Generated by All in One SEO v5.0.0.1, this is an llms.txt file, used by LLMs to index the site. # Gillian Stravers Microsoft Certified - Azure Solutions Architect | Cyber Security Architect | Azure Network Administrator ## Sitemaps - [XML Sitemap](https://gillianstravers.com/sitemap.xml): Contains all public & indexable URLs for this website. ## Posts - [Level up your security posture with Azure Policy Initiatives](https://gillianstravers.com/azure/level-up-your-security-posture-with-azure-policy-initiatives/) - Introduction Ensuring the security of Cloud based environments has become more critical than ever before. With threat actors around the corner and ransomware attacks becoming more common each day it's not a question if but when your organization is being the target. Defender for Cloud offers a wide set of build-in initiative policies like Azure - [Disable Automatic Updates on Windows Servers](https://gillianstravers.com/update-management/disable-automatic-updates-on-windows-servers/) - Introduction Patch Management is important and with tools like Azure Update Management or other third party tools you can make your life a lot easier. No more weekends patching server and more quality time with your friends and family! Just don't forget to turn off Automatic Updates and avoid random reboots that aren't part of - [Reset local Firewall configuration on Azure VM](https://gillianstravers.com/azure/reset-local-firewall-configuration-on-azure-vm/) - Have you ever been in a situation where you cannot connect to your Azure VM anymore although your NSG and Azure Firewall rules are set up correctly? The culprit might be your local Windows Firewall, which can inadvertently block access. In this blog post, we will explore a simple yet effective solution to address this - [Fix: Update Agent Readiness Disabled or Not Configured](https://gillianstravers.com/azure/fix-update-agent-readiness-disabled-or-not-configured/) - Hybrid Workers Hybrid Workers often fail in combination with Azure Update Management and troubleshooting can be a nightmare. Event Manager often throws HTTPS errors or other networking errors usually sending you into the wrong direction. Below script fixes almost every error related to Hybrid Workers not responding in combination with Azure Update Management like the - [Securing Storage Accounts](https://gillianstravers.com/azure/securing-storage-accounts/) - In this blog I will walk you through the most important security settings for your Azure Storage Accounts - [Migrate Run As Accounts to Managed Identity](https://gillianstravers.com/azure/migrate-run-as-accounts-to-managed-identity/) - Introduction Azure Automation Run As accounts will retire September 30, 2023. No more worrying about expired Run As Account certificates breaking your automation, we've all been there, right? :) It's important to enable Managed Identities before retirement and to edit your existing Runbook authentication methods to Managed Identity because your runbacks wil not work anymore - [Move Recovery Services Vault Items to new Vault](https://gillianstravers.com/azure/move-recovery-services-vault-items-to-new-vault/) - This script moves all items with type AzureVM to a new Recovery Services Vault. Please note that this script will delete your existing backup data. This is irreversible. Use at your own risk. - [Prevent deletion of resources with Azure Policy](https://gillianstravers.com/azure/prevent-deletion-of-resources-with-azure-policy/) - Microsoft announced a new functionality within Azure Policy which allows admins to create action based effects. This functionality is in preview at the moment of writing but will be GA soon. In this blog I will show you how you can leverage Azure Policy with a DenyEffect to prevent deletion of Azure Resources regardless of any roles. - [Loop through parameters in Bicep](https://gillianstravers.com/azure/loop-through-parameters-in-bicep/) - I'm creating multiple new Landing Zones for a customer with multiple default Resource Groups. I don't want to create all the Resource Groups manually so I decided to deploy them using Bicep. In this example I will be deploying six Resource Groups named RG1-RG6. We can declare the resources one by one but as you - [Discover empty Resource Groups in Azure with PowerShell](https://gillianstravers.com/azure/discover-empty-resource-groups-in-azure-with-powershell/) - Find empty Resource Groups within your Azure Subscriptions with this PowerShell script - [Enable Purge Protection and Soft-delete for all Key Vaults](https://gillianstravers.com/azure/enable-purge-protection-and-soft-delete-for-all-key-vaults/) - What is Soft-delete? Soft-delete is a data-loss protection setting that allows you to recover deleted items within the Key Vault like keys, secrets and certificates for a specified amount of time. Once Soft-delete has been enabled on your Key Vault it can not be disabled. Items in a Soft-delete state will automatically be deleted after - [Monitor Azure Storage Account activity](https://gillianstravers.com/azure/monitor-azure-storage-account-activity/) - Collect logs There's multiple good reasons to enable logging for your Storage Accounts. One of them is to figure out if a Storage Account is still being accessed or to monitor connection sources. If you want access to this information you need to enable logging. If you don't have a Log Analytics Workspace yet; create - [Enable Bitlocker for Windows 11 in Parallels](https://gillianstravers.com/bitlocker/enable-bitlocker-for-windows-11-in-parallels/) - Introduction I'm a Macbook user, and I'm very happy with it. During my daily work my Mac carries me all the way but sometimes it's nice to have a Windows VM ready for testing purposes or in my case, using Visio in Coherence Mode, because Visio Online just doesn't do it for me. :) My - [FIX: Azure VM Insights won't enable](https://gillianstravers.com/azure/fix-azure-vm-insights-wont-enable/) - VM insights stuck on "Enabling - Waiting for data? Read ths post. - [Getting started with Azure Update Management](https://gillianstravers.com/azure/implement-azure-update-management/) - Getting started with Azure Update Management. A step by step implementation guide ## Pages - [About](https://gillianstravers.com/about/) - My name is Gillian, 30 years old and living in The Netherlands in the Amsterdam area. I'm an Azure Specialist working at Schuberg Philis where I primarily focus on Azure Architecture, Networking, Security and Infrastructure as Code. I created this blog to give back to the community by sharing Azure best practices and troubleshoot guides - [Badges](https://gillianstravers.com/badges/) - [Badges2](https://gillianstravers.com/badges2/) - Hi - [Contact](https://gillianstravers.com/contact/) - Send me a message on LinkedIn or Twitter :) ## Categories - [Azure](https://gillianstravers.com/category/azure/) - [Update Management](https://gillianstravers.com/category/update-management/) - [Automation](https://gillianstravers.com/category/automation/) - [Security](https://gillianstravers.com/category/security/) - [Storage](https://gillianstravers.com/category/storage/) - [Insights](https://gillianstravers.com/category/insights-2/) - [Powershell](https://gillianstravers.com/category/powershell/) - [Monitoring](https://gillianstravers.com/category/monitoring/) - [Bitlocker](https://gillianstravers.com/category/bitlocker/) - [Windows 11](https://gillianstravers.com/category/windows-11/) - [Paralells](https://gillianstravers.com/category/paralells/) - [Key Vault](https://gillianstravers.com/category/key-vault/) - [Bicep](https://gillianstravers.com/category/bicep/) - [Backup](https://gillianstravers.com/category/backup/) - [Azure Policy](https://gillianstravers.com/category/azure-policy/) ## Tags - [Azure](https://gillianstravers.com/tag/azure/) - [Storage](https://gillianstravers.com/tag/storage/) - [Security](https://gillianstravers.com/tag/security/) - [Patchmanagement](https://gillianstravers.com/tag/patchmanagement/) - [Monitoring](https://gillianstravers.com/tag/monitoring/) - [Insights](https://gillianstravers.com/tag/insights/) - [Fix](https://gillianstravers.com/tag/fix/) - [Paralells](https://gillianstravers.com/tag/paralells/) - [Windows 11](https://gillianstravers.com/tag/windows-11/) - [Windows 10](https://gillianstravers.com/tag/windows-10/) - [Bitlocker](https://gillianstravers.com/tag/bitlocker/) - [Intune](https://gillianstravers.com/tag/intune/) - [MEM](https://gillianstravers.com/tag/mem/) - [Hybrid Worker](https://gillianstravers.com/tag/hybrid-worker/) - [Key Vault](https://gillianstravers.com/tag/key-vault/) - [PowerShell](https://gillianstravers.com/tag/powershell/) - [Bicep](https://gillianstravers.com/tag/bicep/) - [Automation](https://gillianstravers.com/tag/automation/) - [Backup](https://gillianstravers.com/tag/backup/) - [Policy](https://gillianstravers.com/tag/policy/)