I’ve just been trying to reduce all the emails from a particularly large global spam bot which hit my tenant daily and aren’t being picked up automatically as SPAM by the service.   The bot uses many different individual email mailboxes, on many different (real) domains, registered in many countries (including European countries) – and the domains only seem to make it onto the occasional blacklist. The mail server IPs seem to be Russian ISPs , but several of those too.  So it has been difficult to stop but I’m pretty much there as there is only a small variation in the content.  

In the process of dealing with it, I have noticed that Exchange rules I have defined appear to take precedence over domain entries in the tenant allow/block list, where I expected it to be the other way around.   i.e I expected the TABL would be checked before anything else. 

e.g. I have a particular domain listed in the TABL because I want to block anything/everything from it as it is actually the predominant domain spamming us, and an Exchange rule that just looks for content rather than the source to catch all the other domains that are sending out the exact same junk.  The other day, my rule caught an email from the domain based on content, and it is clear the TABL had not had an activation against it. 

Is my understanding correct, and if so, is there something somewhere that describes how the various components of 365 act on incoming messages and in what order – kinda like a flow chart?  I’ve had a look and can’t find anything. 

Thanks!

​I’ve just been trying to reduce all the emails from a particularly large global spam bot which hit my tenant daily and aren’t being picked up automatically as SPAM by the service.   The bot uses many different individual email mailboxes, on many different (real) domains, registered in many countries (including European countries) – and the domains only seem to make it onto the occasional blacklist. The mail server IPs seem to be Russian ISPs , but several of those too.  So it has been difficult to stop but I’m pretty much there as there is only a small variation in the content.   In the process of dealing with it, I have noticed that Exchange rules I have defined appear to take precedence over domain entries in the tenant allow/block list, where I expected it to be the other way around.   i.e I expected the TABL would be checked before anything else.  e.g. I have a particular domain listed in the TABL because I want to block anything/everything from it as it is actually the predominant domain spamming us, and an Exchange rule that just looks for content rather than the source to catch all the other domains that are sending out the exact same junk.  The other day, my rule caught an email from the domain based on content, and it is clear the TABL had not had an activation against it.  Is my understanding correct, and if so, is there something somewhere that describes how the various components of 365 act on incoming messages and in what order – kinda like a flow chart?  I’ve had a look and can’t find anything.  Thanks!  Read More

​

Dear Partners,

Thank you for joining today’s Partner Townhall, covering a dynamic convergence of insights, collaboration, and strategic vision on Microsoft Build and Partner Enablement.

Mark Your Calendars for the upcoming exciting events:

Digital Kickoff (July 11th): An electrifying start to the new fiscal year. More information is available here.
Partner of the Year Awards (Geneva: July 15th, Zurich: July 18th): Celebrate excellence. Registration details coming soon. 
Microsoft Ignite (Nov. 18-22, 2024) in Chicago and online: Our biggest event of the year is getting even bigger.

Recording Available: If you missed today’s Townhall, don’t worry. Catch the recording on our community platform. Dive into the discussions, gain fresh perspectives, and stay informed.

Sign Up for Future Townhalls: The journey continues. Visit the Cloud Champion platform, establish your account, and be part of the next wave of insights. Our next Townhall awaits on June 27th. :spiral_calendar:️

Provide feedback:  Your insights matter! We’re conducting a brief survey to enhance our Partner Townhalls. Share your thoughts, ideas, and suggestions—it’s your chance to shape the future of these engaging sessions.

Let’s amplify our collective impact. Share your takeaways, connect with fellow partners, and gear up for what’s next. Together, we thrive!

Microsoft Switzerland Partner Team

​ 
Dear Partners,
 
Thank you for joining today’s Partner Townhall, covering a dynamic convergence of insights, collaboration, and strategic vision on Microsoft Build and Partner Enablement.
 
Mark Your Calendars for the upcoming exciting events:

Digital Kickoff (July 11th): An electrifying start to the new fiscal year. More information is available here.
Partner of the Year Awards (Geneva: July 15th, Zurich: July 18th): Celebrate excellence. Registration details coming soon. 
Microsoft Ignite (Nov. 18-22, 2024) in Chicago and online: Our biggest event of the year is getting even bigger.

Recording Available: If you missed today’s Townhall, don’t worry. Catch the recording on our community platform. Dive into the discussions, gain fresh perspectives, and stay informed.
 
Sign Up for Future Townhalls: The journey continues. Visit the Cloud Champion platform, establish your account, and be part of the next wave of insights. Our next Townhall awaits on June 27th. :spiral_calendar:️
 
Provide feedback:  Your insights matter! We’re conducting a brief survey to enhance our Partner Townhalls. Share your thoughts, ideas, and suggestions—it’s your chance to shape the future of these engaging sessions.
 
Let’s amplify our collective impact. Share your takeaways, connect with fellow partners, and gear up for what’s next. Together, we thrive!
 
Microsoft Switzerland Partner Team  Read More

​

Introduction

Microsoft Entra ID token-based auth mode for managed online endpoints in Azure Machine Learning is now generally available. This new auth mode makes identity and access management easier when using models hosted on Azure.

Plus, to deploy models securely and efficiently, Azure Machine Learning offers another great feature: managed online endpoints. In this blog, we’ll see how Microsoft Entra ID helps with endpoint authentication/authorization, and learn some important concepts about Azure Machine Learning managed online endpoints and how to use them with Microsoft Entra ID.

Managed Online Endpoints: A Turnkey Solution to simplify deployments

Managed online endpoints are designed to simplify machine learning model deployment. Here are some benefits:

Flexibility: Deploy models with no-code, low-code, or full code options
Scalability: Handle high request volumes and expand to hundreds of nodes
Cost Optimization: Autoscaling and cost monitoring for individual models
DevOps Efficiency: GitOps-friendly interfaces, local testing, and safe model rollouts
Security Compliance: Secure authentication, network isolation, and managed identity
Infrastructure Management : Reduce infrastructure complexity

Both Azure AI Studio and Azure Machine Learning use managed online endpoints to improve model deployment experiences.

Key concepts: Endpoints and deployments

Managed online endpoints decouple the concepts of endpoints and deployments.

Endpoint: A logical entity that represents a service or API where you can send requests for inferencing. It acts as the entry point for your machine learning models.
Deployment: A set of resources and logic required for hosting the actual model that performs inferencing. It includes the necessary infrastructure, such as CPU or GPU machines, the environment, and the inferencing logic to consume the models.

When you deploy a model, you create a deployment behind an endpoint. This deployment contains the model, any custom code, and other dependencies.

A key benefit of this separation is that it decouples the interface presented to clients (the endpoint) from the implementation details (the deployment). This separation allows you to manage deployments independently without affecting the overall endpoint. For example, you can use this to maintain multiple deployments for multiple model versions under a single endpoint, or to safely roll out new model versions without downtime.

Key concepts: Control plane operation vs data plane operation

Control plane operations

These operations manage and modify the online endpoints. They involve creating, reading, updating, and deleting online endpoints and deployments. They send requests to the Azure Machine Learning workspace.

To authenticate, you need a Microsoft Entra token. To authorize, you need Azure RBAC action for Microsoft.MachineLearningServices/workspaces/onlineEndpoints/write, delete, and read. We’ll see what this means later.

Data plane operations

These operations do not change the online endpoints, but use data to work with them. For example, sending a scoring request to an online endpoint and getting a response. They send requests to the endpoint’s scoring URI.

To authenticate, you can use a key, Microsoft Entra token, or Azure Machine Learning token. You specify which mechanism to use by choosing `auth_mode` when creating a managed online endpoint. If you choose Microsoft Entra to authorize, you need Azure RBAC action for Microsoft.MachineLearningServices/workspaces/onlineEndpoints/score/action.

What’s new about this? Data plane operations for online endpoint now supports Microsoft Entra token for full RBAC authorization.

Why Microsoft Entra ID is useful

Consume multiple endpoints using a single token with full RBAC support

Key auth endpoints have two keys for each endpoint, which may complicate integration with applications when you have many endpoints. Microsoft Entra ID lets you use one token for many endpoints, by giving the right role to a bigger scope you pick. For example, if the IT admin gives a group of Azure identities the right role for data plane actions over a resource group, those Azure identities can call all the endpoints in the resource group.

Streamline control plane and data plane operations

Expanding from the above scenario, if the group of Azure identities are assigned the proper role for both control plane and data plane operations over the scope of a subscription, the Azure identities will be able to not only create/update/delete/read the endpoints and deployments and but also invoke the endpoints in the subscription. You can adjust the RBAC actions and the scope as needed.

Seeing it in action

You don’t need tokens if you sign in and use CLI/SDK/UI. They manage them for you. But you can also choose to do it yourself, if you use REST API with endpoints. We use CLI to keep it simple in this blog. We assume you have set up:

Azure AI hub / project or Azure Machine Learning workspace
Development environment where you have set up CLI and ml extension, or a cloud-based setting that is already prepared for you, such as Compute Instance, Visual Studio Code for Web, or Azure Cloud Shell

1. Create the endpoint and the deployment

Suppose you want to deploy an LLM model for a chat completion scenario. You’ll want to create an endpoint and a deployment. Earlier, we saw that this is a control plane operation. First things first, you would sign into Azure.

az login

Once signed in, the authentication is done and the CLI session will run on your Azure identity. When you perform an operation, the CLI will interact with the backend services (via REST APIs) and backend services will check authorization if the operation is permitted for your Azure identity.

Note that the IT admin with the permission of `Microsoft.Authorization/roleAssignments/write` will be able to assign the proper role for an operation to your Azure identity, if it isn’t already assigned such a role.

Now suppose your definitions of the endpoint and deployment for your LLM model are defined as YAML files. Especially your endpoint definition YAML will look like:

$schema: https://azuremlschemas.azureedge.net/latest/managedOnlineEndpoint.schema.json
name: my-endp1
auth_mode: aad_token

You can run the following commands to create the endpoint and the deployment:

az ml online-endpoint create -n my-endp1 -f ./endpoint.yaml
az ml online-deployment create -n blue -e my-endp1 -f ./deployment.yaml

The above two CLI commands send the requests to the Azure AI Studio hub or Azure Machine Learning workspace, and if your Azure identity has the permission to create them (more specifically, if your Azure identity is assigned an Azure role with ` Microsoft.MachineLearningServices/workspaces/onlineEndpoints/write` action over the scope of the Azure AI hub or Azure Machine Learning workspace resource), the creation requests will be processed.

NOTE

If you’re using REST API to create endpoints and deployments, you’ll need to get the Microsoft Entra token from the resource endpoint https://management.azure.com and pass it in the header. More on this at Get the Microsoft Entra token for control plane operations.

2. Invoke the endpoint

Now it’s time to consume the model. As mentioned earlier, this is a data plane operation.

You can formulate a request file that has the expected payload that the model expects, for example, a JSON input including input text, chat history, and/or parameters such as max response, temperature etc. Then you can run the following command to invoke the endpoint:

az ml online-endpoint invoke -n my-endp1 -r ./request.json

The CLI command will send the request to the scoring URI of the endpoint, and if your Azure identity has the permission to invoke the endpoint (more specifically, if your Azure identity is assigned an Azure role with ` Microsoft.MachineLearningServices/workspaces/onlineEndpoints/score/action` action over the scope of the managed online endpoint resource), the invoke request will be processed.

NOTE

If you’re using REST API to invoke endpoints, you’ll need to get Microsoft Entra token from resource endpoint https://ml.azure.com and pass it in the header. More on this at Get the key or token for data plane operations.

Conclusion

Azure Machine Learning managed online endpoints, combined with Microsoft Entra ID, provide a seamless and secure way to deploy and consume your AI/ML models. By leveraging these features, you can focus on delivering value to your organization without worrying about infrastructure complexities.

Learn more

What are online endpoints? – Azure Machine Learning
Deploy machine learning models to online endpoints for inference – Azure Machine Learning | Microsoft Learn
Authentication for managed online endpoints – Azure Machine Learning | Microsoft Learn
Authenticate clients for online endpoints – Azure Machine Learning | Microsoft Learn

​Microsoft Tech Community – Latest Blogs –Read More 

any suggestion?

​any suggestion?  Read More

​

أفضل رمز إحالة B I T G E T لعام 2024 هو “qp29”. استخدم هذا الرمز للحصول على خصم 30% على الصفقات. بالإضافة إلى ذلك، يمكن للمستخدمين الجدد الذين يسجلون على B I T G E T باستخدام الرمز الترويجي “qp29” الحصول على مكافأة حصرية تصل إلى 5005 دولار أمريكي.

مزايا رمز الإحالة B I T G E T qp29
يوفر رمز إحالة B I T G E T qp29 طريقة رائعة لتوفير رسوم التداول مع الحصول على مكافآت جذابة. بإدخال هذا الرمز سوف تحصل على خصم دائم بنسبة 30% على رسوم التداول الخاصة بك. بالإضافة إلى ذلك، إذا قمت بمشاركة رمز الإحالة الشخصي الخاص بك مع الأصدقاء، فيمكنك الحصول على مكافأة بنسبة 50٪ على رسوم التداول الخاصة بهم. استفد من هذه الفرصة لزيادة إيراداتك مع جلب مستخدمين جدد إلى النظام الأساسي.

أفضل كود إحالة B I T G E T لعام 2024
رمز إحالة B I T G E T الموصى به لعام 2024 هو qp29. عندما تقوم بالتسجيل باستخدام هذا الرمز، يمكنك الحصول على ما يصل إلى 5005 دولارًا أمريكيًا كمكافأة. شارك هذا الرمز مع الأصدقاء لتربح عمولة بنسبة 50%، مما يساعدك على تأمين الحد الأقصى لمكافأة التسجيل التي تصل إلى 5005 دولارًا أمريكيًا. هذه طريقة رائعة لتعزيز تجربة التداول الخاصة بك بمزايا إضافية مع تشجيع الآخرين على المشاركة.

كيفية استخدام رمز الإحالة B I T G E T
رمز إحالة B I T G E T مخصص خصيصًا للمستخدمين الجدد الذين لم يسجلوا بعد على النظام الأساسي. اتبع الخطوات التالية لاستخدام الكود:

قم بزيارة موقع B I T G E T وانقر على “تسجيل الدخول”.
أدخل تفاصيل المستخدم الخاصة بك واتبع إجراءات KYC وAML.
عندما يطلب منك رمز الإحالة الخاص بك، أدخل qp29.
أكمل عملية التسجيل وأكمل أي عمليات تحقق مطلوبة.
بمجرد استيفاء جميع الشروط، سوف تتلقى على الفور مكافأة الترحيب الخاصة بك.
لماذا استخدام رمز الإحالة B I T G E T؟
خصم دائم: باستخدام الرمز qp29 تحصل تلقائيًا على خصم 30% على جميع عمولات التداول.
مكافأة ترحيبية سخية: يمكن للمستخدمين الجدد الحصول على ما يصل إلى 5005 دولارًا أمريكيًا.
أرباح إضافية: شارك الكود الخاص بك واحصل على عمولة بنسبة 50%.
استفد من هذه الفرصة واحصل على مزاياك باستخدام رمز إحالة B I T G E T الحالي qp29! احصل على ما يصل إلى 5005 USDT واستفد من الخصومات الدائمة على رسوم التداول الخاصة بك.

​أفضل رمز إحالة B I T G E T لعام 2024 هو “qp29”. استخدم هذا الرمز للحصول على خصم 30% على الصفقات. بالإضافة إلى ذلك، يمكن للمستخدمين الجدد الذين يسجلون على B I T G E T باستخدام الرمز الترويجي “qp29” الحصول على مكافأة حصرية تصل إلى 5005 دولار أمريكي.مزايا رمز الإحالة B I T G E T qp29يوفر رمز إحالة B I T G E T qp29 طريقة رائعة لتوفير رسوم التداول مع الحصول على مكافآت جذابة. بإدخال هذا الرمز سوف تحصل على خصم دائم بنسبة 30% على رسوم التداول الخاصة بك. بالإضافة إلى ذلك، إذا قمت بمشاركة رمز الإحالة الشخصي الخاص بك مع الأصدقاء، فيمكنك الحصول على مكافأة بنسبة 50٪ على رسوم التداول الخاصة بهم. استفد من هذه الفرصة لزيادة إيراداتك مع جلب مستخدمين جدد إلى النظام الأساسي.أفضل كود إحالة B I T G E T لعام 2024رمز إحالة B I T G E T الموصى به لعام 2024 هو qp29. عندما تقوم بالتسجيل باستخدام هذا الرمز، يمكنك الحصول على ما يصل إلى 5005 دولارًا أمريكيًا كمكافأة. شارك هذا الرمز مع الأصدقاء لتربح عمولة بنسبة 50%، مما يساعدك على تأمين الحد الأقصى لمكافأة التسجيل التي تصل إلى 5005 دولارًا أمريكيًا. هذه طريقة رائعة لتعزيز تجربة التداول الخاصة بك بمزايا إضافية مع تشجيع الآخرين على المشاركة.كيفية استخدام رمز الإحالة B I T G E Tرمز إحالة B I T G E T مخصص خصيصًا للمستخدمين الجدد الذين لم يسجلوا بعد على النظام الأساسي. اتبع الخطوات التالية لاستخدام الكود:قم بزيارة موقع B I T G E T وانقر على “تسجيل الدخول”.أدخل تفاصيل المستخدم الخاصة بك واتبع إجراءات KYC وAML.عندما يطلب منك رمز الإحالة الخاص بك، أدخل qp29.أكمل عملية التسجيل وأكمل أي عمليات تحقق مطلوبة.بمجرد استيفاء جميع الشروط، سوف تتلقى على الفور مكافأة الترحيب الخاصة بك.لماذا استخدام رمز الإحالة B I T G E T؟خصم دائم: باستخدام الرمز qp29 تحصل تلقائيًا على خصم 30% على جميع عمولات التداول.مكافأة ترحيبية سخية: يمكن للمستخدمين الجدد الحصول على ما يصل إلى 5005 دولارًا أمريكيًا.أرباح إضافية: شارك الكود الخاص بك واحصل على عمولة بنسبة 50%.استفد من هذه الفرصة واحصل على مزاياك باستخدام رمز إحالة B I T G E T الحالي qp29! احصل على ما يصل إلى 5005 USDT واستفد من الخصومات الدائمة على رسوم التداول الخاصة بك.  Read More

​

The text has stopped wrapping at the end of the line. It was okay but I must have done something to mess it up. It’s as if it’s hidden under the next column. Help!

​The text has stopped wrapping at the end of the line. It was okay but I must have done something to mess it up. It’s as if it’s hidden under the next column. Help!  Read More

​

We have a situation here at work that 20 years ago used to be something you could resolve with a simple powershell command, but nobody in our IT department can figure out how to do it under Office 365.  

We have a long-standing shared exchange server mailbox (lets call it SERVICE) that is getting too big for one person to handle, so it needs to be split into two separate shared mailboxes (SERVICEA and SERVICEB) *both* of which need to retain the full contents and directory structure of the original SERVICE mailbox for historical lookup purposes before we divide their functions and they start running independently from each other. 

Ideally, what we need to do is create an identical clone of the existing SERVICE database on the server called SERVICE2, and then we can rename the two mailboxes to whatever we wish so they can go off on their separate ways. 

We cannot simply create a second mailbox and drag and drop the contents over because the original service mailbox has been around for decades and contains literally thousands of nested subfolders to keep the contents organized. One of the biggest headaches of M365, is that it absolutely craps its pants the moment you attempt to copy a folder that contains another subfolder and will immediately kick back a “cannot copy the folder because it may contain private items” error, even if you have full admin access to both mailboxes. (I’m sure Microsoft consider this a “feature” rather than an absolutely infuriating bug.) 

It would take us weeks if not months to go through and manually copy each sub-sub-sub folder over in reverse directory tree order by hand, so I need a better solution if one is available.

Cloning the original mailbox or overwriting one mailbox database over the top of another would be the most logical course of action, but sadly, nobody on our IT team knows how to do that. I’m not sure if that’s simply because they don’t have the correct documentation and powershell command, or if this is just yet another feature that worked perfectly fine for years under 2000 server, but for some reason, no longer functions under 365. 

​We have a situation here at work that 20 years ago used to be something you could resolve with a simple powershell command, but nobody in our IT department can figure out how to do it under Office 365.  We have a long-standing shared exchange server mailbox (lets call it SERVICE) that is getting too big for one person to handle, so it needs to be split into two separate shared mailboxes (SERVICEA and SERVICEB) *both* of which need to retain the full contents and directory structure of the original SERVICE mailbox for historical lookup purposes before we divide their functions and they start running independently from each other. Ideally, what we need to do is create an identical clone of the existing SERVICE database on the server called SERVICE2, and then we can rename the two mailboxes to whatever we wish so they can go off on their separate ways. We cannot simply create a second mailbox and drag and drop the contents over because the original service mailbox has been around for decades and contains literally thousands of nested subfolders to keep the contents organized. One of the biggest headaches of M365, is that it absolutely craps its pants the moment you attempt to copy a folder that contains another subfolder and will immediately kick back a “cannot copy the folder because it may contain private items” error, even if you have full admin access to both mailboxes. (I’m sure Microsoft consider this a “feature” rather than an absolutely infuriating bug.) It would take us weeks if not months to go through and manually copy each sub-sub-sub folder over in reverse directory tree order by hand, so I need a better solution if one is available.Cloning the original mailbox or overwriting one mailbox database over the top of another would be the most logical course of action, but sadly, nobody on our IT team knows how to do that. I’m not sure if that’s simply because they don’t have the correct documentation and powershell command, or if this is just yet another feature that worked perfectly fine for years under 2000 server, but for some reason, no longer functions under 365.   Read More

​