u/thmeez

Hello everyone. I'm currently working in IT (~1 year) and this year

I've just started my master's in Azerbaijan dövlat sifarişi ila.

I'm also interested in applying for the Dovlat Proqrami for a

master's abroad, but I noticed this requirement: if someone has

studied for more than half of the normative duration of their

master's in Azerbaijan with dovlat sifarişi/dovlat hesabına, they

apparently can't apply for the same level.

My question is: if I've only just started my master's and complete

1 year here, would that count as "more than half" and make me

ineligible?

Has anyone been in a similar situation or knows how this is

interpreted in practice? Any advice would be really appreciated

I’m configuring Windows Autopatch for the first time. After assigning my device group to an Autopatch group, several devices fail the prerequisite check with:

>Not registered — Intune or Cloud-Attached
Devices must be managed by either Intune or co-management.

The affected devices appear correctly in both Intune and Entra ID. Their device IDs match, the device names are unique, and some are freshly enrolled devices, so stale or duplicate records seem unlikely.

Has anyone encountered this? Is there an additional Autopatch registration step, sync delay, licensing requirement, or device property I should check?

SOLVED: After a full 1 day waiting it solved in itself , thank you for everyone

Running into a frustrating issue with a fresh AVD deployment and wanted to get some community input.

**Environment:**

- Azure Virtual Desktop, Pooled host pool

- Session hosts in Sweden Central

- Host pool metadata in West Europe

- Intune enrollment enabled on session hosts

- Brand new VNet, no custom NSG rules blocking anything obvious

**The error:**

Every time I deploy session hosts, the DSC extension fails with:

> "The DSC Extension failed to execute: Error downloading https://wvdportalstorageblob.blob.core.windows.net/galleryartifacts/Configuration_1.0.03419.1309.zip after 17 attempts: Unable to connect to the remote server"

Host pool, workspace and DAG all deploy fine but it's specifically the VM provisioning step that fails every time.

**What I suspect:**

I think this might be related to the Azure default outbound access retirement for new VNets , the VMs have no explicit outbound internet path so the DSC extension just times out trying to reach Microsoft's servers. But I'm not 100% sure.

**My questions:**

1. Has anyone hit this exact issue and what did you do to fix it?

2. How are you handling outbound internet access for session hosts in your AVD environments with NAT Gateway, Load Balancer, or something else?

3. Is there any way to resolve this without adding extra cost (NAT GW, Standard LB both cost money)?

Any input appreciated, been stuck on this for a while.

We have a scenario where an external/contract developer needs access to source code stored in Azure DevOps, but we want to minimize risk of code exfiltration as much as reasonably possible.

Current thoughts:

isolated workstation / VDI

Entra joined compliant device only

clipboard redirection blocked

no local drive mapping

restricted browser/download access

Conditional Access + Intune policies

only approved apps allowed

For companies using Microsoft stack (Entra ID, Intune, Defender, Azure DevOps, Windows 365 / AVD etc.), how do you usually approach this?

I know nothing is 100% preventable if someone can view code, but I’m interested in industry-standard approaches and practical controls companies actually implement for sensitive repositories.

We had a strange case in Microsoft 365 tenant.

Someone external sent an email to an internal user, but it appeared like it came from another internal user.

What I checked:

SPF, DKIM and DMARC are already in place.

The user's Entra sign in logs look normal.

No obvious mailbox compromise.

But in Exchange Online message trace, the sender shows as the internal user, while the source IP is a different external server.

How can an attacker do this if the domain authentication records are already in place?

What should I check next, and what are the best ways to defend against this in Microsoft 365?

We had a strange case in Microsoft 365 tenant.

Someone external sent an email to an internal user, but it appeared like it came from another internal user.

What I checked:

SPF, DKIM and DMARC are already in place.

The user's Entra sign in logs look normal.

No obvious mailbox compromise.

But in Exchange Online message trace, the sender shows as the internal user, while the source IP is a different external server.

How can an attacker do this if the domain authentication records are already in place?

What should I check next, and what are the best ways to defend against this in Microsoft 365?

We had a strange case in Microsoft 365 tenant.

Someone external sent an email to an internal user, but it appeared like it came from another internal user.

What I checked:

SPF, DKIM and DMARC are already in place.

The user's Entra sign in logs look normal.

No obvious mailbox compromise.

But in Exchange Online message trace, the sender shows as the internal user, while the source IP is a different external server.

How can an attacker do this if the domain authentication records are already in place?

What should I check next, and what are the best ways to defend against this in Microsoft 365?

I’m trying to properly understand Group Policy loopback processing and Group Policy Preferences from a production design point of view.

My main requirement is this: User Configuration settings must apply only when users log into specific servers. It should not matter which user logs in. If the user logs into Server A or Server B, the policy should apply. If the same user logs into any other server, the policy should not apply at all.

This is the part I’m struggling with.

For example, I want settings like proxy configuration, HKCU registry keys, or mapped network drives to be applied only on a defined group of servers. But after configuring loopback, some of these user settings started appearing on unrelated servers too. It feels like the settings are leaking outside the intended server scope, but I assume this is caused by my GPO design, linking, inheritance, security filtering, or misunderstanding of loopback behavior.

The second issue is mapped drives. Some mappings appear where they should not. Some do not come back after the user manually disconnects them. Behavior also seems different between users. I’m trying to understand how GPP drive map actions like Create, Update, Replace, Delete, item level targeting, and loopback processing should be designed correctly.

For admins managing this in production:

How do you correctly apply User Configuration settings only to specific servers?

Do you usually solve this with loopback Replace mode, Merge mode, item level targeting, security filtering, separate server OUs, or a mix of these?

For mapped drives, what is the best practice so the mapping is predictable and only appears on the intended servers?

I’m not looking for a quick workaround. I want to understand the correct production design pattern so I do not create a messy GPO environment where user settings follow people everywhere.

I’m trying to build something very simple inside Microsoft environment, but I feel like I’m missing the basics.

The idea is this. I want to be able to ask a question to an AI model and get answers based on our own data, not generic internet answers. In my case, the data is coming from Dynamics 365 in a test tenant, exported through Synapse Link.

Sounds simple, but once I started, I got stuck pretty quickly.

I don’t understand what the “correct” way of handling this data is. The data coming from Dataverse doesn’t look like something you can directly use for AI. So I assume it needs to be transformed, maybe indexed, maybe structured differently, but I’m not sure what is actually correct vs just random trial.

Also not sure if I’m even following the right approach. I tried using Azure Functions to process the data before using it, but that part is not working properly yet, and I’m not sure if this is even the right pattern or if I’m overcomplicating everything.

Main goal is simple.
When I ask something like “show me related cases” or “summarize this record”, the model should answer based only on that Dynamics data.

Right now I feel like the hardest part is not AI itself, but understanding how the data should be prepared and connected to the model.

I’m completely new in this area, so any suggestions, documentation, or real examples would be really helpful.

I’m trying to build something very simple inside Microsoft environment, but I feel like I’m missing the basics.

The idea is this. I want to be able to ask a question to an AI model and get answers based on our own data, not generic internet answers. In my case, the data is coming from Dynamics 365 in a test tenant, exported through Synapse Link.

Sounds simple, but once I started, I got stuck pretty quickly.

I don’t understand what the “correct” way of handling this data is. The data coming from Dataverse doesn’t look like something you can directly use for AI. So I assume it needs to be transformed, maybe indexed, maybe structured differently, but I’m not sure what is actually correct vs just random trial.

Also not sure if I’m even following the right approach. I tried using Azure Functions to process the data before using it, but that part is not working properly yet, and I’m not sure if this is even the right pattern or if I’m overcomplicating everything.

Main goal is simple.
When I ask something like “show me related cases” or “summarize this record”, the model should answer based only on that Dynamics data.

Right now I feel like the hardest part is not AI itself, but understanding how the data should be prepared and connected to the model.

I’m completely new in this area, so any suggestions, documentation, or real examples would be really helpful

I’m trying to build something very simple inside Microsoft environment, but I feel like I’m missing the basics.

The idea is this. I want to be able to ask a question to an AI model and get answers based on our own data, not generic internet answers. In my case, the data is coming from Dynamics 365 in a test tenant, exported through Synapse Link.

Sounds simple, but once I started, I got stuck pretty quickly.

I don’t understand what the “correct” way of handling this data is. The data coming from Dataverse doesn’t look like something you can directly use for AI. So I assume it needs to be transformed, maybe indexed, maybe structured differently, but I’m not sure what is actually correct vs just random trial.

Also not sure if I’m even following the right approach. I tried using Azure Functions to process the data before using it, but that part is not working properly yet, and I’m not sure if this is even the right pattern or if I’m overcomplicating everything.

Main goal is simple.
When I ask something like “show me related cases” or “summarize this record”, the model should answer based only on that Dynamics data.

Right now I feel like the hardest part is not AI itself, but understanding how the data should be prepared and connected to the model.

I’m completely new in this area, so any suggestions, documentation, or real examples would be really helpful.

i saw recently that end of 2025 we can use bitwarden as passkey manager using windows hello for business and it is only available in beta release. But the beta download link is not working and in windows advanced options there is not Bitwarden. Windows is up to date 11 and bitwarden app is latest but despite that i didn't figured out. So how did you configured in your environment and is there anyone can explain why is this happening? Already tried in 4 different pc.