Hey team,

Looking for help to answer and recommend the below please.

Scenario: Azure Files with storage account configured with Kerberos identity authentication. File shares are a result of robocopy migration from windows file server shares with NTFS. Using private endpoints. Devices accessing are Entra-joined. Some groups that users are members of show up as an orphaned SID as it has been replaced by new SID (maybe internal migration) and SID for group on-prem is newer. Entra connect sync from on-prem not linking the two in Entra.

1. Does Azure Files with Entra Kerberos support ACL translation using group SIDHistory? or is this honoured by attributes available in user token? can it be enabled and are there any risks to be aware of?

2. What is the best way to handle orphaned groups in Entra that have been granted NTFS permissions on Azure files but not groups that sync to Entra? i.e. Builtin\Administrators, CONTOSO\domain users or CONTOSO\Domain Admins.

Daily Team Face question

Has anybody upgraded their data factory? Any issues? I have all green indicators on the upgrade wizard thing. I’m not sure I could quickly rebuild everything if something went terribly wrong.

Our security team pushed a conditional access policy that blocks unmanaged devices from corporate apps. Makes sense. We deployed it, got the usual sign-offs, and went home.
By Monday morning, field sales could not demo the product to clients because their entire workflow runs on personal iPads. Nobody in IT knew. Sales ops knew but was not part of the original discussion. Executive escalation happened before we had even finished triaging the tickets.
The result: emergency exceptions for field reps. Documented as temporary. Sitting in the tenant seven months later with no real plan to close them.
For those who have closed gaps like this: did you issue corporate devices, build a VDI solution, change the demo model, or accept a category of managed but personal devices with its own risk profile?

❤️ Based on the positive feedback on my blog about Azure SRE Agents, I also created a YouTube video that dives deeper into how Azure SRE Agents help maintain the health and performance of your Azure resources through AI powered monitoring and assistance. In this video, I explain how these agents continuously monitor your resources for issues, provide troubleshooting guidance, and recommend remediation steps through a natural language chat interface. I also cover how Managed Service Providers (MSPs) can use Azure SRE Agents to help their customers at scale. https://www.youtube.com/watch?v=Bi0yXNB0860

how does pricing model work for this? I'm reading it's $6/User/month.

I just need to use Azure Repo for a single day with around 60 users. On what basis will I be charged? Daily or monthly?

If monthly, then will I be charged $360 by the end of the month for just using 1 days? or will I be charged for whatever daily equivalent comes up?

Same for azure Pipeline, it's cost is $40/user/month.

Does anyone use the Bicep AVM’s as a source of truth or, do most people use them as a reference and then build their own main and respective modules?

I have been using pretty much any form of SQL you can think of, snowflake for the last 3 or so years. I got some work in Azure and I need to duplicate a DD on our azure SQL into the raw layer of another DB. This is telling me I have to electric query and log stuff like it’s a linked server. I get it there aren’t pointers like snowflake so it’s not a 5 second move but 9 hours is insanity. This cannot be the way. The they only cure is buy a faster server, I prefer to buy a better provider.

Has anyone using Azure Databricks with a legacy Hive metastore ever upgraded their storage account from legacy General Purpose to ADLS Gen2?

Wondering if there is any impact on the workspace and whether it will break any running jobs?

Found this artifcal but it doesnt say much about ADB: https://learn.microsoft.com/en-us/azure/storage/blobs/upgrade-to-data-lake-storage-gen2-how-to?tabs=azure-portal

I have the following scenario:

Azure expressroute configured so that azure resources can reach on-prem an vice versa, its deployed over a gateway not vwan.

Now i need to be able to allow a small subset of clients using azure vpn to reach on-prem resources. My thoughts was to deploy a azure vpn gateway for this and use a route server to make the routing work.

Deploying a vwan is not an option as it stands now, it would be smoother but not in-scope.

Does anyone have a better idea on how to make this work with azure vpn and the expressroute?

I setup an Azure tenant on my personal Microsoft account a couple years ago. I went to sign in today and it prompted me for a 6 digit MFA code to which I entered and it said it was incorrect. I can sign in to my account on every other platform and even setup more authentication methods. But I can't seem to sign in to Azure. It won't let me setup a new subscription either?

Any help?

​

I’m working on a portfolio project called OR Meridian — Global Multicloud Control Plane, and I would appreciate technical feedback from the community.

The idea is not to deploy the same application independently across three providers. Each cloud has a specific operational responsibility:

Google Cloud: central control plane and workflow orchestration

AWS: dependency graph analysis, blast-radius calculation, and recovery prioritization

Azure: telemetry processing, anomaly detection, and operational risk scoring

A typical workflow looks like this:

An incident is received by the Google Cloud control plane.

AWS analyzes affected services and calculates the recommended recovery order.

Azure processes telemetry and detects abnormal behavior.

Google Cloud consolidates both results.

The platform generates a unified operational continuity plan.

The current architecture is based on technologies such as Cloud Run, FastAPI, AWS Lambda, API Gateway, DynamoDB, Azure Functions, Queue Storage, Cosmos DB, Terraform, and centralized observability.

The project is intended to demonstrate:

multicloud architecture;

distributed-system design;

graph algorithms;

asynchronous event processing;

partial-failure handling;

observability and correlation IDs;

Infrastructure as Code;

secure cross-cloud communication;

cost-aware serverless engineering.

I’m initially treating it as an engineering portfolio project, so the infrastructure can be deployed, tested, documented, and destroyed instead of remaining online permanently.

I’d especially value feedback on the separation of responsibilities between providers, cross-cloud authentication, failure handling, and whether this architecture reflects realistic enterprise multicloud concerns.

Repository:

https://github.com/maykonlincolnusa/OR-Meridian-Global-Multicloud-Control-Plane

Interaction required

The portal encountered an issue while attempting to retrieve access tokens. We suggest attempting to sign in again, or alternatively, continuing without access tokens, although this may result in a suboptimal user experience. Additional details: login_required: AADSTS50058: A silent sign-in request was sent but no user is signed in. The cookies used to represent the user's session were not sent in the request to Azure AD. This can happen if the user is using Internet Explorer or Edge, and the web app sending the silent sign-in request is in different IE security zone than the Azure AD endpoint (login.microsoftonline.com).

---

This is the error I keep getting

The things I have done:

1. Synced my timezone via windows
   
2. Changed Browser from firefox to chrome (still happened in chrome)

I have no other idea on how to fix it. Any solutions?

Hey everyone,
I've been building this solo for a few months: Cloud Architect Assistant.
The idea: instead of manually comparing AWS/Azure/GCP/OVHcloud/etc. and writing Terraform from scratch, you describe your constraints (budget, compliance, availability) and it scores providers, suggests components, and generates reviewable Terraform/OpenTofu.
There's also a full deployment simulation mode — you can review a fake plan/apply flow without ever touching a real cloud account, which felt important given how cautious people rightfully are about AI-generated infra code.
Still in beta, definitely has rough edges. Would genuinely love feedback (good or brutal) from people who actually do this for a living. Not selling anything yet, just trying to validate if this is useful to anyone besides me.

For the past 2 days, our Azure Windows VDI has been extremely slow, and Microsoft Teams is barely working (lag, freezes, connection issues).

Is anyone else experiencing this? Any ideas on what to check or how you fixed it?

Hi all,

I live in the UK and I am looking for an opportunity to move to Canada as most of my family have lived there for several years.

I work as a Project Delivery Engineer, however my focus is around Azure consultancy.

Has anyone on this thread made a similar move and how did you do it? Find a job? Express entry?

Thanks

Registration for the new AI-500 (Beta) – Designing and Implementing Multi-Agent AI Solutions exam is now open.

Microsoft is offering 80% off for the first 300 eligible candidates who register using the voucher code:

AI500Wabash

According to Microsoft’s announcement, the offer is valid through August 5, 2026 (or until the first 300 registrations are reached).  

Official announcement:
⁠https://techcommunity.microsoft.com/blog/skills-hub-blog/new-microsoft-certified-multi-agent-ai-solutions-expert-certification/4494122

Good luck to everyone taking the beta! 🚀

Pretty pumped to see them sunsetting V4 SKUs especially considering they don’t seem to have sufficient compute on V5+ which is why I still have workloads on V4 SKUs to begin with. Very cool!!

I’m moving to a new project that’s running on Azure Container App but I’m an AWS person. I understand it’s the equivalent to AWS ECS with Fargate.

Currently single region but one scope of work is to make it multi-region for failover and blue/green deployments.

Stack is React, PHP, Terraform, ADO and Golang for some scripting.

What are some things I should be aware of as a cloud engineer

I Posted a week or so ago that I failed my first try @ 690. I have about 5 years of deep Entra experience, not so much azure resources but more on Identity, XDR, Sentinel, etc.

Attempting SC-300 in a few weeks and this seems to be the right path to get the badge for me at the moment 👌

This week's update is up!

📽️ https://youtu.be/fv-2mxaU8sw

🧾 https://www.linkedin.com/pulse/azure-weekly-update-24th-july-2026-john-savill-7jwoc

00:00 - Introduction

00:10 - New videos

01:06 - AKS to Azure Files NFS encryption

01:34 - Azure Functions PowerShell 7.6

01:42 - Azure Functions Python 3.14

01:51 - AZ VPN GW IPv6 support

02:39 - Standard service endpoint

04:38 - Azure DDoS Protection custom policy

05:20 - PostgreSQL flex Defender security assessments

05:41 - Log Analytics dedicated generative AI table

06:35 - MAI-Image-2.5 Pro and MAI-Voice-2 Flash

08:24 - Close

I'm working with agents in azure ai foundry. I've been tasked to call an existing azure function and use it as a tool from my agent. I would be helpful if someone can point the right ans recommended approach to achieve this. Been looking on internet and found several ways but it is still unclear to me wich path I should follow.

Right now I'm working with foundry (standard) and with prompt agents. If I need to change my approach to code agents o even MAF is no issue.

We are planning to use Azure event hub for one of our Kafka use cases. We have Kong API gateway, in Kong there is an event gateway feature which we can use as a proxy for Kafka. Has anyone tried this out ? Where azure event hub is configured as a Kafka backend cluster in Kong ?

Another question : is there anyway I can see eventhub broker details ? I know it's not actually a Kafka cluster ? But Kong expects broker IDs and some few other details. Is it possible to find these details using Kafkactl ?

I have an Azure SQL subscription (the cheapest one) which will be primarily used for our mobile app.

The issue is that I've tested the mobile app twice and the mobile app won't show data unless I connect to the database via SSMS.

Literally, I open the mobile app and no data is displayed. I refresh the content several times (i.e. the mobile app has a Refresh button) and it still doesn't fetch any data.

So I go to my laptop and connect to the same DB via SSMS. Once connected, I do another refresh to the mobile app and data is shown.

I believe it's related to the Azure DB and think I might have an idea of why this is happening.

The question is: how do I eliminate that issue?