The video and slides for my Ignite session ‘THR2148 Experiences with going password-less’ are now available

Microsoft Ignite

In this blogpost, let’s look back at my second theater session. I presented the session ‘THR2148 Experiences with going password-less’ on Thursday afternoon September 27th between 2:50 PM and 3:10 PM.

This year’s Microsoft Ignite was a special one. I was a featured theater speaker. I conducted two theater sessions. Both had 1000+ registered attendees, while the theaters were equipped with a mere 88 seats and 12 bar stools.

That wasn’t a problem during Microsoft Ignite, because every registered attendee and everyone who was logged into the Microsoft Tech Community could live stream it. It’s not a problem today, either, because you can now replay the session at your convenience and download the slides.

 

Watch the video

Watch the video recording below:

If you’d rather watch me present and get a feel of the ambiance, then I recommend watching Raymond Comvalius’ recording below. With 8 minutes of video, it’s not a complete recording. It was never intended to be a complete recording, but it does provide an overview of the fun we had during the session:

 

Download the slides

Download the slides here.
Log on with your Microsoft Tech Community account. If you don’t have one, sign up for one, for free. In the right column, right-click the Download Video link and select Save target as from the context menu.

 

Further Reading

THR2148 – Experiences with going password-less
Pictures of Microsoft Ignite 2018
I’m staffing a Community Booth at two Community Social events at Ignite 2018
Identity-related sessions at Microsoft Ignite 2018 in Orlando
I’m a Microsoft Ignite 2018 Featured Speaker

Posted on October 13, 2018 by Sander Berkouwer in Community, Microsoft MVP, Personal

0  

The video and slides for my Ignite session ‘THR2214 Hardening your Azure Active Directory tenant’ are now available

Microsoft Ignite

In this blogpost, let’s look back at my first theater session. I presented the session ‘THR2214 Hardening your Azure Active Directory tenant’ on Monday evening September 24th between 6:25 PM and 6:45 PM, during Microsoft Ignite 2018’s Welcome Reception.

This year’s Microsoft Ignite was a special one. I was a featured theater speaker. I conducted two theater sessions. Both had 1000+ registered attendees, while the theaters were equipped with a mere 88 seats and 12 bar stools.

That wasn’t a problem during Microsoft Ignite, because every registered attendee and everyone who was logged into the Microsoft Tech Community could live stream it. It’s not a problem today, either, because you can now replay the session at your convenience and download the slides.

Watch the video

Watch the (unfortunately incomplete) video recording below:

Unfortunately, the video shows the first 17 recorded minutes of the theater session.

 

Download the slides

Download the slides here.
Log on with your Microsoft Tech Community account. If you don’t have one, sign up for one, for free. In the right column, right-click the Download Video link and select Save target as from the context menu.

 

Further Reading

THR2214 – From the trenches: Hardening your Azure Active Directory tenant
Pictures of Microsoft Ignite 2018
I’m staffing a Community Booth at two Community Social events at Ignite 2018
Identity-related sessions at Microsoft Ignite 2018 in Orlando
I’m a Microsoft Ignite 2018 Featured Speaker

Posted on October 13, 2018 by Sander Berkouwer in Community, Microsoft MVP, Personal

0  

I’m speaking at Microsoft Sinergija 18

Microsoft Sinergija 18 - Digital breakthrough

I received a message from Microsoft Serbia on an opportunity to speak at its yearly Sinergija event at the Crowne Plaza hotel and conference center in Belgrade on October 24th and October 25th 2018; An event, a Microsoft subsidiary and a country with an extensive legacy and rich heritage.

Readers of my blog in this region will be happy to know that I’ll be able to provide a learning opportunities on Windows, Windows Server, Active Directory and Azure Active Directory during this event.

 

About Microsoft Sinergija

Each year, Microsoft Serbia organizes an IT conference to update IT professionals and developers from the region with Microsoft news, experiences and partner efforts.

The first Sinergija event in 2001, was quickly superseded by Sinergija 02 in 2002. Subsequent Sinergija events all had a version number corresponding to the year in which they were organized. Sinergija 05 was the first Sinergija event with a tagline. After 05, all Sinergija events had tag lines. Sinergija 18’s tagline is ‘Digital breakthrough’.

Microsoft Sinergija consists of two elements: Technical Days (October 24th and October 25th, 2018) and the Business Day (October 26th).

 

About my session

I’ll present one 60-minute level 300 session at Microsoft Sinergija 18:

How to go Password-less

Wednesday October 24th, 5:30PM – 6:30PM, room Atlantic 1

Windows Hello, Windows Hello for Business, their companion device framework and strategic alignment with FIDO offer organizations the ability to go password-less for both interactive logons and application access. Bring your own FIDO and get the best tips and tricks in this theater session from an MVP whose team and peers have implemented federation, multi-factor authentication, Windows Hello and FIDO 2.0 CTAP for organizations already.

 

Join me!

Sign in with your Microsoft ID, and register for Microsoft Sinergija 18.
As this year’s Sinergija website is completely available in English, too, you’ll have no trouble registering for this year’s biggest IT event in Serbia.

Posted on October 10, 2018 by Sander Berkouwer in Community, Microsoft MVP, Personal

0  

I’m featuring on Paramount Defenses’ list of Notable Names in the AD and AD Security Space

Last week I received a message from Sanjay Tandon from Paramount Defenses. In his message, he notified me of my name being added to the list of notable names in the Active Directory (AD) / AD security space:

Hi Sander, Sanjay here.

 

I just stopped by to say that I really appreciate all the effort you’ve put in over the years to help the community. Whether it be sharing knowledge on your blogs or staffing a booth at Ignite, your efforts are clearly evident and appreciated.

 

In fact, to express my appreciation of a few folks, last week I penned a little post titled A Few Notable Folks in the Active Directory Space, and you’re on the list!

 

Thank you again for all your efforts over the years, and all the best for the future.

Best wishes,

 

Sanjay

 

About Paramount Defenses

Paramount Defenses LogoParamount Defenses Inc. is a privately held IT security company engaged in the development of tactical and strategic, national and corporate, cyber security defenses that address paramount global IT security needs. It was founded in 2006 by Sanjay Tandon, formerly a Program Manager for Active Directory Security on the Microsoft Corp. Windows Server Development Team, based in Redmond, Washington.

Paramount Defenses offers consultancy services and sells the much appraised Gold Finger tool, that allows you to audit effective access and delegation in Active Directory.

 

I feel it’s an honor to make it to the list of currently twenty names.

As you’d expect, many of my friends are on the list, including the likes of (former) Microsoft Most Valuable Professionals Joe Richards, Christoffer Andersson, Santhosh Sivarjan, Jorge de Almeida Pinto, Jimmy Andersson, Mark Parris and Brian Desmond, notable Active Directory trainers like John Savill and John Craddock and many others like Brian Puhl.

Thank you! Smile

Posted on October 9, 2018 by Sander Berkouwer in Community, Microsoft MVP, Personal, Veeam Vanguard

0  

Pictures of the KNVI IT Infra Day of the Year 2018 ‘Roast the Cloud’

KNVI SIG IT Infra

On Wednesday October 3rd, The KNVI SIG IT Infra organized its yearly event.

From 9AM onwards, IT Professionals were welcome at the Postillion Hotel in Bunnik, the Netherlands for a day filled with technical sessions, started off with a keynote and ending with a playful high note in the form of the ‘Roast the Cloud’ keynote, a networking clinic and, of course, drinks.

The Night Before: Brainstorming (click for larger picture)The Night Before: Brainstorming (click for larger picture)

As we wanted to pick up on all the latest news, we gathered at the Postillion Hotel the night of Tuesday October 2nd. We heard the news that Microsoft tried its first attempt at releasing Windows 10 version 1809 and Windows Server 2019 and couldn’t be happier with the news for our event. We decided to take it into account for our three panel sessions ‘Keep Out of the Cloud’, ‘Everything to the Cloud’ and ‘Roast the Cloud’.

Tom Dalderup opening the IT Infra Day of the Year (click for larger photo)A Big Audience for Ron Onrust (click for larger photo)

I stayed the night and woke up rested to meet all the attendees. A grand total of 86 attendees joined us for an informal breakfast, opening words by Tom Dalderup and the main keynote by Ron Onrust on his YouTube adventures.

Ruben presenting on Modern Desktop Virtualization in a Cloud First World (click for larger picture)Martijn Bellaard presenting on the Internet of Things, the Cloud and Privacy (click for larger photo)Erwin Derksen on Office 2016 and Office 2019 Click to Run (click for larger photo)

As the day progressed, our speakers, including Ruben Spruijt, Adnan Hendricks, Jeff Wouters, Rob de Groot, Tim Heiland, André Hoeksma, Rienk van der Ploeg and Martijn Bellaard presented their 45-minute sessions.

The Guys In The Back (click for larger photo)Roast The Cloud (click for larger photo)Erwin's Laptop with his 'Roast the Cloud' notes (click for larger photo)

Then, it was time for the grand finale. In 45 minutes, Raymond Comvalius, Erwin Derksen, Alex de Jong and I tore apart each other and the cloud, with large amounts of humor. A typical roast, following Comedy Central’s famed formula.

Rob Tol, who provided the pre-drinks networking clinic, asked if he could hire us for another event. I had a couple of drinks and then headed home with a big smile on my face.

 

Thank you!

Thanks to all the people attending the KNVI IT Infra Day of the Year, the people laughing at the ‘Roast the Cloud’, even though our jokes were lame and not that funny. Thanks to the IT Infra team for making this year’s event fabulous, even though I didn’t give you the nicest compliments during the roast.

‘till next year! Be right back 

  

Further reading

We’re organizing the Event of the Year with the KNVI SIG IT Infra
I’m an organizer of Ngi-NGN’s Windows 10 and Windows Server 2016 event
Pictures of Ngi-NGN’s Windows 10 event

Posted on October 8, 2018 by Sander Berkouwer in Community, Microsoft MVP, Personal

0  

Pictures of Microsoft Ignite 2018

A Picture at the Microsoft Wall, behind the Mechanics Studio (click for larger photo)

Last week, I was part of Microsoft Ignite 2018 in Orlando, Florida. Both as a speaker and a community booth host, I added to Microsoft’s biggest annual technology event targeted at IT Professionals.

Early morning sky just outside the door at home (click for original photo)Two out of three seats on an exit row... I can get used to this (click for larger photo)

I left home early in the morning of Saturday September 22 for two Delta flights that would take me to New York and then to Orlando.

Enjoying colorful drinks at LaFayette's (click for larger photo)

As I arrived, I met up with a couple of other MVPs in the lobby of the Hyatt who had planned to go out for dinner in the Pointe Orlando area. We ended up at LaFayette’s.

On Sunday, we had a pre-day planned, followed by a party at Bahama Breeze with the folks from Microsoft Netherlands and people for Dutch organizations attending Ignite.

Show and tell of Fido2 keys at Microsoft Ignite (click for larger photo)

As we talked about Identity, we decided to perform a ‘show and tell of keys’ to see what people are using today in terms of FIDO2. Honestly… it was the only picture I took on Sunday.

Ignite Keynote Priority Seating service for Microsoft MVPs and Regional Directors (click for larger photo)An Early Morning in Orlando for the Ignite Keynote (click for larger photo)The Microsoft Ignite Keynote with Aleksandar and Robert (click for larger photo)

Monday morning, I had to get out of bed early to grab some breakfast before we got seated as part of the MVP Priority Seating benefit, in the front rows of the Ignite Keynote by Satya Nadella. I was seated with Aleksandar Nikolic and Robert Smit.

Presenting on Hardening Azure AD (click for larger photo by Darren Mar-Elia)Presenting on Hardening Azure AD (click for larger photo by Darren Mar-Elia)Presenting on Hardening Azure AD (click for larger photo by Darren Mar-Elia)

During the Welcome Reception at the Ignite Expo Hall, I had the opportunity to present a 20-minute session on hardening Azure AD tenants. Especially when you have an older Azure AD tenant, certain settings my provide a less than ideal experience from a security perspective. I explained to the attendees how to properly secure user privileges, privileged accounts and service accounts in Azure AD from a technology and process point of view.

Louise Freese, Microsoft Ignite's unsung hero! (click for larger photo)Found my name on the MVP Wall! (click for larger photo)Dona Sarkar after our interview (click for larger photo)

I sat in on a couple of sessions throughout Ignite this year, but mostly I helped out Raymond Comvalius with his tasks as community reporter, basically acting as his personal assistant and grip. It meant I spent a lot of time at Community Central and had a lot of fun at two Community Social events and the MVP Wall.

Presenting on Password-less (click for larger photo by Barbara Forbes)Presenting on Password-less (click for larger photo by Jos van Schouten)

On Thursday, I presented a second session. This time, I shared my team’s experiences going password-less. While the product team presented a lot of innovative ways to decommission passwords.

After the session we got ready to visit Universal Studios Florida and Universal’s Islands of Adventure for Ignite’s Celebration Party.

Ah yes. Ignite.

Friday was another day of sessions and a sweet ‘Goodbye’ to everyone as they went home. We enjoyed Orlando for another day in the pool and at a couple of malls.

  

Thank you!

Thanks to all the people attending Microsoft Ignite 2018, the people attending my sessions and, of course, the people who stuck around after my session for the interesting discussions. Thanks to the Microsoft Ignite team for making this year’s Ignite fabulous, and of course, my MVP friends who are always fun to hang out with.

Posted on October 5, 2018 by Sander Berkouwer in Community, Microsoft MVP, Personal

0  

Passing Microsoft Exam 70-742: Identity with Windows Server 2016

Prepare for Microsoft Exam 70-742: Identity with Windows Server 216 for free

There is a good and free way to prepare for Microsoft exam 70-742: Identity with Windows Server 2016.

In the past years, I conducted webinars that can serve as a primer on Active Directory in terms of forests, domains, trusts, security and on Group Policy. They are not and were never intended as the sole sources of preparation for the exam. Instead, I hope you conceived my passion for the technologies and want to learn further. In this blogpost, I’ll talk about the areas in which you can use these resources for your preparations for the exam.

Note:
To access the resources below, the sponsors require you to register. This means you will provide your personal information to these organizations and you agree to get promotional messages from them.

 

Knowledge

Gaps in your Active Directory Domain Services knowledge

Netwrix

I recommend you watch the three recordings from the 75-minute webinars with Netwrix as a start, as these videos address 55% of the topics of the exam.

  1. Active Directory 101: Install and Configure AD Domain Services
  2. Active Directory 101: Manage and Maintain AD Domain Services
  3. Active Directory 101: Create and Manage Group Policy

Veeam

A couple of areas of Active Directory Domain Services (AD DS) were not addressed during the webinars with Netwrix. Instead, in an earlier 3-part webinar series with Veeam, virtualizing, backing up and restoring Domain Controllers were discussed:

  1. Episode 1: Active Directory 101
  2. Episode 2: Active Directory and virtualization
  3. Episode 3: Active Directory and backup

I recommend to watch the recordings of the 2nd episode and 3rd episode of the Active Directory webinar series, sponsored by Veeam. (The first webinar has an overlap with the first two webinars in Netwrix’ series.) These two webinar provide the information you need on the significance of the VM-GenerationID and Event-ID 1109. It’ll get you through the questions on the exam on virtualization and disaster recovery with ease, that’s about another 10% of the exam.

 

Azure AD Connect and Azure Active Directory

Netwrix

You’ll want to watch the recording of the webinar titled Tracking changes in Hybrid Identity environments with both AD and Azure AD as I detail the inner workings of Azure AD Connect and Azure Active Directory.

Semperis

At last year’s Hybrid Identity Protection Conference in New York, Roelf Zomerman from AzureInfra.com fame and I presented two 75-minute sessions on Azure AD Connect. The live recordings of these sessions are available for free on YouTube:

  1. Azure AD Connect, The Dutch Connection
  2. Azure AD Connect, The World Is Not Enough

These two videos provide a deep dive on Azure AD Connect, its rules engine and the way the mS-DS-ConsistencyGUID helps with migrations. Understanding the topics in these two videos provides sufficient knowledge to pass the Azure AD and Azure AD Connect questions at the exam. They represent about 10% of the exam, too.

Recordings for all Hybrid Identity Protection Conference 2017 presentations are available online for free.

 

Active Directory Federation Services

Active Directory Federation Services (AD FS) is a Microsoft technology to extend the clunky old Active Directory Domain Services with hip new authentication protocols and markup languages like WS-FED, SAML, Oauth 2, Open ID Connect and SCIM,

Microsoft’s documentation on AD FS is the starting point to understanding AD FS, the roles of its key components, like the attribute store, configuration database, claims and URIs. Start here and churn through the topics in the left navigation menu, or download the PDF for offline access.

The topics are pretty high-over, but when you start building your first AD FS Farm, all the puzzle pieces will fall into place. (See Experience below)

Questions on AD FS constitute about 10% of the questions on exam 70-742.

 

Active Directory Certificate Services

Active Directory Certificate Services (AD CS) allows systems administrators to create Certification Authorities (CAs) to issue and revoke certificates for authentication, signing and other encryption purposes.

Learning AD CS is easy when you have money to spend on courses, but getting started for free is not that easy. The most recent AD CS information on Microsoft-owned web properties dates back a couple of years, but provides good information in Wiki-style. It’s a good read to get started.

Nordic Infrastructure Conference

After you’ve read on the benefits and roles of Certification Authorities, I recommend to view the recordings of a couple of sessions by Brian Komar. The annual Nordic Infrastructure Conference has a couple of recordings on Vimeo:

Questions on AD CS constitute about 10% of the questions on exam 70-742.

 

Active Directory Rights Management Services

Active Directory Rights Management Services (AD RMS) offers organization the ability to protect documents with intrinsic encryption. This way, no matter how the document is processed, transferred or handled, the permissions (like open, edit and print) are retained.

Again, the Microsoft documentation offers a good start, although it’s largely based on Windows Server 2012 and Windows Server 2012 R2.

Questions on AD CS constitute about 5% of the questions on exam 70-742. However, since adoption of AD RMS was slow and as the world is moving fast to Microsoft Information Protection, I would skip learning AD RMS for the exam. Practice exam questions (see Final preparations below) provide the answers to the 3 questions you might get during the exam

 

Experience

I highly recommend setting up a home lab with Windows Server 2016, and:

While setting up a lab environment may sound expensive, you might be able to pull it off using an Azure Infrastructure-as-a-Service (IaaS) trial subscription or student subscription.

Please don’t skip building your experience, because the last thing our industry needs are more paper tigers. We need people who can properly manage Active Directory to make the world a better place.

 

Final preparations

After you’ve sat down, read through the concepts and played with the technology in your own lab environment, there’s three more things that you can do to fully prepare for the exam:

  1. Watch the Microsoft Ignite 2017 Cert Exam Prep: Exam 70-742: Identity with Windows Server 2016 (BRK3176). It provides information on the topics, the number of questions, the time you get to answer the questions, the passing score and example practice questions.
  2. Try your hand at practice questions for exam 70-742 with questions in free downloadable PDF format. This will provide confidence to face the exam stress, in case you need it.

Again, Please don’t skip gathering your knowledge and building your experience, because the last thing our industry needs are more paper tigers. We need people who can properly manage Active Directory to make the world a better place. Be the better person. Be the better candidate.

 

Concluding

I have thought long and hard on helping people gain the knowledge, experience and skills to pass Microsoft-based identity exams for a long time. Now, for the first time, I feel there is a good and free way to prepare for exam 70-742.

I wish you all the best in your exam endeavors and your careers.

The above list of resources is in no way complete. If you feel additional resources may benefit people preparing for Microsoft Exam 70-742: Identity with Windows Server 2016, please leave a comment below.

Posted on October 4, 2018 by Sander Berkouwer in Active Directory, Active Directory Certificate Services, Active Directory Federation Services, Azure Active Directory, Best Practices, Community, Group Policy, Microsoft Windows Server 2016, Personal

0  

What’s New in Azure Active Directory for September 2018

Azure Active Directory

Azure Active Directory is Microsoft’s Identity Management-as-a-Service solution, offering seamless access, easy collaboration, efficiency in IT processes and improved security and compliance. In its Release Notes for Azure Active Directory, Microsoft communicated the following new and changed functionality for Azure Active Directory for September 2018:

       

What’s New

Simplified SSO configuration settings for some third-party apps

Service category: Enterprise Apps
Product capability: Single Sign-On

Setting up Single Sign-On (SSO) for Software as a Service (SaaS) apps can be challenging due to the unique nature of each apps configuration. The Azure Active Directory team has built a simplified configuration experience to auto-populate the SSO configuration settings for the following third-party SaaS apps:

  • Zendesk
  • ArcGis Online
  • Jamf Pro

           

Support for additional claims transformations methods

Service category: Enterprise Apps
Product capability: Single Sign-On

We’ve introduced new claim transformation methods, ToLower() and ToUpper(), which can be applied to SAML tokens from the SAML-based Single Sign-On Configuration page.

          

New deployment plan available for the My Apps Access panel

Service category: My Apps
Product capability: Single Sign-On

Deployment plans walk through the business value, planning considerations, design, and operational procedures needed to successfully roll a few of the more common Azure AD capabilities.

Check out the new deployment plan that’s available for the My Apps Access panel. The My Apps Access panel provides users with a single place to find and access their apps. This portal also provides users with self-service opportunities, such as requesting access to apps and groups, or managing access to these resources on behalf of others.

           

Troubleshooting and Support tab on the Sign-ins Logs page

Service category: Reporting
Product capability: Monitoring & Reporting

The new Troubleshooting and Support tab on the Sign-ins page of the Azure portal, is intended to help admins and support engineers troubleshoot issues related to Azure AD sign-ins. This new tab provides the error code, error message, and remediation recommendations (if any) to help solve the problem. If you’re unable to resolve the problem, the portal also gives you a new way to create a support ticket using the Copy to clipboard experience, which populates the Request ID and Date (UTC) fields for the log file in your support ticket.

         

Support for SSPR from the Windows 7/8/8.1 Lock screen

Service category: Self-Service Password Reset
Product capability: User Authentication

After you enable password reset from Windows 7, 8, and 8.1, your users will see a link to reset their password from the Lock screen of a device running Windows 7, Windows 8, or Windows 8.1. By clicking that link, the user is guided through the same password reset flow as through the web browser.

          

New Federated Apps available in Azure AD app gallery

Service category: Enterprise Apps
Product capability: 3rd Party Integration

In September 2018, the Azure AD team added these new apps with Federation support to the app gallery:

         

Azure Active Directory – Where is your data located? page

Service category: Other
Product capability: GoLocal

Select your company’s region from the Azure Active Directory – Where is your data located page to view which Azure datacenter houses your Azure AD data at rest for all Azure AD services. You can filter the information by specific Azure AD services for your company’s region. Based on Microsoft Power BI, this new experience provides the information you need per geography and per Azure AD service.

        

What’s Planned

Authorization codes will no longer be available for reuse

Service category: Authentications (Logins)
Product capability: User Authentication

Starting on October 10, 2018, Azure AD will stop accepting previously used authentication codes for apps. This security change helps to bring Azure AD in line with the OAuth specification and will be enforced on both the v1 and v2 endpoints.

If your app reuses authorization codes to get tokens for multiple resources, we recommend that you use the code to get a refresh token, and then use that refresh token to acquire additional tokens for other resources. Authorization codes can only be used once, but refresh tokens can be used multiple times across multiple resources. Any app that attempts to reuse an authentication code during the OAuth code flow will get an invalid_grant error.

        

New approved client apps for Azure AD app-based conditional access

Service category: Conditional access
Product capability: Identity security and protection

The following apps are on the list of approved client apps:

  • Microsoft To-Do
  • Microsoft Stream

        

What’s Changed

Updated administrator role permissions for dynamic groups

Service category: Group Management
Product capability: Collaboration

The Azure Active Directory team fixed an issue, so specific administrator roles can now create and update dynamic group membership rules, without needing to be the owner of the group.

The roles in scope for this change are:

  • Global administrator or Company administrator
  • Intune Service Administrator
  • User Account Administrator

      

Enhanced support for custom extension properties used to create dynamic membership rules

Service category: Group Management
Product capability: Collaboration

With this update, you can now click the Get custom extension properties link from the dynamic user group rule builder, enter your unique app ID, and receive the full list of custom extension properties to use when creating a dynamic membership rule for users. This list can also be refreshed to get any new custom extension properties for that app.

      

Updated SAML-based app configuration UI (preview)

Service category: Enterprise Apps
Product capability: Single Sign-On

The Azure AD Team created an Updated SAML-based app configuration user interface (UI). As part of this UI, you’ll get:

  • An updated walkthrough experience for configuring your SAML-based apps.
  • More visibility about what’s missing or incorrect in your configuration.
  • The ability to add multiple email addresses for expiration certificate notification.
  • New claim transformation methods, ToLower() and ToUpper(), and more.
  • A way to upload your own token signing certificate for your enterprise apps.
  • A way to set the NameID Format for SAML apps, and a way to set the NameID value as Directory Extensions.

To turn on this updated view, click the Try out our new experience link from the top of the Single Sign-On page.

Posted on October 1, 2018 by Sander Berkouwer in Azure Active Directory, What's New

0  

I’m staffing a Community Booth at two Community Social events at Microsoft Ignite 2018

Microsoft Ignite

Community Central at Microsoft Ignite is bigger, better and stronger, compared to last year’s Ignite, and I’m proud to share that I’m part of it!

Besides my two theater sessions on Identity and Access Management (IAM) at Ignite, I will also be staffing a Community Booth at two Community Social events.

  

About Community Central

Community Central is part of the Community Area at Microsoft Ignite, where you’ll find the Microsoft Tech Community, the Microsoft MVP Program with the MVP Wall, workshops, the Microsoft IoT Experience, the XBox Lounge, Microsoft Mechanics and the podcast area.

Located right next to the Microsoft Mechanics stage straight from the entrance of OCCC West, the Community Central area at Microsoft Ignite 2018 allows you to connect, collaborate, share and learn from experts. This is where you get your questions answered, meet tech professionals from all over the world, and make lifelong connections.

   

Community Social

Microsoft is hosting fourteen Community Social events, throughout the event, starting with the Windows Server Community Social on Monday 1PM and ending with the Microsoft Mechanics Community Social on Friday noon.

Each Community Social features Microsoft MVPs and other experts and special food, creating the perfect ambiance for you to hang out.

I’m staffing a community booth at these two Community Social events:

Identity Management Community Social

Wednesday September 26 2018, 11:45AM – 12:10PM

On Wednesday, I’ll swing by Community Central for the Identity Management Community Social. During this event, I’ll show you some more Azure AD Portal Best Practices, following up on my Theater Session on hardening your Azure Active Directory tenant. Microsoft brings waffles and a 55 inch monitor, I’ll bring the tenants, you bring your questions and remarks. Deal?

 

Security Community Social

Wednesday September 26 2018, 5PM – 6PM

During the Security Community Social, later on Wednesday, I’m sharing a community booth with John Craddock. As we both feel Identity is a big part of Microsoft’s security story, we’ll be there to answer all the questions you might have on identity and access in terms of security. If you ever were too scared to ask John a question, just ask me (and I’ll ask John Winking smile).

  

Join us!

Community Social events are free events.
Just drop by. Sessions can wait, because they’ll be all recorded anyway. Angel

Posted on September 21, 2018 by Sander Berkouwer in Azure Active Directory, Community, Microsoft MVP, Personal, Security

1  

We’re organizing the Event of the Year with the KNVI SIG IT Infra

Raymond, Erwin, Martijn, Tom and I have been plotting for quite some time to organize a yearly Dutch event. We want to share the latest in our industry, without the marketing talk and without the corporate bullshit other events bring. In my utterly biased opinion1, there’s only one organization in the Netherlands, that can pull that off.

Last year we organized the ‘Windows as a Service’ event for KNVI members. It was a lot of fun, but this year, we have improved upon the formula, added some more fun elements and are back for another year.

  

About KNVI

knvi_logoThe Dutch Professional Association of Information and IT Professionals (KNVI) is an independent platform for sharing professional knowledge and expanding the personal networks of ICT Pros, information professionals, students and employers who want to keep their employees up to date.

KNVI organizes multiple meetings per month, publishes AG Connect both online and in print,and offers discounts to its members.

KNVI is a merged organization of several professional associations, including the Dutch Networking User Group (Ngi-NGN) and the Dutch Association for Documentary Information and Organization Administration (SOD).

   

About the KNVI IT Infra Event of the Year

On Wednesday October 3, 2018, we’ll transform the Postillion Hotel in Bunnik into Walhalla for IT Professionals:

  • One straight-from-real-life Keynote and one completely hilarious Closing Keynote where we ‘Roast the Cloud’
  • Ten 45-minute sessions on cloud, on-premises and business topics
  • Two 45-minute interactive panel sessions with four industry specialists each. One panel focuses on keeping stuff out of the cloud. The other focuses on getting stuff to the cloud as fast as possible.

  

About my sessions

I’m not just involved in the planning and preparations for the event, I’m also actively participating in two sessions:

 

Alles naar de Cloud toe!

2:20PM – 3:05PM Dutch

Four so-called experts and four of their favorite topics.
What could possibly go wrong?

Device management with the guy who thinks of his avatar when discussing imaging, identity management with the guy you recognize everywhere, Office 365 with KNVI’s own productivity guru and Azure Compute by the guy who spends more time in the sun than in datacenters…

Join them on their cloud journeys. Not to Mordor to throw a certain piece of jewelry into a mountain of fire, but just to bring your IT to the cloud.

  

Roast the Cloud

3:30PM – 4:15PM Dutch

Remember when Comedy Central roasted Justin Bieber, Donald Trump and even Charlie Sheen? #Winning! Now it’s time to hold  one of the biggest phenomena of our recent IT careers accountable: the Cloud.

Six of your favorite experts will make fun of themselves, each other, and, of course, the technology that we can’t get enough of.  Some experts warn about the other experts and against leveraging cloud technologies, while other experts have no respect for anyone or anything on-premises.

Hear what they have to say, and don’t be afraid to chime in!

  

Join us!

Register here. Dutch

One of the things we’ve learned last year is that many people wanted to join the event, but either didn’t have the money to join or didn’t want a KNVI membership.

This year, we have two new packages:

  1. No frills package
    As an IT Pro, you can join the event for € 99.
    No strings attached. No nagging marketing afterwards. No privacy issues.
    No membership.
      
  2. Free student package
    As a student, you can join for free: When you create a free KNVI student membership, you can join this event and all the other events scheduled for this calendar year for free. Checks apply.

Of course, as a member of KNVI, you can join the event for free, anyway.
There’s room for 300 people for this event and we haven’t filled all our seats, yet.

  • 1 I’m an active member of the board of the KNVI Special Interest Group (SIG) IT Infra

Posted on September 20, 2018 by Sander Berkouwer in Community, Microsoft MVP, Personal

0