Does: Provides the ability to configure container console log collection, enabling segregation of logs by different Container Insights. What It’s Giving You: ✅ Reduce Costs: Efficient log segregation minimizes unnecessary data ingestion, cutting down on expenses. ✅ Rescue PII Data Ingestion: Enhances control over data logs, reducing the risk of unintentional PII data exposure. ⚠️ Challenges and Considerations: Not easy – Configuration via Config Map More info: https://learn.microsoft.com/en-nz/azure/azure-monitor/containers/container-insights-multitenant?tabs=arm #mvpbuzz #azurenews

🔹 Feature: Confidential Computing 🔹What It Does: Keeps memory encrypted within the virtual machine. It’s also available for PaaS platforms that have underlying virtual machines. Confidential Computing is here to elevate your security game: ✅ Secure Kubernetes Deployments: Protect sensitive data while running containerized applications. ✅ Azure Virtual Desktop: Enhance security for privileged workstations, safeguarding critical business environments. ✅ Data Integrity Across PaaS: Keep your data secure even when leveraging platform services. More info: https://azure.microsoft.com/en-us/solutions/confidential-compute#Related-products-3 #mvpbuzz #azurenews

🔹 Feature: Azure Storage Discovery 🔹What It Does: Automatically scans your Azure environment to detect, classify, and provide insights into storage resources. What It’s Giving You: ✅ Simplified Data Management: Azure Storage Discovery helps you identify and organize your storage resources efficiently. ✅ Enhanced Visibility: Gain clear insights into storage accounts, their usage, and potential cost optimization areas. ✅ Streamlined Operations: Quickly discover redundant or underutilized storage, improving resource allocation. ✅ Security Insights: Identify potential vulnerabilities and maintain compliance with organizational policies. More info: https://azure.microsoft.com/en-us/blog/from-queries-to-conversations-unlock-insights-about-your-data-using-azure-storage-discovery-now-generally-available/

🔹 Feature: Ephemeral OS Disk Support on Azure Virtual Desktop 🔹What It Does: Every session resets to its initial state—perfect for software testing and privileged workstations. What It’s Giving You: ✅ Enhanced Security: Ensures sensitive data isn’t stored long-term, minimizing security risks. ✅ Optimized Performance: Faster boot times and improved user experience due to streamlined OS management. ✅ Cost-Efficiency: Reduces storage costs since no persistent OS disk is needed. ✅ Ideal for Testing: Perfect for developers needing clean environments for repeatable test scenarios. More info: https://techcommunity.microsoft.com/blog/azurevirtualdesktopblog/now-in-public-preview-ephemeral-os-disk-support-on-azure-virtual-desktop/4460172

sudo apt-get install -y gcc make libssl-dev libpam0g-dev libx11-dev libxfixes-dev libxrandr-dev mc autoconf automake libtool libxkbfile-dev git clone https://github.com/neutrinolabs/xrdp.gitcd xrdpgit checkout 4b2155b6cf80c0411ffe8b5f1f7e3e4fae09e1a8 ./bootstrap./configuremakesudo make install sudo mcedit /etc/xrdp/xrdp.ini [Xvnc]name=Xvnclib=libvnc.sopamusername=askpampassword=ask#username=ask#password=askip=127.0.0.1port=5900security_level=0depth=24   sudo mcedit /etc/wayvnc/config use_relative_paths=trueaddress=::enable_auth=false#enable_pam=trueprivate_key_file=tls_key.pemcertificate_file=tls_cert.pemrsa_private_key_file=rsa_key.pem sudo systemctl enable xrdpsudo systemctl restart wayvnc xrdp.service   sudo dphys-swapfile swapoffsudo mcedit /etc/dphys-swapfile CONF_SWAPSIZE=2048 sudo dphys-swapfile setupsudo dphys-swapfile swapon  

This script do the following: All is unattended. After it reboot you can connect using VNC-Viewer-7.13.1-Windows-64bit to this VM and perform OOBE (Out-of-Box Experience). In this way you can utilize Intune Autopilot. Before proceed make sure the machine is has all updates and no pending restart – just restart VM. # TightVNC Unattended Installation and Configuration Script # Requires Administrator privileges #Requires -RunAsAdministrator # Configuration Variables $Password = “Pa##word” $TightVNCVersion = “2.8.84” $InstallerURL = “https://www.tightvnc.com/download/$TightVNCVersion/tightvnc-$TightVNCVersion-gpl-setup-64bit.msi” $InstallerPath = “$env:TEMPtightvnc-setup.msi” $Port = 5900 Write-Host “Starting TightVNC Installation and Configuration…” -ForegroundColor Green # Disable BitLocker on C: drive Write-Host “`n=== Checking BitLocker Status ===” -ForegroundColor Yellow try { $BitLockerVolume = Get-BitLockerVolume -MountPoint “C:” -ErrorAction Stop if ($BitLockerVolume.ProtectionStatus -eq “On”) { Write-Host “BitLocker is enabled on C: drive. Disabling…” -ForegroundColor Yellow # Disable BitLocker Disable-BitLocker -MountPoint “C:” -ErrorAction Stop Write-Host “BitLocker disable initiated.” -ForegroundColor Green # Wait for decryption to complete Write-Host “Waiting for decryption to complete (this may take several minutes)…” -ForegroundColor Yellow $DecryptionComplete = $false $MaxWaitTime = 3600 # 1 hour maximum wait $ElapsedTime = 0 $CheckInterval = 10 # Check every 10 seconds while (-not $DecryptionComplete -and $ElapsedTime -lt $MaxWaitTime) { Start-Sleep -Seconds $CheckInterval $ElapsedTime += $CheckInterval $BitLockerStatus = Get-BitLockerVolume -MountPoint “C:” -ErrorAction … OOBE sysprep in Azure VMRead more

🔹 Feature: GitHub Enterprise 🔹What It Does: Offers GitHub on-premises (or as dedicated SaaS) with advanced security tools and SLA support. What It’s Giving You: ✅ GitHub Enterprise Cloud: Hosted by GitHub with robust enterprise features. ✅ GitHub Enterprise Server: Self-hosted, deployed on your company’s own infrastructure or in the cloud (AWS, Azure, GCP). ✅ Advanced Security: SAML/SSO, LDAP, SCIM, audit logs, IP allow-listing for enhanced protection. ✅ Enterprise-Grade Compliance: Meets SOC2, HIPAA, FedRAMP, and GDPR requirements. ✅ Centralized Management: Simplified policy and user management across your entire organization. GitHub Enterprise (Cloud / Enterprise option): ~$21 USD per user per month.

🔹 Feature: API Management Gateway 🔹What It Does: ✅ Simplifies API management across hybrid and multi-cloud environments. ✅ Enhances security with built-in authentication and threat protection. ✅ Provides detailed analytics for monitoring API performance and usage. ✅ Enables seamless integration with Azure services and on-premises systems. ? What Is It Giving You: ✅ Centralized control over your APIs for consistent policy enforcement. ✅ Improved scalability and reliability for your applications. ✅ Accelerated development cycles with easier API versioning and management. ✅ Enhanced developer experience through a unified platform. More info: https://learn.microsoft.com/en-us/azure/api-management/api-management-key-concepts #mvpbuzz #azurenews

🔹 Feature: AI Gateway 🔹What It Does: Built on Azure API Management Gateway, the AI Gateway extends robust API protections to your AI systems, including often-overlooked MCP servers. What It Gives You: ✅ Control: Keep your AI solutions under strict governance. ✅ Security: Manage usage with authentication and authorization protocols. ✅ Efficiency: Balance loads seamlessly across your AI infrastructure. ✅ Cost Management: Monitor and optimize expenses effortlessly. ✅ All the other stuff that API management provides More info: https://learn.microsoft.com/en-us/azure/api-management/genai-gateway-capabilities #mvpbuzz #azurenews

AI and Copilot Everywhere. Last year, over 16,000 MCP servers were introduced. Consequently, I recommended that you consider providing an MCP server for your application. 🔹 Feature: MCP Server 🔹What It Does: MCP Server delivers data and enables actions (e.g. Run Calc.exe on your Windows, Linux) from AI, not just through common protocols. One picture speaks louder than a thousand words – what is MCP server: ✅ Seamless Integration: Enjoy effortless connections with AI-powered services, enhancing productivity and efficiency. ✅ Improved Data Flow: Experience faster, more reliable data transmission, ensuring your applications run smoothly. ✅ Action-Ready: Execute AI-driven tasks instantly, reducing delays and boosting operational agility. ✅ Flexible Protocol Support: Go beyond traditional protocols to harness AI’s full potential in diverse environments. ✅ Official MCP Registry: Visit the official MCP registry website or platform that maintains a verified list of servers (https://github.com/mcp). Learn More: https://github.com/microsoft/community-content #mvpbuzz #azurenews

⚠️ Intune is Moving to New IP Addresses (Front Door) – Stay Updated! New Post in Azure, Microsoft 365 Series: 🔹 Feature: Autopilot Device Preparation (AP-RP) 🔹What It Does: Simplifies Autopilot debugging with enhanced efficiency. What It’s Giving You: ✅ Auto-Log-Upload for provisioning failures – no manual uploads needed. ✅ Superior Troubleshooting – faster, clearer insights to resolve issues. ✅ Automatic Device Enrollment into Device Security Groups. ✅ Cross-Cloud Support – works seamlessly across commercial & government clouds. ✅ No Registration Required – fast, consistent Out-Of-Box Experience (OOBE). ✅ Device-Based Configuration with policy-driven provisioning. ⚠️ Entra Only – no hybrid support. ⚠️ No Script Provisioning – streamlined and secure setup. More Info: https://learn.microsoft.com/en-us/autopilot/device-preparation/compare #mvpbuzz #azurenews

🔹 Feature: Windows Server 2025 Security Baseline 🔹What It Does: Offers powerful scripts to harden your Windows environment, not just for 2025, ensuring full compliance with top security standards. What It Gives You: ✅ Easy to Use: Simplified security hardening process. ✅ Supported by Microsoft: Reliable and officially backed. ✅ No More Harden Kitty: Streamlined solution without the need for additional tools. More Info: https://rzetelnekursyold.dev/stop-using-hardenkitty-windows-server-2025-security-baseline-is-the-clear-winner/ #mvpbuzz #azurenews

🔹 Feature: Extended Network for Azure (VXLAN) 🔹What It Does: Enables the use of the same IP network ranges both On-premises and on Azure. What is it giving you: ✅ Simplified Network Management: No need to reconfigure IP ranges when extending your network to Azure. ✅ Seamless Connectivity: Ensures effortless communication between your on-premises systems and Azure resources. ✅ Enhanced Flexibility: Easily migrate workloads to the cloud without worrying about IP conflicts. ✅ Cost Efficiency: Reduces the overhead of complex network ⚠️ configurations and management. ⚠️ You should use this functionality only if there is no other option. Having different IP addresses is always recommended. ⚠️  This approach may lead to potential security risks and reduced network performance, making it less ideal compared to using separate IP addresses. More info: https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/azure-extended-network #mvpbuzz #azurenews

🔹  Azure and Microsoft 365 series bring Elastic SAN offer that has enhanced performance in comparison to Premium SSD disks. Notably, their cost is comparable to that of Standard SSD disks, despite their superior performance. ? 🔹 Feature: Azure Elastic SAN (Storage Area Network) 🔹What It Does: A robust storage solution in Azure, complementing Premium Disks, Standard HDD, and SSD disks. ✅ What’s It Giving You? 4TB of SAN Premium Disk: ⚡ 20,000 IOPS / ? 800 MB/s ✅ Cost: 9.04 €/day 4TB of Premium Disk: ⚡ 7,500 IOPS / ? 250 MB/s ✅ Cost: 15.04 €/day 4TB of Standard SSD Disk: ⚡ 500 IOPS / ? 100 MB/s ✅ Cost: 8.48 €/day 4TB of Standard HDD Disk: ⚡ 500 IOPS / ? 60 MB/s ✅ Cost: 4.52 €/day ✅ Why Choose Azure Elastic SAN? Higher performance at lower cost compared to Premium SSDs Affordable like Standard SSDs but with superior speed and IOPS #mvpbuzz #azurenews

🔹 Azure and Microsoft 365 series ensure your application isi always up and running! Game-changing feature! 🔹 Feature: Azure SRE Agent 🔹What It Does: AI-powered assistant that helps diagnose and resolve Azure issues by analyzing your Resource Groups. One video clip displays over one hundred words! ✅ Why It’s Beneficial: ✅ Automates Incident Management: Quickly identifies and addresses issues to minimize downtime. ✅ Diagnoses Apps & Performs Root Cause Analysis: Pinpoints problems with precision, reducing time spent on troubleshooting. ✅ Fine-Grained Access Control: Offers both human-in-the-loop and autonomous actions for secure, flexible management. ✅ Proactively Audits Resources: Continuously checks resources against Azure best practices to ensure optimal performance. ✅ Integrates with Developer Tools: Seamlessly connects with GitHub and Azure DevOps to enhance your development workflow. Stay Ahead with Azure SRE Agent! More info: https://learn.microsoft.com/en-us/azure/sre-agent/overview?tabs=explore #mvpbuzz #azurenews