Azure

Unable to get AAD authorization token with message: Please run ‘az login’ to setup account

by

When you are trying to authenticate with Azure container registry using sudo az acr login command, you may receive below error message: linuxusr@dockerhostvm01:~$ sudo az acr login –name acr001Unable to get AAD authorization tokens with message: Please run ‘az login’ to setup account.Unable to get admin user credentials with message: Please run ‘az login’ to setup account. Error response from daemon: Get “https://acr001.azurecr.io/v2/”: unauthorized: aad access token with sp failed client id must be guidLogin failed. linuxusr@dockerhostvm01:~$ az loginTo sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code C64UXJA9T to authenticate.[{“cloudName”: “AzureCloud”,“homeTenantId”: “*****-8dab-4122-****-caadf41b**”,“id”: “***2b17-4f6e-8b*****28cc**”,“isDefault”: true,“managedByTenants”: [],“name”: “subscription0001”,“state”: “Enabled”,“tenantId”: “*****-8dab-*****-caadf41b64d7”,“user”: {“name”: “xyz@xyz.net”,“type”: “user”}}] linuxusr@dockerhostvm01:~$ sudo …

Read more

How to unjoin a Hybrid Azure AD joined device

by
How to Unjoin Hybrid Azure AD joined device

Background: Recently I came across an issue where a Citrix VDA’s version 1912 CU2 was joined to Azure as Hybrid Azure AD Join Device which was not allowing users to launch applications. As soon as someone would launch an application, VDA state was getting changed to Unregistered state. We have used Azure AD Connect Wizard to configure all domain joined devices to join to Azure AD which will make them Hybrid Azure AD joined device on Azure. After spending hours to investigate on this issue and also rebuilding the Citrix VDA’s. This issue was persistent. We have decided to remove Citrix servers from azure active directory to fix this issue. …

Read more

Unable to delete Azure resource tag from few resources like Microsoft insights using Azure Portal

by

Recently worked on an issue where I was not able to remove resource tags from couple of resources using azure portal. The specific resource type was microsoft.insights\scheduledqueryrules. Selecting the resource and clicking on the three dots -> click Edit tags -> try to remove the tag, you will get a notification saying that its successfully deleted but when you check the tags on the resource its not removed. I had a ticket logged with MS product team for this issue and they suggested below workaround. To delete the tag from microsoft.insights\scheduledqueryrules when its not getting deleted using azure portal. Please follow below steps: GET the resource output in Json Code …

Read more

How to configure Azure Site Recovery, perform test failover and invoke disaster recovery failover – Part 3

by

In the previous post How to configure Azure Site Recovery, perform test failover and invoke disaster recovery failover – Part 2 – TechPress we have seen how to perform Test Failover using Azure Site Recovery. Also, we have seen how to clean up the test failover after verification of the application services on the server. We had noted down the RPO (Recovery Point Objective) and know how much time it takes to bring up the Server during DR (RTO). If you are following along via the previous posts, you know that our primary site is UK South and disaster recovery site is UK West. During Outage in Primary Site, we …

Read more

How to configure Azure Site Recovery, perform test failover and invoke disaster recovery failover – Part 2

by

In the last post How to configure Azure Site Recovery, perform test failover and invoke disaster recovery failover – Part 1 – TechPress i had explained on how you can configure Azure Site Recovery and configured the Virtual network for Test Failover and Failover. When you initiate Test Failover, Site Recovery Service will use that network to start the protected servers in DR site. If you have never performed a test failover or the last test failover was failed. A warning message will be shown but you can proceed with Failover by accepting the risk and continue with the failover. However, Its recommended to perform a Test Failover before performing …

Read more

How to configure Azure Site Recovery, perform test failover and invoke disaster recovery failover – Part 1

by

Site Recovery service is a BCDR (Business continuity and disaster recovery) solution which keeps your azure workload running during outages. You can configure this service to replicate the workloads to secondary site. Secondary site could be referred to as DR site as well. Its a region other than your primary site. For Example, if your Azure Workload is in Azure UK South Region, you can configure UK West to be your secondary region / DR Site. You can also replicate your on-premise servers to azure via ASR and have azure as your DR site. At the time of outage, just failover to secondary site to keep your application services / …

Read more

Step-by-Step Implementation of Azure AD Application Proxy

by

Azure Active Directory’s Application Proxy service provides secure remote access to on-premises web applications. After a single sign-on to Azure AD, users can access both cloud and on-premises applications through an external URL or an internal application portal. For example, Application Proxy can provide remote access and single sign-on to Remote Desktop, SharePoint, Teams, Tableau, Qlik, and line of business (LOB) applications. Implementation of Azure Application Proxy is easy and provides secure access to your on-premise web applications without the need to open any inbound ports on the firewall. You can also integrate the solution with Multi Factor authentication like DUO or MS authenticator and Conditional Access Policies to secure …

Read more

How to create Azure Policy to enforce resource tags

by

As we discussed management of azure resource tags using GUI and PowerShell in this post , we have updated the resource tags on existing resources. However, its a best practice to update the resource tags at the time of resource creation. You can create policies in azure and apply it to the root management group which contains the subscription. Azure Policy enforces organization standards by evaluating resources and comparing to the policy definitions. Please find below screenshots which shows step by step how to create Azure Policy to enforce resource tags. Search for Policy on Azure Portal and Click on it to proceed Click on Definitions to create Policy Definition …

Read more

How to apply Tags on all Azure resources using PowerShell

by

You can use the tags to logically organize all the resources in Azure. Tag in azure is a name and value pair which can be applied using GUI or by using PowerShell. You can take the approach of GUI if there are not too many resources where you have to manage the tags. In that case, you can click on each resource and then click Tags (as shown in below screenshot) on the left hand side pane and fill the details for Name/Value Pair. While this method is manual and also requires a lot of time if the number of resources where the tags needs to be populated increases from …

Read more