What’s the most straightforward way of accomplishing this? The obvious approach that comes to mind involves two steps:

1. Reinstall Windows 10 Pro on new computer and activate with my existing retail license.
2. Upgrade new computer to 11 Pro for free through the settings.

Is there a simpler way of doing this without having to reinstall Windows 10? For example, would it be possible to somehow “trade in” my Windows 10 Pro license for 11 Pro? I’m fairly new to Windows licensing and am just trying to understand what is possible/best practice, with minimal effort.

You shouldn’t need to change your license, just the new computer’s Windows installation needs to be compatible with the key, in this case Windows 11 Pro.

First on the previous computer, unlink the Windows license by running the commands below in PowerShell or Command Prompt:

slmgr.vbs /upk
slmgr.vbs /cpky

After that on the new computer, press Windows+I to access the settings and navigate to Update & security > Activation.

Click on the Change product key button and enter your Windows 10 Pro key.

This must be identified so with your key, Windows will be upgraded to Windows 11 Pro.

If you don’t recognize the key, first try to upgrade to Windows 11 Pro using the generic upgrade key below.

VK7JG-NPHTM-C97JM-9MPGT-3V66T

After finishing the upgrade to Windows 11 Pro, try to change and use your Windows 10 Pro key which also serves to activate Windows 11 Pro.

See article (Free upgrade from Windows 11 Home to 11 Pro using 10 Pro retail license).

The post Free upgrade from Windows 11 Home to 11 Pro using 10 Pro retail license first appeared on Cloud Engineer - Everton Collins.

For the last 3 days, I’ve been trying to install Flutter on my macOS, and have been running into issues with the old version of Ruby.

You can see the images [IMG1] below, the first showing where I was having a problem with Flutter, where Cocoapads wasn’t installing.  The second image now shows there are no issues and Flutter is completely installed.

I had to use the following guide to resolve the issues of an old version of Ruby and install the most current version with Homebrew. Using Futtermapp guide.

The post How to install Flutter on Mac first appeared on Cloud Engineer - Everton Collins.

Planning is the first step for you to have a successful migration.

In this Project, we have an average of 100 people on the IT team moving to AWS.

Our role, as the Cloud Solutions Engineer, will be to create a migration solution using automation.

In addition to migrating these users, it will be necessary to associate permissions to groups and users, which are required to have the MFA(Multi-factor authentication) enabled, adding an additional layer of security.

The post ON-PREMISES MIGRATION TO AWS – PART 1 first appeared on Cloud Engineer - Everton Collins.

Recently I had customer put in a support case for this question.

How can I change the preferred language on an user Hybrid Environment Microsoft 365? After researching and looking at documentation online I was able to repo this.

The administrator makes a change by setting up a language code in the preferredLanguage attribute for the selected user in Active Directory:

Set your default language in this scenario I set it to español (Bolivia) Spanish (Bolivia) es-bo

Refer to the language list What languages does Office for the web support?

For example, if the administrator provides the es-bo value for the preferredLanguage attribute in the String Attribute Editor – the language in Microsoft 365 portal will change to español (Bolivia) Spanish (Bolivia) , and when they set up en-GB – the language will switch to English (United Kingdom). Changing the attribute’s value to <not set> will allow users to control the language of Microsoft 365 portal by using the web browser’s settings.

After adjusting language settings, you need to wait 30 minutes for changes to take effect. If you don’t want to wait, the administrator can also force the synchronization with Microsoft 365 by running this cmdlet on the server with Azure AD Connect:

Run a delta sync to update Azure AD user with the language change.

Start-ADSyncSyncCycle -PolicyType Delta

Here you will see the Microsoft 365 portal default language is in Spanish es-bo (Bolivia).

If you need to change your Microsoft 365 portal language again, simply follow the steps above.

The post Change language in Microsoft 365 portal in hybrid environment. first appeared on Cloud Engineer - Everton Collins.

There are four identity types within Azure Active Directory

The variations of each identity type and the benefits and use cases: 

• User 
• Service Principal
• Managed Identity
• Device

User identity – a representation of an entity that is managed by Azure AD both employees and guests are represented as users.  A guest is external to the company, like a business partner or vendor collaborating with employees.  Azure AD (B2B) business-to-business collaboration: A feature within external Identities that includes the capability to add guest users. Enables organizations to securely share applications and services with guest users from other organizations.

Service Principal – An identity for an application, Enables features like authentication and authorization of the application to resources that are secured by the Azure AD tenant. An application must first be registered with Azure AD to enable identity and access integration.  Once registered, a service principal is created in each Azure AD tenant where the application is used to enable authentication and authorization in resource access. 

Managed Identity – A special type of service principal that is automatically managed in Azure AD.  This eliminates the need for admins and developers to manage credentials. Managed identities come in two varieties.

User-assigned – which can be shared by multiple resources and has a lifecycle independent of these resources. eg: (You could assign this user-assigned ID to many virtual machines).

System-assigned – which is tied to the lifecycle of a specific service or resource and cannot be shared. eg: (when the system or resource is retired and deleted that system-assigned identity is deleted with it).

The preference when you have a choice would be to use system-assigned managed identities over user-assigned as they minimize our administrative effort.

Device Identity – entities can be:

Azure AD-registered – provides users with support for bring-your-own-device (BYOD) mobile device scenarios.

Azure AD-joined – A device joined to Azure AD through an organizational account, which is then used to sign into the device.

Hybrid Azure AD-joined – Domain joined to Azure AD and on-premises Active Directory.

Benefits of Device registration

• Single sign-on (SSO) – registering and joining devices to Azure AD gives users single sign-on (SSO) to cloud-based resources.
• Azure AD-joined devices also benefit from the SSO experience to resources and apps that reply on on-premises Active Directory.
• Device Management – registration enables device management options with Intune to control how an organization’s devices are used.

Mobile device management (MDM) for company-owned devices

Mobile application management (MAM) for personal devices. (BYOD)

Overview of the Hybrid of the Hybrid Identity Model

All of these scenarios require an on-premise Active Directory (source of truth).

Azure AD password hash-synchronization – The simplest way to enable authentication for on-premises directory objects in Azure AD.  The user is authenticated by Azure AD.

Azure AD pass-through authentication (PTA) – While password-hash is synchronized to Azure AD, the user is authenticated directly against your on-premises Active Directory.  Can be used to enforce Active Directory restrictions not present in Azure AD, like “login hours”.

Azure AD Federation authentication – Authentication for organizations that need advanced measures not currently supported in Azure AD, like smart cards and certificates.  Again, Azure AD passes the request to on-premises Active Directory.

Why are External Identities Necessary?

• Employees today are more commonly working with people both inside and outside of their organization.  
• External users (vendors, partners) may need access to resources inside your organization.
• Azure AD External Identities is a set of capabilities that enables organizations to allow access to external users.

Types of External Identities

Enable your customer’s partners, and other guest users to “bring their own identities” to sign in.

Two different types of Azure AD External Identities:

B2B (business-to-business) – collaboration allows you to share apps and resources with external users.

B2C (business-to-consumer) – is an identity management solution for consumer-facing apps. 

Azure AD B2B (business-to-business) – Enables organizations to share apps and resources with guest users from organizations, partners and collaborators use their own identity management solutions, so there is no external admin overhead:

• Uses an invitation and redemption process.
• Can perform SSPR through their usual process. (identity is managed elsewhere).
• Admins can also enable self-service sign-up user flows to allow external users to sign up without admin intervention.

Azure AD B2C (business-to-consumer) – Enables external users to use their preferred social, work, or local identities for single sign-on to an organization’s apps. External users are managed in the Azure AD B2C directory, separately from the organization’s employee and partner directory.

• A customer identity access management (CIAM) solution.
• Supports millions of users and billions of authentications per day.
• Automatically handles threats like denial-of-service, password spray, or brute-force attacks.

• Deploy your identity infrastructure for Microsoft 365
• Exam SC-900: Microsoft Security, Compliance, and Identity Fundamentals

The post Basic Identity Services and Identity Types of Azure AD first appeared on Cloud Engineer - Everton Collins.

Microsoft 365 for enterprise consists of: Office 365, Windows 10 Enterprise, Enterprise Mobility + Security

Although designed for large organizations, Microsoft 365 for enterprise can also be used for medium-sized and small businesses that need the most advanced security and productivity capabilities.

Manage your enterprise deployment with modern tools from Microsoft 365 or M365. Empower your users and IT to benefit from the easy deployment and productivity enhancements from Windows 10, while still maintaining your standards for security and manageability.  Microsoft 365 for enterprise documentation and resources

In our post today we want to sign-up for a Microsoft 365 Trial account and setup some basic settings to protect the account.  365

There a several versions of Microsoft 365; however we’ll be dealing with the Enterprise and Business versions of Microsoft 365.

• Microsoft 365 Education
• Microsoft 365 Business
• Microsoft 365 Enterprise

We need to first sign-up for a free trial account by visiting the sign-up link

Once we have signed up for a Microsoft M365 trial we can setup some basic security policies, here are several screen using the wizard from the default setup screen.  We have already added our domain.onmicrosoft domain and created a administrators account, the following policies are for protecting the domain.

Microsoft 365 for enterprise deployment guide

The Microsoft 365 for enterprise deployment guide steps you through the correct and required configuration of Microsoft 365 for enterprise products and features.

To deploy Microsoft 365 for enterprise yourself, you can:

• Deploy the foundation infrastructure for built-in security and integration for simplified management, which makes it easier to ensure your client software is updated with the latest productivity and security enhancements. The foundation infrastructure is organized as a series of numbered phases that build upon each other and towards an environment that supports Microsoft 365 for enterprise workloads and scenarios.If you are a smaller or newer organization, follow the phases in order to methodically build out your infrastructure.However, you can deploy phases or the portions of phases of this infrastructure in any order as needed, one after the other or in parallel, to integrate with your current infrastructure, fit your IT plans and resources, and meet your business needs. For a simplified deployment for non-enterprises, click here.If you are an enterprise organization, view the phases as layers of IT infrastructure, rather than a defined path, and determine how to best work toward eventual adherence to the requirements of each layer across your organization.
• Deploy key productivity workloads and scenarios on top of your infrastructure. These unlock creativity and teamwork in your organization.

Here’s the relationship between the foundation infrastructure and the workloads and

Listed below are several resources to assist you in realizing the value of Microsoft 365; and how this productivity suite can secure, defend and safeguard your enterprise in today’s modern world of security threats.

• Will your enterprise realize a 123% ROI?
• Deploy Microsoft 365 for Enterprise
• Microsoft 365 for enterprise documentation and resources
• Microsoft 365 for enterprise Test Lab Guides
• Microsoft 365 compliance documentation
• Microsoft Managed Desktop documentation and resources
• Microsoft 365 Fundamentals
• Microsoft 365 for enterprise Test Lab Guides
• PowerShell Licensing SKU’s in Office 365

The post Microsoft 365 EnterPrise Tenant Sign-up first appeared on Cloud Engineer - Everton Collins.

• Coverage of user indices for Gmail and Calendar
• Coverage of Google Keep primary data at rest and backups
• More granular group-based controls

In addition to these new features, we’re also moving the location of the data region reporting dashboard from Admin Console > Dashboard to Admin Console > Reports > Data Regions.

With Google G suite data regions, you can now Control the geographical location of your G Suite data at rest.

For organizations that want more geo-control, the data regions feature for G Suite gives you the choice to pick where covered data for select G Suite apps is stored at rest — whether globally distributed, in the US, or across Europe.

Admins

Why you’d use it

G Suite’s globally distributed cloud infrastructure reduces latency and protects data with geo redundancy. Therefore, most organizations choose not to geo-restrict their data. However, some organizations have preferences around where their data is stored at rest.

To support those customers, we launched data region controls in 2018. Data regions lets customers designate the region in which covered data is stored when at rest—globally, in the US, or in Europe. Last year, we enhanced data regions with increased coverage of apps and data types.

By covering more apps, additional data types, and more granular admin controls, we hope to better support our customers’ data location preferences.

Below a graphic of company data at rest in United States data centers, and the Company Profile of data regions.

For more please see the following Google docs:

• Choose region where data is stored
• G Suite Updates

The post Googe: Improving data regions with expanded coverage and group-based admin controls first appeared on Cloud Engineer - Everton Collins.

Description

The Get-AzureADSubscribedSku cmdlet gets subscribed SKUs to Microsoft services.

The post Azure Command – Gets subscribed SKUs to Microsoft services. first appeared on Cloud Engineer - Everton Collins.

1. Create your first campaign.
2. Connect your campaign to Google Analytics so you can immediately track impressions and conversions – Note: this step is required for access to any campaign statistics.
3. Install the OptinMonster Plugin on your WordPress site.
4. Configure the Output Settings for your campaign to control where it loads on your site.

Advanced

When you’re ready to take your campaign to the next level:

• Split-Testing your campaign helps you improve conversions by testing different colors, copy, configuration settings and more.
• Page Level Targeting: For more advanced page targeting you can use Google Tag Manager to control when and where on your site the campaign appears.
• Cookie Configuration: OptinMonster makes it easy to set both individual and global cookies, controlling how often visitors see your campaign.
• MonsterLinks: You can show your campaign with the click of a link or button on your site with MonsterLinks.
• Downloadable File Delivery: There are many ways you can deliver downloadable content when using OptinMonster.
• Yes/No Campaigns: If you don’t want to collect email addresses you can easily the default form to a yes/no campaign instead.
• Privacy Policy: Add a privacy policy to your campaign.
• Mobile: Create a mobile campaign to show to mobile visitors.Note: mobile options require a Pro subscription.

The post Getting Started with OptinMonster and WordPress Checklist first appeared on Cloud Engineer - Everton Collins.

Azure Identity Protection is a feature of Microsoft Enterprise Mobility + Security and is a premium feature in EMS E5.  We conducted a test to see if a user would be blocked while trying to log in from 2 separate locations.

We went to https://portal.azure.com/ and logged in with credentials normally from our home office server.  I then created a 2012 Server virtual machine setting up and configuring Active Directory and azure AD Connect.

Using the Tor browser I went to portal.azure.com to login with the same user a 2nd time.

Our Results

Your sign-in was blocked

We’ve detected something unusual about this sign-in.

For example, you might be signing in from a new location, device, or app.

Before you can continue, we need to verify your identity.  Please contact your admin.

The post Azure Identity Protection – Enterprise Mobility + Security first appeared on Cloud Engineer - Everton Collins.