Mark's questions

I want to get a list of all requests that are taking longer then 2 seconds and I think this is correct as the timeTaken_d appears to be a floating point and would seem to be in seconds.

AzureDiagnostics
| where ResourceType == "APPLICATIONGATEWAYS" and OperationName == "ApplicationGatewayAccess" and timeTaken_d  > 2
| project TimeGenerated, host_s, requestUri_s, httpStatus_d, backendPoolName_s, serverRouted_s, timeTaken_d 
| order by TimeGenerated desc 

However, I have seen elsewhere that this measure is in milliseconds.

Does anyone know for sure? Better still, can someone point me at the docs?

We have a bunch of bare-metal servers managed by a hosting company (UKFast).

On one of these we have a Domain Controller set up and the other servers are part of this domain (Windows 2012 R1 server).

At the moment we have set up users on this domain and can connect and authenticate (e.g. via RDP) with these users.

We would like to link our AzureAD logins, which are used to log into stand-alone Windows Desktops/Outlook 365 etc., into this configuration so that we can authenticate onto the servers using our AzureAD users/passwords.

Is this possible? Can it be done without upgrading the DC from 2012?

I did briefly look at Azure Active Directory Connect, but it seems to be more about getting AD users onto AzureAD than the other way around and I couldn't get it work work on Windows 2012 anyhow.

Thanks.

We use Azure AD for all of our company's login, email, windows authentication etc.

We also have a developer team who make web applications which utilise Azure authentication.

Right now they have to ask IT each time they want to add new App Registrations or extend existing ones (e.g. add/edit Redirect URIs)

We want to be able to allow access to the developer team to do this themselves through the Azure portal, but we don't want to give them access to other parts of AD (for example to be able to modify user accounts/groups)

Is it possible to restrict access to only the App Registration section of the Azure AD administration section for a certain group of people?

Thank you!

I have a simple 2 node Windows cluster hosted in Azure with a VPN connection to this network.

From my machine, I can ping the local nodes via their internal IPs (10.0.0.20, 10.0.0.21)

I cannot ping the cluster's virtual IP: 10.0.0.15, although I can do that from either of the nodes themselves.

I cannot work out how to expose this cluster IP across my VPN connection.

Can anyone tell me if this is possible and what I could do to make it work?

Thank you!

Our (active directory, windows-server-based) intranet used to be called "intranet", and DNS worked fine for windows machines and iPads/Android devices.

We have changed it to be "apps.intranet", and it still works for windows machines, but no longer for iPads/Android devices.

I think this is because out windows clients are configured to append .company.com when searching DNS, to make it a fully qualified lookup (this search suffix list is pushed to the PCs via AD group policies).

I must admit, though, I don't know why it worked with just "intranet"!

Does anyone know if it's possible to get DNS to "tell" the iPads/Android devices to append .company.com ... or how we can make it work some other way (but still using the multi-label, non-qualified DNS names) ?

Thanks!