New guidance for migrating Amazon RDS for MySQL to Azure Database for MySQL!

by Contributed | May 20, 2021 | Technology

This article is contributed. See the original author and article here.

While there are a variety of utilities for migrating Amazon RDS for MySQL to Azure Database for MySQL, one of the easiest and most convenient ways to accomplish this is by using the MySQL Workbench Migration Wizard. 

With the Migration Wizard, you can conveniently select which schemas and objects to migrate. In addition, you can view server logs to identify errors and bottlenecks in real time, edit and modify tables or database structures and objects during the migration process as necessary, and then resume migration without having to restart from scratch.

Note: You can also use the Migration Wizard to migrate other sources, such as Microsoft SQL Server, Oracle, PostgreSQL, MariaDB, etc., but those scenarios are outside the current scope.

After signing in to MySQL Workbench, the high-level process for this migration scenario is fairly straightforward:

1. Configure connection parameters for the source and database servers,


2. Select the schemas and objects to migrate. You can also edit the objects you want to migrate, as necessary.


3. Create the schema in the target database and run the MySQL script to create the database objects.


4. Transfer data from the source instance to the target environment.


5. Verify the consistency of the migrated schema and tables.

For detailed, step-by-step instructions covering this process, see the article Migrate Amazon RDS for MySQL to Azure Database for MySQL using MySQL Workbench.

If you have questions, please feel free to reach out to me or the Ask Azure DB for MySQL alias. Thank you!

Project Methane Leaks – Unit8 Climate | Climate Hackathon

by Contributed | May 20, 2021 | Technology

This article is contributed. See the original author and article here.

Team Unit8
Climate Hackathon, took place online 22-26 March 2021. The goal was to raise awareness about the Climate issues and at the same time create a platform for our developer audience to develop innovative solutions with our Azure Services.

What made this Hackathon unique, was the collaboration with non-profit and/or non-governmental organizations that have a key role in solving some of the climate challenges but might not have enough resources or technical competencies to do so on their own. These organizations provided real life challenges for the Hackathon participants to solve. The challenges were categorized into four tracks: carbon, ecosystem, waste, and water.

The outcome of the hackathon was 14 quality solutions and 3 winners:

• Methane Leaks – Unit8 Climate


• Purple Penguins


• Eruza – Waste Automation & Management System

We interviewed the team behind the winner of the Carbon track, Methane Leaks – Unit8 Climate to get to know them, their motives to join the hackathon, as well as their learnings during the hackathon and how they want to apply these learnings in their upcoming projects. 

This team worked on challenges provided by Ember & Subak and consisted of the following individuals:

• 
  
  Gael Grosch 
  
  


• 
  
  José Batalheiro 
  
  


• 
  
  Lucas Mendonça 
  
  


• 
  
  Yassir Benkhedda 
  
  


• 
  
  Michael Bílý 
  
  

The Methane Leaks – Unit8 Climate team worked on a solution to use AI to monitor methane leaks. The solution uses satellite data from Sentinel 5P and other sources to automatically detect new potential methane leaks by clustering abnormal emissions and linking them to the fossil infrastructure.

What compelled you to take part in Climate Hackathon? What did you hope to achieve by participating?  

Climate change is one of the key threats we face today. It is a really important topic for us at Unit8. Reducing our carbon footprint is an important topic. We also work with NGOs to tackle some of their problems through custom technological solutions we build for them.

Taking part in this Hackathon was a logical step for us. It particularly motivated us to explore new topics and see what other people are doing in the industry. In addition, it was a great opportunity to meet new people with similar interests.

We hoped our proposed solution would be useful for the people involved. Last year, we worked with WWF to apply machine learning techniques to wildfire prediction. We are convinced there are lots of promising areas where Data & AI can help us find new and better solutions.

How did this hackathon support your work to address climate change?

The hackathon helped us understand some of the current challenges faced by organizations and get a sense of the community helping the field progress. There really seems to be a lot of involvement, and that is great to see!

In addition, we could get a sense of the technological solutions needed and the impact they can have. That will help us in our current and future projects. We, at Unit8, are always working hand in hand with domain experts to go from an idea to a concrete and working solution in short timeframes. Seeing what we achieved within a week motivates us to keep going!

What new learnings and partnerships arose from your participation in this Hackathon?

We learned a lot from this hackathon!

We learned to use great tools to work with satellite imagery and, also, that it can be difficult working with geospatial data and handling the many data sources needed. We found it quite challenging to build advanced AI models on top of the satellite data because of the resolution of the data and the background noise that brought us to focus on a simpler solution that we could deliver. Of course, with more time we could have investigated more advanced techniques.

The other learning we had was the role of public data in the different projects. We live in an age where accessing large amounts of public data is easy, and it was fascinating to see the use cases people came up with around these data sources. Of course, there is still a fair amount of work that goes into processing the data and building a user interface that is useful for people, which confirms our belief in the impact we can have.

We also learned about some non-profits and sustainable initiatives at Microsoft that we did not know of. We hope to keep in touch with them and who knows, maybe work alongside them again in the future.

Project overview

How will you continue to use the learnings from the Climate Hackathon to further your organization’s important work?

The hackathon truly revealed the many applications of geo-satellite imagery. We were already working internally on a wildfire forecasting project using similar data but the many challenges relying on that data made us realize its potential. Working with that data is complicated for newcomers and we would like to think of a way to make it easier for us and others.

The learnings and connections will help us stay engaged with the community and NGOs and find new collaborations on projects fighting climate change!

Tips and tricks for managing Microsoft Endpoint Manager

by Contributed | May 20, 2021 | Technology

This article is contributed. See the original author and article here.

By Carolina de Sa Luz – Program Manager | Microsoft Endpoint Manager – Intune

Microsoft Endpoint Manager lets you manage a wide set of endpoint platforms by configuring and deploying policies and applications to users and devices from the cloud. This blog post describes best practices to enroll users, set up certificates, assign access and permissions, and multiple applications assignments.

We recommend enabling multi-factor authentication (MFA) for both users and administrators.

Note: Users require an E3 license for Microsoft Intune and administrator accounts require an Azure Active Directory premium license for MFA.

Common enrollment scenarios

Enrollment failures occur if there’s a misconfiguration during set up by the administrator or the end user didn’t follow the enrollment process correctly.

Here are four common messages that users might see when enrolling an iOS device:

Common error messages users might see when enrolling an iOS device

• Username not recognized – This message appears when the end user doesn’t have an Intune license assigned. Once you license the user, they should be able to enroll their device. Read about assigning licenses to users here.


• Couldn’t add your device – If you see this message during enrollment, it means that your administrator hasn’t yet configured Apple Push Notification Service (APNS). This is a key requirement to manage any Apple device. Once the certificate is set up, the user will be able to set up the device. Read about Apple MDM push certificates here.


• Profile Installation Failed – The user sees this message if the administrator has blocked personal device enrollment under device enrollment restrictions. Learn about setting enrollment restrictions here.


• Update your iOS device – Users see this message when an administrator configures an operating system (OS) version requirement under device enrollment restrictions. For example, if the administrator requires iOS version 14 and the device is using iOS version 13.x or below, users must upgrade their device to complete enrollment.

Android users encounter similar messages:

Common error messages users might see when enrolling an Android device

• Your company support needs to assign license for access – This means that the user doesn’t have an Intune license. They will be able to enroll their device after you license the user. Read this article to learn about options for enrolling Android devices in Intune.


• Check device settings – Users get this message if you haven’t configured Managed Google Play, which is required to manage Android Enterprise. Once you configure Managed Google Play, users will be able to enroll their Android Enterprise devices.


• Couldn’t add your device – This message refers to enrollment restrictions for Android Enterprise Work Profiles and Work Profile Personal. You might be aware that Google has officially deprecated Device Admin-based management. For that reason, we recommend blocking this mode under Devices > Enrollment restrictions and using Android Enterprise instead.

Intune reports

Microsoft Intune enables you to quickly generate and view a wide variety of reports to monitor configuration, compliance, enrollment, status updates and other information. We developed a new reporting section to make it easier to access these new types of reports, enhance the structure of existing reports, and improve functionality so you can better monitor the health of your devices and apps across the organization.

Check out this blog post to learn more about the reporting framework and read about the latest new reports here. You can get to these reports by navigating to the Microsoft Endpoint Manager admin center > Devices > Monitor and select the report you want to generate.

Enrollment failures

Enrollment failures can happen. The Enrollment failures report lets you monitor activity for all users or for a specific user. The report includes a graphical overview where you can see failed enrollments over time. It can also display alerts.

For example, in the report below, an end user has tried to enroll several iOS and Android devices. The report shows that the user failed to enroll their personal Android device and iOS device. This is likely due to an enrollment restriction.

Example enrollment errors for iOS and Android devices.

Troubleshooting enrollment failures

As an admin, consider which policies are in place that might be preventing the device from enrolling. In this example, the admin has configured a policy to block personal enrollment for Android Enterprise. Additionally, for iOS/iPadOS, the policy has been set with a minimum version requirement of iOS version 14. The iOS devices that failed do not meet this requirement because they are running version 13.7.

Example of a device restriction policy configured to block personal enrollment for Android Enterprise

If you’re seeing enrollment failures, check your device enrollment restrictions policy. It might be that a conditional access policy has been set up requiring devices to be enrolled in Intune and compliant.

The example also shows that devices can have a range of OS versions, especially iOS devices. For this scenario, the user needs to upgrade their device from version 13.7 to 14.0 to complete the enrollment.

Not all failures are due to policy configurations. An incomplete enrollment can occur for the following reasons:

• A user halts an action during an enrollment.


• They closed the Company Portal during an enrollment.


• They took longer than 30 minutes between each section of the enrollment process.

Example screenshot of the incomplete user enrollment report

You can learn more in this article about incomplete user enrollment.  We also recommend reading this article on troubleshooting device enrollment for additional help if you’re experiencing issues with device enrollment.

Working with connectors

Connectors are connections that you configure to external services such as Apple Volume Purchase Program (VPP) or certificates or credential required to connect to an external service like Google Play App Sync.

Intune works with companies such as Apple and Google, and you can check the status of third-party relationships in the Microsoft Endpoint Manager admin center. Go to Tenant administration, and then select Tenant Status > Connector status to view details, including license availability and use, communications, and connector status. This article provides more information about the Intune Tenant Status page. Find out about connectors for Intune here.

Example screenshot of Connector status details under the Tenant admin blade

Here are a few best practices for connectors:

Apple Push Notification service (APNs):

• You need to renew the APNs every 365 days with the same Apple ID you used to create the certificate.
  Important
  You need to renew, not replace, the APNs certificate. If you replace it, you will break every Apple enrollment you have in place.


• Renew the certificate with the Apple ID you used to initially create the certificate.


• Always use an administrative Apple ID. With a personal Apple ID, you run the risk of losing access to an account when someone leaves the organization. If you lose access to an account, we recommend that you reach out to Apple Support Services.

Managed Google Play:

• Use an administrative Gmail account to manage Android Enterprise devices. This account should only be used for this purpose.


• Never disconnect the connection you build with Google. If you do, you will break every enrollment that you have for Android Enterprise in your organization.

Delegating access

Delegating access is used extensively by organizations that operate across multiple geographies. They decentralize IT operations, giving local administrators permissions to manage and report their local devices. Intune gives you the ability to create role-based access control (RBAC) and scope tags to manage delegated access.  With RBAC, you’re setting the administrators’ permissions and the type of users they can work with. With Scope Tags you can mark the objects that the administrators can look at and work with. Read more about RBAC with Intune here.

Troubleshooting a delegated access scenario

When you’re working with scope tags, remember that the default scope tag is automatically added to all untagged objects that support scope tags. For example, say you created an OEMConfig policy. An OEMConfig policy allows administrators to configure unique settings specific to the OEM that developed that device. Find out more about OEMConfig policies and how they work with Intune here.

To configure this type of policy, first you need to add the OEM application. After that you’ll be able to create your policy by attaching the specific application to your policy. Each OEM has their own application. Samsung, for example, has a KSP application. Zebra devices have Zebra OEMConfig applications.

However, after you create the policy, you might get an unauthorized access message when you try to edit it:

Example screenshot on an unauthorized access message when an OEM Config policy automatically inherits the default scope tag

When you add the OEM Config application, the application will automatically inherit the default scope tag. The OEM Config policy automatically inherits administrator’s scope tag. This mismatch causes the unauthorized access screen message.

Resolution options: Your local administrator can reach out to central administration and ask them to attach the scope tag to your relevant application.

The second option is to get permission to read all the mobile applications that have been added to the environment.

To learn about scope tags for distributed IT with Intune, check out this article.

Deployment and Assignment

When you’re deciding whether to deploy to users or devices, the answer often depends on the circumstances. Understanding who needs the devices and what they will be used for will help you determine if you should deploy a policy or application to a user group or device group.

• Device groups are used for applying applications and policies to a set of devices, regardless of the user.


• User groups are set up with the end user in mind. The user might use multiple devices.

Here’s an example. A global company has a team of sellers that uses Microsoft Dynamics to sell to their customers and seal deals. The administrator must deploy the Dynamics application to the sellers. The best way to deploy the Dynamics application is to the user group to target a set of users rather than specific devices.

The company also has a team of field engineers who work in shifts and use shared ruggedized devices throughout the shifts. In this case, the administrator would use a device group to ensure that all these devices, regardless of who is using them, can receive the correct applications and policies.

Learn how to create groups for users and devices by reading this article and see how to assign user and device profiles for additional tips on deciding when to deploy to a user group vs device group.

Note
When working with assignment groups, it’s important to remember that you can’t add multiple application assignments to devices. However, you can assign users to multiple groups with different intents. If you deploy applications and policies to multiple user groups, take into consideration what will happen if the same user is in both groups:

• Required intent always wins the conflict.


• Available intent works alongside Required intent. As an example, Apple Volume Purchase Program (VPP) apps deployed as Required won’t show as Available in the Company Portal app. For this scenario, customers can deploy the app as Required to group A and as Available to Group B. Both groups have the same users. As a result, the application will be deployed as Required and still show as Available in the Company Portal app.


• Available with or without enrollment can be used when devices only have Intune app protection policies. Users can still see which applications have been recommended by their administrators if they assigned apps using this intent.


• Uninstall intent be used to remove specific applications from devices. This is often used by customers with Android devices, such as customers who wish to use Microsoft Edge instead of Chrome.

This table describes how conflicts are resolved.

Some additional items to keep in mind:

• For iOS, you cannot deploy applications as available to groups of devices. This type of assignment only supported for Android Enterprise fully managed and corporate-owned personally enabled (COPE). Find out more about COPE in this post.


• The app is only displayed as Available if the user logged into the Company Portal as the primary user who enrolled the device and if the app is applicable to the device.


• To configure what happens to managed apps when devices are no longer managed, you can select the intended setting under Uninstall on device removal.


• To configure whether a required iOS/iPadOS app is installed as a removable app by end users, you can select the setting under Install as removable.


• AppleID is required to deploy Apple Store Apps. AppleID is required to deploy user license VPP apps. AppleID is not required to deploy device license VPP apps.

Conclusion

There’s a lot to learn when starting out with Intune. We hope this article helps you succeed as you enroll devices and apply policies. Admins can take advantage of Intune to monitor, report, and troubleshoot their environments. Intune has extensive configuration settings and comprehensive security policies that can be applied on each platform to help you customize to meet your organization’s needs.

More info and feedback

For further resources on this subject, please see the links below.

Enroll iOS/iPadOS devices in Intune in Microsoft Intune  

Enroll Android Enterprise personally-owned work profile devices in Intune  

Microsoft Intune Tenant Status page

Device management capabilities in Microsoft Intune

Use role-based access control (RBAC) and scope tags for distributed IT in Intune

Let us know if you have any additional questions by replying to this post or reaching out to @IntuneSuppTeam on Twitter.

Introducing Dark Mode in Microsoft Office for Android

by Contributed | May 20, 2021 | Technology

This article is contributed. See the original author and article here.

You asked, we listened! Dark Mode is now rolling out in the Office app for Android phones. It’s been a highly requested feature by many of our customers, and we’re proud to begin releasing it today. Many people prefer using Dark Mode as they find it provides a more comfortable visual experience for reading and working on mobile devices.  

The Office app helps you get work done on a mobile device by combining Word, Excel, and PowerPoint into a single app and adding many rich capabilities for creating and working with PDFs, images, scanning, capturing notes, and much more. Now you can do all this using a theme of your choice — based on the time of day, your surroundings, or your device settings. Dark Mode ensures that you can adjust the Office app to low-light environments, while providing you with better viewing options and keeping battery consumption low.  

How to enable Dark Mode 

The newest version of the Office app for Android will automatically adjust to Dark Mode if your device is already set to that preference. You can also turn Dark Mode on or off by tapping your profile icon on the Home tab in the Office app, selecting Settings, and then selecting Light, Dark, or System Default from the Theme options.  

Download the Microsoft Office Mobile App today and always keep it up-to-date to ensure you have the latest features and improvements. The feature will be rolling out to users worldwide over the next few weeks, so if you do not see it in your app yet, you can expect to receive an update in the near future that will have it.  

Please share your feedback with us about Dark Mode right from the app by tapping your profile icon on the Home tab, and then select, “Send Feedback.” For more information about Dark Mode investments across Microsoft apps, check out this “Designing Dark Mode” article on Medium.  

Continue the conversation by joining us in the Microsoft 365 Tech Community! Whether you have product questions or just want to stay informed with the latest updates on new releases, tools, and blogs, Microsoft 365 Tech Community is your go-to resource to stay connected!