u/JrD3vOps

Thanks, when you say clone the disk is that just the disk it comes with under OS disks?

Will creating the new VM also restore the hostname and same SID's etc?

No FSMO roles running on that DC as we have 2 other 2 DC's which handle that :)

I'm not exactly using it as a jumpbox but I just need to test the latency between the two VM's and was just using a simple cmd ping for this.

​

Reviewing the tutorial, its pretty much what I want to do but its telling me to configure the OS level firewall. Can this be done at the NSG level instead?

You're right, its a site to site VPN. Also mistake on my part meant VNET and not subnet.

​

I thought the hub did the routing? So does that mean I still need to set up peering between my two VNET's regardless of what the hub is doing?

those settings look fine but I'm a bit confused, if I want a connection between the two VNET's. Does that mean I don't need to set up the peering between the two VNET's at all and the hub network does all the routing?

I can't see that, the options via each peer link are:

Traffic to remote virtual network

Traffic forwarded from remote virtual network

Virtual network gateway or route server

Should have clarified, this was on the connection trouble-shooter tool I am using to monitor if an ICMP connection works from VM01 => VM02

I haven't opened ICMP on the NSG virtualNic/subnet where VM02 is.

VM01 on the other hand does not have any NSG's associated to it at all, is this needed?

ok so I've done that now and in the hop by hop breakdown, the virtual gateway has now been taken out of the equation.

The topology now shows VM01 => VM02 which I am guessing is because of the peering which has been set up.

The error now says: traffic blocked due to virtual machine firewall configuration

Also just another quick thought, I already have peering setup from on prem to azure but in this case will the peering be needed between JUST the two subnets?

To be more simple, does there need to be peering between the two 'spokes' as I thought all the routing is done and managed at the hub level?

When the peering is set up I am guessing I do not use any remote gateway and use none for both ends of the peer to peer connection?

I have a vnet for the hub, this has a subnet for the gateway within it.

I don't have a cloud networking appliance (like the Azure firewall) I do however have a NSG at this level if that is good enough?

Looks good, your explanation makes sense as to why there may not be a 'enabled or disabled' option.

I'll take a look at the link provided too!

Ah okay thanks for the clarification - looking forward to it in that case!

Thanks, the sign in logs are good but not quite the same but it will do!

When you say verify if they've registered for MFA is that via the GUI too?

Thanks, I'll take a look at this!

In this case I am selecting all but if I wanted to check myself that a user does actually have MFA enabled manually is there not a way?

Great thanks, so what I want to also know is, is the way I am currently outputting the information by putting an Out-File on every if and else statement the correct way to go about doing it?

Or is there a way to encapsulate the entire if/else block and then add one Out-File option at the end to call the entire output into the txt file?

Ok I see, will remove those in that case.

Any other suggestions which could be causing it to be ignored?

What makes you think I may be using a Desktop OS answer file?

I also do have the HideEULAPage pass added under OOBE

no problem, see the paste here: https://pastebin.com/d78E73He

I thought it would be better to post the relevant parts as posting the whole thing will take up quite some space, I can post it if it helps in any case

I am with this in the Autounattend.xml:

         </component>
    <component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"........">
        <SetupUILanguage>
            <UILanguage>en-US</UILanguage>
        </SetupUILanguage>
        <InputLocale>en-US</InputLocale>
        <SystemLocale>en-US</SystemLocale>
        <UILanguage>en-US</UILanguage>
        <UILanguageFallback>en-US</UILanguageFallback>
        <UserLocale>en-US</UserLocale>
    </component>

I'm not too sure what the offset is to be honest!

I've just tried it again by the way and it seems it works but its extremely accurate e.g. if I filter to just 'windows' it searches for every image beginning with windows.

Is there a way to relax it so it searches for the word in any part of the name rather than the beginning?

I've just given that a go and the response is:

{

"api_version": "3.1",

"metadata": {

"kind": "image",

"total_matches": 1,

"sort_attribute": "",

"filter": "name==.*CentOS.*",

"length": 0,

"sort_order": "ASCENDING",

"offset": 1

},

"entities": []

}

Seems there's 0 entities apparently even though I know one matches the name, did the same work for you?

If you're referring to the filter, I just gave that a try and it didn't work, where did you get the payload bit from?

Here's the full body of the POST request below which I just tried:

{

"kind": "image",

"sort_attribute": "",

"filter": "name==.*CentOS. *",

"length": 10,

"sort_order": "ASCENDING",

"offset": 1

}