I have removed Copilot completely from my PC through the registry settings. That worked and I don’t see Copilot anywhere now; however, I still see this little “Try Copilot Pro” at the top of my Word documents. I realize Microsoft has long had frequent problems with the whole “No Means No” thing and likes to go deaf when it comes to their users and their preferences, but how do I disable this? I got rid of Copilot for a reason and don’t want it constantly shoved in my face.

​I have removed Copilot completely from my PC through the registry settings. That worked and I don’t see Copilot anywhere now; however, I still see this little “Try Copilot Pro” at the top of my Word documents. I realize Microsoft has long had frequent problems with the whole “No Means No” thing and likes to go deaf when it comes to their users and their preferences, but how do I disable this? I got rid of Copilot for a reason and don’t want it constantly shoved in my face.  Read More

​

I have just completed a setup with Azure AVD for remote desktop and an application and I’d like to know if there’s a way to change the authentication or login type when using Azure AVD.  Or if a prompt can be enabled in the settings of AVD.  We only have 10 users spread across 2 AVD VMs.  I have a Windows Server AD virtual machine running in my Azure tenant on the same vnet as the AVD setup.  These were domain joined using the AVD deployment process and assigned to a specific OU in my domain.  My Active Directory is using .local usernames and my Azure tenant does have an authenticated and valid domain for users and email.  I did expand my AD to include the UPN alternative suffixes and I’ve adjusted the accounts so that my Office365 tenant logins match the AD logins.  However, when I connect to my AVD workspace using Remote Desktop App, I cannot connect and it sends an error of 0x83886163 during the configuring gateway process.  The Session Desktop and my app is published properly to the Remote Desktop App, but I simply cannot connect.  

Basically, is it possible to adjust AVD to prompt for a username once I click on the Session Desktop or my published application?  I did locate some authentication settings in the RDP properties and connection information of the host pool.  

Thanks for any suggestions or input.

​I have just completed a setup with Azure AVD for remote desktop and an application and I’d like to know if there’s a way to change the authentication or login type when using Azure AVD.  Or if a prompt can be enabled in the settings of AVD.  We only have 10 users spread across 2 AVD VMs.  I have a Windows Server AD virtual machine running in my Azure tenant on the same vnet as the AVD setup.  These were domain joined using the AVD deployment process and assigned to a specific OU in my domain.  My Active Directory is using .local usernames and my Azure tenant does have an authenticated and valid domain for users and email.  I did expand my AD to include the UPN alternative suffixes and I’ve adjusted the accounts so that my Office365 tenant logins match the AD logins.  However, when I connect to my AVD workspace using Remote Desktop App, I cannot connect and it sends an error of 0x83886163 during the configuring gateway process.  The Session Desktop and my app is published properly to the Remote Desktop App, but I simply cannot connect.   Basically, is it possible to adjust AVD to prompt for a username once I click on the Session Desktop or my published application?  I did locate some authentication settings in the RDP properties and connection information of the host pool.   Thanks for any suggestions or input.  Read More

​

Learn more about monitoring database availability for Azure SQL Database using the SLA compliant availability metric.

Watch on Data Exposed 

Resources:

Azure SQL DB availability portal metric

Monitoring Azure SQL Database with metrics and alerts – Azure SQL Database

View/share our latest episodes on Microsoft Learn and YouTube!

​Microsoft Tech Community – Latest Blogs –Read More 

Hello,

I’m using some common files between MSIX packages. When I install them, the OS attaches permissions from separate MSIX packages in both packages.

All of the package files, after install, the file security properties show in |Condition| column: (WIN://SYSAPPID Contains “package name) for both packages that share some of the same files.

It has been difficult to see where the problem affects the applications but each runs a jvm client and server that is part of each package. The common error is “JAVA SocketException” – the client connects ok but the server does not. The COM seems to be ok but still checking.

I found strange listings in Registry Editor HKLMSYSTEMCurrentControlSetControlhivelist. They are in the REGISTRYWCSilo*** registries that I believe are the virtual registries for the MSIX package. A well functioning application will only have one registry *.dat entry for:

DeviceHarddiskVolume*users<username>AppDataLocalPackages<packagename>SystemAppDataHeliumUserClasses.dat and …User.dat

I get the JAVA SocketException error when the virtual registry also includes:

DeviceHarddiskVolume*users<username>AppDataLocalPackages<packagename><CLSID?>SystemAppDataHeliumCache<cacheID>UserClasses.dat and …User.dat

Not sure why it is pulling the userclasses.dat and user.dat from a Cache? The caches are different for each package but seems to be causing the SocketException problems. The cache UserClass.dat and User.dat are in addition to the non-cache .dat files.

Any help would be appreciated.

Thanks.

​Hello,I’m using some common files between MSIX packages. When I install them, the OS attaches permissions from separate MSIX packages in both packages.All of the package files, after install, the file security properties show in |Condition| column: (WIN://SYSAPPID Contains “package name) for both packages that share some of the same files.It has been difficult to see where the problem affects the applications but each runs a jvm client and server that is part of each package. The common error is “JAVA SocketException” – the client connects ok but the server does not. The COM seems to be ok but still checking.I found strange listings in Registry Editor HKLMSYSTEMCurrentControlSetControlhivelist. They are in the REGISTRYWCSilo*** registries that I believe are the virtual registries for the MSIX package. A well functioning application will only have one registry *.dat entry for:DeviceHarddiskVolume*users<username>AppDataLocalPackages<packagename>SystemAppDataHeliumUserClasses.dat and …User.datI get the JAVA SocketException error when the virtual registry also includes:DeviceHarddiskVolume*users<username>AppDataLocalPackages<packagename><CLSID?>SystemAppDataHeliumCache<cacheID>UserClasses.dat and …User.datNot sure why it is pulling the userclasses.dat and user.dat from a Cache? The caches are different for each package but seems to be causing the SocketException problems. The cache UserClass.dat and User.dat are in addition to the non-cache .dat files.Any help would be appreciated.Thanks.  Read More

​

An Active Directory was configured on Windows Server 2022 STD, the software blocking policy works correctly on Windows 10, however on Windows 11 the same policy is not applied correctly.

Checking, I found an article where it says exactly that there is an incompatibility.

Here is the link to the article:
Windows 11 22H2 no longer supports Software Restriction Policies (SRP) | Born’s Tech and Windows World (borncity.com)

Video link testing on Windows 10/Windows Server : https://drive.google.com/file/d/1AnwBjoRkZfp3SvqzNIRP9FNZvDH3IzSy/view?usp=sharing

Video link testing on Windows 11:
https://drive.google.com/file/d/1kRP0c1zxn0LI9m-T2-KLytgdTzJybd8V/view?usp=sharing

Any ideas on how to get around this problem?

​An Active Directory was configured on Windows Server 2022 STD, the software blocking policy works correctly on Windows 10, however on Windows 11 the same policy is not applied correctly.Checking, I found an article where it says exactly that there is an incompatibility.Here is the link to the article:Windows 11 22H2 no longer supports Software Restriction Policies (SRP) | Born’s Tech and Windows World (borncity.com)  Video link testing on Windows 10/Windows Server : https://drive.google.com/file/d/1AnwBjoRkZfp3SvqzNIRP9FNZvDH3IzSy/view?usp=sharingVideo link testing on Windows 11:https://drive.google.com/file/d/1kRP0c1zxn0LI9m-T2-KLytgdTzJybd8V/view?usp=sharingAny ideas on how to get around this problem?   Read More

​

Hello Microsoft Team and Community,

Recently, my company performed a Root Cause Analysis regarding a maintenance activity which failed.  During the RCA, the team performed a few exercises to map the contributing causes and one of the identified challenges reported was the lack of dashboards which show multiple data elements in the same view (Like compliance policy and configuration policy). This functionality would have been great to review post implementation to quickly identify a change which was causing devices to fail compliance checks and would have been a game changer.

Is it possible to request synch-all device functionality to be added to the endpoint manager?

​Hello Microsoft Team and Community,Recently, my company performed a Root Cause Analysis regarding a maintenance activity which failed.  During the RCA, the team performed a few exercises to map the contributing causes and one of the identified challenges reported was the lack of dashboards which show multiple data elements in the same view (Like compliance policy and configuration policy). This functionality would have been great to review post implementation to quickly identify a change which was causing devices to fail compliance checks and would have been a game changer. Is it possible to request synch-all device functionality to be added to the endpoint manager?  Read More

​

I have successfully created a Blazor Web App Server Side, and I am able to authenticate with Azure AD using the .AddMicrosoftAccount()

builder.Services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
.AddCookie()
.AddMicrosoftAccount(config =>
{
builder.Configuration.GetSection(“Authentication:Microsoft”).Bind(config);

config.Events = new Microsoft.AspNetCore.Authentication.OAuth.OAuthEvents
{
OnCreatingTicket = async context =>
{
var user = context.Principal;
var claimIdentity = user.Identity as ClaimsIdentity;
var rolesClaim = user.Claims.FirstOrDefault(c => c.Type == ClaimTypes.Role);

var role = user.IsInRole(“Admin”);
if (rolesClaim != null)
{
var claims = rolesClaim.Value.Split(new[] { ‘|’ }, StringSplitOptions.RemoveEmptyEntries);
foreach (var claim in claims)
{
claimIdentity.AddClaim(new Claim(ClaimTypes.Role, claim));
}
}

await Task.CompletedTask;
}
};
});

 But it’s not returning the roles claim with the attached roles for the user.  The roles are setup correctly in Azure.

I’ve searched high and low on the internet for something that would give me a clue as to where to go.  I’ve tried using OpenId, and the roles get returned there, but I can’t seem to use them in components.

How do I get these roles using the .AddMicrosoftAccount() method?

​I have successfully created a Blazor Web App Server Side, and I am able to authenticate with Azure AD using the .AddMicrosoftAccount()builder.Services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
.AddCookie()
.AddMicrosoftAccount(config =>
{
builder.Configuration.GetSection(“Authentication:Microsoft”).Bind(config);

config.Events = new Microsoft.AspNetCore.Authentication.OAuth.OAuthEvents
{
OnCreatingTicket = async context =>
{
var user = context.Principal;
var claimIdentity = user.Identity as ClaimsIdentity;
var rolesClaim = user.Claims.FirstOrDefault(c => c.Type == ClaimTypes.Role);

var role = user.IsInRole(“Admin”);
if (rolesClaim != null)
{
var claims = rolesClaim.Value.Split(new[] { ‘|’ }, StringSplitOptions.RemoveEmptyEntries);
foreach (var claim in claims)
{
claimIdentity.AddClaim(new Claim(ClaimTypes.Role, claim));
}
}

await Task.CompletedTask;
}
};
}); But it’s not returning the roles claim with the attached roles for the user.  The roles are setup correctly in Azure. I’ve searched high and low on the internet for something that would give me a clue as to where to go.  I’ve tried using OpenId, and the roles get returned there, but I can’t seem to use them in components. How do I get these roles using the .AddMicrosoftAccount() method?  Read More

​

In MS Purview, editing a data product requires unpublishing EVERY child asset.  We needed to edit a simple description and had to unpublish every glossary term to republish.  Huge room for manual error and is time consuming.

Can this be fixed so that either:

it will not be necessary to unpublish every child or

there is a quick way in the UI to unpublish multiple assets?

Thoughts of others on this forum?

​In MS Purview, editing a data product requires unpublishing EVERY child asset.  We needed to edit a simple description and had to unpublish every glossary term to republish.  Huge room for manual error and is time consuming.Can this be fixed so that either:it will not be necessary to unpublish every child orthere is a quick way in the UI to unpublish multiple assets?Thoughts of others on this forum?  Read More

​