Active Directory Access with Microsoft Entra Private Access

Подписаться 277 тыс.

Просмотров 22 тыс.

50% 1

Using Microsoft Entra Private Access to talk to AD-trusted resources no matter where they may be, and how to integrate the protections of conditional access and more.
At time of recording the UDP and private DNS is in private preview that you sign-up for access.
📽️ Entra Private Access Deep Dive - • Deep Dive on Microsoft...
🔎 Looking for content on a particular topic? Search the channel. If I have something it will be there!
🤔 Due to the channel growth and number of people wanting help I no longer can answer or even read questions and they will just stay in the moderation queue never to be seen so please post questions to other sites like Reddit, Microsoft Community Hub etc.
▬▬▬▬▬▬ C H A P T E R S ⏰ ▬▬▬▬▬▬
00:00 - Introduction
00:23 - Entra-joined resource access
01:14 - Accessing AD-trusting resources
04:09 - Line-of-sight
04:54 - Private Access requirements
08:07 - DNS configuration
09:24 - DNS experience
11:02 - Talking to domain services
12:13 - Required ports
13:14 - Configuring Private Access for AD
14:38 - Configuration in Entra
16:19 - Viewing the tickets and experience
18:40 - The communication flow and adding conditional access
20:29 - Summary
21:27 - Close
▬▬▬▬▬▬ K E Y L I N K S 🔗 ▬▬▬▬▬▬
► Whiteboard:
🔗 github.com/johnthebrit/Random...
► Entra Joined access to AD resource documentation:
🔗 learn.microsoft.com/entra/ide...
► AD required ports:
🔗 learn.microsoft.com/troublesh...
▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬
📖 Recommended Learning Path for Azure
🔗 learn.onboardtoazure.com
🥇 Certification Content Repository
🔗 github.com/johnthebrit/Certif...
📅 Weekly Azure Update
🔗 • Azure Infrastructure U...
☁ Azure Master Class
🔗 • Microsoft Azure Master...
⚙ DevOps Master Class
🔗 • DevOps Master Class
💻 PowerShell Master Class
🔗 • PowerShell Master Class
🎓 Certification Cram Videos
🔗 • Microsoft Certificatio...
🧠 Mentoring Content
🔗 • Virtual Mentoring
❔ Questions? Maybe I answered it in my FAQ
🔗 savilltech.com/faq
👕 Cure Childhood Cancer Charity T-Shirt Channel Store
🔗 johns-t-shirts-store.creator-...
👂 Enable the subtitles and from there you can translate to your native language via the auto-translate feature in settings! • RU-vid Captions and A... for a demo of using this feature.
SUBSCRIBE ✅ / @ntfaqguy
#microsoft #azure #johnsavillstechnicaltraining

Опубликовано:

6 авг 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 35

@NTFAQGuy 4 месяца назад

Hey everyone, let's talk to AD resources without a VPN! Please make sure to read the description for the chapters and key information about this video and others. ⚠ P L E A S E N O T E ⚠ 🔎 If you are looking for content on a particular topic search the channel. If I have something it will be there! 🕰 I don't discuss future content nor take requests for future content so please don't ask 😇 🤔 Due to the channel growth and number of people wanting help I no longer can answer or even read questions and they will just stay in the moderation queue never to be seen so please post questions to other sites like Reddit, Microsoft Community Hub etc. 👂 Translate the captions to your native language via the auto-translate feature in settings! ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-v5b53-PgEmI.html for a demo of using this feature. Thanks for watching! 🤙

@FotisParperis 4 месяца назад

As always such a great explanation John and definitely an eye opener regarding different options available for multiple configurations. The best part of this (as probably most will agree) is the fact that no direct ports are opened, and the integration with the conditional access element (which form my perspective I believe it is massive). To top this up complying with ZTNA makes this an awesome solution. I would even consider the option of utilising Entra Private access as part of a migration of laptops/desktops to Microsoft Entra (without hybrid joined) and if during that time there are certain pre-requisites that dictate the need for on-premises AD to be part of this, then it will still satisfy this option too. The options/possibilities are endless.

@VirtualPackets 4 месяца назад

Great walk through John. Most the SSE/ZTNA vendors seem to follow this approach of using app connectors as it eliminates any inbound ports being opened which is always a plus 🙂some vendors also offer ICMP as well now.

@DolanTheProDuck 4 месяца назад

Wow. I was literally just looking for this!!

@yulaw3289 4 месяца назад

perfect! got something great for tonight, Thank you!😀

@namsabjm 4 месяца назад

Great explanation! Thank you!

@KenPatterson-vw9yj 4 месяца назад

LOL! As a past Corgi owner and D&D player/DM, I love that shirt!!!

@NZScottie 4 месяца назад

I’ll be factoring this into finally removing the need for my last remaining subset of users on VPN. Thanks for these videos, it really does help me be more aware of what is out there.

@NTFAQGuy 4 месяца назад

Very welcome!

@ggates5859 4 месяца назад

Superb as usual.

@NTFAQGuy 4 месяца назад

Thank you! Cheers!

@AzureCloudCowboy 4 месяца назад

Good Morning John

@ThorstenSauter 4 месяца назад

Thanks for the video, John! I'm guessing we'd have to create multiple GSA applications for DCs in different locations, since the connector group is bound to the application?

@NTFAQGuy 4 месяца назад

Right, for the different IPs accessible use different apps via different connectors.

@martyjames491 4 месяца назад

Another awesome video! Is there support for resources on AzureADDS?

@NTFAQGuy 4 месяца назад

This is all about enabling ports in a secure manner so shouldn’t matter

@tomstaelens7755 4 месяца назад

it almost seems magic

@gavinhelyar 4 месяца назад

Thanks John this is a great video, but you didn’t say that this is currently only available if you have signed up to the Private Preview. The Public Preview doesn’t support UDP yet, so you don’t get the Private DNS under Quick Access

@NTFAQGuy 4 месяца назад

In the Entra Private Access video I think I mentioned that.

@dinndorf2011 4 месяца назад

Yea hopefully soon this will be in the public preview

@AlexP-sy8rr 4 месяца назад

What about hybrid entraid devices? Will devices lose domain trust or will this satisfy check in periods

@NTFAQGuy 4 месяца назад

Would have to test this out since connectivity comes up only after user logs in. after user logs on, if all app segments are working, then it should sync the domain policies, etc.