Lync vNext - Official Info

From the link below:


In the first half of 2015, the next version of Lync will become Skype for Business with a new client experience, new server release and updates to the service in Office 365.  We believe that Skype for Business will again transform the way people communicate by giving organizations reach to hundreds of millions of Skype users outside the walls of their business.


The whole story here: http://blogs.office.com/2014/11/11/introducing-skype-business/

TreeUndelete

A long time ago I wrote a script that restored a whole tree of objects, basically it restored an OU and all objects that belonged to that OU. The first time I showed it was in a session at Microsoft TechDays in Örebro 2010. After that, it served me well over the years, even though it didn’t have error handling and other good stuff. But since I was the only one using it and knew how the script worked – it was ok J

This year I presented at a conference in Åre and showed the script once again. Since people liked it, I wanted to post it somewhere but didn’t feel comfortable since it lacked a lot of features. Getting the time to fix it was hard but my colleague and friend Simon Wåhlin (who has forgotten more about Powershell than I know today) did re-write it and has now published it.

If you want to see a cool script, check it out here: http://blog.simonw.se/restore-ou-tree-from-ad-recycle-bin-with-powershell/

 

AD ACL Scanner

A tool completly written in PowerShell.

A tool with GUI used to create reports of access control lists in Active Directory .

https://adaclscan.codeplex.com/

Features

It has the following features:

• View HTML reports of ACLs and save it to disk.
• Export ACLs on Active Directory objects in a CSV format.
• Connect and browse you default domain, schema , configuration or a naming context defined by distinguishedname.
• Browse naming context by clicking you way around, either by OU’s or all types of objects.
• Report only explicitly assigned ACLs.
• Report on OUs , OUs and Container Objects or all object types.
• Filter ACLs for a specific access type.. Where does “Deny” permission exists?
• Filter ACLs for a specific identity. Where does "Domain\Client Admins" have explicit access? Or use wildcards like "jdoe".
• Filter ACLs for permission on specific object. Where are permissions set on computer objects?
• Skip default permissions (defaultSecurityDescriptor) in report. Makes it easier to find custom permissions.
• Report owner of object.
• Compare previous results with the current configuration and see the differences by color scheme (Green=matching permissions, Yellow= new permissions, Red= missing permissions).
• Report when permissions were modified
• Can use AD replication metadata when comparing.
• Can convert a previously created CSV file to a HTML report.
• Effective rights, select a security principal and match it agains the permissions in AD.
• Color coded permissions based on criticality when using effective rights scan.
• List you domains and select one from the list.
• Get the size of the security descriptor (bytes).
• Rerporting on disabled inheritance .
• Get all inherited permissions in report.

System requirements

• Powershell 2.0 or above
• PowerShell using a single-threaded apartment

Last edited Oct 12 at 9:16 PM by robing, version 13

Windows 10: Enterprise Features & Core Experience for Businesses

Attributes synchronized to Azure AD

http://msdn.microsoft.com/en-us/library/azure/dn764938.aspx

From above link:

--snip--
With Azure AD Sync, you can remove individual attributes from being synchronized.
Some services might not behave as expected when certain attributes are removed. The affected attributes are listed with their Active Directory LDAP name in the Install the AADSync Service.
There are also some attributes that might be listed with a different name in other interfaces. For example, the attribute l from Active Directory is tracked as city in Azure AD.
--snip--

Follow the link on top to see the full article, it is very useful.

MVP Award

Awarded MVP for the 17th year!


Dear Jimmy Andersson,

Congratulations! We are pleased to present you with the 2014 Microsoft® MVP Award!


 

Comparison of Microsoft's sync tools to the cloud.

Below are a comparison (copy/pasted from the source) of the different Sync tools from Microsoft. It was updated on September 5, 2014. To be absolutely updated go to http://msdn.microsoft.com/en-us/library/azure/dn798669.aspx since things will change over time.

On-Premises to Cloud Synchronization

 

Feature	Azure Active Directory Synchronization Tool (DirSync)	Azure Active Directory Synchronization Services (AAD Sync)	Forefront Identity Manager 2010 R2 (FIM)
Connect to single on-premises AD forest	X	X	X
Connect to multiple on-premises AD forests		X	X
Connect to single on-premises LDAP directory (no AD at all)		CS	X
Connect to multiple on-premises LDAP directories		CS	X
Connect to on-premises AD and on-premises LDAP directories		CS	X
Connect to custom systems (i.e. SQL, Oracle, MySQL, etc.).		CS	X
Synchronize customer defined attributes (directory extensions)	CS	CS

Cloud to On-Premises Synchronization

Feature	Azure Active Directory Synchronization Tool (DirSync)	Azure Active Directory Synchronization Services (AAD Sync)	Forefront Identity Manager 2010 R2 (FIM)
Write-back of devices	X	CS
Attribute write back (for Exchange hybrid deployment )	X	X	X
Write-back of users, groups objects	CS	CS
Write-back of passwords (from SSPR and password change)	CS	CS
Write-back of customer defined attributes (directory extensions)	CS	CS

Authentication Feature Support

Feature	Azure Active Directory Synchronization Tool (DirSync)	Azure Active Directory Synchronization Services (AAD Sync)	Forefront Identity Manager 2010 R2 (FIM)
Password Hash Sync for single on-premises AD forest	X	CS
Password Hash Sync for multiple on-premises AD forests		CS
Federation (SSO)	X	X	X

Set-up and Installation

Feature	Azure Active Directory Synchronization Tool (DirSync)	Azure Active Directory Synchronization Services (AAD Sync)	Forefront Identity Manager 2010 R2 (FIM)
Supports installation on a Domain Controller	X	X
Supports installation using SQL Express	X	X
Step-up from DirSync to AADSync
Localization Windows Server languages)	X	CS
Support for Windows Server 2008 and Windows Server 2008 R2	X	X	X
Support for Windows Server 2012 and Windows Server 2012 R2	X	X

Filtering and Configuration

Feature	Azure Active Directory Synchronization Tool (DirSync)	Azure Active Directory Synchronization Services (AAD Sync)	Forefront Identity Manager 2010 R2 (FIM)
Filter on Domains and Organizational Units	X	X	X
Filter on attribute values on objects	X	X	X
Allow minimal set of attributes to be synchronized "MinSync"		X
Allow different service templates to be applied for attribute flows		X
Allow removing attributes from flowing from AD to AAD		X
Allow advanced customization for attribute flows		X	X

Powershell -DomainMode and -ForestMode

When you use PowerShell to install a new forest. The values for -DomainMode and -ForestMode are the following:

     -- Windows Server 2003: 2 or Win2003
     -- Windows Server 2008: 3 or Win2008
     -- Windows Server 2008 R2: 4 or Win2008R2
     -- Windows Server 2012: 5 or Win2012
     -- Windows Server 2012 R2: 6 or Win2012R2

You can use the numeric value or you can write it in text as shown above.

Azure IaaS Cost Estimator Tool

Until now, when evaluating datacenter compute resources and estimating costs in the cloud has been a challenge. Typically we’re looking at a physical or virtual machine configuration such as CPU size, memory, disk space and so on. However, there are other resources that are more difficult to estimate such as bandwidth usage, storage transactions, and estimated future capacity.

Imagine having 50, 100, or more servers. Performing estimates for 100’s of servers would not only be time consuming, it would be difficult because we’re only looking at a snapshot in time. We know over the course of a day or week a server’s consumption model of resources will change. We may end up missing critical information that could end up in underestimating the cost of a VM or service in the cloud. Underestimating resources could lead to unexpected charges. Not an ideal situation when we’re looking to either reduce costs or migrate resources to the cloud.


You will find the tool and more information here: http://blogs.technet.com/b/cbernier/archive/2014/08/05/microsoft-azure-iaas-cost-estimator-tool.aspx

Azure AD Connect

Microsoft created the Azure AD Connect to help you easily connect your on-premises Windows Server Active Directory to your tenant in Azure Active Directory with only 4 clicks!

To learn more visit our documentation at http://technet.microsoft.com/en-us/library/dn776280.aspx and the Active Directory Team Blog at http://blogs.technet.com/b/ad/archive/2014/08/04/connecting-ad-and-azure-ad-only-4-clicks-with-azure-ad-connect.aspx.

Difference between changing a password and reset a password

In all my years working with security there is a common misunderstanding about change a password and reset a password. The latter is also one of the big security issues in most companies - but they don't realize it...

Sanjay Tandon (Founder and CEO of Paramount Defenses Inc. And former MS blue badge) has written a great article about it. If you are working with AD and security, you should read this article, and the other ones he has published as well...

You find it here: http://www.active-directory-security.com/2014/06/Active-Directory-Account-Password-Security-101-For-Regulatory-Compliance-Auditors-The-Difference-Between-Change-Password-and-Reset-Password.html

Azure AD Premium - 90 day trial!!

http://blogs.technet.com/b/ad/archive/2014/06/24/news-free-90-day-trials-of-azure-active-directory-premium-now-with-2035-saas-app.aspx

From the above site:

Just a quick note today.  I'm happy to let you know that we've just turned on free trials of Azure Active Directory Premium. Now you can get a free 90 day trial of Azure AD Premium for up to 100 users.
....
And I've got one other bit of cool news to share.  As of last weekend, Azure AD is now pre-integrated with 2035 SAAS Applications.  The team has been kicking it over the past several month, adding on average 120 new apps a week!


Start to learn!

New ADMT version

The Directory Service Team has released the newest version of ADMT that now support Server 2012/2012 R2.
http://www.microsoft.com/en-us/download/details.aspx?id=19188

If you use Visio and PowerPoint and need Azure Symbols/Icon Set

Hi,

I use Visio and PowerPoint on a regular basis, there is a package with icons and symbols available on the MS Download site that contains Azure related Technologies that you can use.

You'll find it here: http://www.microsoft.com/en-us/download/confirmation.aspx?id=41937

Password Write Back, New AAD Sync and Multi-forest support

There are new capabilities coming for Azure Active Directory synchronization!

Read more about it here:
http://blogs.technet.com/b/ad/archive/2014/04/21/new-sync-capabilities-in-preview-password-write-back-new-aad-sync-and-multi-forest-support.aspx

Latest Win 8.1 Update - the information you need

I've been searching about details about the latest Win 8.1 update. And the best reference I've found is here:

 http://blogs.technet.com/b/askpfeplat/archive/2014/04/07/exploring-windows-8-1-update-start-screen-desktop-and-other-enhancements.aspx

It is great information and a "one-stop-shop" since it has links to further information.

Active Directory Windows Time Service Functions

A good PDF about Windows Time Service Functions.

http://gallery.technet.microsoft.com/Active-Directory-Windows-24014571

Software-Defined Networking with Windows Server and System Center Jump Start

Is your infrastructure outgrowing your current networking strategy? Want to simplify the process for managing your datacenter? Software-defined networking (SDN) can streamline datacenter implementation through self-service provisioning, take the complexity out of network management, and help increase security with fully isolated environments. Intrigued? Bring specific questions, and get answers from the team who built this popular solution!

More information: http://www.microsoftvirtualacademy.com/liveevents/software-defined-networking-with-windows-server-and-system-center-jump-start#?fbid=pIqPeldRtsY

Windows Azure now allows to set fixed IP-addresses for virtual machines

Untill recently IP-addresses of Azure virtual machines were not static/fixed. A VM which had been shutdown (for example to reduce costs, think test/dev scenario’s) could receive a different IP-address at boot than orginally assigned at creation. This leads to all kinds of issues. A new Powershell for Azure version solves this issue.


Read more here:

http://up2v.nl/2014/03/05/windows-azure-now-allows-to-set-fixed-ip-addresses-for-virtual-machines/

Twenty-five years chasing the dream of enterprise social networking.

A very interesting read, made me think...

http://thoughtsofanidlemind.com/2014/03/04/twenty-five-years-chasing-the-dream-of-enterprise-social-networking/

Exchange 2013 SP1

Exchange 2013 SP1 is now available here: http://www.microsoft.com/en-us/download/details.aspx?id=41994

Read more on the Exchange Team blog: http://blogs.technet.com/b/exchange/archive/2014/02/25/exchange-server-2013-service-pack-1-available.aspx

Service Pack 1 for Microsoft Office 2013 32-Bit Edition

Service Pack 1 for Microsoft Office 2013 32-Bit Edition contains new updates which improve security, performance, and stability. Additionally, the SP is a roll-up of all previously released updates. 

Download: http://www.microsoft.com/en-us/download/details.aspx?id=42017

IT Infrastructure Weekend - Teaser

Multi-Factor Authentication for Office 365

MS is adding Multi-Factor Authentication for Office 365 to Office 365 Midsize Business, Enterprise plans, Academic plans, Nonprofit plans, and standalone Office 365 plans, including Exchange Online and SharePoint Online. This will allow organizations with these subscriptions to enable multi-factor authentication for their Office 365 users without requiring any additional purchase or subscription.

Read more:
http://blogs.office.com/2014/02/10/multi-factor-authentication-for-office-365/

HP to begin charging for firmware updates and service packs for servers

HP server customers are about to get an unwelcome surprise when they need to update firmware or apply a service pack. Effective later this month, those downloads, which often fix critical bugs, will require either a current warranty or an extended support agreement.

http://www.techinvestornews.com/HP/HP-Enterprise/hp-to-begin-charging-for-firmware-updates-and-service-packs-for-servers#.UvsaodKx654.facebook

HP tar betalt för firmware-uppdateringar

Läs mer här:

http://www.idg.se/2.1085/1.546432

Powershell event invitation

Powershell Event!
http://www.knowledgefactory.se/powershell-event/

Injecting Logon Credentials With PowerShell

Find the information here: http://clymb3r.wordpress.com/2013/11/17/injecting-logon-credentials-with-powershell/#!