.Thanks for the reference, Adam.
$100 - $150 a month should give plenty of lab time.

Thank you @Adam-Gordon , this is a very useful article that I will take a look, also I passed the AZ 900 today thanks to IT Pro TV so everything is good now :)

Thank you,
Regards

@Tony-Stark,

Not really an Azure guy, but this looks as if it may help.
https://docs.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-external-users

Good evening @Adam-Gordon,

Hope all is well too.

Thanks for the quick reply, that gives me a solid track to follow and will be helpful to others stumbling upon this post for sure.

I have taken note, looking forward to learning more!

Regards,
Ion

Hi Adam,

I hope all is well too. Thank you for your response. I appreciate it!

The device does not have the right version of the Windows. It has Windows 10 Pro where the screensaver is not supported.

Many thanks.
Kind regards.

Lubo

@FLM ,

I hope all is well. Glad that you are going through the course and enjoying it.

I am not sure when the practice questions may be updated, as they are from 3rd party vendors, and they update and release content according to their own schedule, which may not always match ours in terms of how quickly we bring updates out.

Once there are any updates from any of our partners, we do integrate them into the course as soon as they are ready to be used.

In terms of Practice Labs, there are none for this course currently. You do see me in the course using a live Azure tenant, and doing all of the demonstrations in that tenant live, n real time during the episode. I would suggest that you consider getting a demo tenant of your own set up if you are able to, and use that to practice.

You can access and set up a tenant from Microsoft here:

https://azure.microsoft.com/en-us/

If you have any other question as you move through the course, please be in touch as needed. My direct e-mail is: adam@itpro.tv

Good Luck !!!

Cheers,

Yes it has. The new course is live. https://app.itpro.tv/course/azure-administrator-associate-az104

@Michael-McKenney, I have been using Azure for the Cloud+ show that @Ronnie-Wong and I are currently shooting. This is not an ITProTV demo account, it is my on free personal account, and the free part expired almost 2 years ago. I have managed to read, test, build, and learn the platform all for free. Now this has taken some diligence on my part to make sure that I tear down the environment that I build and I have paid the price (literally....lol) for not cleaning up my tenant after a test deployment that went unchecked for a weekend. It cost me $2.30, not much but still not what I want. Here is the test environment that cost me, as well as the resources that were charged:

Cost Charged.PNG

This has been the only time I have had to pay on resources from my Azure tenant and it was my fault. If you need to learn Azure, I can tell you from experience that you can. Keep in mind to pay attention to pricing and you can keep your experiences on the platform, free. This is good practice as well to meet budget requirements for a deployment, in my case I make sure they are all free....lol. I hope this helps.

Hi @Andreas-Rosa ,

When you enable a policy user or sign in risk policy, you can also choose the threshold for risk level - low and above, medium and above, or high. This flexibility lets you decide how aggressive you want to be in enforcing any controls for suspicious sign-in events. While Microsoft does not provide specific details about how risk is calculated, we do know that each level brings higher confidence that the user or sign-in is compromised. For example, something like one instance of unfamiliar sign-in properties for a user might not be as threatening as leaked credentials for another user. So High means that there is a High probability that the sign-in has been compromised. Hope that helps!!

Thank you for the reply @Ronnie-Wong. No apologies needed. This question was not related to the material on the site.

Hello @PS4 ,

Sorry I missed this post.

Azure Bastion is deployed on a per virtual network basis. So you can use the Bastion service to connect to all of the VMs in the same virtual network.

To connect to VMs in other virtual networks, you have two choices. You can deploy Azure Bastion to the other virtual networks, or you can set up VNet peering between the vnets.

Deploying multiple instances of Azure Bastion can get expensive, but there might be business requirements that won't allow you to peer vnets.

In my demo environment, I use the peering option. I have Azure Bastion deployed to my hub vnet (this is also where my S2S VPN connects. Then when I deploy new VNets for demos/etc. I simply peer the new Vnet to the hub and can access the VMs. Then I can tear down the new Vnet when I'm done. and I don't have to deploy Azure Bastion over and over.

Currently the only session management available is a manual process. From the Azure Portal you can navigate to your Azure Bastion resource and select sessions. There you can monitor existing sessions, and force-disconnect a session.

The only way to connect to a VM using the Azure Bastion service is through the portal. A user would first connect to the portal, then browse to the VM they want to connect to and select Connect -> Bastion -> Use Bastion.

In order to make a connection, the following roles are required:

Reader role on the virtual machine
Reader role on the NIC with private IP of the virtual machine
Reader role on the Azure Bastion resource

Azure Bastion is not for everyday work by employees. It is for admins to manage VMs and the apps running on those VMs.

To provide end users with a VM, consider using Windows Virtual Desktop.

Hope this helps.

@Mike-Rodrick thanks for your quick response! I am eagerly waiting for this..
Thanks :)

Hi Mike,

I took the topics below from the MD files, also at the end of the video for configuring a sync service and sync agent. Cherokee mentions in the next episode she will create Sync Groups and Endpoints, And the episode after that should cover troubleshooting Azure File Sync.

Filename: microsoft-az104-2-3-6-create_sync_groups_and_endpoints.md
Show Name: Microsoft AZ-104
Topic Name: Create and Configure Storage Accounts
Episode Name: Create Sync Groups and Endpoints**
Description: In this episode, Cherokee and Aubri continue a demonstration setting up Azure File Service. Specifically, they begin by creating a sync group. Next, they add a server endpoint and verify the sync has completed successfully.

Filename: microsoft-az104-2-3-7-troubleshooting_azure_file_sync.md
Show Name: Microsoft AZ-104
Topic Name: Create and Configure Storage Accounts
Episode Name: Troubleshooting Azure File Sync
Description: In the episode, Cherokee and Aubri cover common issues you may encounter with Azure File Sync. They explain how to combat those issues and provide resources for more specific issues.

@Ilias-Soukallaris ,

We are in the studios currently, filming the updated AZ-104. The episodes are being posted to the site as they are edited. We hope to finish, by the end of March.

@Angelica-Villalba ,

What are you trying to accomplish when you say manage certificates? Are you trying to verify a client has a valid certificate issued by a particular CA?

@Daniel-Loyer ,

Microsoft usually offers beta exams at a reduced rate to a limited number of people. You have to be registered in the SME Profile database to receive a code that is entered during the exam registration process.

https://docs.microsoft.com/en-us/learn/certifications/beta-exams

@Djordje-Petrovic ,

You're welcome, glad to help!!

@Daniel-Loyer ,

Azure Media Services looks really cool. If there is enough demand, we will definitely create some content based on it. Maybe some Hands-on or YouTube content would work!

@Todd-Marino ,

This is a very common scenario, especially today with COVID and many people working from home.

You can manage all of your devices, including domain-joined on-premises devices with Intune. Personal/BYOD devices can be enrolled manually or automatically.

For your on-premises devices, they will become Hybrid Azure AD joined, which will make them available to Intune. There are several ways to register a domain-joined device. From your description of your environment, Group Policy might be the easiest. Here is a link with some guides.

https://docs.microsoft.com/en-us/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy

Once your on-premises devices are registered, they will be available in the Azure portal. Then you will create device groups that you can use to manage the updates.

Head over to endpoint.microsoft.com and go to Devices. Select Windows and there you can create your update rings and profiles to manage Windows updates.

Hope this helps, let me know if you have more questions or need help.