@travisdh1 said in What Are You Doing Right Now:
@JackCPickup said in What Are You Doing Right Now:
@coliver said in What Are You Doing Right Now:
@JackCPickup said in What Are You Doing Right Now:
British Bulldog
Churchill?
Not that famous ha a classic wrestler
Here my first thought was:
https://en.m.wikipedia.org/wiki/Davey_Boy_Smith
Didn't know he was born in my village
@coliver said in What Are You Doing Right Now:
@JackCPickup said in What Are You Doing Right Now:
British Bulldog
Churchill?
Not that famous ha a classic wrestler
Just heard that British Bulldog used to come in to my local pub
@scottalanmiller
I was so ready! One of those 15 minute lunch days. Email migration with shitty Outlook 2010 this morn and checking for crypto infections this avvy
Having a drink in my local after finishing work at a client nearby :thumbsup_tone1: small perks
@scottalanmiller
No Deliveroo there? Or an equivalent
Not completely new but haven't introduced myself.
I work at an IT service provider mainly working in Education in North West England.
I'm mainly here to get clued up on the stuff I want to be working with going forward in my career.
Working on documentation so techs can stop using "I've not done that before" as an excuse 
@scottalanmiller
From what I've seen you don't seem to know what a quiet weekend is ha
@scottalanmiller
It'll be a nice weekend in 2 weeks when I'm back here instead. One of the companies was Capita so you'd expect better from a big boy like them.
Bugger, client got me a gift of alcohol but they've left it at home! They purchased some software in October and it didn't work, both companies involved refusing responsibility. Been fighting with them since then for a solution and they finally sorted 3 weeks ago...
@scottalanmiller said in Azure Active Directory a replacement for AD?:
@JackCPickup said in Azure Active Directory a replacement for AD?:
@scottalanmiller said in Azure Active Directory a replacement for AD?:
@Tim_G said in Azure Active Directory a replacement for AD?:
@coliver said in Azure Active Directory a replacement for AD?:
@Tim_G said in Azure Active Directory a replacement for AD?:
The mobile clients would have to be VPN connected (to Azure) wouldn't they? Maybe not before log-in because of cached credentials... but still, they aren't always cached.
I don't think so. They join to an Azure domain which is available on the public internet.
Ah I see. That makes perfect sense.
I was thinking SSO from on-prem to Azure, got mixed up.
That's AD Federation and still exists, but we've been warning people to run away from that for a long time.
Why do you warn against ADFS?
Risks and cost. It means you have all of the cost of both systems and the cost of keeping them working (which is rather fragile) and risk that they depend on each other and either outage can cause the other to fail. It's an unnecessary coupling that should be avoided when possible. It really doesn't add value, but takes a lot away.
Is that just in the context given above? Using it for SSO to an Azure VPS DC, or ADFS altogether?
@scottalanmiller said in Azure Active Directory a replacement for AD?:
@Tim_G said in Azure Active Directory a replacement for AD?:
@coliver said in Azure Active Directory a replacement for AD?:
@Tim_G said in Azure Active Directory a replacement for AD?:
The mobile clients would have to be VPN connected (to Azure) wouldn't they? Maybe not before log-in because of cached credentials... but still, they aren't always cached.
I don't think so. They join to an Azure domain which is available on the public internet.
Ah I see. That makes perfect sense.
I was thinking SSO from on-prem to Azure, got mixed up.
That's AD Federation and still exists, but we've been warning people to run away from that for a long time.
Why do you warn against ADFS?
They'd be connected to Azure domain instead of a local one, so they log in to that.
Oh nice one. Can you have heirarchical OUs now too? I think initially you could only have flat OUs? Could be completely wrong and outdated info!
At the start of a project to convert 50-something school's on-premises to cloud so thanks for that link.
I think it was more managing group policies still while being able to log into Azure AD from anywhere. Seeing as there wasn't (dunno about now) proper GPOs in a pure Azure AD setup.
Been a few months since I was looking at this but it seemed like a hybrid setup with on-premises doing GP stuff was still ideal. Not sure how far the Azure GPO side has come yet.
