RunAs Radio Richard Campbell

Do your applications need identities? Richard talks to Martin Ehrnst about how all Azure resources, including your applications, need an identity to function well in the Azure ecosystem. Martin talks about registering an application with Azure AD, a process that includes a manifest showing how it should be authenticated and what resources it needs. Then to the more confusing part - the service principals that show up as enterprise applications to provide access to the application within your tenant or even across tenants! The conversation goes further into managed identities and this emerging world of many-to-many identity relationships. Ultimately it's the most powerful way to deal with access rights, but that doesn't mean it's simple!

How is the DevOps movement evolving, and why should sysadmins care? Richard talks with April Edwards about how DevOps continues to grow with better tools and results! April talks about how often developers lead DevOps initiatives but that so much value comes from operations. The conversation digs into the tools that can facilitate deploying more frequently, measuring more accurately, and understanding how customers work. Everyone writes code these days, even if they aren't developers - and the DevOps cycle also applies there!

Have you used LAPS? Richard chats with Jeremy Moskowitz about the Windows Local Administrator Password Solution (LAPS). Jeremy talks about how the Premier Field Engineers originally developed LAPS at Microsoft to deal with having different local administrator passwords on every workstation in an organization. The passwords change automatically regularly, and sysadmins can retrieve the password for a given machine using PowerShell and other tools. Today there is an updated version of LAPS that works with Azure Active Directory and provides more control over password changes and restrictions - you need this tool!

What are the new governance challenges in M365? Richard chats with Martina Grom about her ongoing work helping organizations provide governance over the growing surface area of Microsoft 365. Martina talks about the challenges around identity and multi-factor authentication and the improvements that Microsoft is making to MFA to make it easier for users to do the right thing. The conversation also turns to data loss prevention and the approaches to minimizing a company's legal exposure to data loss - starting with not storing data if you can avoid it! Martina also talks about the new challenges in governance with Power Apps, including the tools available to help sysadmins see what apps exist, how they touch data, and what privacy and security controls are in place. Governance is an ongoing effort!

It's the end of 2022, and time to reflect on the work coming up in the next year – what will it be like for SysAdmins in 2023? Richard flies solo for his annual year-in-review show, looking back on last year's predictions (including what he got wrong!) and projecting forward into 2023. Security continues to be a top priority, but the situation has evolved. Current economic conditions likely will impact your business – how does it affect your work? How will the cloud continue to evolve, and how can you take advantage of it? 2022 was another unusual year, and 2023 looks even more so – thanks for sticking with us!

Mary Jo Foley moves on! No, not entirely from Microsoft - away from writing several times a week about the latest enterprise topics. MJ is going to Directions on Microsoft, where she will spend more time on analysis but still communicate it to the world. The conversation digs into current subjects like the state of the cloud and Microsoft's focus on building industry-specific cloud implementations, and precisely what is happening with Windows these days? Lots of great thinking from MJ, as usual, and a hint of what's to come!