Remote Desktop Services

Troubleshoot Hyper-V guarded fabrics and shielded VMs

Administration / By / Published / Updated 10/16/2026 / 52 minutes of reading

Use this FAQ when a guarded fabric can’t be deployed, a host can’t attest, a shielded virtual machine (VM) can’t be provisioned or started, or an operation such as migration, servicing, or recovery fails. It accompanies the Microsoft Learn module: https://learn.microsoft.com/en-us/training/modules/guarded-fabric-shielded-virtual-machines/ Warning Don’t use TPM clearing, an unrelated new or local KP, disabled Secure Boot […]

Troubleshoot Hyper-V guarded fabrics and shielded VMs Continue Reading

Coding agents are picking Azure SQL Database

SQL Server / By / Published / Updated 09/15/2026 / 5 minutes of reading

I went looking for Azure SQL Database in a recent coding agent benchmark, honestly unsure whether Microsoft SQL would show up. Armature ran a study where real coding agent CLIs (Claude Code, Codex, Cursor) were dropped into six synthetic-but-realistic repositories and asked to pick a database, then actually build with it. 356 runs were completed across

Coding agents are picking Azure SQL Database Continue Reading

Setting Up Microsoft Intune Remote Help on Azure Virtual Desktop

Azure / By / Published / Updated 08/02/2026 / 7 minutes of reading

Remote Help lets your helpdesk team screen-share, chat with, and (with the right permission) take elevated control of a user’s session — including AVD multi-session hosts where several users can be active on the same VM at once. This is a two-part walkthrough. Part 1 covers enabling Remote Help at the tenant level and doing

Setting Up Microsoft Intune Remote Help on Azure Virtual Desktop Continue Reading

Automating the Disconnected Session Time Limit Policy with PowerShell and Microsoft Graph

Azure / By / Published / Updated 07/24/2026 / 4 minutes of reading

Reclaiming host pool capacity from disconnected sessions is one of those AVD hygiene tasks that’s easy to configure once by hand in Intune, and easy to forget to replicate consistently across every host pool, tenant, or DTAP environment you manage. If you’re standing up host pools programmatically — or you just want this baked into

Automating the Disconnected Session Time Limit Policy with PowerShell and Microsoft Graph Continue Reading

Some tools and techniques for hardening Windows Server

Administration / By / Published / Updated 09/28/2026 / 27 minutes of reading

In this post I go over some tools and techniques exist for hardening Windows Server. As always, apply controls according to the server’s role, test them against representative workloads before production rollout, document approved exceptions, and maintain tested console and recovery access in case a security control affects management or application compatibility. Apply the role-specific

Some tools and techniques for hardening Windows Server Continue Reading

Design the Network Before You Deploy: Best Practices for Microsoft Foundry Standard Agents BYOVNet

Artificial Intelligence / By / Published / Updated 07/22/2026 / 16 minutes of reading

Ask any enterprise team standing up Microsoft Foundry in production and you’ll hear the same non-negotiable: the agent can’t run on the open internet. The moment it touches proprietary data, internal APIs, or regulated workloads, security wants it inside the company’s own virtual network — behind private endpoints, a central firewall, and controlled DNS. That

Design the Network Before You Deploy: Best Practices for Microsoft Foundry Standard Agents BYOVNet Continue Reading

Automating AVD Context-Based Redirections

Azure / By / Published / Updated 06/28/2026 / 6 minutes of reading

What Are Context-Based Redirections? Context-Based Redirections is a Preview feature in Azure Virtual Desktop that lets you control peripheral and device redirection — clipboard, drives, printers, USB — based on the compliance state of the connecting device, rather than applying a blanket allow or deny for all users. Instead of a binary on/off toggle on

Automating AVD Context-Based Redirections Continue Reading

Microsoft Entra Private Access vs Global Secure Access

Azure / By / Published / Updated 05/22/2026 / 13 minutes of reading

If you have been researching Microsoft’s zero trust network access offering and found yourself confused by “Global Secure Access,” “Entra Private Access,” and “Internet Access” all appearing in the same sentence, you are not alone. The naming is genuinely confusing, even for architects who work in the Microsoft ecosystem daily. This article cuts through the

Microsoft Entra Private Access vs Global Secure Access Continue Reading

Kazuar: Anatomy of a nation-state botnet

Security / By / Published / Updated 05/14/2026 / 19 minutes of reading

In this article Kazuar, a sophisticated malware family attributed to the Russian state actor Secret Blizzard, has been under constant development for years and continues to evolve in support of espionage-focused operations. Over time, Kazuar has expanded from a relatively traditional backdoor into a highly modular peer-to-peer (P2P) botnet ecosystem designed to enable persistent, covert

Kazuar: Anatomy of a nation-state botnet Continue Reading

Fixing Azure Virtual Desktop Error 0x3000047- A Real-World RDAgentBootLoader Saga Part- I

Azure / By / Published / Updated 05/09/2026 / 8 minutes of reading

If you manage Azure Virtual Desktop (AVD) long enough, you’ll eventually hit a session host that looks perfectly healthy in the Azure portal — VM running, network fine, disk attached — yet refuses to let anyone connect. Here’s a walkthrough of one such incident, the error code behind it, and the troubleshooting path that eventually

Fixing Azure Virtual Desktop Error 0x3000047- A Real-World RDAgentBootLoader Saga Part- I Continue Reading

Contact Us
Contact Us