 Hey everybody welcome back to another episode of a zed updates join with me as always is Sarah lean Sarah. How's it going? I'm okay. I'm a bit nervous about being producer Pierre today Try not to break anything Producer Pierre is out on medical leave. We wish him a speedy recovery. He should be back next week Sarah, thank you very much for taking up producer duties when the show first started I was actually doing producer on my own and it was a complete nightmare and that's why Pierre jumped in So so happy that you know you have a lot of experience with a lot of the stream streaming that you've been doing on your channel So awesome to have you also help out in regards to producing today Producer Pierre is probably gonna be in the chat letting us know what we're doing wrong with it. So okay. We're all here having fun on the show Which was cool Sarah, how's your week been? busy We're ramping up towards at night. So I've been working on my presentation in various different activities around that at me So Yeah, I can't believe we're nearly at March and what about yourself? Same, you know preparation out around ignite a lot of sessions are coming in down to the wire We have just over a week to go for ignite and we'll talk a little bit more about that later But you and I are filming a lot of sessions a lot of people on our team are filming a lot of the sessions that you'll see For content at ignite Really quickly the IT ops talks all things hybrid Videos and if you want to check those out from our previous event aka ms forward slash IT ops talks All the videos will also be part of the library at ignite as well, which is awesome So all 20 hours worth of content that we shot if you haven't seen it before You can still see it right now at aka ms forward slash IT ops talks with an S at the end You can see the content now, but it will also be made available as part of the catalog library at ignite as well Really quickly There's a lot of news to talk about today But I really wanted to show this quick demo of something that was released this week on word and it stumbled upon this by accident because my kids were doing this they were doing a project and They had word open and what they do is they use word as their resource Capture tool so all the items that they need for their project that they're gonna build it be a PowerPoint They add all this functionality or they capture all the information first and word and then transfer it into PowerPoint Really quickly if I can show my screen Here I have here my one drive. Thank you Sarah for lighting it up my one drive here I've created a document as you see it's called it a zed fun for my a zed update show So I go into my document and I'm gonna do a quick document resource capture on windows virtual desktop Roadmap so I found this fantastic video. Sorry your eyes are closed Seriously kill me after the show. I'm gonna capture this URL And I'm gonna paste it here To my word document This is new. This is the ability once you've pasted the URL into your word document You now have the video automatically bedded into this now a couple things. It's interesting about this I can click on display as I can actually select. No, I just wanted is the as the hyperlink I don't want to see the imagery at all But the kids are looking at this from from an education perspective and They don't print out a lot of Reports anymore a lot of things that are cement are submitted electronically and so to have this embedded As part of your project in terms of word So if you know, you don't have if you have to create a PowerPoint presentation Of course you can embed videos into PowerPoint The fact that I can embed it as a resource into word now and submit that as part of the project to the teacher That's huge. I haven't been able to dabble or play with the if I can go to a specific point On the video itself like to where Sarah's eyes are closed The you know, I can't I can't specifically do that right now But it's really cool that I can just embed this video right into word just by piecing the URL I don't have to go through multiple steps to do it And you know the kids caught this immediately and it's like oh, this is cool And they're starting adding all our videos to their resources, which is you know helping them out in terms of their projects Sarah thoughts I think it's pretty cool. I think it's pretty cool from The teacher point of view if they're sharing resources or worksheets for the kids to work through nowadays They can just embed the video there and play it and it will be interesting though to see how it works If people block YouTube and stuff because I know when a lot of the kids here and are in school YouTube is blocked a lot of the schools don't allow it So I'll be definitely interesting to see how the teachers and how the kids fine work arounds for that one as well Because we know they always do right Well, if it's blocked it'll just show as the hyperlink, right? So that so it's not it's not that bad But yeah, no kids the kids are really smart, you know a lot of the kids I know I know YouTube is is blocked here in the local schools as well And what the kids actually do is they'll tether their phone To to their device or laptop a lot of kids do your work on their phone itself You know, there's a couple kids And my oldest daughter's class they roll out a keyboard that's connected to their phone and they're typing away, right? That for them is enough so it's you know Our traditional sense of productivity on computers is so much more evolved now in terms of what you can accomplish I'm just waiting for the the desks that they work on to be a hologram And they're just typing away on a on the air in terms of what they're doing for their projects, which is not that far away Yeah, that's pretty cool And I used to get excited about getting a new pencil case with all the fancy new pens and pencils and Kids get keyboards for their mobile phones. It's just different world The zipper binder I forgot where the thing was a five star and you can put all in You just zip it close that when you throw it across the room it doesn't everything doesn't fly up Oh, yeah, those are the dates Absolutely Shall we get started with the news? Yes. Let's go. Who's first me? I believe you're first So I think first of all we're going to be talking about Cross region restore in azure backup for your virtual machine. So And when you were I think I've got the wrong page actually see this is why I shouldn't be producing and doing this But what's the feature and functionality that's now available is that within your azure backup when you fire up that recovery service Who's fault? It's by default turned on for the geo redundant Storage so you would have your copy of your data in a primary location and also in a secondary one And you could never really restore from the secondary region You had to maybe log a support ticket if you had to do that And that was only in use cases for when the primary region something catastrophic happened Now we've got the feature where you can actually choose to restore from that secondary region yourself Without having to log a support ticket. So it means there's much more functionality from a customer point of view So if you if we were in the middle of an incident where that primary region has went out And you needed to get your backups and that was part of your disaster recovery plan to restore from backup And you can now do that you can now pick that secondary region and pull it across Equally even if you're just looking to spin up a copy of that virtual machine in a secondary region You can use that and restore it and then have it pulled from the same region type scenario So it's definitely a cool functionality because I remember years ago when I was first using azure backup A lot of customers could not figure out why we had that geo redundant if we could never actually restore from it Or it was a complicated process. So being able to do this now yourself natively is quite good I have actually enabled it on one of my azure virtual machines to try and see what it looks like and see how the process differs Unfortunately, it was only announced. I think yesterday So I haven't had a chance to take a full backup and actually play with it But it is definitely something I want to have a look at and see where the caveats are and how different the process is If you're restoring from primary region versus secondary region Certainly doesn't look like there's much difference to the process, but we will report back on what it looks like as well So Yeah, what do you think dandy? Do you think this is going to be useful for a lot of customers? Oh, yeah What's been interesting is that when we shared this out on social this week A lot of people had come back and reached out and said, hey I have such and such that database on a vm on this region And I have a another region that requires it for specific testing Is you know, this availability now allow for me to do that in my in my other region without, you know They're being a fault issue and 100 yes, you know, it's something where if your organization is geographically Spurs everywhere and you have the ability to now restore without the failure Using this process makes it a lot simpler to to enable this type of functionality for that cross region Enablement of that vm being spot specifically for a database into a lab environment as an example, right? Even you know from the perspective of and I know you you love when I dive into iot and all of the data That's being captured from iot. I see a lot of capabilities with this In terms of iot and in the bridging of data In another region for that whole aspect of testing and trialing out before Devices are deployed similar to you know the existing functionality that exists today But you know if you have some requirements in terms of a closed environment It's it's there's there's a lot of opportunity with this and i'm very excited for it. It's something where you know Microsoft again receiving the feedback from you our audience In terms of what you'd like to see for functionality, you know coming coming in in and with a solution to enable this which was really cool Yeah, absolutely What's your new story? next your story Azure firewall premium. This was something that lit on fire this week On all the channels on social in regards to the new capabilities being made available for premium the the the whole aspect of functionality where you can now incorporate intrusion detection and prevention on your Your instance of firewall. So firewall is a service adding additional functionality intrusion detection Your your in essence spinning up a service as opposed to actually having that hardware to do that detection That's huge web categories If you're running the situations with regards to This organization is spending too much time on social. We need to block that. You know, you have that functionality now This is something in a traditional box You have that capability of doing I'm one of those dads who has you know the home router that has that type of block in place So the kids do their homework and you know stuff that they the can and can't do is is scheduled in specific times But having this functionality now As a service on firewall is a big deal and then even the aspect of URL filtering What sites are allowed to individuals allowed to go to what sites are they not allowed to go to? Having that as your central point out for internet Is huge and again negates the need for having all the appliances now if you need that If you have that requirement, this isn't replaced out This isn't replace having the hardware in your in your office Or at your organization if it's a requirement it can replace it right now. It's in preview So it's not been fully made generally available yet But if you wanted to have that control in terms of firewall as a service It would replace the hardware if you wanted it to happen that way I think the biggest thing is the satellite offices I've known especially in construction What will happen is you'll have a satellite office a trailer out at a construction site that would go For all internet requests would go directly to the organization's head office And it's there's a latency in regards to that pathway first to the head office to to Abide by the rules that have been set forth by the hardware that's installed in that office and gain access out to the internet If you've now enabled this Azure firewall premium as a service enablement You no longer have to have that hop back so that latency is now gone And so the the satellite office will be just as quick as the The proper office with this implemented sarah your thoughts It sounds interesting. I haven't played with azure firewall for a long time Is this just a skew change? So if you've already got an azure firewall Can you just take a box and upgrade or is this a new deployment and things, you know Right now it's a new deployment because it's in preview right so you would actually have to deploy The preview piece. I think what microsoft is looking for is there they are looking for that feedback Is that something that would be of interest that you would just click on a box? And you would gain access to all the premium features Do check it out, you know, and if you're interested in regards to locking down your organization's firewall capabilities further or if you have satellite offices construction You know environmental there's a whole bunch of uh, there's a plethora of situations Since you can actually have this deployed in for satellite scenarios Do test it out and provide your feedback We'd love to know is this something where a check mark box and it's enabled or should it be a full-on service That's spun up differently from the azure firewall standard to provide that segregation. Let us know Awesome, sounds good Okay, let's see if I can get this right now The screens So the next bit of news is um key vault now has um rollback Roll-based access control or azure are back. Um for those not familiar with key vault It's where you kind of store all your keys your secrets your certificates The bits of data that you don't want to lose the bits of data You shouldn't be storing on post-it notes or in a drawer somewhere Those really critical bits of information that you need to share within your organization or applications What the roll-based access control now does is allow you to be granular about what's happening around all of that Previously in key vault we had I think it was vault based policy. Um, which was which was okay I think it was a bit clunky from a lot of feedback I heard was that it was a bit clunky having to use that And not having the our bank functionality now. We've got our back So there's a ton of built-in rules and you can start to build your own if you want So you can control what people have access to when I was looking through some of the built-in roles There was people who could just read the secrets then there was people who could read the keys Then there was people who could add and remove certificates But couldn't actually see the data within the certificate So there's lots of different granularity in terms of allowing this and that's that's very key to how your organization works, right? Some people need access to all this information. Maybe your security officer Or your boss or whoever's the you know the head person in 90 department But maybe not everybody needs access to certificates and keys But they might need some secrets to maybe unlock, you know passwords to other places What our back gives you is the ability to put keys in place of the keys So you can actually control what's happening and who has access to it And obviously there's logs happening. So if people access it, you've got that full control I know previously we used to have like A book that was locked away with passwords and people would take the key and go and have a look and then you know Change the password and never going back and change the book because they couldn't find the key or the key got lost or the key got taken home So being able to have this in a kind of electronic way is is much better And I definitely think this is going to be quite interesting The one thing I did notice when I was reading through this documentation is if you change from the old access policy to the robot the row based access control You might actually break some functionality So it's definitely something you should test. So spin up a dev environment or put it into your dev environment Put everything you think you need in terms of functionality And then make the swap in that dev environment and test what breaks and what works Because the last thing you want to do is be in a situation where you've changed the art back control And you can't get to your keys your secrets and certificates and you're completely blocked out Because that's going to be a horrible nightmare to fix So definitely change a test this change if you're going to implement it So that's one kind of thing that I would recommend you have a look at when you're doing this Anthony, what do you think are you a row based access control man or? Well, I is the thing right earlier on in my career We had that master administrator user account that would go in and it was a shared password amongst four people And the team would all have access to this and you can go in and do what you want It was very scary in terms of what it was, right? It's funny you mentioned the sticky notes. I've seen that sticky notes on the monitor You've seen that too, right? My the most interesting one I saw was one organization had this rule No sticky notes on the monitor because of security security requirements And so one individual had the passwords written on the ceiling tile So that they could look they would literally sit down and look up and type in their code, right? I've seen it all like it's it's just insane in terms of what's out there What I love about our back a row based access control is now the inclusion of governance Spanning across multitude of services, right? So, you know traditionally we had under a compute And you know the spinning up of a tenant and setting up of services and your resources and what have you now We're seeing an extend to security And for me as a security geek there's a whole aspect of the forensics When an attack occurs, how does the attack occur? These tools that are being implemented not only governing over who has access to what and what times and how it's controlled It provides a more clear path from a forensics perspective When I'm doing a research on how an organization was attacked. Where was the entry point? What was circumvented? What was taken over in terms of an account to have access to all this? So it's not only just a an aspect of You know, I'm going to lock you out from controls It's also a safeguard for those organizations to understand. Hey an attack has occurred This is the pathway that they've gone through this account was was Attacked and the gain access and you know did the militias intended that they did from that account You know have a better understanding of this and when you tie that type of functionality into tools like sentinel Providing you that additional well, this is what you should do to protect this You know, it takes away a lot of the guesswork in terms of how you protect your organization It's I just I'm enjoying to see how our back is being deployed across More than just compute more into the services made available across the board and in essence you've you've got security protecting security With regards to it. So it's really cool Awesome. What's your your new story Antony? What have you got up next last one for today? Azure ML if you're if you're working with the machine learning workspace They've now increased the capability of the terminal services that are available directly in the workspace itself So if you've been dabbling in cli CLI The the command line interface you now have the functionality natively inside of the machine learning workspace to invoke the cli commands What's really cool about this? I can spin up You know and I can spin up a github repo And and have it copied over I can go in and run power shell Sorry, python Scripts and python, you know a lot of discussion is happening on the net in terms of should I learn python? You know, does it supersede power shell? You know What I've been talking to individuals online has been hey, you know power power shell and python python is starting to come into the foray of you know architecture and infrastructure animation Definitely check it out because it is a little bit of an easier language to to pick up if you're getting into it It's something of interest and it extends across a plethora of platforms not just architecture So it's a great advantage to have that skill set What i'm intrigued to buy is the inclusion of cli traditionally an it professional You know type of tool being incorporated into machine learning a lot of you know In the in the system administrator it professional world have been you know reaching out saying hey You've been talking a lot about iot. You've been talking a lot about machine learning and you know the it professionals rule I'm starting to see these tools light up in these other platforms and you know my response has been yeah, rightfully so because The it professional and the developer hand in hand support the organization One can't do without the other and so the functionality that's being included Being from an architectural spec and it's not to say the developers can't take advantage of cli. They obviously do as well But the the increased functionality being made available to it pros around capabilities like machine learning Show the importance of the system administrator in terms of the inclusion capability of this I think this is the start of something I think this is the start in terms of the machine learning work or workspace of something that's going to come in future In terms of further enablement and further governance That the it professional would be responsible for in respect to this enablement on on workspace. Sarah. What do you think? Um, i'm a huge fan of cli I think when I first started power share was obviously the language of choice because I'd used it For years managing like exchange servers and what have you? And I always thought cli wasn't something I could learn and then when I started to learn about it I realized it was Much easier to be honest sometimes to use them power shell So i'm a big fan of cli and just having a look at that document that you had up on the screen A lot of that made sense even though I've never used ml before but I can understand the commands and I can Probably be dangerous if you let me anywhere near an ml space Well being dangerous in the lab is not harmful right being dangerous in production Yeah, it's a bit of a problem and I've done that before so i'm definitely a couple of that But but that's that's just it right it's that A lot of people feared power shell for its complexity right and so you know But if you harnessed it the automation capability was so powerful it'd save you so much time The functionality in cli is that much more just because the syntax is being used is a lot more friendly In terms of verbiage uh and the commands that are being used. It's almost like natural speak And so this functionality being incorporated into tools like machine learning specifically machine learning workspace That's you know a great eye-opener in terms of the automation enablement that's being made available to the it professionals On the functionality of these solutions and resources and tools going down the pipe I'm intrigued to see you know how this evolves in terms of its offering what's being made available And so we've shared out on on it ops talk All the links uh specifically the commands that are available for uh cli which are you know is is now and this is g This is not private preview. Uh, so you can start doubling them into this today Check it out. Uh, when you get a second and you know try to see what you can do in terms of functionality Let's quickly jump to the chat room and say hello to a lot of individuals that are joining us today paul jensen Jared chockley jared actually offered uh to be producer pierre today Honestly jared we didn't reach out because we thought it'd be too early for you I know you have patch and switches on today. So, uh, you know hats off to you for for offering to help out But I think sarah is doing an awesome job. So it's really good I think pierre should be worried. No, i'm joking. I'm joking. I'm joking. We got to have the show with producer pierre So we have paul jensen jared chockley. We have steven ins Lots of canadians online today. Uh, engine mccullum, uh, rabbit jr I believe rabbit jr is from south africa, which is really cool. Um, and you know, hello to everybody That's online inside of the chat room. Uh, you two can participate on the chat room as well join the YouTube group the it ops talk youtube group. Uh, and you can participate on here as well. Um sarah in terms of events ignite We talked about this earlier ignite is less than uh two weeks away just over a week away. Um Interesting in terms of what's going on with this. There's a lot of talk of you know sessions They haven't released a full agenda yet, but the registration is open Um, I'm very interested to see what's going to be coming to this ignite only because we had one in september Uh, and now we've never had two within the span of 12 months Um, so it's going to be very interesting in terms of what they launched as I mentioned before We're excited that the it ops talk sessions For the all things hybrid event that we had will be included Into ignite which is really cool and that'll be made available In the ignite platform Sarah the team we're all going to be available as well for conversations Uh, if you've joined us on our discord server, uh aka.ms forward slash it ops talk Dash discord. Um, we'll still be having the conversations on there Related to all our sessions as well as any questions you may have from ignite All all up. Um sarah you were mentioned that you were busy very busy with ignite too doing some of the recordings Yes, well, I'm actually doing a live presentation I think on the 4th of march at 6 30 a.m. My time. So I deal slow, but um, I'm looking forward to it. I think it'll be fun. Um, I've had fun building out the session I'm not going to tell you what it is because we haven't released the session catalog So I'll leave that cliffhanger for you all. Um, but yeah, it's it's looking in dress now I've heard some snippets of what's being announced, which I obviously cannot disclose either But yeah worth tuning in and seeing what's happening and seeing what the team are doing and as always Feedback helps us evolve these events Um, I think unfortunately we're kind of in a situation where virtual events are are potentially going to be this year again So if you don't tell people what your feedback is good and bad around these virtual events Then they'll never evolve and they'll never be enjoyable for you. So Yeah, your feedback is very important to us in terms of this From what we do and what bigger teams do as well at Microsoft. So that's me plugging plugging that Also this next week will be the azure admin jumpstart. This is put on In in response to you know people that are starting out in terms of their system administer careers This is a great way to start out in regards to governance security deployment you name it This will be made available starting on the 22nd of february Something that you can join in it is another webinar. This is full-on series. So do check that out as well It is a fortnight, which means that patch and switch are on today. It's probably why jared is up this early today So again, thank you jared for joining us on the chat room So producer c will be in effect alongside patch and switch for their show today and last but not least we have the Microsoft learn module of the week this week in terms of In tying into the cli announcement for the machine learning workspace capability We've decided to go with the deploy and manage compute resources for azure administrators Reason being there's a great section specifically covering cli if you have not dabbled into the command line interface capability thus far This module has a part of the azure fundamentals module Which i believe some of us are on in terms of videos as well in in in the set Which is really cool, but specifically calling out the azure cli Enablement if you've not dabbled in azure cli thus far this specifically covers virtual machines But the learning from this can also extend into the machine learning work Workspace capabilities for cli for that enablement as well Sarah it's been a great show If people want to get a hold of you on online, how do they do it? And you can find me at techie lass on twitter That's where you'll find me talking nonsense and sharing what content i'm creating. So yeah tune in there And if you want to send well wishes to producer pierna to get better soon You can do so on social on twitter His handle is at wired knuck and if you want to get a hold of me for some reason you can do so as well on twitter at wireless life Sarah thank you again for stepping in his producer awesome job Again, you're giving pierna for his money. Just saying Uh, thank you to all of those on the chat room. We will see you all next week. Have a great weekend