Author Archives: feadmin

How to suppress Skype for Business attribute synchronisation in Azure AD Connect

I recently had a challenge with a customer that had on-premises Skype for Business (SfB) and were looking to migrate to SfB Online. They did not want to federate the two infrastructures, but instead wanted to undertake a re-pointing of users at a given point in time by modifying the DNS records. When they introduced… Read More »

How to resolve ‘The RPC server is unavailable’ error when enabling Seamless Single Sign-On

I hit this problem while working with Azure AD Connect at a customer earlier this week.  The situation was that AAD Connect had already been configured with Pass-Through Authentication, which was working as expected.  The next step was to enable Seamless Single Sign-On, but this failed with the following: ‘Failed to create single sign-on secret… Read More »

Delegate administration to partners using Azure AD B2B Collaboration

This post provides a quick introduction to the features available with Azure Active Directory Business to Business (B2B) Collaboration – currently in Public Preview.  I’ll cover how to add someone outside your organisation to your Azure AD instance, as well  as how to assign administrative privilege over the Azure subscription to the external partner through RBAC… Read More »

Geo-Load Balancing Web Application Proxy Instances with Azure Traffic Manager

Recently I set up Web Application Proxy (WAP) instances for a customer to support remote access to several on-premises web applications.  I was looking for a cheap and effective means of ensuring the service continued to be available to clients in the event that one of the WAP instances went down.  Someone recommended using Azure Traffic Manager (ATM)… Read More »

Powershell snippet to enable change notification on all site links

Qasim Zaidi has an old but really good blog entry on enabling change notification for Active Directory site links.  For a long time now I’ve encouraged my customers (those with decent bandwidth between sites) to enable change notifications on site links rather than wait the 15 minutes (minimum) for replication between sites. Qasim’s blog references a Powershell… Read More »

URL encoding issue with Web Application Proxy

I recently helped a customer to set up a Web Application Proxy (WAP) service to do pre-authentication to a SAP CRM system. Within the network everything was working well via ADFS and authentication was just fine.  Coming through the WAP however I got a 404 error.  The SAP CRM debug log showed a difference in… Read More »

How to find your Azure Active Directory Tenant ID

Here are two ways to find the GUID (also referred to as the TenantID) associated with your Azure Active Directory (AAD) instance. 1. Embedded in the URL in the Azure Portal Log into the Azure Portal. Select Active Directory from the left hand pane. Click on the Active Directory instance you are interested in (you… Read More »