Skip to content

ThatLazyAdmin Posts

Set Azure Diagnostic settings to Log Analytics workspace using Azure policy.

Set Azure Diagnostic settings to Log Analytics workspace using Azure policy. In this post, we will look at how to use Azure Policy to set Diagnostic settings to Log Analytics workspace. Let’s get started, sign in to Azure Admin Portal and type “Azure Policy” in the search bar. Select Policy. On the Policies page, Click…

Leave a Comment

I am a Global Admin but don’t have access to Azure Subscriptions.

I am a Global Admin but don’t have access to Azure Subscriptions. One of the questions I get frequently is “If you are a Global Administrator, can you grant yourself access to the Azure Subscriptions?” The answer is YES you can and straight forward as well. To get started, navigate to Azure Active Directory and…

Leave a Comment

Move Known Folders to OneDrive and Silently sign-in users to OneDrive with Windows Credentials using Intune.

Move Known Folders to OneDrive and Silently sign-in users to OneDrive with Windows Credentials using Intune. In this post, we will look at creating an Intune Device Configuration policy to do the following: Silently Sign-in to OneDrive using Windows Credentials Move Known Folders to OneDrive This post comes at the back of a request from…

Leave a Comment

Error: The subscription is not registered to use namespace ‘MicrosoftCompute`.

Error: The subscription is not registered to use namespace ‘MicrosoftCompute`. You receive the following error when trying to create a new VM disk or VM in your new Azure Subscription. In my case, I am trying to copy a VM disk from one subscription to another and receive the above error. To find out if…

Leave a Comment

Prevent Microsoft Teams Meeting recording from expiring.

Prevent Microsoft Teams Meeting recording from expiring. Recently Microsoft introduced a new feature which will expire Microsoft Teams Meeting recordings. All new recordings will auto expire in 60 days after the recorded and no action was taken. Admins in the organization will have to update these policies if they want retain recordings for longer of…

Leave a Comment

Conditional Access Policy Templates

Conditional Access Policy Templates In this post, we will look at Conditional Access Policy Templates a feature which is currently still in Public Preview. These templates are designed to provide a more convenient method of deploying new policies based on Microsoft’s recommendations. If you are new to Conditional access policies or simply just want to…

Leave a Comment

Microsoft Compliance Configuration Analyzer

Microsoft Compliance Configuration Analyzer In this short post, we will look at MCCA (Microsoft Compliance Configuration Analyzer). MCCA is a PowerShell-based tool that exports your current Microsoft 365Complaince configuration and validates them against Microsoft 365’s recommended best practices. Some of the controls which forms part of the best practices include regulations and standards for data…

Leave a Comment

Block Internet Access on Azure VM using NSG (Network Security Group)

Block Internet Access on Azure VM using NSG (Network Security Group) In this short post, we will look at a quick way to Block Outbound Internet traffic for an Azure VM or Subnet. To restrict your users from accessing the internet and potentially accessing harmful sites. To get started we need to create a new…

Leave a Comment

Deploy Azure Automation Update Management

Deploy Azure Automation Update Management In this post we will deploy Azure Automation Update Management to managed updates on both Azure and On-premises Servers. The solution caters for Linux and Windows Servers. This above reference architecture illustrates how to design a hybrid update management solution to manage updates on both Microsoft Azure and on-premises Windows…

Leave a Comment

Verify alert settings for restricted user in Microsoft 365 Defender.

Verify alert settings for restricted user in Microsoft 365 Defender. The default alert policy for restricting users from sending emails will automatically notify admins when a user is blocked from sending outbound mail. In this post we will look at how we can modify this alert policy. Verify alert Policy To verify current policy, head…

Leave a Comment