RunAs Radio

Windows can protect itself from exploits – but you need to turn it on! Richard talks to Chris Jackson about his recently published document about exploit protection. Chris talks about the long list of mitigation strategies that exist inside of Windows to stop arbitrary code (read: malware) from executing. Each strategy comes with the risk of breaking your application. You need to apply the mitigat...

Enterprise Mobility is no longer optional! Richard talks to Richard Hicks about his work during the pandemic around remote connectivity. The early days of the pandemic were a scramble to get folks working from home, often needing to scale up VPN services. Now that a few months have gone by, other problems have appeared: Are the remote workstations getting patched? How do you know? What about self-...

Can you go serverless with databases? Monica Rathbun says yes! Richard chats with Monica about Microsoft's serverless mode for SQL Azure. Same SQL database, but now it is billed by the second and will automatically suspend itself after a set amount of time - incurring no costs to you while suspended! It doesn't work for every database scenario, but Monica talks through some options that have great...

How can Windows Virtual Desktop improve productivity? Richard chats with Jen Sheerin about the kinds of applications better served by virtualization. Jen talks about her work with Citrix XenDesktop and Windows Virtual Desktop, and how the pandemic has accelerated adoption. The challenge is especially acute for thick client applications - you can deploy them to a home machine, but that is a securit...

Perimeter security is one thing - what about beyond the edge? Richard chats with Ned Pyle about a series of blog posts (links in the show notes) to help you harden security on every machine in your network. Ned talks about various settings available on Windows clients and servers that can help protect your systems from bad actors - and there's nothing to install, just adjusting policy and settings...

How can compassion help during the pandemic? Richard talks to April Wensel about the importance of compassion at this difficult time. April talks about how compassion has always been important and powerful for work and the rest of life, but today it's essential. Everyone has been affected by the pandemic to some degree, and everyone is grieving, whether they know or not. We all need more compassio...

SCCM or Intune? Do you need to choose? Should you choose? Richard chats with Greg Shields about device management using SCCM and/or Intune. Greg admits that it is his own journey coming from SCCM but developing an Intune class that led him to admire what Intune is good at. The two products definitely overlap, and understand each other - you can run both very successfully. It comes down to your org...

What does incident response look like during the pandemic? Richard talks to Julie Gunderson of PagerDuty about what it takes to respond to an incident effectively when you can't necessarily be in the same room together. The conversation starts out with the fundamentals of incident response - how to report an incident, how an incident unfolds, what it looks like to resolve an incident and then, mos...

What is your preferred SQL Server tool? Richard chats with Vicky Harp, who oversees the development of many of the tools you count on to manage all sorts of databases in the Microsoft world. From SSMS to Azure Data Studio to SQL CLI - there's a lot of ways to manage and maintain databases on-premises and in-the-cloud. What tool is right for you? Don't worry, you can use more than one! Links: SQL S...

Ready for some cloud snark? Richard chats with Corey Quinn, the cloud economist and snarky commenter on all things cloud. The conversation digs into how the use of the cloud has evolved rapidly during the pandemic, and the reality that people may want to spend less on the cloud, but more importantly, they want consistency in their spend. Getting off virtual machines and into "real" cloud...

Are you ready to become Ansible? Richard chats with Josh Duffney about his book on Ansible - using a play on the term "become," which is the privilege elevation command in Ansible. The conversation turns to how you evolve as an infrastructure-as-code person, doing basic automation tasks first, but ultimately turning into a source-code-controlled library-building-team that makes deploymen...

The pandemic has sent everyone home to work - how do you support them? Richard chats with Jessica Deen about her work doing remote support both before and now during the COVID-19 pandemic. Jessica starts out talking more philosophically about support work in this challenging time, with lots of patience and empathy. But that also takes effective remote communication - being able to see the person y...

With folks working remotely more than ever, how do you keep your team together? Richard chats with Tracy van der Schyff about her work building tools in organizations that become the focal point of work. Whether with SharePoint in the old days, or Teams today, you can make a place that is great for work and connecting the team - and the power of transparency!

The Hybrid Workforce is here to stay - how do you update Windows? Richard chats with Dave Backman about what it means to manage a hybrid workforce, where most of your staff work both from home, and occasionally in the office. The pandemic made this happen, and it's likely to continue indefinitely. So how do you keep Windows up-to-date? Dave talks about the modern update strategies beyond Windows U...

How do criminal hackers make money hacking? Richard chats with Paula Januszkiewicz about the methods used by criminals to steal money through various exploits. Whether its ransomware or taking control of your Facebook account long enough to ask for money in your name, there are a lot of possibilities. As long as there is money to be made, the hacks will continue. Increasing your security doesn't m...

You sent machines home during the pandemic - are the drives encrypted? Richard talks to Microsoft Premier Field Engineer Julie Andreacola about BitLocker and the various management tools needed to make BitLocker work for you and your organization. Julie talks about the need for PCs that have modern TPM chips - BitLocker will work without them, but life is much better with, especially in recovery....

ARM Templates are awesome - but what happens when they get big? Richard chats with Pierre Roman on the Cloud Advocates team at Microsoft about how ARM Templates are evolving to help you manage them when they get more sophisticated. Pierre talks about all the challenging bits of scaling ARM Templates, including modularizing, testing, and using source control. Your infrastructure-as-code is code, an...

How is your productivity during the pandemic? And the folks you work with? Richard talks to Douglas Squirrel and Jeffrey Fredrick, authors of Agile Conversations, about how to improve productivity during the pandemic. The conversation turns to how we measure productivity in the first place, and why we were happy with our productivity before the pandemic. Squirrel and Jeffrey talk about being comfo...

How secure is your office Wi-Fi? Richard chats with Dr. Avril Salter about using enterprise security features in Wi-Fi. The conversation starts out focused on WPA2-Enterprise, using RADIUS servers and protocols like CHAP and PEAP. It may be more complicated to set up, but once running, you have far more control over who can be on your Wi-Fi. Avril talks about creating separate SSIDs for secure cor...

There is big data, and then there is genomic-scale. Richard talks to Lynn Langit about her work in large scale data analytics around the pandemic. Lynn talks about the terabytes of data involved in doing genetic analysis and the pipeline needed to move and organize that data. It takes a cloud - you need a huge amount of compute in relatively small bursts, as well as massive amounts of storage. And...

There are performance issues in the cloud? Lori Mac Vittie says yes! Richard chats with Lori about how just buying more cloud might increase capacity - but not performance. This leads to a conversation about performance even is - and what it means to the users of your apps. Ultimately, the same diagnostic challenges we had before the cloud come into play - bottlenecks exist within software and nee...

You've moved to the cloud - you're secure, right? Richard chats with Dana Epp about what you should be doing to secure your cloud services in Azure. Dana talks about how the default settings for Azure services tend toward making them easy to use and inexpensive. But it also leaves you potentially vulnerable - logging is turned off, for example. The conversation turns to tools like Azure Advisor he...

Ready to automate? Richard chats with Sandy Ussia about Power Automate, formerly known as Flow (although the term flow is never far away). But Power Automate is exactly what you think it is - a no-code/low-code solution to providing automation in Azure between Office 365 and a whole host of other platforms including Google, Salesforce, and so on. Sandy talks about the array of templates that alrea...

The Black Hats are targeting your users' fears - are you prepared? Richard talks with Susan Bradley about the focus of attackers on COVID-19 topics. Susan talks about how many security exploits depend on convincing users to click on something they shouldn't. You can train to resist those clicks, but nothing is ever perfect. The question is, what happens next? The conversation digs into multifactor...

We all have a hybrid cloud solution - how do you manage it? Richard chats with Thomas Maurer about Azure Arc, a tool in the Azure suite for managing virtual machines, Kubernetes clusters, and data services in Azure, your on-premises servers, even other cloud providers! Thomas talks about how IT folks end up with an array of tools for managing servers depending on the location and how Azure Arc end...