Menu

Tag: azure

Free Wildcard Certificates using Azure DNS, Let’s Encrypt and acme.sh

Prelude Goal We want to obtain wildcard certificates from Let’s Encrypt ACME v2. We want to verify ourselves using DNS, specifically the dns-01 method, because DNS verification doesn’t interrupt your web server and it works even if your server is unreachable from the outside world. The DNS provider is Azure DNS. Ingredients Microsoft Azure subscription […]

Azure AD Connect hits GA

I just received an email from Azure telling me that from now, Azure Active Directory Connect is generally available. In human language this means that AD Connect is finally out of beta. Since my experiences with the previews were less than stellar I kept back any previews after Preview 2. But now I finally gave […]

Azure AD Connect Best Practices

The disaster I had gave me some good pointers regarding how one should configure and use their Office 365 tenant and on-premises AD together. Here’s some suggestions: Always use a separate “in cloud” global admin account for directory synchronization. In case you lose your synced admin accounts, you’ll still have another admin that can recover […]

Azure AD Connect Disaster Recovery

Prelude Yeah, I know, the title’s already promising enough. And yeah, it did happen. At some point in my previous post I mentioned that after group filtering failed on me I reverted to OU filtering. So at the time I had 2 filters in place. This may or may not be the cause of what […]

Azure AD Connect Preview 2

Overview I’ve just covered my experience with Azure AD Connect Preview 1, but here’s the new preview already. Some highlights: In-place DirSync upgrade is supported. Group-based filtering, in addition to OU-based filtering I’ve demonstrated with Preview 1. Syncing of on-premises custom attributes by extending the Azure AD schema. A lot of writeback stuff like user, […]

Migrating from DirSync to Azure AD Connect

Preface So DirSync is a thing of the past now. It’s deprecated but it’s supposed to keep working. For us, it didn’t. Password sync just never occured, so when a new colleague arrived at our office needing a new account I was basically forced to upgrade to the newcomer dubbed Azure AD Connect, or Azure […]

Office 365 Authentication for Azure

Here’s the deal: you have an Office 365 tenant where all your corporate accounts are stored. Possibly you even have DirSync or ADFS set up and your on-premises AD accounts are synced to Office 365. Now that’s great and all, but then you also start to use Azure, and guess what, it asks for… a […]

Cisco AnyConnect with Active Directory and Azure Multi-Factor Auth

Preamble This guide will walk you through the steps to set up two-factor authentication on your Cisco ASA for your AnyConnect VPN users, whose credentials are managed by Active Directory. Relax, it only sounds complicated because it is, but not as much as I assumed after not being able to find a single tutorial on […]