"All that said, today we still see many customers onboard machines to
Azure Arc for the sole purpose of monitoring (the Azure Monitor Agent
for on-premises machines requires that these are Azure Arc-enabled). In
that case, the more secure option is to change the mode to monitor only:
The command abo...
@killercloud I've tried this in ARM64 - it works w/o issues. Did a
download of the tool, executed in a CMD with Admin-Rights
DisplayDlpPolicy -status. Just one more thought- Could it be that the
command is executed in a test tenant without an "active" policy?
@Quaywe : Hi, thank you. That is a good point! What I did in the past
when implementing this for Privileged Access Workstations was to use an
Azure Virtual Network Gateway of type VPN using OpenVPN as the tunnel
type and Entra ID (former Azure Active Directory) as authentication
type. Then you would...
@jt-solver : Thanks for your feedback. Indeed purely tagging a device is
just a part of the whole solution. It is a means to leverage device
filters in Conditional Access. And that's it. But there is of course
more to this. It is multi layered. It always comes back to a subject
having control over a...
Latest Comments