 Hi, everybody. Welcome to The Rock in the Cloud, the latest episode. We're in season two, and things are flying by. As you probably know, Windows Server 2022 launched recently. So we're going to dig a little bit into that, but also we're going to understand it from an on-prem cloud, all that kind of usual goodness. That's what we talk about on this show. And we're going to talk to an expert. Obviously, we need a special guest to actually decipher this technology. And you don't want to, as always, you don't want to just talk to me. You want to talk to an expert. So we've reached out across the Atlantic. And we've gone all the way to Canada, and we've gone to... Whereabouts in Canada have we gone to? Again, we've gone to... We are in Ottawa, Canada. Ottawa. Ottawa, Canada. I mean, it sounds so cool. I'm sure it gets cold there as well. But we're in Ottawa, Canada with our friend, friend of the show, Pierre Roman. He is back with us again. As everybody knows, he's a little bit of a whiz, presenting God. But, Pierre, just for those that maybe haven't seen the last episode with you in, just refresh our memories about why you're a good person to talk to. Well, I am a good person to talk to you. Well, number one is, it's part of my role. And I've been doing it for a long time. You have to. No, no, no, no. I mean, I mean, this is something I've been really passionate about for a long, long time, which is the reason I've gravitated to these types of role, where my role is almost like the interpreter. I interpret customer and real life environments to engineers. And then when the engineers come up with the product and they release it and then we look at it and then we interpret what the engineers actually meant to do to our audience. So when the audience says, oh, well, this is great. However, this is a scenario that we want to use it in and it doesn't quite run where I, like, what can we do? And then I take those requirements and those scenarios and I bring them back to the engineer and they say, why didn't we not address this? And they're like, either there's a real reason and then we communicate that, or if there's not a real reason, then that goes on to the to-do list for the engineers to adapt. So you're a technical spirit walker. That's kind of like your kind of job. Yeah, well, you know, we're privileged to talk to you, right? And today we're talking about exactly one of those simplifying IT management and doing that in the realms of server 2022, because we only launched that a few weeks ago. So we're going to talk about that for the next 30 minutes. We're going to talk to you, Pierre. And, you know, if anybody wants to find out more about this subject, please do get involved. Let us know about it. Let us know what questions you might want to ask Pierre in a future episode. And, you know, we can spirit walk, technically spirit walk whatever you want to with Pierre. So, you know, we're going to talk a little bit about the subject matter at hand, which is simplifying IT management. Now that, it sounds simple on the face of it, but I think the reality is it isn't simple, okay? So Microsoft said, right, server 2022 was the first version of Windows Server to be designed fully in a truly hybrid platform, right? So that's quite a bulk statement, but what does that mean Pierre? So what does that mean? Let's roll it back a little bit to 2019 Ignite when Jason Zander, which is a corporate vice president that runs the Azure environment. In his keynote said, and I quote, Ibrid is our customer's end state. So we are no longer under the impression that cloud native is where everybody's going to end. We know for a fact that the majority of our customers are going to be in an hybrid state for the foreseeable future. And yes, there are companies that are fully cloud or cloud native and have no on-prem footprint, but those are typically startups or very new companies that have not invested into an on-prem data center. Doesn't mean that at some point they're not going to get big enough that they're going to require some local services, but for what they're doing, on-prem native work is most likely good enough, especially with Office 365, Windows 365, and all of the online services that we have. But what does that mean for Windows Server? So if we look at the evolution of Windows Server, like since 2012 and then 2016 and then 2019 and now 2022, the basic functionality of the server is still there. There's some tweaking in terms of performance, support for newer hardware. There's definitely some tweaking in terms of the security, but the biggest tweak in my opinion, so if you ask like Woolsey, Jeff Woolsey, or if you ask Ned Pyle or others, we may all have different little opinion as to what the biggest improvement or tweak is. For me, it's the way you manage them. And I see Azure or cloud or hybrid cloud as just an extension of the data center. So if you're running your data center, whether it's in a single room or in a football field size structure, extending to Azure is just basically like getting more footprint in having servers. Most of our servers in any environments are virtualized anyway. So virtualizing on somebody else's hardware or on somebody else's environment, as long as it's connected and managed the same way, that works. Now, that being said, when we say that Windows 2022 is the first version to be designed as a truly hybrid platform, it's mostly based on the way you manage it. And if you're looking at the way you manage it, the best way of managing that server is through Windows and Min Center. And of course, when you install server 2022 and you turn it on the first time, you'll still get the server manager that pops up and you can manage it that way or using all of the applets, like control panel applets that have been there for some of them for decades, like you can still manage wins on a 2022 server and all of those services. But when it pops up for the first time, it says, hey, you should really look at Admin Center. And Admin Center integrates directly with Windows 2022 and also with other versions like 2019 and 2016 and so on. But it presents services that Azure can provide to make your on-prem or your hybrid environment better. And that's native, that's like built-in, the dependencies are there, everything's kind of ready to go, you just have to light up the services. Okay, so because of that, because it was built and designed with that in mind is what they mean when they say that server 2022 is the first version that's designed as a truly hybrid platform. Okay, I think that's great for people who is, because some people probably haven't got their hands on 2022 yet and they're looking at what they wanna do, they're looking, and I think this is super important, but Windows Server is one of the reasons why it isn't just cloud and hybrid is the end state is because there's history there for people, okay? Because the infrastructure that people have got has been built over years and years and years. So these layers have been built up. Now, we always encourage people to move on to the latest version because you get the benefits. But this is the first true benefit where it's actually been designed in a way that you can utilize on-prem and cloud together with a Microsoft solution without having to like Frankenstein the kind of two things that kind of work together. Do you know what I mean? Like we've actually, it's actually been geomed in that way where it's actually designed to all work out of Vox, which that's brilliant. So what does Windows Server 2022 to offer that makes it easier from an IT management perspective? How, why is it simpler? Well, there are things like the Azure Filesync, Azure Filesync is one of my favorites. Okay. Mostly because I used to run data centers for corporations before I joined Microsoft and that was always the pain, the pain point. It was difficult because nobody actually, very, very, very rarely would your shares on your network actually shrink. Like people don't get rid of data, especially in this day and age when it's so easy to create it, then you just end up having more and more and more data. Do you know what it's like? This is like you and your wardrobe and your Microsoft clover. Like, just get more. It just gets more. And eventually you just look at your closet and everything has got a logo on it. And that's a different story, but that's what my wife keeps complaining about is that every piece of clothing I have as a Microsoft logo on it. Yeah. But those files replicate. They don't replicate by themselves, but what I mean is, and of course users, there's always education that needs to be done there where you have a team site or a team share or a share point or whatever it may be. And then you put the monthly report on it. And if you have a team of 20 people, chances are 15 of them, those people are gonna take a copy of that report and put it in their own home shares, which ends up being on the same server. Guilty, guilty. And I do that too every once in a while. Then you end up with like 16 copies of that report. Now there's ways, of course, there's a de-duplication to cut that down. But in a lot of cases that data just grows and grows and grows. So we end up with having to add physical disks to that server, connect more network attached storage or whatever your storage solution may be. Maybe it's a sand, maybe it's network attached, maybe it's a hard drive, who cares? You still have to do the work and add storage. But with something like Azure File Sync, so in Windows Admin Center and Windows Server 2022, you just have to basically say, okay, turn it on. And it connects to your Azure environment and creates the flow it's taking care of for you. Where it'll create the account, it'll create everything, make that link and then start tearing your data. So even if you've got like, I've got a customer or an entity that I've worked with not too long ago, a studio that does video recording and they have terabytes of a month of new footage. They don't want to lose, even though maybe it's like B roll and like 15 take of the same scene, they still keep them for some reason. So under local storage, they were always at the point where, okay, so what do I do? So I'll take last year's data and I'll move it to another server. Well, that takes time that gets your information into multiple different location when you want to have it all into one place. So we enabled file sync or Azure file sync on that. Now it starts tearing old data to the cloud. So their 100 terabyte drive is still 100 terabyte drive. It's set to always have 50% free space. So there's never more than 50 terabytes of actual data on those drive. But if you look at file explorer, for example, you get all the files, it may look like there's hundreds of terabytes, but the old files that have not been used, so what we call cold storage has been moved off to the cloud, but it still shows up. So if somebody needs that clip, they say, okay, I want to open this one. The server connects, downloads it back and then presents it to the user. It might take a little bit more time, the first time because it has to retrieve it from the cloud, but then it becomes hot again and it stays local until it cools down enough to be offloaded. So now you don't have to worry about every six months re-evaluating all of your storage posture to see, okay, am I gonna need another 100 terabytes added to my storage array for growth. You set it and then it just grows with you and you pay for what you use. There's no capital investment. It's easy to back up, it's easy to snapshot, it's easy to keep track of, and it's all built into Windows Server 222 and it's lit up by Windows Admin Center. So that's one of my favorites and a really good example of how cloud services enable hybrid work and better and simplified IT management. Yeah, and I think, and it's kind of obvious really, but that backup scenario is kind of, that's probably most people's starting point for hybrid because actually that's the sort of, when I talk to people, that's the number one thing they wanna go do. They wanna make sure that they've got that scalable backup and it's simple. And actually that's where people are like, oh, I've got my old on-prem scenario. I'm afraid of doing anything with it. Well, move it along a little bit, get it to a place where it can have that hybrid relationship and I think that's probably the best word to call it. It's a hybrid relationship. And we're not saying that we have to trash that old data center that you've got. What we're saying is by a new outfit, get it ready to come to the party and let it come to the party and then let it come to the ball, come to the party. You know what I mean? That's what we're sort of saying. Now, when I think about specific offerings and ensure that like truly simplify IT. And now you've already mentioned one or two things, but is there anything else that you would call out? Well, there's a couple of things that are specific to Windows 2022. Cause if we were looking at Azure File Sync or backup and site recovery that you just mentioned, Azure monitoring for monitoring your usage performance errors and so on. That's all built in, but it doesn't just apply to 2022. It applies to 2022, 2019, 2016, all the way to like 2012, I think it's still supported for not too much longer. So if you're still on it, maybe it's time to take a look. Yeah, even Linux, even Linux like these services all apply to all these versions. But what is very specific to 2022 is something like if you're running a VM in Azure, that's 2022, you can now hot patch your servers. That's number one of the new capabilities that is unique to 2022, where it will take a snapshot of what your kernel, the kernel mode is doing, it'll apply the patch and basically not restart it, it's almost like it's, I'm missing the words for it, but instead of taking a four minutes complete shutdown reboot, it just basically kind of reloads the kernel without having to shut down the machine. Yeah, so it kind of like runs and kind of loads in the background and then keeps it going. So it's kind of like pedaling on the top and whilst that's doing what it needs to do and it's more secure. Yeah, so it's a dreadful explanation there from myself, but that's fine. Well, there are tons of videos from Jeff Woolsey there, if you haven't been or haven't seen the Windows Server 2022 like the virtual service summit, it's online, you can go. I have seen that, Roman, I have seen that and that was, they literally explained it a lot better than I did. So yeah, so anybody who's watching you, go and watch Jeff explain it properly. Yes, so basically it is odd patching. So patching your server without needing a complete reboot. So much quicker, downtime is much lower. So you can, if you have clusters of Server 2022, you can like cluster aware patching, but hot patching them. It makes things a lot easier. The other thing is SMB over quick. Okay. Quick being a basically an internet protocol transport, transport protocol, that basically replaces your typical SMB transport protocol. All packets are encrypted with TLS 1.3 because 1.3 is the default on Server 2022. So we don't have to worry about all of the old encryption algorithms that were part of TLS 1.2. It does parallel streaming. So reliable and unreliable like application data get the same treatment. You can use it without actually connecting to a VPN. So it's almost like it creates its own VPN. So you can connect to your SMB shares across the internet in a secure fashion and in a very quick fashion. So SMB over quick, which is, but you need a client that'll support it. So Windows 11 went a server that will support it, which is Server 2022. Those are some of the benefits of SMB over quick. So very secure, rapid connection over the internet instead of the typical SMB protocol. Yeah. So we've improved a lot of stuff, right? And you kind of hit the nail right on there security. So in terms of security, right? In the past there were lots of configurations and you've mentioned SMB over quick, right? But there used to be a lot of things to onboard a server into a security environment and what has changed in 2022? Like in terms of onboarding a server from a security perspective. Well, let's take a turn in the past and start looking at- Let's go way back. Well, in the wayback machine. And so you had to install it like your antivirus and then you had to install like your network sniffer and you had to install this like firewall and configure that and then you had to install some kind of log aggregation tool. So either it was a system center or others. There was like plenty from partners. But then you had to collect all that data and then you had to go through that data and figure out whether or not you were at risk. So that took a lot of fiddling and configuration with the server and your environments to collect and analyze that info. And then it took a lot of time for you to actually look and interpret that information which is probably the most important part of it. Now with server 22 and it applies to other versions as well but with server 22 and what we call Arc server or Azure Arc servers or Arc enabled servers. Those servers when you install the Arc agent on those servers they become tied to your Azure environment. So they have an identity that's created in Azure. A representation of that server in Azure. And from that point all of the Azure services can be deployed and or most of the Azure services can be deployed to that machine. So when you're looking at onboarding in a security environment then you have access to auto manage for example which will turn on automatically like endpoint protection and backup and so on. But security center, Azure Defender, Azure Sentinel, Azure Monitor that will collect all those logs and do the analysis for you based on machine learning algorithms where it's already learned the attack vectors or the attack patterns on thousands if not millions of other environment and other servers plus the Microsoft cybersecurity center that basically builds or surfaces those attack vectors it learns all of that and then applies those patterns to the data that provides in your security center and then it will tell you that there's an attack here there's a potential vulnerability here. It surfaces that information in a way that's easy to understand like Azure security center when you've onboarded with Azure Arc and you just basically say, yep I want that server to be visible in a security center it starts collecting that data and it starts analyzing that data and it'll give you a security score and the score is not necessarily like 80% and you're like if you get to 100% then you pass and it's not like a pass fail. Your servers change over time and as more services are deployed on them then there's more mitigation that can be done on those servers and it will after it scans the server and it says oh well you've got SQL on that then you've got a file share on that and you've got all of these accounts on there and groups on there and blah, blah, blah, blah and it'll say, okay well based on those services there's a potential of a 500 score and I'm just like it's just a number I'm throwing out there. Yeah. You've only enabled or lit up the services to cover 400 so you've got a hundred points that are collared that are associated sorry I'll use that other word to mitigation or services that you could apply to protect that server. So you can't say to your buddy over points at the bar to say hey my secure score is 485 because your server doesn't equal it's like apples and oranges. Yeah so there's a few things there so it's not the same as your like credit score, right? It's not your credit score and each server is different and that security rating is different to the machine but I think there's also a nuance within that where generally speaking because you're working in a sandbox environment within the rules of an Azure environment there's nothing that hasn't been done before, right? So that's where we're able to create the score because we know where the attack vectors are coming we know where the compliance is we know where the risks are and we're able to apply that to what you've deployed and then give you the information for then you to act on it whereas that's maybe a change of role for somebody deploying a 2022 server they're looking at how aligned to compliance and risk rather than having to go through step by step and building it up and then still not knowing if it's right now they're able to look at a score and say hang on a second this is where we've got weakness in our deployment this is where I need to do some more work this is where I need to focus my energy it's actually allowing people to be more strategic with their time and effort so yeah I like the way you mentioned that it's dynamic versus the traditional way of setting up server which is basically you have like this build document and you go through and check one, install this check to configure this, check three this one is as your server evolves and changes and things are added to it and removed from it and modified it will adapt and show you what's possible or where your vulnerabilities are and it will suggest, you should really apply this or your drive D that you've just added to this server is not encrypted okay it's not encrypted and you can respond automatically or you can respond manually depending on your policies, how your policies are set and all of the rest of the governance which is kind of separate from Azure Security Center but there's a lot of connections there with security items and policy and compliance items yeah I mean there's no one product that's gonna do it all for you but they're all interlinked right and if we talk about resiliency and you know business continuity what does Azure bring to server 2022 which allows that to kind of mesh okay number one is as we mentioned when we started this conversation is that all of that is built in but it's lit up through the Windows and Min Center Windows and Min Center will allow you to do especially for resiliency basically or a site recovery in the real world without the cloud so in a typical traditional data center you'd have to figure out where else can I replicate that data or replicate those workloads or stretch that cluster then you're looking at the rented space you're looking at co-hosting or if you've got, if you're big enough and you've got multiple data center you replicate servers in data center A two servers in data center B and then the B replicated to A's but you still need the capacity on both sides to be able to support that replication but you also have to manage that replication and typically because the way the nature of the beast it's hard to actually run through drills like fail over drills now with Azure and Windows Server 2022 and the services that are lit up by Windows and Min console you can just say, okay, well, this server I want this drive, this drive and this drive backed up to my recovery vault and then you go away and it'll just start replicating that data to your recovery vault just like any other backup and you can go and the user calls you and says, I have deleted this file by accident you can go to your recovery vault pick the folder, pick the file and say, okay, restore that one so the same as you would be doing but instead of having to manage your tape library or your disk library or wherever you just light it up in the admin center the recovery, the business recovery or the continuity planning that's where it becomes very, very interesting is you don't have to worry about building that replication or setting up the capacity elsewhere you just say, this server is one of my critical workload and I want it replicated so you initiate the replication and it'll ask you a few questions say, where do you wanna put it, blah, blah how often do you wanna replicate it and it goes then it creates the recovery vault it creates all of the dependencies that are needed to replicate real time or near real time, sorry, it's not real time that data, so you first do the complete drive and then after that every writes that are done to that disks are replicated to the virtual disk or the replicated data in the cloud and then at any given time you could easily go to your cloud and say, I wanna test the replication of that or I wanna test the failover run a test where it builds a new machine based on the information that it's collected from the replicated machine you can go to it, test it make sure that your testing protocols are good that the data is there that the system is behaving in the expected way and then you say, okay, done, I'm done my test you close the test and then it cleans up afterwards but all those machines are no longer needed so you pay for what you have and what you're using for the time you're using it so you don't have to worry about keeping that capacity there in case you would need it you just create it when you need it and because of the way Azure site recovery and it's explained or not explained but it's set up through Azure Windows and Mint console or the center, you can say these machines are part of my solution so you have your front end, your database and you select them all and you replicate them as an application so it creates a application-aware replication so that your machines are always in sync to each other not just to their replicated partner across so that's where the continuity comes in Yes, yes and it's really easy to light up it's really easy to onboard and it makes your IT management so much simpler because you're spending a lot less time planning capacity and planning how I'm gonna create that replication and a lot more time actually testing your disaster recovery protocols because you can test them so easily and then clean up after yourself you test in a sandbox so it doesn't affect your production environment but now you know it works like I've had a security audit for a customer years ago and they failed the audit because they didn't have a business continuity plan and when I presented the results to the director you got mad and he said, what do you mean? we have a disaster recovery plan and I went, well, the guys that are supposed to implement it are not aware of one and he's like and he literally did this and I'm like, this is not a joke he turned around, grabbed a binder from the library behind his desk, blew the dust off the top of the binder put it on his desk and says, here, we have this plan we spent a lot of money to get this consulting firm to come in and establish this plan yeah the plan had never been tried never been tested never been implemented never been implemented by the people who are supposed to do it so it's worth the paper it's written on yeah, yeah yeah, yeah, I get it yeah, so it just simplifies things so much and allows you to not spend cycles on things like that or on building the underlying dependencies for your plans to work but actually working on the plan itself and then the rest of the time that that simplification gives you is now yours to apply to business units and actual system improvements as opposed to just fighting the fires that totally makes sense and so my last question here we go so if we're going to talk about unique capabilities that are available through Azure and Windows Server 2022 what are those killer unique capabilities that weren't there before that you would in terms of that simplifying IT management what would you call out? I would start with a new service that's well new relatively new AutoManage, Azure AutoManage yeah, because we know like we talked about this build sheet earlier like this as built documents that everybody in everybody who's worked in IT in the past 10 years knows that you have that checklist of things that you need to do when you onboard a server AutoManage is you set it's basically everybody gets a backup everybody gets a replication everybody gets an antivirus everybody gets and those are all set into AutoManage and you say when you onboard you say I want AutoManage to apply to this server the server, the server, the server it could be a Windows virtual machine running in Azure it could be a Linux machine running in Azure but it also could be an Arc-enabled server in your data center running 2022 with the Arc agent which means it has an identity in Azure and you just say I want AutoManage deployed on that and all of the policies that are built into AutoManage will automatically go and apply to those servers so basically you've automated that checklist without actually having to build the script to automate that checklist for it that's the number one number two is security center especially with Azure Defender and Azure Sentinel so much power there in identifying your blind spots and then allowing you to be able to trace when something does happen where it started so you can plug that hole yeah that's the number one Azure Monitor, I'm a huge, huge fan of Azure Monitor because it's a great way to apply the column solutions or it changes name every once every few couple of years I guess every time there's a new product manager at Microsoft something gets a new name it's got a new name I think they call them solutions now but basically you say okay I've got all the data because it collects all of your data your application log, your system logs your security logs, your audit logs your performance for disk, CPU, memory all of the logs that are basically lit up in windows you select which one you want to replicate because of course the more data you ingest the more it'll cost you but that's the nature of the beast then it applies those solution to that data and basically the way you can deal with those solutions is it applies patterns to data to actually highlight what you need to know which is so much different than what we used to do back in even in the system center days before those hybrid services were available I remember like years ago my job was on Monday morning to go through every server and go through the event log to see whether or not there was an error or a yellow triangle or a red stop sign but when you've gone through I don't know a couple hundred lines of the logs your brain doesn't register patterns so you could have three informational items that by themselves look okay we're good but those three are a pattern that says that that disk is about to fail or that memory module is about to fail or something else is a part of the pattern is going to fail or is gonna bring you some pain the Azure monitor and those solution and it's all based on machine learning algorithms it recognizes those patterns and highlights it for you and tells you the real health of your system is and as part of Azure monitor is also change and a change tracking because of course something happens you say what happened to that server and everybody says I didn't touch it it wasn't me it wasn't me but now you can actually track the changes on those servers or kind of like at the DSC so desired state configuration which can be managed through Azure monitor it will put VM extensions on your on-prem servers so that you can deploy easily more hybrid services to make your life easier on-prem governance and policies are huge because especially if you're in an environment that has some compliance requirement where you set those compliance and you set what those requirements need to be through your Azure policies and so on and it'll go and tell you which are non-compliant and compliant and then there's a way to do it where it audits the info so it'll audit all your servers and tell you which ones are non-compliant but it won't actually do the change or you could do it into a remediation model where it'll actually like if one of your policies is that I don't know, IIS is installed on all your servers well if it doesn't find it, it'll install it like there's the audit part and there's a remediation part and I know that was a bad analogy but it will fix that issue especially like what we talked about earlier about the encryption so if part of your policy is everything encrypted if it finds something that's unencrypted it will turn it on, a bit locker or whatever other encryption method you're looking at so those are the specific Azure offerings that I look at that makes your IT management simplified well you know what, there's almost too much to talk about in one 30 minute session like it's actually quite mind-blowing that we've actually added so much and I suppose it's kind of like it's like 10 years worth of stuff all built up and then bundled together so it's not like it's Windows Server 2022 it's like 10 years worth of Azure has now come and now become compatible with Windows Server and it's kind of like it's now explaining that to everybody that you can use all of these things all at once it's like it's kind of mind-blowing but we're going to move on to the meme review this is everybody's favorite part so like no more taking questions just silly questions so while we do this click my fingers and the producers will show us the meme the first meme of today we've got two memes and let's have a look you ready don't die on me here now we're choking on the water when you see these funny memes right so let's do the meme one from the meme review today is going to be there we go the computer froze press all the keys well that's the opposite of press any key yeah yeah yeah well like there's not a key that says any on it yeah yeah definitely that's there's a program in the UK called the IT crowd and if you have you seen it yep okay but there's a bit in that where they have a pre-recorded tape message when somebody rings the IT help desk it just plays the recording on the voicemail so it's like have you turned the computer on have you pressed all control delete it just kind of runs through all of the standard things and this is kind of press all the keys yeah press all the keys but that's just what most people do right most people are like so yeah no that's that's fair right let's do meme number two let's do meme number two this brings back memories oh bad pun that that that that this is as bad as my dad joke from earlier that's a bad one I don't think I don't think we can even I don't even think anybody watches this on in Australia which I don't think anybody does watch this in Australia but if they did watch this in Australia they would be offended what's wrong with being offended well I mean like you know we're kind of like insulting like all all all Australians there with that that's that bad that joke like you know we can't we can't bring this joke back it's it's a cultural acquisition fair enough look everyone says though that the big thing now is like boomerang kids you know I mean kids that come back after going to university so um I don't know so we have you got one of those over here I have one of those my 25 year old moved back home during the pandemic fair enough because her she was there last year of university they went fully virtual and she's like okay why am I paying rent away from home so I don't go to university where there's a perfectly good internet connection at my parents house yeah yeah of course and also you get uh dad's jokes and mum's cooking so you know it's it's perfect I can't argue with that so look I'm just going to summarize real quick and like basically sympathize with IT with Azure and Windows Server 2022 it's kind of like it's that collection of all those amazing things so it's you know Azure monitor Azure Sentinel Azure Arc combined with WAC yeah I remember that from last time and also smart things like auto manage which creates those and workflows that simplify things for people in IT all of that has come together in this beautiful nick of block of glory ice cream sundae with a cherry on top which is Windows Server 2022 that's basically what we learned about today is there anything in that description that I've missed off of I missed a flake or something but you know what have I missed from my ice cream sundae is there anything that you would add to that one the the the only thing I would add to this is that it's it's lit up in and people can associate that with server 2222 but a lot of that is also now that we've ported it to 2022 or or integrated it in 2022 it also applies to your 2019 and 2016 so you don't have you're you're looking at your environment upgrade where it makes sense upgrade where it's needed but if you want to apply some of those technologies that makes your life easier and simplifies your IT management you can still apply those two older versions okay that is really good advice because that might save people even more money so you know good advice good advice from Roman so there we are look everybody thank you very much for joining us today Roman thank you very much for making the time there's always a time difference when we when we go across the Atlantic so thank you very very much for making the time we always appreciate it and it's always a pleasure having you I always love and we got the last time we had Samba this time we've got the we've got the the hot tub time machine and I love my calls with you Roman they're always very very good so that everybody thank you for chatting thank you for listening and as with ever if you've got any you want to comment on the meme review if you've got any questions that you want to ask or an expert that you want us to talk to or in fact something that you know I really would like Roman to answer this let us know and we will get in touch with with with with Roman and we'll ask him all your questions or and if you've got city questions like me we'll ask I'll ask you the city I'll ask the city questions I'm not I'm not afraid there's no such thing there's no such thing no well yeah I'm it's possible Roman it's possible I'm I'm I'm I'm I'm that guy and you know I was that kid at school that always asks you questions so anyway if anybody has or anybody wants to comment please let us know thank you very much for joining us on the latest episode from rock to cloud we'll see you all again soon thanks a lot bye