ModernBiz_Microsoft Cloud for SMB Release 1.0

8/15/2019 ModernBiz_Microsoft Cloud for SMB Release 1.0

1/165

ModernBizTechnical Series

Instructor NameDate


2/165

Microsoft cloud forsmall and midsize

businesses


3/165

Logistics and introductions

• Class hours• Restrooms• Meals• Internet

Class Portal: https://cloud.holsystems.com/techseries/inst- The access code is ________Microsoft Azure Pass

Presenter introduction


4/165

About this courseAudience: IT pros, consultants, partners

b!ecti"es: Identif opportunities for partners to enable small! and mediu

businesses "#M$s% to increase e&cienc and producti'it (hile reducing IT

e)penses "*p+)% b implementing hbrid cloud scenarios using Microsoft Aand become procient in designing and implementing Microsoft Azure tech

ser'ices for #M$ customers-

Topics co"ered:

• *'er'ie( of Microsoft Azure, partner opportunities, #M$ trends, transact

Azure, reselling Microsoft Azure ser'ices, Microsoft Azure in *pen Licens

•Microsoft Azure $ac.up, Microsoft Azure #torage, Microsoft Azure #ite ReMicrosoft Migration Accelerator

• Microsoft Azure /irtual Machine (or.loads 0 Infrastructure as a #er'ice "

• Microsoft Azure Application 1or.loads 0 Platform as #er'ice "Paa#%, and

on Microsoft Azure /Ms

• Microsoft Azure /irtual Machine Net(or.s "/MNet%

•

Microsoft Azure Acti'e Director and Identit Management#e"el: 233!433


5/165

#tart +nd Content

6733 6743 Class Introduction, Partner *pportunities,

6743 83733 Module 87 *'er'ie( of Microsoft Azure

83733 83789 Module 8 #etup Azure Pass and #etup Azu

10:15 10:30 Morning Break 83743 88789 Module 27 Azure /irtual Net(or.s

88789 82733 Module 2 Lab7 Create a /irtual Net(or. an

12:00 1:00 Lunch Break

8733 8743 Module 47 Azure /irtual Machines

8743 2733Module 4 Lab7 Pro'isioning Azure /Ms, pro

A#R

2733 2743 Module :7 Planning for Azure 1or.loads

2743 4733 Module : Lab7 Implementing a replica dom

3:00 3:15 Afternoon Break

4789 :789 Module 97 Azure Acti'e Director

:789 :7:9 Module 9 Lab7 Azure Acti'e Director Conn

:7:9 9733 1rap up and ;


6/165


7/165

Microsoft AzureAn open and Ee)ible cloud platform that enables ou to Buic.l

deplo, and manage solutions across a global net(or. of Micr

managed datacenters-

Appser'ices

Net(or.

#torage

Compute

Caching Identit#er'ice

bus Media CDNInte

/irtualmachines 1ebsites

Cloudser'ices

Mobileser'ices

#;Ldatabase FDInsight Tables

$lobstorage

Connect/irtual

net(or. Tra&c

manager

@sage!based ser'ic

• $uild applicationsusing an language,tool, or frame(or.

• Integrate public

cloud solution (iththe e)isting ITen'ironment

• 66-69G monthl #LA

• Automatic operatingsstem and ser'ice

patching


8/165

Accelerate to mar.et

• +nables partnediHerentiate bour IP alongsoHerings

•

Cloud soft(arede'elop, test, mar.et

• Lo(ers the bato oHer manag

$roaden our customerbase and ser'ices

• Reach ne( customers

• @psell to e)isting customers

• Cross sell (ithin a singleplatform

• +nable and ad'ise ourcustomers as the e'ol'etheir business in the cloud

>ro( re'enues andincrease margins

• Recurring re'enuesestablish long!termrelationships (ith ourcustomers

•

Margins increase as ou learnho( to oHer )ed!feeengagements (ith optimizeddeli'er and higher le'els ofser'ices

• +&cientl sell into #M$sle'eraging the s.ills that oualread ha'e

>ro(ing our business (ith MicrosoAzureMicrosoft helps ou e)pand our role as a ser'ice pro'ider andad'isor


9/165

e Azure scenarios for small < midsizecustomers

Pro'ide eas,scalabledata bac.upser'ices in thecloud

Data

$ac.up

*Her peaceof mind (ithongoing cloud!based DR ser'ices

Disaster

Reco'er

;uic.l deplo andmanage customerapplications in thecloud

Deploment in

/Ms

>ro(helpimo'e(ebscloud

1

#harePo in t #;L#er'er

Database

s

*rders

Product

AP

$usinessApplication

s

CRM Acct

FR

/irtualMachines


10/165

8 /M Protected b Azure #iteReco'er JDisaster Reco'erK

833 >$ of >R# #torage for 82mo 833 >$ of *utbound $and(idth

for 82mo 8/PN >ate(a Charges for Running a Medium

/M in Azure in Case ofDisasterTesting for 89 Das in82mo period

No Cape) or *pe) +)penses to#etup and *perate a DisasterReco'er Datacenter

Tpical Azure in *pen deal size

O2:3r O8,293r

O2,:3 Azure in Open SKUs

$ac.up

No outbound $and(idth charges No $ac.up Dri'es No $ac.up Media "Tape, D/D

etc-%

es applicable to @# 1est Region 8 /PN >ate(a reBuired per customer

#ite Reco'er /

Ma

833>$ of Azure $ac.up for 82Mo

10 Azure in Open SKUs 2Azure in

2 Proc 4-9>$ /M%

93 #torage " 29 >$ *utbou 8/PN >ate(a 1indo(s #er'

No 1indo(s #CALs

No #er'er Fa No Po(er, Co


11/165

Longer te

*Hers discountsas part of a dee

term commitmeplatform

Abilit to consolat the enrollmen

Purchase throug

#er'ice Pro'ider

=le)ible

=le)ibilit (ith /olumeLicensing through a familiar

'ehicle for #M$s

*pportunit for partners toearn margins, incenti'es

Purchase through Distributors

Microsoft Azure purchasing optionsMicrosoft helps ou e)pand our role as a ser'ice pro'ider andad'isor

Pa as ou go

Qero upfront cost, cancel antime

No long!term commitment

Purchase (ith credit card

Direct on Azure-Microsoft-com *pen licensingprograms

+nterpagreem


12/165

Azure in *pen Licensing 0 .e co

• All *pen programs and customer tpes

• +)isting *nline #er'ice "*L#% in *pen process

• A'ailable in countries (ith Azure Direct and *pen /olume LPartners

+ligibilit

• #ingle #@ (orth @#DO833 in the Azure Portal "or local curr

• Can purchase unlimited #@?s that are issued onto single *• No minimum or ma)imum for the number of *#A es a cu

purchase and acti'ate

• Prepaid ser'ice (ith the abilit to purchase additional #@?sat an time

• @se against an eligible consumption!based Azure ser'ice

• Azure Credit e)pires 82 months from acti'ation date, but oto acti'ate

• No returns once ser'ice is acti'ated in the Azure Portal

#@

Terms


13/165

Monetar commitment concepts@se case7 293>$ of Microsoft Azure $ac.up for 82 months SO93m

an2389

Dec2389

Customerpurchases %&'' of MicrosoftAzure

No'2389

$alance7 %('

82!monthe)piration,No rollo'er forinitial OU33

Customerpurchases%)*''$alance7 %)*('

Period 0

8

+ach redemption creates auniBue 82!monthconsumption period

Pre'ious commitments aree)hausted rst

@nused amounts cannot berolled o'er into future periods

82!month consumption periodstarts (hen subscriptions areredeemed

No limit to number ofredeemed subscriptions

Congurable alert emails

Period 02

$alance7 %*''Alert email to customer partner


14/165

Azure and *&ce 4U9 in *pen 0comparison#@ #tructure #ingle #@ used for an eligible pa!as!ou!goAzure #er'ice @niBue #@s for each *(ell as Add!ons

Monetar Commitment that e)pires 82 monthsfrom acti'ation

Customers pre!pa for ser'ice

Commitment

Aligned to cloud channel incenti'es for managed partners and distribuChec. (ith our Distributor for local terms

All *nline #er'ices in *pen follo( e)isting business process

Le'erage e)isting Distributor and /AR reporting constructs

Margin #tructure

$usiness Processes

Reporting

• #ingle #@ pro'ides Ee)ible Vbuilding bloc.s? toscale partner business or customer ser'ices-

• Top up and upsell opportunit for additionalser'ices-

• Partners dri'e consumption (ith ongoingcustomer engagement-

• #pecic #@s purchaoHering-

• Rene(al motions ha'anni'ersar-

• Incremental seats adend dates-

Channel Impact


15/165

Three partner scenarios for Azure*pen

ResellFbrid Resell <

Managed #er'icesM#

Partner resells credits to acustomer- The customermanages the Azure ser'icesand account themsel'es-Partner ma or ma not help(ith acti'ation, setup andrene(al timing-

Partner and is managing Azureser'ices and account as a co!administrator- The Customer isalso in'ol'ed in the ser'iceandor account managementand accesses to the portal-

Partner is pcustomermanagedand is doinand managunderling

Customer Customer

Customer is soleAdministrator

Partner Customer Co!Administrators

Partner isPartner c

for e

Customer signs up to recei'elo( balance alerts 'ia email

and trac.s consumption in theportal- Customer contacts a

partner to bu more-

Partner and customer sign upto recei'e lo( balance alerts

'ia email and trac.consumption in the portal-Partner recommends ne(

purchases-

Partner sigbalance atrac.s cportal- P

#cenario

#cenariodescription

Licensee

Administration

$alanceManagement


16/165

Managed ser'ices

/ie( the full *nline #er'ice terms here7http7(((-microsoft-comlicensingproductsproducts-asp) -

Application or set ofapplications that a!!s pri"ar#an! signi$cant functiona%it# to

the Microsoft Azure Ser&ices and that is not primaril asubstitute for the MicrosoftAzure #er'ices

The M#P has theaccess, conguradminister the M

#er'ices, The M#P has adaccess to the 'i

The end!customadministrati'e aits applications machines

Or Azure issubWect to

On%ine Ser&ice

'er"s across+A, Direct <*pen

ReBuirements

Customer #olution Managed

Can an I#/ or M#P bu Azure in *pen in their o(n name and#aa# Application or a Managed #er'ice to end customersX


17/165

Modern$iz

Connect(ithcustomers

>ro(e&cientl

#afeguardour business

$usinessan(here

Increaseour sales

>et themost outof our

technolog

$eprepared

for the

une)pected

Protectand controlour data

1or.together

easil

>et our(or. done

an(here

@nderstandour

customer

Modern$iz

Adaptto change

Deli'ering #M$ solutions (ithMicrosoft *nl (

can ocomplefamiliagro( deli'erthat ad

custombusinechallen


18/165

A (ealth of partner resources

Modern$iz #ales <

Mar.eting CampaignResources

http7a.a-msmodernbiz

To and thru!partnerpresentations, Casestudies, 'ideo animations,

digital assets, digitaldestinations

Azure in *pen

Licensing PartnerResources

http7a.a-msazure'ar

Presentations, datasheets,=A;s, pricing calculator

Cloud #ure

http7a.a-mtepA three!phasehelps ou ma(ith Microsof#er'ices- +accontains all th

resources neesupport ou ethe (a- Alreacloud busines

#tep can se)pand and mbusiness

Ymodernbiz


19/165

Module 87 Introductionto Microsoft Azure


20/165

Module 8 *bWecti'es 0(hat ou (ill learn

• *'er'ie( of Microsoft Azure #er'ices for#M$s

Azure Iaa#

Azure Paa#

Azure 1eb #ites

Azure Cost Calculator Azure Identit Management

• Data Protection Challenges

• #torage 's- $ac.up 's- Disaster Reco'er"DR%

•Azure $ac.up Architecture

•


21/165

DemoMicrosoft Azure Management Portal

http://www.microsoft.com/licensing/products/products.aspx


22/165

Customer!managed

*#

Middle(are

Runtime

Data

Application

s

Net(or.ing

#torage

#er'ers

/irtualizati

on

Net(

#to

#er'ers

/irtualization

Microsoft Azure Iaa# at a glance


23/165

Customermanaged

*#

Middle(are

Runtime

Data

Application

s

Net(or.ing

#torage

#er'ers

/irtualizati

onMidd

Runtime

Net(or.ing

#torage

#er'ers

/irtualization

Microsoft Azure Paa# at a glance

http://aka.ms/modernbizhttp://aka.ms/cloudsurestephttp://aka.ms/cloudsurestephttp://aka.ms/azurevarhttp://aka.ms/modernbiz


24/165

Deplo applicatio

+)tend our en'ir

$est platform for #

#;L #er'er de'elo

#calable on!dema

$est in class price

end!to!end suppo

Remote(or.ers

Microsoft Azure

*n!

premises

/irtualmachines

Microsoft Azure /irtual Machines7*'er'ie(Infrastructure ser'ices7 $uild it or bring it (e run it


25/165

*n!

premises

Reliable le and stor/olume #hado( Cop(or.loads if #stemProtection Manager

+ncrpted bac.upgeo!redundant da

Consumption!bashard(are and bac

Intuiti'e managemtools across on!pr

Pro'ision more stocustomers as nee

Microsoft Azure

1indo(s#er'er

Data bac.up in the cloud7 *'er'iePro'ide scalable data bac.up in the cloud


26/165

*n!

premises

+)ternal(or.ers

Microsoft Azure

1ebser'er

s

$uild, deplo, and(ebsites ona Ee)ible cloud pl

Deli'er peace of mglobal net(or. of datacenters

*Her a scalable c

for seasonal applilifeccle (ebsites

Manage our custusing familiar toopremises and clou

Pro'ision a producapplication

in minutes

Fosting (ebsites in the cloud7 *'e>ro( our business7 Felp customers mo'e their (ebsites to the c


27/165

*n!

premises

Microsoft Azure

1indo(s#er'erActi'e

Director

Microsoft AzureActi'e Director

"AAD%

Consumeridentitpro'iders

PCs andde'ices

Microsoft apps

Third!part

cloudhosting

+nable single sign!ocloud and on!premi(ith Acti'e Director#er'ices

Integrate cloud (ithActi'e Director (it#nchronization

Create and managecloud

Felp secure access and cloud apps (ithMulti!=actor Authen

@se Microsoft Azure A"AAD% to manage *&other Microsoft and e

ser'ices

Identit and access managemento'er'ie(+nable single sign!on bet(een on!premises and cloud identities


28/165

#cenario7 Fo( much is our IT cos

T(o ser'ersandoperatingsstemO83,33

3per ser'er

CALsO83,333 T(o ears of facilitoperating

costsO83,333

*n!pr

bac.u(ith scloud

O2,(ith a

TotalCosts

7

about O42,533 2: months ZSO8444-44 month for t(o datacenter!caliber se

1ith small 'irtual machines, this comes out to S O8,63-: pemachine per month


29/165

Pricing out solutions


30/165

DemoMicrosoft Azure Cost Calculator


31/165

Data protection challenges

• Data rates gro(ingat more than :3G per ear

Rapid data gro(th It?sto tha

#oma

(itro

• #torage costs gro(ing• $ac.up costs scale (ith

data• Management comple)it of

storage, bac.up, and oHsite

protection all scale (ith

*perational challenges


32/165

#torage, bac.up, and disaster reco'er7 comparison

Protect oand get osstems bBuic.l

• eep a repentire ser'

infrastructuin near rea

• >et applicaand ser'icebac. up anrunning inminutes

>et fast, simplebac.up and an eas(a to restore lostles

• $ac.up les to asecondar location

• ;uic.l restore les(hen accidentalldeleted or lost

• Retain les anddata for legalreBuirements

Disaster $ac.up

>et eas,economical storagethat can scaleas needed

• #cale up or do(n easilto meet changing needs

• Access our datafrom an(here

• @se (ith a choice ofoperating sstems

#torage


33/165

Microsoft Azure $ac.up#imple and reliable ser'er bac.up to the cloud

Reliable oHsite dataprotection

• Con'enient oHsiteprotection

• #afe data (ith geo!

replication• +ncrpted bac.ups

A simple andintegrated solution

• =amiliar interface

• Microsoft Azure integration

+&cient bareco'er

• +&cient useband(idth a

• =le)ible con

• =le)ibilit in

• Cost!eHecti'metered b


34/165

Microsoft Azure $ac.up pricing

• O3-23 per >$ month

•

No associated restorecharges

• No ser'er licensesreBuired


35/165

#cenario7 #imple cloud bac.up

Contoso has

in'estedo'er

O2,933in soft(are to

operate third!part bac.uptools

Contosopasbet(een

O833!O893 permonth foronlinestorage

Contosbac.ed

encrppremisencrp(ire du

trans

encrp

in Micr

Azure

Contoonl othe e.e

Microsoft Azure $ac.uptool is free andsupports all of theapplications

The MicrosoftAzureCalculatorma.es it easto nd out themonthl costs

for the storage

# l t i


36/165

#elect reco'er ser'ices


37/165

*ption 87 Create a bac.up 'ault

* i 2 # l i i


38/165

*ption 27 #elect an e)isting 'au


39/165

Microsoft Azure $ac.up Buic. sta

D l d lt d ti l


40/165

Do(nload 'ault credentials

Do(nload Microsoft Azure $ac.up


41/165

Do(nload Microsoft Azure $ac.upAgent

I t ll th A t th


42/165

Install the Agent on the ser'er

Congure pro) settings


43/165

@se custom pro) settings

Congure pro) settings

PrereBuisites and installation


44/165

PrereBuisites and installation

# i i


45/165

#er'er registration

# l l d i l


46/165

#elect 'ault credentials

+ t h


47/165

If our passphrase is lost or forgotten, the data cannot be reco'ered- Microsoft#er'ice *nline does not sa'e o r manage this passphrase- It is stronglrecommended ou sa'e our passphrase to an e)ternal location li.e a @#$ dri'eor net(or. dri'e-

+nter passphrase

i i l


48/165

Register

+e,istration Complete

Close

*pen #chedule $ac.up (izard to congure bac.ups for items in this ser'er

n Pro) Conguration

n /ault Credentials

n +ncrption #etting

n Registration

Registration complete


49/165

Create a bac.up 'aultunder Reco'er #er'ices

Do(nload 'aultcredentials for the bac.up'ault

Do(nload and installagent on the on!premises ser'er

+nter 'aultcredentials

Register ser'er

#etup summar

823 d t ti ith d il b


50/165

823 das retention (ith a dail bacschedule

823 (ee.s? retention (ith a (ee


51/165

823 (ee.s retention (ith a (eebac.up schedule

6 ear retention (ith a month


52/165

6!ear retention (ith a monthbac.up schedule


53/165

Microsoft Azure $ac.up

Demo

Partner


54/165

Partnerpportunities:

• Implement Azure$ac.up as a cloud

bac.up solution for#M$ customers• Pro'ide better restore

point and retentionpolices than othersolutions to meet

customer #LA?s• #tart a pilot for #M$

customers usingAzure Iaa#, Paa#, andstorage ser'ices

Microsoft Azure o'er'ie( acalculating costs


Microsoft Azure tools

Module 8 #ummar


55/165

Fands!on Lab 8#etup Azure Pass



56/165

Module 27 Azure /irtualNet(or.s

M d l 2 *bW ti


57/165


• *'er'ie( of Microsoft Azure /irtual Net(or.s Azure /irtual Net(or. Pro'isioning

Point to #ite /PN

#ite to #ite /PN

Dnamic IP Addressing

/irtual IP Addressing

• DN# Management• Tra&c Manager *'er'ie(• Microsoft Migration Accelerator

MMA *'er'ie(

MMA Architecture

#cenario /irtual IP addressing in t


58/165

Contoso has decided that migrating to Microsoft Azure is sa'ings mo'e and (ill impro'e producti'it b allo(ing

emploees

To use mobile de'ices to access commonl used intranet

and applications from the road

The ne)t challenge is to set up

'irtual net(or.ing on theMicrosoft Azure side and toconnect the on!premises usersand resources to the MicrosoftAzure cloud

As part the pilotrollout of MicrosoftAzure 'irtualmachines, the /irtuaIP Addresses "/IPs%(ill be set up and theDnamic IP Address

"DIPs% congured

#cenario7 /irtual IP addressing in tcloud

Microsoft Azure


59/165

Microsoft Azure/irtual Net(or.

*n!premises

M

/PN De'ice

• #et up 'irtual pri'ate net(or.sin the cloud

• Manage as e)tensions ofon!premises datacenters

• @se logical isolation (ithnet(or. conguration options

•Create subnets, pri'ate IPaddresses

• $ring our o(n DN#

+)tending our

infrastructure

Point to site and site to site


60/165

*n!premises

\our datacenter

Indi'idualcomputers behindcorporate re(all

Point!to!site/PN

Fard(are /PN orMicrosoft RRA#

Microsoft Azu

/irtual Ne/PN

>ate(a

]subnet8^

]subnet2^

/PN>ate(a

Remote (

#ite!to!site/PN

Point!to!site and site!to!site'irtual net(or.

More options for getting our 'irtu


61/165

>eneric /PN de'icesmust support

• 1indo(s #er'er

• Routing andRemote Access

#er'ice "RRA#%

Ne(7 #oft(are!based/PN gate(a

More options for getting our 'irtunet(or. started

Microsoft Azure /irtual


62/165

Microsoft Azure /irtualNet(or.

\our 'irtual branch o&ce or

datacenter in the cloud

• +)tend our enterprise net(oMicrosoft Azure net(or.ing on

migrating e)isting apps and s

Microsoft Azure

• +nables hbrid apps that span

our premises

A protected pri'ate 'irtual

net(or. in the cloud

• #ecure pri'ate IP': net(or.s

(ithin Microsoft Azure

• IP address persistence

• Inter!ser'ice DIP!to!DIP comm

MicrosoftAzure

/M 8 /M 2

R*L+8

#ubnet 2

#ubnet 8

# i #it t it ti it


63/165

Contoso is concerned aboutthe comple)ities and IP

addressing challenges ofconnecting Microsoft Azurepublic cloud ser'ices (ithon!premises IT infrastructure

Connecting the o&ce to the Micrpublic cloud and to the on!prem

is a fairl simple process- It ta.eMicrosoft Azure side (hen ou uset up an encrpted connection

The process (ill usee)isting RA#/PN

ser'ices to start a pilot

for a limited number of

users and resources

If the pilot is successful, Contoso (ill in'esta ne( /PN appliance that (ill oHer better

performance, monitoring, and logging

#cenario7 #ite!to!site connecti'it

IP addressing in Microsoft Azure 'i


64/165

IP addressing in Microsoft Azure 'inet(or.sMultiple (as to access a 'irtual machine b IP address7

irtual P Address P01An internet!facing IP address that is not bound to a specic com

net(or. interface card

The cloud ser'ice that the 'irtual machine sits (ithin is assigne

\ou can ha'e multiple 'irtual machines in a cloud ser'ice the

same /IP

$ynamic P Address $P0

Microsoft Azure uses DFCP to dnamicall assign this IP addres

'irtual machine- \ou rel on DFCP- Do not staticall congure

address [ e'en for domain controllers

The IP address lease directl eBuates to the lifetime of the 'irtu

machine-

Creating a 'irtual net(or. in the


65/165

Creating a 'irtual net(or. in theManagement Portal

;uic. Create /Net

Custom Create /Net

+)tending our infrastructure


66/165

Indi'idualcomputers behindcorporate re(all

* n

! p r e m i s e s

d a

t a c e n t e r

P2

Remote wor

#ite!to!site/PN

Point!to!site /PN

Microsoft

Azure datacente

P2

+)tending our infrastructure#ecurel connect to the Microsoft Azure /irtual Net(or. from an(

@ses /PN client in 1indo(s operating sstem

Tra'erses re(alls and pro)ies


67/165

DemoMicrosoft Azure /irtual Net(or.s and>ate(as


68/165

Fands!on Lab 2ACreate a Microsoft Azure /irtual Net(or.

Create a #ite to #ite >ate(a

@ser Microsoft Azure DN# or


69/165

@ser Microsoft Azure DN#, orbring our o(n DN#

Microsoft Azure DN# "IDN#%• \ou can create our o(n hostnames• \ou don?t need to congure anthing• Resol'es /Ms b hostname (ithin the same cloud ser'i• Resol'es /Ms b =ull ;ualied Domain Name "=;DN% (

same 'irtual net(or.• Machine names are modeled e)plicitl and registered in

ser'ice•

#tandard DN# loo.ups are supported

$ring our o(n DN# "$\*DN#%• Name resolution bet(een cloud ser'ices• Multiple hostnames for the same 'irtual machine• Cross!premises name resolution• Re'erse loo.ups "PTR%• 1ins and Net$I*# name resolution

Mi ft A T & M


70/165

$uild high!performing cloudapplications

Planning fordisaster reco'er

@pgrade cloapplicationsseamlessl

Microsoft Azure Tra&c Manager

Fo( does Tra&c Manager (or.X


71/165

Fo( does Tra&c Manager (or.X8- @ser reBuests information using the compan domain name

2- The DN# Resource Record "DN# RR% for the compan domaCNAM+ record and points to a Tra&c Manager domain in Mi

Azure Tra&c Manager-4- The Tra&c Manager domain is part of the Tra&c Manager p

ou create- \ou also create rules (ithin this prole- The ruleselect dictate the load balance method ou (ant to use and(ant to monitor for health-

:- Tra&c Manager processes the rules and returns the DN# nacloud ser'ice, (hich is later resol'ed to the IP address-

9- The user contacts the ser'ice directl, b IP address- This inis cached on the client?s computer- This means the client (to interact (ith the selected ser'ice until that time!to!li'e "Te)pires-

Fo( do I congure Tra&c Manager


72/165

Fo( do I congure Tra&c Manager \ou can congure Tra&c Manager in the Management Portal-

8- Create a Tra&c Manager Prole-2- Add endpoints-

4- Congure the DN# TTL-:- #elect the load balancing method-

• Round Robin

• Performance

• =ailo'er "be sure to adWust the failo'er order%

9- Congure Monitoring-

• \ou can either monitor V? "default director of the ser'ices% or creat

the same name in each cloud ser'ice and allo( Tra&c Manager to p

http"s% >+T on the le- Then specif in Tra&c Manager-

U- #a'e our changes-


73/165

DemoConnecting on!premises Net(or.s toAzure

# i Mi ti .l d


74/165

#cenario7 Migrating (or.load

Contoso has about eight 1in2334 machines that need to to 1indo(s #er'er 2382 R2- buing ne( in!house se'er h

Contoso has decided to in'eMicrosoft Azure Iaa# for the platform-

Most applications ha'e beenthe bul. of the migration (i/M and ser'ers to Microsoft

*n!premises(or.loads on Fper!

/and bare metal

Need anorchestrat

edmigrationsolutionfor Fper!/ toMicrosoftAzure

Contoso has se'eral /Ms

that are currentl runningon!premises and need to g

to Azure

Microsoft Migration Accelerator7 e


75/165

Feterogeneous

(or.loadsMicrosoft Migration Accelerator "MMA%migrates 3indo4s phsical and 'irtual(or.loads and Amazon 1eb #er'ices"A1#% (or.loads into Microsoft Azure,regardless of underling hard(are andstorage

Multitenant Migra

PortalMMA pro'ides a (eb!basedthree le'els of tenanc for sand #I partner!dri'en migra

N!tier application

reco'erMMA performs guest!le'el applicationdisco'er and enforces consistencacross all /Ms in a multitier application

$est!in!class cuto

timeMMA performs end!to!end rorchestration such as net(oendpoint adaptation and reseBuencing

Microsoft Migration Accelerator7 efeatures

MMA7 PrereBuisites


76/165

MMA7 PrereBuisites

#ign!up

• Pre'ie(announced onMicrosoft Azurehomepage, blogs

• Accept pre'ie(terms on landingpage

• ReBuest MMAPortal sign!up,bits, anddocumentationaccess

#ubscribe

• >et a MicrosoftAzuresubscription

• $and(idth• #2# /PN or NAT

IP for Cloud>ate(a

• #ign!up responseemail (ith follo(!up instructions

Pro'is

• Do(nlosoft(arup t(omanag/Ms in Azuresubscri

• Do(nlo

soft(arup onemanageon prem

MMA7 1or.Eo(


77/165

MMA7 1or.Eo(

Disco'er

• Phsical,'irtual, A1#

• Application"#harePoint%

• 1indo(s 2335and abo'e

Protect

• #electMicrosoftAzuresubscription

• Replicationsettings

• Map storageaccount

Cut o

• #eleand orde

• /M

net(sett

• #pepoin

MMA components


78/165

MMA components

The 5ollo4in, components are re6uired 5or cloud ser

4or7:

• Mobilit #er'ice

• Master Target "MT%

• Process #er'er "P#%

• The Migration Accelerator "MA%

• Conguration #er'er "C#%

MMA7 Reference architecture


79/165

Microsoft

Customer 8

Datacenter

Customer 2

D at a C h an n e l

ProcessSer"er

Compute

Stora,e 2et4or7 s

ProcessSer"er

*therPhsical

Compute

Stora,e 2et4or7 s

*therPhsical/M(are

/M(are

Customer *

M

MasterTar,et

Con8,.Ser"er

Customer )

MasterTar,et

Con8,.Ser"er

MMA7 Reference architecture

Da ta C han

ne l

*utbound port congurations


80/165

*utbound port congurations*utbound ports to open for data communication7 The Congur#er'er "C#% uses FTTP# "::4%, and the Process #er'er "P#% use6::4 and 6353

Primar ser'er disco'er


81/165

8- Disco'er/1(are, phsical,and A1# primar(or.loads

2- #elect one ormore primar(or.loads

4a

Primar ser'er disco'er

Install mobilit ser'ice


82/165

P

as

Install mobilit ser'ice

Create ser'er groups


83/165

>rouped ser'ers list

A

mg

Create ser'er groups

Microsoft Azure subscription disco'e


84/165

Register MicrosoftAzure subscription

Microsoft Azure subscription disco'e

Replication and target settings


85/165

Pro'ide settings

#elect Msubscriptstorage a

Replication and target settings

Monitoring


86/165

Monitor protectedser'ers percustomer

Detailed replicationsettings and trends

Monitoring

#elect ser'ers for cuto'er


87/165

#emi

#elect ser'ers for cuto'er

Module 2 #ummarPartner


88/165

Module 2 #ummar

/irtual Net(or.s o'er'ie(

#ite!to!site communicatio

Partner appliance landsc

Microsoft Migration Accele

pportunities:

• >ro( business be)panding #M$

customer net(or.sto Azure using #2#/PN

• >ro( customerrelationships bintegrating on!

premises ser'ers(ith Azure to meetbusiness needs in atimel manner

• Migrate /Ms (ithMMA to reduce ris.

andcomple)ities


89/165

Fands!on Lab 2$Connect on!premises en'ironment to Azure


90/165

Module 47 MicrosoftAzure /irtual Machines

Module 4 *bWecti'es 0


91/165

Module 4 *bWecti'es (hat ou (ill learn

• *'er'ie( of Microsoft Azure /irtualMachines

Azure Iaa#

#upported #er'ers and Roles

A'ailabilit #ets

A&nit >roups

Deploing 1or.loads

/M Tiers

• Azure #ite Reco'er

• Architecture

• Creating Protection >roups

•

Microsoft Azure Infrastructure as a


92/165

\our

datacenter

Microsoft Azure

#calable oinfrastruccloud

>ro(ing land Micro(or.load

#ecure prconnectiopremises

Connect (

premises Director

@se (hatmanage (Center

Integrate Azure app

/irtualMachines

3indo4sSer"er

mport9$s

9$

\our app inthe public

cloud

#inu

Microsoft Azure Infrastructure as a "Iaa#%

#cenario7 Azure Iaa#


93/165

Contoso e)pectstoimplement 83_ne(/Ms this ear

Aging hard(are(ill need to

upgraded and ne(hard(are (illneed to bepurchased tosupport the ne(machines

As the numb(or.loads an

gro(s, ser'icand hostsbecomes moand manual

Contoso (ill SA;appro)imatel

:3 `of the IT costs of running on!premises ser'ers b migrating'irtual machines to Microsoft A

#cenario7 Azure Iaa#

#er'ers supported on


94/165

Microsoft $izTal. #er'er

Microsoft Dnamics A

Microsoft Dnamics >P

Microsoft Dnamics NA/

Microsoft =orefront Identit Manager

Microsoft Figh Performance Computing "FPC% Pac.

Microsoft ProWect #er'er

Microsoft #harePoint #er'er

Microsoft #;L #er'er

Microsoft #stem Center

Microsoft Team =oundation #er'er

#er'ers supported onMicrosoft Azure /irtual Machines

#er'er role support on


95/165

Acti'e Director Domain #er'ices

Acti'e Director =ederation #er'icesActi'e Director Light(eight Director #er'ices

Application #er'er

DN# #er'er

=ile #er'ices

Net(or. Polic and Access #er'icesPrint and Document #er'ices

Remote Access "1eb Application Pro)%

Remote Des.top #er'ices

1eb #er'er "II#%

1indo(s #er'er @pdate #er'ices

#e e o e suppo oMicrosoft Azure 'irtualmachines

Persistent /irtual Machines


96/165

(ith geo!replication

Microsoft Azure#torage

A'ailabilit sets


97/165

=ault Domain

Rac.

/irtualMachine

II#8

/irtual

Machine

#;L8

=a

1eb A'ailabilit #et

#;L A'ailabilit #et

Meet #LA bdeploing multipleinstances ina'ailabilit sets

+nsure a'ailabilitduring updates and

maintenance

Adds ContinuousA'ailabilit forApplications

A&nit groups


98/165

g p

Locate our compute,net(or., and storageresources closetogether in the samedatacenter

>et better

performance

>et lo(er latenc

Reduce egress costs

A&nit>roup

\ou bring it (e run it


99/165

mport

9$

#calable, on!demandinfrastructure for ourapps

Apps (ith public 1eb frontends, 'ariable tra&c sitting ina perimeter net(or.

+)isting custom apps,

specialt ser'ers (ith batchprocessing patterns

No app changes 0 same /FDformat

Manage (ith tools ou .no(

*n! Microsoft Azure

/irMac

Busin

Bap3indo4s Ser"eActi"e $irectory

Microso5tSer"er

3indo4s Ser"erActi"e $irectory

System CenterperationsMana,er

g

#cenario7 Preparing to mo'e


100/165

Contoso is read to

mo'e se'eralproduction

(or.loads to

Microsoft Azure /Ms

The on!

premisesen'ironment(ill remainunchanged toa'oid the ris.of do(ntime

2!4 on!prem

(ill be impMicrosoft Acondence(ith the /Ftools

*nce communications and access is

tested,

application deploment, 'irtual

net(or.ing, and Acti'e Director

integration testing (ill beginContoso (ants to use a phased

approach of integrating Microsoft

Azure and on!premises IT resources

to ensure a smooth

transition

Contoso (ill (or. (ith an e)

cloud!

integration partner to create

premises

integration (ith Microsoft Az

ser'ices The solution (ill allo(

e)pand and con'erge

as needed to .eep up (

and sa'e costs

(or.loads to Microsoft Azure

$uild, test, deplo


101/165

+nable inno'ation(ith test and

de'elopmentlabs in the cloud

Cost eHecti'e

Impro'ed de'eloperagilit

#hip!tested in realisticscale

@se e)istingde'elopment tools andlanguages

Access on!premises

*n!

premises

Microsof

#ab

De'eloper

/ir

Mac

/irtualMachine

/irtualMachines

#;1indo(s#er'er

/FD

/isual #tudio

^ Po(er#hell

, , p

Microsoft Azure /M securit


102/165

Microsoft Azure /M securitconsiderations• The /M is connected to the Internet

• RDP inbound is enabled b default• RDP port 4456 cannot be used

• @se a strong pass(ord

• The /M has unlimited outbound net(or. access

• 1ho can control the /MX

Microsoft Azure /irtual Machine tie


103/165

Char,e rate by the minute• Microsoft charges for 'irtual machines b the minute• Prices are listed as hourl rates and are billed based on total number of m

the 'irtual machines run for a partial hour

Basic compute tier• Ne( tier of compute instances• #imilar in conguration to the #tandard tier, but (ith lo(er prices• Does not include load balancer and auto!scaling• 1ell!suited for single instance production applications, de'elopment (or.

ser'ers, and batch!processing applications that might not reBuire these f

Standard compute tier• This tier of compute instances pro'ides an optimal set of compute, memo

resources for running a (ide arra of applications• Include both auto!scaling, load balancing, and internal load balancing cap

no additional cost• Internal load balancing feature is currentl in pre'ie(

$asic tier 'irtual machine


104/165

Size CP=

cores

Memory $is7 sizes 1 "irtual machine Ma )T

dis7s

A' #hared

"3-29%

U5 M$ *# Z 82 >$, Temporar Z 23

>$

8

A) 8 8-9 >$ *# Z 82 >$, Temporar Z :3

>$

2

A* 2 4-9 >$ *# Z 82 >$, Temporar Z U3>$

:

A> : >$ *# Z 82 >$, Temporar Z

823 >$

5

A? 5 8: >$ *# Z 82 >$, Temporar Z

2:3 >$

5

$asic tier 'irtual machinesizes

#tandard tier 'irtual machine


105/165

Size CP=

cores

Memor

y

$is7 sizes 1 "irtual machine Ma. data dis7s

) TB each0

A' #hared

U5M$

*# Z 82 >$, Temporar Z 23>$

8

A) 8 8-9

>$

*# Z 82 >$, Temporar Z 3

>$

2

A* 2 4-9 >$ *# Z 82 >$, Temporar Z 849

>$

:

A> : >$ *# Z 82 >$, Temporar Z 259

>$

5

A? 5 8: >$ *# Z 82 >$, Temporar Z U39>$

8U

A( 2 8: >$ *# Z 82 >$, Temporar Z 849

>$

:

A& : 25 >$ *# Z 82 >$, Temporar Z 259

>$

5

A@ 5 9U >$ *# Z 82 >$, Temporar Z U39>$

8U

A 5 9U >$ *# Z 82 >$, Tem orar Z 452 8U

sizes


106/165

DemoPro'isioning and managing 'irtualmachines

Azure #ite Reco'er "A#R%


107/165

1hat it ta.es to .eep business running (hen d

stri.es

ncreasin, costsAchie"e cost and operations stability

=ntested $+ decreasin, reco"erycon8dencemplement testable solutions 5or datareco"ery

Time-intensi"e media mana,ement;liminate tape mana,ement

Too much data 4ith insuDcient protectionTi,hter inte,ration bet4een systems and a"ailabilitydata protection

Too many complicationsE problems andmista7esAutomateE automateE automate

Azure #ite Reco'er "A#R%

#cenario7 Disaster reco'er for


108/165

Contoso has some

(or.loads running inMicrosoft Azure and

some on!premises

The on!premisesen'ironment(ill need to beprotected (ithoH!site replicas

83!89 on!p

need to be (ith no mominutes of

The disaster reco'er solution needs to

be po(erful enough to reco'er groups of

ser'ers that operate together "2! and 4!tier applications% as one

The disaster reco'er solutio

be simple to use and include

orchestrated reco'er of all o/Ms- It must support the eas

of ne( (or.loads

The solution (ill allo(

e)pand and con'erge

as needed to .eep up (

and sa'e costs

Fper!/ (or.loads

Contoso (ants to ensure a smooth

transition from on!premises Fper!/

to Microsoft Azure and 'isa 'ersa-

Microsoft Azure (ill ser'e as the

reco'er site

e Components of A#R


109/165

Microso5t Azure

Microso5tAzure Site+eco"ery

irtual MachineE storanet4or7

r c h

e s t r a t i o

n

*n!premises to Microsoft Azure protection "#ite!to!Azure%

r c h e s t r a

t i o n

a n d

+ e p l i c a t i

o n

C h a n n e l

Comput

e

Stora,e 2et4or7

s

A,ent

n-

Microsoft Azure #ite Reco'er


110/165

?. Install and registe

Microsoft Azure #ite Reco'erFo( it (or.s7 Initial conguration

Primar si"*n!premises

1indo(s#er'er 2382R2

). #ign up

*. Create 'ault Do(nload agent Do(nload registration le

>- Create site

(- Publish 'irtualmachines metadata o'erFTTP# channel


http://support.microsoft.com/kb/2721672


111/165

c oso u e # e eco e Fo( it (or.s7 conguring protection and mapnet(or.s

Prim#i

"*


@. Congure ProtectionGroup and select the RP*

&. Create Mi#torage Acco

. Create Azure /irtual Net(or.-

/irtual Net(or.

Microsoft Azure #ite Reco'erF it . C i t ti f l


112/165

Site: An abstracted 'ie( ofhost group to represent a siteor branch-

Fo( it (or.s7 Conguring protection of clounet(or.s

Protection Groupcon8,uration: #treamlinedconguration of replication

settings, including +P,reco'er points, /##!snapshotintegration, and initialreplication-



113/165

Fo( it (or.s7 enable 'irtual machine protecti

Primar"*n!pre


. +nable protection for'irtual machine

/irtual Net(or.

)'. #tart replication tcustomer!o(ned storaaccount

)). Congure 'irtualmachine net(or.



114/165

;nable Protection 5or

a M• Protect 'irtual machine from

portal• Automaticall map to closest

Microsoft Azure size- \ou canchange it

• >uest supported b MicrosoftAzure Iaa#

• /FD is supported• Data size supported up to 8UT$

• 8U data dis.s of 8T$ each



115/165

Fo( it (or.s7 Author Reco'er Plan

Primar"*n!pre


)>. Create reco'er plan

/irtual Net(or.



116/165

rchestrated steps 5orreco"ery

*rchestrated reco'er using reco'er plans

Script inte,ration

Manual actions



117/165

Fo( it (or.s7 +)ecuting Reco'er Plans

Primar"*n!pre

#stem Center/irtualMachineManager

)?. +)ecute reco'er plan

#torage/irtual Net(or.

)(. *rchestrate failo'er toreco'er site (hen primar siteis do(n

)&. 1hen primar site is bac. onlin

e)ecute a failo'er to on!premises

#cenario7 Fosting disaster reco'


118/165

ption ): Partner manages

#M$ Microsoft Azure

subscription using aMicrosoft Azure account

setup specicall for the

#M$ customer

ption *: Partner

creates a

subscription for each#M$ customer and

uses shared storage

'ault and /net

Partner sel

customer MAzure throuLicensing toand associaMicrosoft Aresources

Partner acts as a trusted consultant and

ser'ice pro'ider that handles all aspects

of site le'el disaster reco'er for the #M$customer

Partner performs periodic failo'er

tests (ith the #M$ customer

#M$ benets from enterprise

disaster reco'er at a lo( an

and partner benets b reseMicrosoft Azure ser'ices and

#er'ice pro'ide model

door for other hosted M

Azure ser'ices

#M$ customers

Microsoft Azure #ite Reco'er+ i l


119/165

Test 5ailo"er- No impact on production

+)ecuting reco'er plans

Planned 5ailo"erNo data loss

=nplanned 5ailo"er

Hleible 5ailbac7


120/165

DemoMicrosoft Azure #ite Reco'er

#ingle clic. failo'er

#ummar


121/165

Microso5t Azn-premises PR*T+CT+D

Planned failo'er

Corporatenet4or7

#B Apps

S


122/165

Microsoft Azure /M o'er'

Microsoft Azure /M A&nit

Pro'isioning /Ms

Protecting (or.loads (ithA$

S<##B

pportunities:

• >ro( business be)panding #M$

infrastructure to theAzure cloud usingFbrid deplomentsof /Ms

• Impro'e #M$customer

reco'erabilit (ithA#R (hile increasingre'enues (ith Azure*pen


123/165

Fands!on Lab 4APro'isioning /Ms

Monitoring and managing /Ms


124/165

Fands!on Lab 4$

Azure #ite Reco'er


125/165

Module :7 Planning Azure1or.loads

Module : *bWecti'es 0h ill l


126/165

(hat ou (ill learn

• *'er'ie( of Azure /M domain controllers

$usiness dri'ers for domain controllers inAzure

Azure considerations for domaincontrollers

Read onl domain controllers

Deploment of replica domain controllersto Azure

Deplo of read onl domain controllers toAzure

• *'er'ie( of #harePoint deploments to Azure

Microsoft Azure TraditionalDatacenter


127/165

/irtualization

*#

Fard(are

Net(or.

Data

Applications

=ire(all

=ocus on Application

1eb Applications

Data

1eb#ites

Applications

=ire(all Rules

Data

/irtual Net(or.

Cloud#er'ices

/irtual Net(or.

Data

Applications

=ire(all Rules

*#

/irtualMachines

#cenario7 Deploing applications


128/165

Contoso is

read to

start itsapplicationtesting andauthenticationto MicrosoftAzure /Ms andapplications

from de'icesrunning in!house

Deploment of a replica

Domain Controller, a

#harePoint 2383

=oundation #er'er, and a

#;L #er'er 238:

#tandard +dition ser'er

Contoso useapplications

des.tops in can access t(ebsite usin

IP address s

in!house res

*nce the nal phase of the testing is completrollout (ill be to integrate the on!premises AcDirector Domain #er'ices en'ironment (ith Azure Acti'e Director infrastructure to ensursign!on e)perience for users

Acti'e Director on a Microsoft Azu/M


129/165

/M$usiness dri'ers7•

#upport for prereBuisites for e)isting applications such as #ha•Figh a'ailabilit solutions for #;L #er'er databases using Al(a

A'ailabilit >roups•Disaster reco'er solution for branch o&ces and a limited set machines•De'Test (or.loads

Microsoft Azure /M considerationsDomain Controllers


130/165

Domain Controllers

Do not ssprep the Domain Controller=rom an e)isting phsical machine

P2/ a phsical machine and mo'e to Microsoft Azure

Mo'e the Domain Controller?s /FD le to Microsoft Az

Create the /M from the /FD#tarting (ith a ne( /M$uild a ne( /M and replicate director to Microsoft Az

Microsoft Azure /M considerations


131/165

DCsAttach a data dis. "caching turned oH%

Do not use D7 " temporar phsical dis.%

Put logs and account database on attached dis. to a'oid data l

Microsoft Azure /M considerationsDC


132/165

DCsIP addressing

Microsoft Azure /Ms reBuire use of a DFCP leased IP address- The lease is an innite dnamic lease but not the same as static assigned a

ou (ould e)pect to use in and on!premises en'ironment

The leased IP address is routable for the duration of the lease, (hich is dete

the lifetime of the ser'ice "or /M%

Don?t tr to assign a static IP to our /M- \ou (ill lose communication to it-

Microsoft Azure /M considerationsD l DN# th D i C t ll


133/165

Deplo DN# on the Domain Controller

The Microsoft Azure DN# does not co'er the Acti'e Director DN# records n

Register the DN# ser'er in the 'irtual net(or.

Read!*nl Domain Controllers


134/165

1hen to deplo a Read!*nl Domain Controller

#taging a Read!*nl Domain Controller

Attaching a Read!*nl Domain Controller

#harePoint support on Microsoft Az


135/165

pp

Product support The Microsoft hosted 'irtualization solution supports #harePoint

#er'er 2383 and 2384, as (ell as reBuired technologies such

as Microsoft #;L #er'er, (hen these products and technologies

are deploed on the Microsoft Azure platform

=A#T #earch support

Do not support Microsoft =A#T #earch #er'er 2383 for

#harePoint deploments on Microsoft Azure

#harePoint architecture tips


136/165

I*P# most important factor

•*ptimize #;L #er'er storage

•*nl #harePoint is on the C7 dri'e

#cale *ut, Not @p

•Mo'e content databases to separate #;L #er'er instances

•Mo'e search databases to separate #;L #er'er instances

•Add more 1eb =ront +nd "1=+% ser'ers for scaling #harePoint ser'ices•Add dedicated #earch ser'ers and #;L #er'er

#ingle 'irtual machines template


137/165

Acti'e Di1+$APP #;L

Cloud

/

Microsoft Azure

3eb/app tier8 ) large

": cores and >$%

$ata tier

8 ) AU

": 'ores and25>$%

dentity tier

8 small

"8 core and8-9>$%

L$

53

23333

Admin

A/+T#P1+

$

A/#+ T

#;L

A/#+TDC#+T

Fighl a'ailable template


138/165

ActL$

1+$ #;LAPP

53

23333

Admin

Cloud se

Microsoft Azure

A/#+

T#P1+

$

A/#+

T#PAPP

A/#+T

#;LFA

3eb tier

2 ) large

": cores and >$%

App tier

2 ) large

": cores and >$%

$ata tier

2 ) AU

": cores and 25>$%

8 ) small ";uorum%"8 core and 8-9>$%

dentity tier

2 small

"8 core and 8-9>$%

Module : #ummarPartnerpportunities:


139/165

• >ro( re'enues bpro'iding customers

(ith ne( Iaa#instances usingAzure /Msintegrated (ith onpremises domains

• Pro'ide #M$

customers a singlesign on solution bintegrating onpremises domains toAzure

Acti'e Director Domain #

#harePoint /Ms


140/165

Fands!on Lab :Deplo a Domain Controller in Microsoft Azure


141/165

Module 97 Azure Acti'eDirector



142/165

(hat ou (ill learn

• *'er'ie( of Azure Acti'e Director

Cloud Identit Management

Disco'er compatible #aa# applications

1or.ing (ith Fbrid Identities

Azure Acti'e Director Application Pro)

Multifactor Authentication

• *'er'ie( of Azure Acti'e Director Connect #etup

#nchronization

Identit as the control plane


143/165

#elf!ser'ice #ingle sign on

@sername

#impleconnection

MicrosAzur

Publiccloud

*therdirectories

1indo(s #er'erActi'e Director

*n!premises

Microsoft Azure Acti'e Director

1hat is Microsoft Azure Acti'e Dire


144/165

A comprehensi'e ide

access management solution

It combines directorad'anced identit go

application accessmanagement, and a standards!based platde'elopers

Disco'er all #aa# apps in use (ithorganization


145/165

Microsoft Azure Acti'eDirectorCloud App Disco'er

83)

#ource7 Felp Net #ecurit 238:

as man cloud apps are inuse than IT estimates

• #aa# app categor• Number of users• @tilization 'olume

Comprehensi'ereporting

g


146/165

Ma.ing hbrid identit simp


147/165

Microsoft AzurDirector Conn

Consolidated deplofor our identit br

AD=# is an optionaauthentication in Fimplementation Pa

replace AD=# for m

AD=#

Microsoft Azure Acti'e Director Connect

AD=#

Dir#nc


#nc

=IM_Azure Acti'eDirectorConnector

#nc +ngine

Deli'ering a seamless userauthentication e)perience


148/165

Acti'e DirectoIdentit snchronization(ith pass4ord hash0

sync

Identitsnchronization

AD =#

authentication e)perience

@ser attributes are snchronize#nchronization ser'ices incluhashE Authentication is complMicroso5t Azure Acti"e $ire

Microsoft Azur

@ser attributes are snchronize#nchronization tools, Authenbac7 throu,h 5ederation an3indo4s Ser"er Acti"e $ire

Microsoft Azu

Preintegrated #aa# apps in the Appgaller


149/165

galler

\our director on the cloud


150/165

Microsoft A2:33_ Preintegrated popular#aa# apps

Connect and #nc on!premisesdirectories (ith Microsoft Azure

+asil publish on!premises (eb

apps 'ia Application Pro) _custom appsthrough a rich standards!basedplatform-

Identities and applications in one place

1eb apps

"Microsoft Azure Acti'eDirector Application

Pro)%

#aa# apps Integ

custo

*ther Directories

Microsoft Azure Acti'eDirector Application


151/165

MICR*#*=T C*N=ID+NTIAL 0 INT+RNAL *NL\

MicrosofActi'e D

Conner

https7app8!contoso-msapppro)-net

Connectors are deploed usuall on corpnet ne)tto resources

Multiple connectors can be deploed forredundanc, scale, multiple sites, and diHerentresources

@sers connect to the cloud ser'ice that routestheir tra&c to the resources 'ia the connectors

A connector that auto connects to the cloud ser'ice

Director ApplicationPro)

ResouResource

A

Centrall managed identitieaccess


152/165

#aa#apps

Centralized accessadministration forpreintegrated #aa# apps andother cloud!based apps

#ecure business processes(ith ad'anced accessmanagement capabilities

Comprehensi'e identit andaccess management console

access

\our cloud apps read (hen ou are

ITprofessional

Multi =actor Authentication ! Fo( (or.s


153/165

Mobile apps Phone calls Te)tmess

AL+RT

8 : 9 U U

(or.s

Rich standards!based platform forde'elopers


154/165

*A*p

1

R+


de'elopers• Custom L*$ applications can integrate (ith Microsoft AzureActi'e Director

• #ign in to Acti'e Director!integrated applications (ith cloudidentities

• Acti'e Director!integrated applications can access *&ce4U9 and other (eb APIs

• Applications can e)tend Microsoft Azure Acti'e Directorschema

• Cross!platform support "i*#, Android, and 1indo(s%

• *pen standards"#AML, *Auth 2-3, *penID Connect, *data 4-3%

Microsoft Azure Acti'e Director C


155/165

• #nchronizes users, groups, and

contacts to Microsoft Azure Acti'e

Director

• @sers (ill ha'e a diHerent

pass(ord in Microsoft Azure Acti'e

Director than the ha'e for the

on!premises Acti'e Director


156/165

DemoInstalling and running Microsoft AzureActi'e Director Connect

Module 9 #ummarPartnerpportunities:


157/165

• >ro( business be)panding creatingseamlessauthenticationbet(een onpremises ser'icesand Azure resourcesand /Ms

• >uide #M$s through#aa# applicationdeploment (ithsingle authenticationand Identitmanagement

Microsoft Azure Acti'e Dir

Microsoft Azure Acti'e DirConnect

Third!part #aa# support

4U9 integration


158/165

Fands!on Lab 9Microsoft Azure Acti'e Director

Connect


159/165

The benets of selling Azure


160/165

=rees up Cap+) needed for lo(margin hard(are for other,higher margin ser'ices

A shift from the brea.!) IT guto(ard cloud strateg and on!call ser'ice a'ailabilit

Remo'es reliance ande)pectation that someoneneeds to be phsicall presentto sol'e issues 0 increases'aluation

+liminate consutime and dri'e urates

Aggressi'e in'eschannel incenti'higher upside on

$udgetRealignment

#trategicRelationship

>eographicReach

Reducenon!billable

time

IncreaseMargins

1h MicrosoftMicrosoft oHers compelling competiti'e diHerentiation to custo


161/165

#ingle 'endor across clouds 0 pri'ate, public and hosting

#ingle point of support for infrastructure, *#, ser'ices, aapplications-

Tenured e)perience and enterprise credibilit-

#ingle 'endor for Infrastructure!as!a!#er'ice "Iaa#% and a!#er'ice "Paa#%-

#harePoint, #;L #er'er, and 1indo(s #er'er run best onAzure-

Introducing our ne( technical benestructure

Cloud Fbrid


162/165

structure

(' Ad'isor Fours, Pre!sales #upport, Partner #upport Communit

*' Product #upport Incidents

)' #ignature Cloud #upportIncidents

@nlimited #ignature Cloud#upport

*' Pro

*' Ad'isor Fours, Pre!sales #upport, Partner #upport Communit

)( Product #upport Incidents

( #ignature Cloud #upportIncidents

@nlimited #ignature Cloud#upport

)( Pro

( Ad'isor Fours "(ith rst cloud sale%, Partner #upport Communit

)' Product #upport Incidents

Partner #upport Communit

*nline Interacti'e #essions

>old

#il'er

Action Pac.

Net(or.Currentl limAzure

+Hecti'e end of

#eptember 238:

CloudPerformanceCompetencies:Cloud PlatformCloud Producti'it,#mall and Midmar.et Cloud

FbridCompetencies: App De', Collab< Content, Communication, DataPlatform, Datacenter, De' <Deploment, Messaging, Mid Mar.et#olution Pro'ider, ProWect < PortfolioMgmnt

Hind out more in the support section on 444.Microso5t.com/partner

Continue learning (ith Azure Intern

Rights


163/165

1hat to

TestX

Azure #cenarios for #M$

1hX

De'elop e)pertise no( ina controlled en'ironmentusing O833 of monthlAzure credits at no charge

Azure $enets through MPN "M

Azure $enets through M#D

Hind out more: http://A7a.ms/a

1here to#tartX

Partner Programs, Azure Technical #cenario 838s

Azure 838?s

Azure $ac.up 0 /irtual Machines 0 Acti'

1ebsites

Rights

Incenti'es and promotionsMa.e a strong start (ith timel ne( oHers designed to gi'e o


164/165

Ma.e a strong start (ith timel ne( oHers designed to gi'e o

•Microsoft oHers a rich incenti'e program (ith a grocloud!related incenti'es

• +)pand our cloud practice to earn margin and clou(ith Azure in *pen /olume Licensing for #M$

• Chec. out MPN for more information 0 http7a.a-ms

Chec. out our local incenti'es

Connect (ith our local Microsoft or Distriblearn more about other promotional oHers

>et started


165/165

http7a.a-msincenti'es

http7a.a-msmodernbiz

Azure in *pen content http7a.a-msAzu

More Tech #eries content, on demand hta.a-mssmblearningpath

Cloud #ure #tep http7a.a-mscloudsure

Capitalize oncurrent incenti'es

Po(er up ourmar.eting and

sales

Fone ourtechnical s.ills <learn more aboutAzure in *pen

ModernBiz_Microsoft Cloud for SMB Release 1.0

Documents

Transcript of ModernBiz_Microsoft Cloud for SMB Release 1.0