
Secure Credentials with Self-Signed Certificates for PowerShell Scripts
Hello everyone, I’m Preston K. Parsard, specializing in Platforms, Azure Infrastructure and Automation topics, and I’d like to share some insights for securing PowerShell credentials using certificates. This post is based on a recent customer project, but we’ll also wrap ... continue reading

Windows Admin Center 1809.5 GA Update and Lenovo XClarity extension are publicly available
Windows Admin Center version 1809.5, which was released to Windows Insiders last December, is now publicly available as a GA (Generally Available) update. Version 1809.5 is a cumulative update to our 1809 GA release from last September which includes various ... continue reading

Step-By-Step: Migrating The Active Directory Certificate Service From Windows Server 2003 to 2012 R2
Support for both Windows Server 2003 and 2003 R2 ended on July 14th 2015 and yet there are still a number of organizations operating their businesses on it. With this in mind, there are still a great number of IT ... continue reading
Anatomy of a secured MCU
Secure silicon Azure Sphere is an end-to-end solution containing three complementary components that provide a secured IoT platform. They include an Azure Sphere microcontroller unit (MCU), an operating system optimized for IoT scenarios that is managed by Microsoft, and a ... continue reading
Application approval improvements in ConfigMgr 1810
Thank you for all the feedback on the improvements to application approvals and faster software installation in Configuration Manager 1806. We have added several new improvements in Configuration Manager current branch 1810. Machine-based pre-approved requests Beginning with the Configuration Manager ... continue reading
Step-By-Step: Setting up AD FS and Enabling Single Sign-On to Office 365
This post will walk you through a typical highly available setup into Office 365. Ideally this server will be installed as virtual servers on multiple Hyper-V hosts. Think about redundancy, not only in the virtual servers, but in the Hyper-V ... continue reading
Get up to speed with Azure HDInsight: The comprehensive guide
Azure HDInsight is an easy, cost-effective, enterprise-grade service for open source analytics. With HDInsight, you get managed clusters for various Apache big data technologies, such as Spark, MapReduce, Kafka, Hive, HBase, Storm and ML Services backed by a 99.9% SLA ... continue reading

Azure Cosmos DB and multi-tenant systems
In this blog post, we will discuss how to build a multi-tenant system on Azure Cosmos DB. Azure Cosmos DB itself is a multi-tenant PaaS offering on Microsoft Azure. Building a multi-tenant system on another multi-tenant system can be challenging, ... continue reading
PowerShell Constrained Language mode and the Dot-Source Operator
PowerShell Constrained Language mode and the Dot-Source Operator PowerShell works with application control systems, such as AppLocker and Windows Defender Application Control (WDAC), by automatically running inConstrainedLanguage mode. ConstrainedLanguage mode restricts some exploitable aspects of PowerShell while still giving you ... continue reading

How to develop secure applications using Azure Cosmos DB
Before we begin to discuss how to develop secure applications using Azure Cosmos DB, we should also highlight some of the different layers of security that Azure Cosmos DB offers. The following image illustrates these various layers of security: Azure ... continue reading