Notes

Blob Storage authentication - Azure AD and SAS
File Storage authentication - SAS only

Persistent and unstructured - Azure Files

When you create an Availability Set, the hardware in a location is divided into multiple update domains and fault domains. During scheduled maintenance, only one update domain is updated at any given time. Update domains aren't necessarily updated sequentially. So, we need two update domains.

First action: Create a Storage Sync Service
The deployment of Azure File Sync starts with placing a Storage Sync Service resource into a resource group of your selected subscription.
Second action: Install the Azure File Sync agent
The Azure File Sync agent is a downloadable package that enables Windows Server to be synced with an Azure file share.

Object storage data tiering between hot, cool, and archive is supported in Blob Storage and General Purpose v2 (GPv2) accounts. General Purpose v1 (GPv1) accounts don't support tiering.

Since it is using "net use" where it uses SMB, the SMB (Server Message Broker) protocol does not support SAS. it still asks for username/password. Accordingly, it will give error wrong username/pass and will not provide access.

The lifecycle management feature is available in all Azure regions for general purpose v2 (GPv2) accounts, blob storage accounts, premium block blobs storage accounts, and Azure Data Lake Storage Gen2 accounts.



Install the Azure File Sync agent on server1
Register server1
Add a server endpoint

Zone-redundant storage (ZRS) replicates your data synchronously across three storage clusters in a single Region.
ZRS only support GPv2.

GRS and RA GRS use asynchronous replication.


Azure Import/Export service to copy files - Dataset csv and driveset csv

From the Recovery Service vault, stop the backup of each backup item

Note: Only VM and Fileshare is allowed to Backup.

[storageaccountname].file.core.windows.net/[FileShareName]

- LRS has 3 copies of data
- Access tier has the "cool" option to store infrequently accessed data.

AzCopy is a command-line utility that you can use to copy blobs or files to or from a storage account.


AzCopy does not support table and queue storage services.

1. Conditional Access policies are configured from the Azure AD Security settings page and not from the MFA settings page
2. MFA - Since it is not possible to change the usage model of an existing provider as it is right now, you have to create a new one and reactivate your existing server with activation credentials from the new provider.


3. A Point-to-Site (P2S) VPN gateway connection lets you create a secure connection to your virtual network from an individual client computer.
4. If you want to use the backend port across multiple rules, you must enable Floating IP in the rule definition.
5. You should restore the VM to a new Azure VM
6. Azure Monitor - find the cause of the performance issues pertaining to metrics on the Azure infrastructure.
Add a custom name
Add a record to the public contoso.com DNS Zone
Verify the domain


You need to ensure that records created in the contoso.com zone are resolvable from the internet - Modify the NS records in the DNS domain registrar.

Logic App Contributor: Lets you manage (create, edit and delete) logic apps, but you can't change access to them

roletype, assignable scope


DevTest Labs User role only lets you connect, start, restart, and shutdown virtual machines in your Azure DevTest Labs.
The Logic App Contributor role lets you manage logic app, but not access to them. It provides access to view, edit, and update a logic app.


subscription/subscriptionID/resourceGroup ---- Microsoft.Authorization/*