Azure SQL Managed Instance – Windows Authentication – Cannot generate SSPI context

Intro I had configured all the pre-requisites I could read about in the articles for configuring Windows Authentication support via Entra ID for Azure SQL Managed Instance. But when testing using SQL Studio Management, it would fail with the following error: The target principal name is incorrect. Cannot generate SSPI context I knew that Entra …
Continue reading Azure SQL Managed Instance – Windows Authentication – Cannot generate SSPI context

Azure Local – Custom location in failed provision state

This one was not something I was working on myself, but I got this from a customer of mine. The problem was and the customer could not choose several of their Azure Local custom locations for deployment of new virtual machines. Running this command can tell us status on the custom location: If it shows …
Continue reading Azure Local – Custom location in failed provision state

Azure Local – CPU reservations on virtual machines

Some application vendors require a CPU core reservation to be configured. However, this configuration can conflict with pre-update health checks. It you encounter this error during updates, remove the CPU reservations: Below you can see a picture of an active reservation. This number should be set to 0 while updating happens. You can use PowerShell …
Continue reading Azure Local – CPU reservations on virtual machines

Azure Local – UpgradeArbAndExtensions – arcappliance upgrade failed – line 3345 at UpgradeArbAndExtensionsInternal

The error Intro I was updating an Azure Local Stack from 11.2509 to 11.2510. Doing the update, I hit an issue about the MOC ARB update. The error above is not very helpful, but I found better information in these logs: “\NODE01\C$\ClusterStorage\Infrastructure_1\Shares\SU1_Infrastructure_1\MocArb\WorkingDirectory\CloudStore\log\agent-log-2692″ Showed that one of the nodes was not responding on port 45000 (not …
Continue reading Azure Local – UpgradeArbAndExtensions – arcappliance upgrade failed – line 3345 at UpgradeArbAndExtensionsInternal

Azure Local – AzStackHci Environment Checker

This is just a very small article about some cool things about the environment checker for Azure Local. I have used it multiple times for troubleshooting scenarios, that did not involve deployment (this tool is mainly for validation in the deployment phase). Microsoft Learn article about this tool: https://learn.microsoft.com/en-us/azure/azure-local/manage/use-environment-checker?view=azloc-2510&tabs=connectivity If you get errors on pre-update …
Continue reading Azure Local – AzStackHci Environment Checker

Azure Local – Exception caught in Test-AzStackHciArcIntegration validator

Intro Below are a few different steps I have got from working with Microsoft Support while we did several troubleshooting sessions on an Azure Local Stack that could not update from 2507 to 2510 (25398 OS level). The error Error from “Get-SolutionUpdate” Health Results: Title       : Environment Validator ExceptionStatus      : …
Continue reading Azure Local – Exception caught in Test-AzStackHciArcIntegration validator

Microsoft Defender for Cloud – exemptions using REST API

This topic is something I have wanted to dive into for months, but I have found it difficult to wrap my head around how to get started.I wanted to look into how I could get policy exemptions, the same way I already was getting Azure Policy exemptions using REST API. But Defender for Cloud Security …
Continue reading Microsoft Defender for Cloud – exemptions using REST API

Microsoft Defender for Cloud – Delete exemptions using REST API

In my previous post, I touched on the topic of how to create Microsoft Defender for Cloud recommendation exemptions (also called standard assignments: exempt mode). In this post I want to show how to delete policy exemptions using REST API. Please read my previous posts here: Please read the first post about getting standard assignments. …
Continue reading Microsoft Defender for Cloud – Delete exemptions using REST API

Microsoft Defender for Cloud – Create exemptions using REST API

In my previous post, I touched on the topic of how to get Microsoft Defender for Cloud recommendation exemptions (also called standard assignments: exempt mode). In this post I want to show how to create policy exemptions using REST API. Please read my previous post here: To understand authentication, read my previous post where I …
Continue reading Microsoft Defender for Cloud – Create exemptions using REST API

Microsoft Defender for Cloud – Get exemptions using REST API

This post is part of a series. Navigate to the parent post using this link: In this post, I want to show you how to get (list) standard assignments (exemptions) using PowerShell and REST API. First we need to authenticate to Azure and get an access token, we will use in our REST API calls: …
Continue reading Microsoft Defender for Cloud – Get exemptions using REST API