Author Archive: Stefan Schörling

Controlling external access to O365

In some scenarios you may want to control how you need to authenticate and also if the service is allowed to be accessed outside of the Company.

Over the last weeks Microsoft has been rolling out some features in preview for Azure AD. With this new functionality you can control granular authentication levels per service.

  • Outlook Web access
  • SharePoint Online and OneDrive

So say you only want to allow OWA outside of the Company with two-factor authentication while SharePoint and OneDrive should be blocked you can now test that scenario in preview.

So to test this out you can follow the steps below

  1. Logon to https://manage.windowsazure.com
  2. Select your AAD AAD_1
  3. Go to your Applications Tab
  4. Select the Application you want Office 365 Exchange Online for an example AAD_2
  5. On the top select Configure, and Enable the Access Rules and then choose your desired behavior, when using the work based rules, you need to define your work locations. AAD_3
  6. Defining your work locations is done by clicking on the link at the bottom.
  7. On the Trusted IPs section, you need to define your IP Addressed that shall be seen as your work locations, here you need to define your public IP Addresses. More on that you can read here: https://azure.microsoft.com/en-us/documentation/articles/multi-factor-authentication-whats-next/#trusted-ips AAD_4
  8. And then when we want to block SharePoint and OneDrive you create a block rule for SharePoint Online.

AAD_5

End users that are trying to access a service that is blocked will get this message when they try to access it.

blocked_access_aad_worklocation

 

Blocking access to SharePoint and OneDrive via web

If you want to block web access to SharePoint or OneDrive in O365 from unmanaged devices you can now do that with Conditional Access in Intune. From the testing I have been doing latley it has been working well for me. Since I enabled it I havent been able to access the services from devices that are not beeing managed.

The only setting we have right now is to block SharePoint. And by blocking SharePoint, OneDrive will automaticlly be blocked. So if you want to block only OneDrive but not SharePoint there is no way of doing that right now.

block_sp_1drv

And just like OWA the message the end user will get is the following when access is being blocked.

blocked_access_ca

Blocking O365 OWA from Unmanaged Devices

If you want to block access to Outlook Web Access in O365 from unmanaged devices you can now do that with Conditional Access in Intune. From the testing I have been doing latley it has been working well for me. Since I enabled it I havent been able to access OWA from devices that are not beeing managed.

 

block_owa

If you try to access OWA from an unmanaged device you will get this response from the service.

blocked_access_ca

TechDays Sweden 2016

In November I will be presenting on Azure Networking at TechDays in Sweden.

http://tdswe.se/session/azure-networking-deep-dive-level-400/ 

People who know me, knows that I have a broad technology background. When I started in the 90ths I started with Red Hat Linux and some early Windows versions, I soon found my way over to working with Cisco and Checkpoint network/security components. So I seem to have some kind of passion for Terminal Windows with a dark background and green text. Probably thats why I also still love IRC.

So over the last 20 years I have taken the journey from 10BASE2 with BNC T-Connectors to Software Defined Networking in Azure.

Moving to a Software Defined World can be challenging for many Network Admins but there are not many configurations I haven’t seen. So I hope to see you at the session where I will be sharing my knowledge together with a friend Johan Dahlbom. Together we hope to give you all you need to know about Azure Networking.

td

Installing bash on Windows 10

Bash was introduced in Windows 10 Build 14316 so to test this feature you need to be on that build or later.

build_14316

To get started you need to Add the Feature for Linux Subsystem

add_feature_linux

Execute bash.exe and bash will start to downloading from the Store

w_10_bash

Once downloaded launch bash from the start menu

launch_bash

If the screen just flashes, you can try to run bash from a normal command prompt. You might be prompted with a bash error 0x800070057 this most likely is because you have set your Command Prompt to execute in Legacy Mode.

w10_bash_error

Once you have unchecked “Use Legacy Console” and relaunched the Commad Prompt you should be able to launch bash.

cmd_legacy

Launch Bash

bash_on_w10

If you want to learn more about running bash in Windows Microsoft has recorded an awesome video to describe this in more detail. You will find the video here.
https://channel9.msdn.com/Events/Build/2016/P488

 

Cloud Definitions

So everyone is talking about Cloud Computing, does Cloud Computing necessary mean that you run your applications or systems in Amazon AWS, Google, Microsoft Azure or any other known cloud you know of?

 The short answer is NO, Cloud Computing is a model build on of characteristics, Service Models and Deployment Models om a combination. 

Cloud Computing Characteristics

  • Self-Service
  • Broad Network Access
  • Resource Pooling
  • Rapid elasticity
  • Measure service

Service Models

  • SaaS
  • PaaS
  • IaaS

Deployment Model

  • Private Cloud
  • Community Cloud
  • Public Cloud
  • Hybrid Cloud

 

NIST (National Institute of Standards and Technology) has written a great definition of Cloud Computing you can read up on on this link.

NIST Cloud Definition (PDF)