Wonderful lecture. Very user friendly explanations on all topics. It's a rare gem!

@AzureAcademy

5 жыл бұрын

Thanks for the feedback, please subscribe and share The Azure Academy with others to help us keep growing, and comment on what you want to see in our next video

thanks so much for the lament explanation in the beginning of how this even works.

@AzureAcademy

Жыл бұрын

Anytime!

Best instructor, best video, very well spoken, very well explained, a pleasure to watch, please carry on making more videos!

@AzureAcademy

3 жыл бұрын

Thanks Nelson! Let me know what other topics you are interested in and what you want me to make a video for next 😁

Very clear explanation.

@AzureAcademy

3 жыл бұрын

Thanks!

Best azure disk encryption video i have seen so far.. thank you well explained..

@AzureAcademy

3 жыл бұрын

Thanks!

A really informative video. A lot of training videos I've seen confirmed the default SSE and the fact you can encrypt disks, but never the reason why you need to if the disk is in that encrypted storage account. Thanks for joining the dots, these details make all the difference to my knowledge and practical application. Cheers!

@AzureAcademy

3 жыл бұрын

happy to help Richard! Let me know what other videos we can make for you.

My long search ends here. Thanks a lot for sharing information.

@AzureAcademy

4 жыл бұрын

Glad it was helpful! How will you use it? Windows, or Linux, OS only or OS and Data?

@Deekudla

4 жыл бұрын

​@@AzureAcademy I am using it on Windows OS and Data Disk. Let me explain the real-time scenario: We have a larger number of team members who create VMs without encryption and "Azure Security Center" warns us with a list of unencrypted VMs. So next step is to prepare a script which creates VMs' with default settings like encryption ON so that there won't be any unencrypted VMs running in our org. I have created a process where in our team will use this script to create a VM!

@AzureAcademy

4 жыл бұрын

+sounds good Deepak k

Your videos are so wonderful always... Just wanted to say I wait for your new feature videos that's more helpful then announcements.... Thanks for sharing

@AzureAcademy

4 жыл бұрын

Thanks for the feedback! We try to keep our videos focused on learning at every level of Azure. Stay Tuned for an upcoming video showing off a NEW way of doing Azure Disk Encryption too!

very precise and informative video.. Kudos to the instructor!!

@AzureAcademy

3 жыл бұрын

Thanks! 👍👍

wow all videos are great. i gotta go back and thumbs up and leave comments on each one. thank you!!!

@AzureAcademy

4 жыл бұрын

LOL...Thanks I appreciate it!

Really nice job!

@AzureAcademy

3 жыл бұрын

Thank you!

Dean u ROCK!!!

@AzureAcademy

4 жыл бұрын

Thanks...going to Ignite?

Just awesome

@AzureAcademy

5 жыл бұрын

Thanks! let us know what else you are interested in

Really fantastic videos mate. Great lecture. Only thing possibly that i would like to see is there is a demo via the portal along with the powershell/cli as shown here

@AzureAcademy

4 жыл бұрын

Thanks for the feedback Sam! There is a demo of it...there is a new way to do disk encryption that I will show soon...stay tuned

We have servers on ADE 2.0 due to which I was unable to apply ASR and after watching your video, I downgraded Disk to ADE 1.0 and now ASR is working. Thanks for that. I have been watching your other videos in ARM templates as if now. My Focus area is Automation and PaaS in Azure. So if you contribute more in Automation that will be great.

@AzureAcademy

5 жыл бұрын

Thanks for the feedback... I will be doing a video on Windows Virtual Desktop deployment through ARM Templates soon...besides that, is there something specific you are looking for in Automation?

do you recommend to use the same principal app for a.e. the encryption and the WVD Creation? In the keyvault, can those passwords be changed like each 6 months or so?

@AzureAcademy

4 жыл бұрын

generally service principals are single purpose so that they have the least privileges possible

any script to encrypt SSE with CMK for bulk Vm disks (needed for encrypting WVD host pools)

@AzureAcademy

3 жыл бұрын

All storage in Azure is encrypted at rest, the Azure disk encryption is a cloud managed bitlocker/dmcrypt OS level encryption...you can totally script it out to do it in bulk but I am not aware of code that is already written for this...

Now that my AVD is 100% in the cloud using Entra Id Authentication and NO AD DS of any kind, for Windows 11 (Enterprise Multi-Session + 365) I am ONLY using BitLocker (NO Azure Disk Encryption). There appears to be no way to import the key into Azure Vault. Do you know if that is on the Microsoft Road Map? Or maybe you know a workaround?

@AzureAcademy

5 ай бұрын

The Bitlocker keys can ONLY be stored in the Keyvault if you use The Azure Disk Encryption Service. If you want to store the keys in Entra ID with the device...that is completely different, which is drive encryption or Intune encryption which stores the keys in Entra

can i hide safely the F Drive? or would something happend?

@AzureAcademy

4 жыл бұрын

not that I know of...but you can use GPO so that people cannot write to the F:\

How can we restore data from Encrypted Disk?

@AzureAcademy

3 жыл бұрын

Same as you would do with a bit locker or DM Crypt encrypted disk anywhere...you need the decryption keys and in Azure those should be in the keyvault

@vaibhavawati1216

3 жыл бұрын

@@AzureAcademy Ok Noted .. Thanks for sharing such usefull and usecase base knowledge, glad that I am getting it free of cost

@AzureAcademy

3 жыл бұрын

@@vaibhavawati1216 👍👍