Secure Dynamic DNS Updates to Azure with AzureDNSSync

Reading Time: 10 minutes9 Introduction Like many home users, my broadband connection comes with a dynamically assigned public IP address. This means that my IP can change at any time sometimes without notice, which can be a problem when I want to access services hosted at home, like a self-hosted server or VPN. Instead of relying on a third-party Dynamic […]

Continue reading

OpenVPN Site-to-Site setup

Reading Time: 23 minutes21 Introduction Setting up a Site-to-Site VPN is a powerful way to securely link two remote networks—such as a home lab and a cloud environment—so they behave as if they’re on the same local network. While there are several technologies available to achieve this, choosing the right one often comes down to your specific network constraints and goals. […]

Continue reading

Deploying Azure Virtual Desktop – A Modular, Automated Approach

Reading Time: 9 minutes7 Introduction Azure Virtual Desktop (AVD) is Microsoft’s comprehensive Desktop-as-a-Service platform, enabling secure remote access to Windows desktops and apps from virtually anywhere. While powerful, deploying AVD in a robust, enterprise-ready manner can be complex: it requires careful orchestration of network, identity, security, storage, and user access. Manual configuration is time-consuming, error-prone, and difficult to scale or […]

Continue reading

Virtual PAW – Part 2 – Core Components

Reading Time: 10 minutes9 So this is the 2nd part of a multi part series on my journey with Bicep and ARM Templates and deploying AVD as a PAW. Part One was the high level overview of what I have done. Introduction Welcome to the 2nd installment of my posts on using AVD as a PAW. It is probably […]

Continue reading

Why use a PAW?

Reading Time: 6 minutes4 Introduction Following on from my previous post I have been asked why I use a PAW for my own tenant, and or why not just use a conditional access policy to ensure that a compliant device for the tenant is used by the privileged user. So, I reply with the question, why wouldn’t you want […]

Continue reading

Securing my privileged access with AVD

Reading Time: 3 minutes2 I’m trying to “lead by example” (I use that term loosely), when it comes to privileged access. A bit of background For a long time my regular Microsoft 365 account was also my GA account in my own tenant, I know, I know thats top of the no no’s when it comes to Entra, but, […]

Continue reading

Cost effective IPSec Site to Site VPN with Azure and UDM

Reading Time: 14 minutes9 Introduction There are many ways to establish a VPN between my UDM and Azure andI’ve tried them all, but, for the best result I would still recommend using an Azure Virtual Network Gateway. However, that does come with a price tag! Sure, there is the basic Virtual Network Gateway SKU that you can use which […]

Continue reading