Month: October 2024
线上百家乐靠谱吗？17300435119（微同步）
丰富的学习内容：
广泛的技术领域覆盖：提供了微软旗下众多产品和服务的学习课程，比如 Azure、Windows、Office、Dynamics、Power Apps、Teams 等。无论是云计算、操作系统、办公软件，还是开发工具等方面的知识，都可以在该平台上找到相关学习资源。多种学习路径和模块：学习路径是围绕特定角色（如开发人员、架构师或系统管理员）或技术组织的模块集合，模块则是学习体验的构建基块，包含一系列相关单元，如视频、实验室和文章。个性化的学习体验：自主学习节奏：学习者可以按照自己的进度和时间安排进行学习，无论你是有短暂的空闲时间还是能够投入较长时间学习，都可以找到适合自己的学习方式4。实践操作机会：平台提供了大量的实践练习，帮助学习者将理论知识应用到实际操作中，更好地掌握技术技能。例如，对于 Azure 的学习，平台每天为学员提供 10 个免费的沙盒，每个沙盒都是独立的 Azure 环境，可供学员在练习中使用。认证与成就系统3：认证考试准备：微软学习平台提供了与微软认证相关的学习内容和考试大纲，帮助学习者准备认证考试，获得行业认可的证书，提升自己的职业竞争力。成就激励：学习者在完成学习任务、通过测试等操作后，可以获得积分、等级、成就和奖杯等，这种游戏化的方式能够增强学习的趣味性和动力，保持学习者的积极性。社区互动：与其他学习者交流：学习者可以在平台上与其他学习者和专家进行交流，分享学习经验、资源和见解，共同解决学习中遇到的问题，形成一个学习社区。获取专家指导：可以向专家提问，获得专业的解答和指导，加深对知识的理解。
丰富的学习内容：广泛的技术领域覆盖：提供了微软旗下众多产品和服务的学习课程，比如 Azure、Windows、Office、Dynamics、Power Apps、Teams 等。无论是云计算、操作系统、办公软件，还是开发工具等方面的知识，都可以在该平台上找到相关学习资源。多种学习路径和模块：学习路径是围绕特定角色（如开发人员、架构师或系统管理员）或技术组织的模块集合，模块则是学习体验的构建基块，包含一系列相关单元，如视频、实验室和文章。个性化的学习体验：自主学习节奏：学习者可以按照自己的进度和时间安排进行学习，无论你是有短暂的空闲时间还是能够投入较长时间学习，都可以找到适合自己的学习方式4。实践操作机会：平台提供了大量的实践练习，帮助学习者将理论知识应用到实际操作中，更好地掌握技术技能。例如，对于 Azure 的学习，平台每天为学员提供 10 个免费的沙盒，每个沙盒都是独立的 Azure 环境，可供学员在练习中使用。认证与成就系统3：认证考试准备：微软学习平台提供了与微软认证相关的学习内容和考试大纲，帮助学习者准备认证考试，获得行业认可的证书，提升自己的职业竞争力。成就激励：学习者在完成学习任务、通过测试等操作后，可以获得积分、等级、成就和奖杯等，这种游戏化的方式能够增强学习的趣味性和动力，保持学习者的积极性。社区互动：与其他学习者交流：学习者可以在平台上与其他学习者和专家进行交流，分享学习经验、资源和见解，共同解决学习中遇到的问题，形成一个学习社区。获取专家指导：可以向专家提问，获得专业的解答和指导，加深对知识的理解。 Read More
The Importance of MCTs and MCT Regional Leads for TSPs – Brief Overview (Issue 1)
Good day, and a warm Welcome
I would like to discuss the importance of MCTs and MCT Regional Leads for all TSPs. The purpose of this is to provide a brief overview of the roles.
MCTs:
Now to put it simply an MCT (Microsoft Certified Trainer) is the go to professional for all your training needs. Not only do most of them provide you with excellent client service, they also provide knowledge and in most cases a vast amount of experience. Using MCTs to train your clients allows you to complete MTMs which in facts allows the you to reach your training targets set out.
MCTs are the Only Professionals that are allowed to provide Training on Most Microsoft Services and it has been the standard for decades now to have MCTs provide training. Provided that they provide training in their specific specialty in which they are certified in.
MCT Regional Leads:
MCT Regional Leads are there to support, guide and help MCTs in their respective regions and/or the world. They have the most vital job function and that is to be there not only for the MCTs but to help TSPs find talent, evaluate resources and many more in and effort to have the best training experiences. Overall the MCT Regional Leads allows MCTs to have some senior to look to for assistance or advice. (As we can all agree that without a proper structure/leader everything becomes a challenge).
In General MCTs and Regional Leads have their own community called the “MCT Lounge” where they engage with thousands of trainers world wide, sharing and participating in activities such as:
Answer QuestionCreate and Share ContentOrganize Online EventsOrganize In-Person EventsTrain-the-Trainer Initiatives
and many more… 🙂
I hope this clears up some questions for New and Existing TSPs.
Please do leave a reply should you have any questions so the MCTs and Regional Leads will be able to assist 🙂
Kind Regards
Phillip Roos (MCT Regional Lead, South Africa)
Good day, and a warm Welcome I would like to discuss the importance of MCTs and MCT Regional Leads for all TSPs. The purpose of this is to provide a brief overview of the roles. MCTs:Now to put it simply an MCT (Microsoft Certified Trainer) is the go to professional for all your training needs. Not only do most of them provide you with excellent client service, they also provide knowledge and in most cases a vast amount of experience. Using MCTs to train your clients allows you to complete MTMs which in facts allows the you to reach your training targets set out. MCTs are the Only Professionals that are allowed to provide Training on Most Microsoft Services and it has been the standard for decades now to have MCTs provide training. Provided that they provide training in their specific specialty in which they are certified in. MCT Regional Leads:MCT Regional Leads are there to support, guide and help MCTs in their respective regions and/or the world. They have the most vital job function and that is to be there not only for the MCTs but to help TSPs find talent, evaluate resources and many more in and effort to have the best training experiences. Overall the MCT Regional Leads allows MCTs to have some senior to look to for assistance or advice. (As we can all agree that without a proper structure/leader everything becomes a challenge). In General MCTs and Regional Leads have their own community called the “MCT Lounge” where they engage with thousands of trainers world wide, sharing and participating in activities such as:Answer QuestionCreate and Share ContentOrganize Online EventsOrganize In-Person EventsTrain-the-Trainer Initiativesand many more… 🙂 I hope this clears up some questions for New and Existing TSPs. Please do leave a reply should you have any questions so the MCTs and Regional Leads will be able to assist 🙂 Kind RegardsPhillip Roos (MCT Regional Lead, South Africa) Read More
office 365 apps
hi,
i am not able to search email in microsoft outlook.
hi,i am not able to search email in microsoft outlook. Read More
How to disable defender and tamper protection temporarily
Hi,
I usually disable defender when i do some certain task. However this option went away few months ago. Now i cannot cannot pause defender because it is managed by tamper protection. I cannot disable tamper protection because it is managed by administrator.
I am the administrator. I have MS 365 Business Premium account and i am global admin there. I cannot modify registry entry, i cannot change permission in registry entry for defender (Access Denied). Using powershell in admin mode says “Access Denied” or something like that.
When i go to intune.microsoft.com / endpoin security, i see on devices and nothing related to my computer.
So, how do i can pause defender? Thank you.
Hi, I usually disable defender when i do some certain task. However this option went away few months ago. Now i cannot cannot pause defender because it is managed by tamper protection. I cannot disable tamper protection because it is managed by administrator. I am the administrator. I have MS 365 Business Premium account and i am global admin there. I cannot modify registry entry, i cannot change permission in registry entry for defender (Access Denied). Using powershell in admin mode says “Access Denied” or something like that. When i go to intune.microsoft.com / endpoin security, i see on devices and nothing related to my computer. So, how do i can pause defender? Thank you. Read More
Block cisco anyconnect or rdp if the device is not compliant
Hello,
Kindly i need to know if its applicable from intune to block rdp or cisco anyconnect access from non compliant devices to other devices
Regards,
Hello, Kindly i need to know if its applicable from intune to block rdp or cisco anyconnect access from non compliant devices to other devices Regards, Read More
Onedrive sync
Hi,
I need to move about 30gb worth of files from an on prem file server in to sharepoint, and allow staff to sync those files via onedrive client. (Add shortcut to onedrive option) – But, there is a LOT of files with the same names, but in different directories, Is this going to cause issues when onedrive attemps to synchronize the SharePoint library?
Thanks in advance
Dave
Hi, I need to move about 30gb worth of files from an on prem file server in to sharepoint, and allow staff to sync those files via onedrive client. (Add shortcut to onedrive option) – But, there is a LOT of files with the same names, but in different directories, Is this going to cause issues when onedrive attemps to synchronize the SharePoint library? Thanks in advance Dave Read More
Learn about Cegeka’s ISV Success for Business Applications partner solution on Microsoft AppSource
Microsoft ISV Success for Business Applications offers platforms, resources, and support designed to help partners develop, publish, and market business apps. Learn more about Cegeka’s app on Microsoft AppSource:
Cegeka Pharma & Life Sciences: This solution expands the functionality of Microsoft Dynamics 365 to meet the needs of the pharmaceutical and life sciences sector. Companies can use it to monitor the lifecycle of raw materials, automate manufacturing formulation, improve production standards, and ensure regulatory requirements, such as those of the U.S. Food and Drug Administration and the European Medicines Agency.
Microsoft Tech Community – Latest Blogs –Read More
Meet the team at Microsoft Ignite – Chicago 2024
Just over a month to go and Microsoft Ignite will be live in Chicago and available online.
If you can make it in person, look out for our team around the expo hall, or in a workshop or breakout session!
Rick Claus – Mr Ignite himself, as seen in your social media feeds, Rick is a Microsoft veteran with a love for racking servers and troubleshooting DNS. Just look for the hat!
Sonia Cuff – Long time IT Pro and now lead of the Modern Infrastructure and Cloud Native & Linux teams in Microsoft’s Cloud Advocacy division, Sonia will be leaving her Australian summer-bathed home to be there in person in Chicago. She’ll be wearing nine layers of clothing and clutching a Flat White for warmth. Ask her about FinOps and cloud cost management in general, to see her face light up.
Joey Snow – The other half of Patch & Switch, Joey has forgotten more about past Ignite events than we’ll ever learn, as an official event host. In his day job, he leads the Security team in Cloud Advocacy – just ask him about MFA.
Vinicius Apolinario – Vinicius speaks Portuguese, English, Containers and Windows Server, and is the best person to connect with if your organization has developed a fascination with moving applications off legacy hardware.
Amy Colyer – Our resident virtualization expert, Amy joins us fresh from attending VMware Explore. Look for the person with ALL of the local Chicago knowledge. She can recommend the best place for pizza and how to manage your AVS infrastructure.
Pierre Roman – Flying in from Canada, Pierre is your go to for networking, PowerShell, backups, monitoring and so many more infrastructure topics. Look for the guy wandering around like it’s not cold at all.
Paul Yu – Fresh from Kubecon North America, catch Paul for the latest in Kubernetes and open source projects, including KAITO. You’ll find him anywhere AKS is mentioned.
Rod Trent – With an IT Pro and Security background, Rod loves to talk about Azure Sentinel, when he’s not watching episodes of the Six Million Dollar man. Most likely to be found running past the venue in the morning, ask Rod how to write great Kusto queries (if you can catch up with him).
Sarah Young – Crossing the Pacific Ocean and leaving her famous doggos for a week, Sarah also joins us from Australia for all things related to Security. Most likely to be found in the coffee line with Sonia, or being followed by a camera as she co-hosts the event.
To help you plan your event experience, the Session Catalogue is now live! You can’t register for sessions just yet, but you’ll be able to browse the catalogue and find your favorite topics and speakers: https://ignite.microsoft.com/sessions
Stay tuned and we’ll share our session picks in an upcoming article.
Microsoft Tech Community – Latest Blogs –Read More
Unlocking Azure Savings: Introducing the FinOps Best Practices Library
Introduction
Have you ever wondered how the recommendations in the Azure Cost Optimization workbook are generated? Or perhaps you’ve thought about tailoring those recommendations to fit your organization’s unique requirements but didn’t know where to start?
That’s where the new FinOps Best Practices Library comes in.
What’s the FinOps Best Practices Library?
To address these challenges, we’ve created the FinOps Best Practices Library within the FinOps Toolkit. This resource is designed to be a comprehensive hub for Azure best practices, starting with the Azure Resource Graph (ARG) queries that power the Cost Optimization workbook’s recommendations. Now, you can not only see how these recommendations are built but also customize the ARG queries to meet your specific use cases.
Key Advantages of customizing ARG queries:
Transparency into Azure recommendations: Gain full visibility into the ARG queries that generate Cost Optimization recommendations.
Customization for specific scenarios: Easily adjust ARG queries to better align with your organization’s infrastructure and financial goals.
Whether you’re aiming to improve your cloud financial operations or explore new ways to manage costs, this library will be your go-to resource.
Understand ARG Code Sections
To illustrate how these Azure Resource Graph (ARG) queries work, let’s break down an example. The code is divided into three sections:
Identify Unmanaged Disks
In the first section, the query identifies all unmanaged disks by filtering through the Azure Compute resources and checks for disks that are not attached to any VMs.
resources
| where type =~ ‘microsoft.compute/disks’ and managedBy == “”
Filter by Disk State and Tags
Next, it filters out disks that are in an inactive state or have specific tags indicating their use in replication scenarios, such as Azure Site Recovery (ASR).
| extend diskState = tostring(properties.diskState)
| where diskState != ‘ActiveSAS’
and tags !contains ‘ASR-ReplicaDisk’
and tags !contains ‘asrseeddisk’
Project Relevant Information
Finally, it displays the most relevant information about each disk, such as its name, size, SKU, and creation time.
| extend DiskId=id, DiskName=name, DiskSizeGB=tostring(properties.diskSizeGB), SKUName=sku.name, Location=location, TimeCreated=tostring(properties.timeCreated)
| order by DiskId asc
| project DiskId, DiskName, DiskSizeGB, SKUName, Location, TimeCreated
Here is the full code snippet:
resources
| where type =~ ‘microsoft.compute/disks’ and managedBy == “”
| extend diskState = tostring(properties.diskState)
| where managedBy == “”
and diskState != ‘ActiveSAS’
and tags !contains ‘ASR-ReplicaDisk’
and tags !contains ‘asrseeddisk’
| extend DiskId=id, DiskIDfull=id, DiskName=name, SKUName=sku.name, SKUTier=sku.tier, DiskSizeGB=tostring(properties.diskSizeGB), Location=location, TimeCreated=tostring(properties.timeCreated), SubId=subscriptionId
| order by DiskId asc
| project DiskId, DiskIDfull, DiskName, DiskSizeGB, SKUName, SKUTier, resourceGroup, Location, TimeCreated, subscriptionId
Cost Optimization workbook
If you haven’t heard of the Cost Optimization workbook, it’s an essential Azure Advisor tool that helps organizations identify savings opportunities by analyzing cloud spending and providing actionable insights. Learn more about it here.
New to FinOps Toolkit?
The FinOps Toolkit is an open-source collection of resources to help you implement and optimize cloud financial operations in the Microsoft Cloud. It provides tools, automation, and guidance, such as the Implementing FinOps guide, which is perfect for getting started on your FinOps journey. You can find more about the toolkit and how to contribute on the FinOps Toolkit site.
Microsoft Tech Community – Latest Blogs –Read More
Outlook scheduling poll can’t be viewed
Hello,
until recently, after sending a scheduling poll via outlook, the poll could be viewed by clicking the “view poll” button from the mail i sent.
for a few weeks now, clicking this link sents me straight to the outlook web app after request me to log in, even though im logged in already. I can’t find any way to view my ongoing polls or review a specific poll and send a date other than using the link from the mails the tool sends me whenever someone votes.
This change occoured roughly 3 weeks ago and makes the tool currently unusable for me.
Some help would be reallyappriciated.
Hello, until recently, after sending a scheduling poll via outlook, the poll could be viewed by clicking the “view poll” button from the mail i sent.for a few weeks now, clicking this link sents me straight to the outlook web app after request me to log in, even though im logged in already. I can’t find any way to view my ongoing polls or review a specific poll and send a date other than using the link from the mails the tool sends me whenever someone votes. This change occoured roughly 3 weeks ago and makes the tool currently unusable for me.Some help would be reallyappriciated. Read More
Sender Name Not Displayed in Outlook Emails
I’m using the Outlook (New) downloaded from the Microsoft Store, connected via IMAP/SMTP. When I send emails, my name isn’t visible to recipients—only my email address shows.
I’ve tried adjusting the settings but haven’t found a solution.
Could you please assist with this?
I’m using the Outlook (New) downloaded from the Microsoft Store, connected via IMAP/SMTP. When I send emails, my name isn’t visible to recipients—only my email address shows.I’ve tried adjusting the settings but haven’t found a solution.Could you please assist with this? Read More
Download Domains – CVE-2021-1730 – issue with missing SAN certificate ?
Hi gents,
I have Exchange 2019 with almost recent patch installed Version 15.2 (Build 1544.4)
Few months ago I configured required steps to mitigate CVE-2021-1730 and it worked for sure. Now customer reported that during OWA browsing while attempting to download attachment, he’s getting an error about unsafe connection ( certificate error occurs when trying to retrieve attachments).
In details while clicking on the attachment, default OWA name is redirected from the default url webmail.domain.com to the attachments.webmail.domain.com. Then the error is showing up about the certificate “net::ERR_CERT_COMMON_NAME_INVALID“.
Currently for OWA site there is attached dedicated certificate with *.domain.com.
The url for download domain (internally and externally) is pointing through CNAME url attachments.webmail.domain.com.
The name of the domain is included in certificate SAN entry, but it’s for whole domain *.domain.com, not explicitely for attachments,webmail.domain.com.
Is it possible that despite having asteriks in the certificate domain name, dedicated SAN name is required ?
Hi gents, I have Exchange 2019 with almost recent patch installed Version 15.2 (Build 1544.4)Few months ago I configured required steps to mitigate CVE-2021-1730 and it worked for sure. Now customer reported that during OWA browsing while attempting to download attachment, he’s getting an error about unsafe connection ( certificate error occurs when trying to retrieve attachments).In details while clicking on the attachment, default OWA name is redirected from the default url webmail.domain.com to the attachments.webmail.domain.com. Then the error is showing up about the certificate “net::ERR_CERT_COMMON_NAME_INVALID”.Currently for OWA site there is attached dedicated certificate with *.domain.com.The url for download domain (internally and externally) is pointing through CNAME url attachments.webmail.domain.com.The name of the domain is included in certificate SAN entry, but it’s for whole domain *.domain.com, not explicitely for attachments,webmail.domain.com.Is it possible that despite having asteriks in the certificate domain name, dedicated SAN name is required ? Read More
Replacement for rules on alias types?
The documentation for CREATE RULE currently says that the feature will be removed in a future version of SQL Server.
Rules seem to be really useful to work around the fact that SQL Server doesn’t have the enum types that other databases like PostgreSQL and MySQL have. Using CREATE TYPE, CREATE RULE (with a list of allowed values) and sp_bindrule you can define an enumerated type that can be used in multiple columns, making changes to the set of enum values much easier and less error prone compared to having to specify a CHECK constraint on each column.
Does anybody know when rules will be removed and if there are plans to provide another means of having centralized definitions of enumerated column types?
The documentation for CREATE RULE currently says that the feature will be removed in a future version of SQL Server.Rules seem to be really useful to work around the fact that SQL Server doesn’t have the enum types that other databases like PostgreSQL and MySQL have. Using CREATE TYPE, CREATE RULE (with a list of allowed values) and sp_bindrule you can define an enumerated type that can be used in multiple columns, making changes to the set of enum values much easier and less error prone compared to having to specify a CHECK constraint on each column.Does anybody know when rules will be removed and if there are plans to provide another means of having centralized definitions of enumerated column types? Read More
XT.com Exchange Referral Code 6QE8B7 | Get 20% Off On Trading Fees for Lifetime
XT.com Exchange Referral Code 6QE8B7 | Get 20% Off On Trading Fees for Lifetime
Enjoy exclusive savings on your trading fees with XT.com Exchange by using the Referral Code 6QE8B7. This unique offer gives you a 20% discount on trading fees for a lifetime, helping you maximize your profits while trading cryptocurrencies on one of the most reliable platforms.
XT.com Exchange is known for its user-friendly interface, diverse crypto offerings, and cutting-edge trading tools. By applying this referral code during registration, you unlock long-term savings that enhance your overall trading experience.
Here are the key benefits of using the XT.com Exchange Referral Code 6QE8B7:
Exchange XT.com Exchange
Referral Code6QE8B7Trading Fee Discount20%Discount DurationLifetimeDate2024-25
To start saving, simply sign up on XT.com Exchange using the Referral Code 6QE8B7. Once registered, you’ll instantly benefit from a 20% reduction on all trading fees, allowing you to retain more of your earnings as you trade. This lifetime discount is ideal for both beginner traders entering the crypto world and experienced investors seeking to lower their trading costs.
Whether you’re just getting started in cryptocurrency or have years of trading experience, XT.com Exchange provides a competitive edge with its low fees and comprehensive trading options. Don’t miss out on this fantastic opportunity—register today using the Referral Code 6QE8B7 and enjoy a 20% discount on trading fees for life!
XT.com Exchange Referral Code 6QE8B7 | Get 20% Off On Trading Fees for LifetimeEnjoy exclusive savings on your trading fees with XT.com Exchange by using the Referral Code 6QE8B7. This unique offer gives you a 20% discount on trading fees for a lifetime, helping you maximize your profits while trading cryptocurrencies on one of the most reliable platforms.XT.com Exchange is known for its user-friendly interface, diverse crypto offerings, and cutting-edge trading tools. By applying this referral code during registration, you unlock long-term savings that enhance your overall trading experience.Here are the key benefits of using the XT.com Exchange Referral Code 6QE8B7:Exchange XT.com ExchangeReferral Code6QE8B7Trading Fee Discount20%Discount DurationLifetimeDate2024-25To start saving, simply sign up on XT.com Exchange using the Referral Code 6QE8B7. Once registered, you’ll instantly benefit from a 20% reduction on all trading fees, allowing you to retain more of your earnings as you trade. This lifetime discount is ideal for both beginner traders entering the crypto world and experienced investors seeking to lower their trading costs.Whether you’re just getting started in cryptocurrency or have years of trading experience, XT.com Exchange provides a competitive edge with its low fees and comprehensive trading options. Don’t miss out on this fantastic opportunity—register today using the Referral Code 6QE8B7 and enjoy a 20% discount on trading fees for life! Read More
SharePoint List – save as Template
There might be a simple answer to this, but some time ago, I created a Classic Site specifically to copy lists to and then save as templates. I needed to do another set recently and found this option is now gone. I can still add Apps from previous templates, but nothing to allow me to save new templates.
Is there a simple solution to this or is this something else from the Classic days that is now disabled ?
There might be a simple answer to this, but some time ago, I created a Classic Site specifically to copy lists to and then save as templates. I needed to do another set recently and found this option is now gone. I can still add Apps from previous templates, but nothing to allow me to save new templates.Is there a simple solution to this or is this something else from the Classic days that is now disabled ? Read More
ARM64 Surface Laptop 7 USB-C charging only with adapters
Hi community
I just bought a new Surface Laptop 7 with Snapdragon Plus CPU and it works fine so far… except USB-C charging is driving me crazy.
Current situation:
the original charger with this snappy surface connector workscharging with 3rd party chargers which support among other things PD 15V 3A does not work via USB-C (no reaction)
Now I realized, that charging works using the exact same 3rd party chargers and charge the Surface Laptop with an HDMI adapter/ USB hub in between! I am talking about adapters, such as from manufactures like U-Green or SATECHI.
Example:
Could someone please look into the issue and fix it to make charging via USB-C reliable without any workarounds? Is this the right place? Or should I mention this issue somewhere else to reach out for support?
Cheers,
Hans
Hi communityI just bought a new Surface Laptop 7 with Snapdragon Plus CPU and it works fine so far… except USB-C charging is driving me crazy.Current situation:the original charger with this snappy surface connector workscharging with 3rd party chargers which support among other things PD 15V 3A does not work via USB-C (no reaction)Now I realized, that charging works using the exact same 3rd party chargers and charge the Surface Laptop with an HDMI adapter/ USB hub in between! I am talking about adapters, such as from manufactures like U-Green or SATECHI.Example: Could someone please look into the issue and fix it to make charging via USB-C reliable without any workarounds? Is this the right place? Or should I mention this issue somewhere else to reach out for support? Cheers,Hans Read More
Manage Copilot for Edge from M365
Hi Everyone,
How can I manage and control teh features of Copilot under my M365 tenant? We would like to enable some features like searching with microphone and picture which are disabled for now but we would like to do that for some users only not for everyone.
Thanks
Hi Everyone, How can I manage and control teh features of Copilot under my M365 tenant? We would like to enable some features like searching with microphone and picture which are disabled for now but we would like to do that for some users only not for everyone. Thanks Read More
Sysmon /operational is not in Event table
Hi Team,
Need to create usecase base on Sysmon /operational and with Event ID = 1. But Sysmon is not configured. Usecase is based on process. It is github usecase. Need to create with the help of defender table.
Windows Binaries Lolbins Renamed
KQL :
Event
| where EventLog =~ “Microsoft-Windows-Sysmon/Operational” and EventID==1
| parse EventData with * ‘Image”>’ Image “<” * ‘OriginalFileName”>’ OriginalFileName “<” *
| where OriginalFileName has_any (procList) and not (Image has_any (procList))
| parse EventData with * ‘ProcessGuid”>’ ProcessGuid “<” * ‘Description”>’ Description “<” * ‘CommandLine”>’ CommandLine “<” * ‘CurrentDirectory”>’ CurrentDirectory “<” * ‘User”>’ User “<” * ‘LogonGuid”>’ LogonGuid “<” * ‘Hashes”>’ Hashes “<” * ‘ParentProcessGuid”>’ ParentProcessGuid “<” * ‘ParentImage”>’ ParentImage “<” * ‘ParentCommandLine”>’ ParentCommandLine “<” * ‘ParentUser”>’ ParentUser “<” *
| summarize StartTime = min(TimeGenerated), EndTime = max(TimeGenerated) by EventID, Computer, User, ParentImage, ParentProcessGuid, ParentCommandLine, ParentUser, Image, ProcessGuid, CommandLine, Description, OriginalFileName, CurrentDirectory, Hashes
| extend HostName = iif(Computer has ‘.’,substring(Computer,0,indexof(Computer,’.’)),Computer) , DnsDomain = iif(Computer has ‘.’,substring(Computer,indexof(Computer,’.’)+1),”)
Now same usecase need to be configured with the help of defender table “DeviceProcessEvents”. But don’t now how to find out Image information which is in Event Table.
Hi Team, Need to create usecase base on Sysmon /operational and with Event ID = 1. But Sysmon is not configured. Usecase is based on process. It is github usecase. Need to create with the help of defender table. Windows Binaries Lolbins RenamedKQL :Event| where EventLog =~ “Microsoft-Windows-Sysmon/Operational” and EventID==1| parse EventData with * ‘Image”>’ Image “<” * ‘OriginalFileName”>’ OriginalFileName “<” *| where OriginalFileName has_any (procList) and not (Image has_any (procList))| parse EventData with * ‘ProcessGuid”>’ ProcessGuid “<” * ‘Description”>’ Description “<” * ‘CommandLine”>’ CommandLine “<” * ‘CurrentDirectory”>’ CurrentDirectory “<” * ‘User”>’ User “<” * ‘LogonGuid”>’ LogonGuid “<” * ‘Hashes”>’ Hashes “<” * ‘ParentProcessGuid”>’ ParentProcessGuid “<” * ‘ParentImage”>’ ParentImage “<” * ‘ParentCommandLine”>’ ParentCommandLine “<” * ‘ParentUser”>’ ParentUser “<” *| summarize StartTime = min(TimeGenerated), EndTime = max(TimeGenerated) by EventID, Computer, User, ParentImage, ParentProcessGuid, ParentCommandLine, ParentUser, Image, ProcessGuid, CommandLine, Description, OriginalFileName, CurrentDirectory, Hashes| extend HostName = iif(Computer has ‘.’,substring(Computer,0,indexof(Computer,’.’)),Computer) , DnsDomain = iif(Computer has ‘.’,substring(Computer,indexof(Computer,’.’)+1),”) Now same usecase need to be configured with the help of defender table “DeviceProcessEvents”. But don’t now how to find out Image information which is in Event Table. Read More
Copy/Paste not working
Hi there i am using windows App on a MacBook Pro M3 and i am using Windows App to connect to a remote server, i have the clipboard settings on bidirectional but i am not able to copy and paste from local to remote as well as remote to local and it does not work at all,
i am on Mac OS 15.0.1 (24A348)
please look into this.
Kind Regards,
Hi there i am using windows App on a MacBook Pro M3 and i am using Windows App to connect to a remote server, i have the clipboard settings on bidirectional but i am not able to copy and paste from local to remote as well as remote to local and it does not work at all, i am on Mac OS 15.0.1 (24A348) please look into this. Kind Regards, Read More
Azure stack HCI VM resourec under another subscription
Hello,
I created a hci VM under another subscription (using script, the GUI not support this).
The VM and related resources under this subscription in a separated resource group.
Unfortunately the details of machine are not shown.
This VM is not listed under the HCI clusterVirtual Machines or Azure VMs. (Only see under resources in RG)
Do you have any idea what is the problem?
As I read this is a supported configuration. (or not?)
Thx
Hello, I created a hci VM under another subscription (using script, the GUI not support this).The VM and related resources under this subscription in a separated resource group.Unfortunately the details of machine are not shown. This VM is not listed under the HCI clusterVirtual Machines or Azure VMs. (Only see under resources in RG)Do you have any idea what is the problem?As I read this is a supported configuration. (or not?) Thx Read More
