How to use the management certificate get cloud service information by DevOps pipeline

How to use the management certificate get cloud service information by DevOps pipeline

This article is contributed. See the original author and article here.

Background:


Azure DevOps provides developer services to support teams to plan work, collaborate on code development, and build and deploy applications. Developers can work in the cloud using Azure DevOps Services or on-premises using Azure DevOps Server. Azure DevOps Server was formerly named Visual Studio Team Foundation Server (TFS). Azure cloud services can be managed in Azure DevOps by using the PowerShell cmdlets that are available in the Azure PowerShell tools, so that you can perform all of your cloud service management tasks within the service. Management certificates allow you to authenticate with the classic deployment model. Many programs and tools (such as Visual Studio or the Azure SDK) use these certificates to automate configuration and deployment of various Azure services. 


 


Purpose:


This blog is to guide you to create a management certificate and use it to manage your Azure Classic resources such as Cloud Service in Azure DevOps.


 


Part 1. Create a management certificate by openssl. (Refer to the document https://docs.microsoft.com/en-us/azure/application-gateway/self-signed-certificates#create-a-root-ca-certificate)


 


1. Sign in to your computer where OpenSSL is installed and run the following command. This creates a password protected key.


 


openssl ecparam -out test.key -name prime256v1 -genkey

 


 


2. Use the following commands to generate the csr and the certificate.


 


openssl req -new -sha256 -key test.key -out test.csr

 


 


3. When prompted, type the password for the root key, and the organizational information for the custom CA such as Country/Region, State, Org, OU, and the fully qualified domain name (this is the domain of the issuer).


 


openssl x509 -req -sha256 -days 365 -in test.csr -signkey test.key -out test.crt

       


 


4. Generate the pfx certificate by the crt file which can be used in the Azure DevOps pipeline.


 


openssl pkcs12 -export -out frankmgmt.pfx -inkey test.key -in test.crt

       


 


5. Create a cer file by the pfx certificate which can be uploaded to the Azure Portal as management certificate.


        


openssl pkcs12 -in frankmgmt.pfx -out test.cer -nodes

 


 


Part 2. Upload the cer file to the management certificate of subscription.


 


1. Search the certificate in the Subscription.


2. Pick the Management certificates.


3. Upload the cer file to the management certificate.


4. You will find the management certificate in the Azure Portal.


 


11


 


 


Part 3. How to use the management certificate to verify the Azure Service Manager (ASM) resources in Azure DevOps pipeline.


 


1. In the Library, find the secure files and upload the pfx certificate as secure file.


2.jpg


 


 


2. Create Powershell script like below for test.


 

param ($input1)

Write-Host "Script test.ps1 ..."

$PSVersionTable

[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::Tls12;

$SigningCert = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2
$SigningCert.Import($input1, "<password>", [System.Security.Cryptography.X509Certificates.X509KeyStorageFlags]"DefaultKeySet")

Set-AzureSubscription -SubscriptionName "<subscription name>" -SubscriptionId "<subscription id>" -Certificate $SigningCert
Select-AzureSubscription -SubscriptionName "<subscription name>"

 


 


3. Create two events in the pipeline, Download Secure file and PowerShell Script.


 


3.jpg


 


 


4. Download secure file.


 


4.jpg


 


 


5. Set up the script path and arguments of Powershell Script.


 


5.jpg


 


6. We can successfully get the cloud service deployment information by Get-AzureDeployment command.


 


Here is an example we used to get the deployment details in the cloud service. https://docs.microsoft.com/en-us/powershell/module/servicemanagement/azure.service/get-azuredeployment?view=azuresmps-4.0.0


 


Get-AzureDeployment


 


6.jpg


 


 

Underpinnings of Bot analytics

Underpinnings of Bot analytics

This article is contributed. See the original author and article here.

Hello bot developers,


 


In our previous blogpost, we have seen the magic of Bot Telemetry Logger middleware, like what does it offer and how does it work in harmony with the Application Insights. Today, I will be talking about the Bot Analytics blade. 


 


If we compare these two telemetry; “Bot Telemetry Logger” reflects how Bot Service perceives traffic coming from and being sent to the Bot and “Bot Analytics” reflects the perspective of the bot itself. While they can be used in concert, they are different sets of data. 


 


Bot Analytics blade can be accessed through Azure Portal, if you put “analytics” at the end of your URL like “https://ms.portal.azure.com/…./botServices/[botname]/analytics” . It is a built-in extension powered by application Insights, and provides conversation-level reporting on user, message, and channel data.


 


I witness some number of customer complaints that, it may not show the expected data, when our customers perform some Power BI reporting. I.e. when you use Bot Telemetry logger, the number of Users is not the same as in the “Bot Analytics” reports. Well, it may be normal because of the fact that, they are making analytics from different perspectives. Let me take you deeper cause of this:


 


Built-in “Bot Analytics Blade” uses a different schema when compared to other SDK based telemetry  tools like “Bot Telemetry Logger”. It uses different queries, to report “User”/”Message”/”Channel Data” information. For example, it reaches out to user information from the “CustomEvents” table through  “customDimensions” field, where the custom event is named as “Activity”.  it is essentially using following query, for “User” reporting:


 


customEvents


| where name == ‘Activity’


| extend from = customDimensions[‘from’]


| extend from = tostring(iff(isnull(from), customDimensions[‘From ID’], from))


| extend channel = customDimensions[‘channel’]


| extend channel = tostring(iff(isnull(channel), customDimensions[‘Channel ID’], channel))


| extend activityType = customDimensions[‘Activity type’]


| where activityType != ‘{Microsoft.Bot.Schema.ActivityTypes.ConversationUpdate}’


| summarize event_count = dcount(from) by channel


| project customDimensions_channel = channel, event_count


 


If you run this query, on the “Application Insights Project” which you configured for bot analytics, you will see that the results are similar with the “Bot Analytics Blade”. See it below, when we run it on Application Insights, for last 24 hours:


 


mertozturk_0-1605024168393.png


 


And here is a screenshot from “Bot analytics blade” , which show the exact same information.


 


mertozturk_1-1605024168397.png


 


 


On the other hand, “Bot Telemetry logger” has a different schema for user reporting. You may remember from our previous blogpost that it use the actual “user_Id” field when logging to “customEvents” table. This field is left empty for the “Bot Analytics” logger.


 


See below query that in the first row, we see the “user_Id”s logged by “Bot Telemetry Logger”, and in the second row, we see the other “customEvents”, logged by “Azure bot analytics” which has null “user_Id” field:


 


mertozturk_2-1605024168395.png


 


These logging schemas do not overlap or mix-up, because bot telemetry logger does not log any customEvent with a name “Activity”:


 


mertozturk_3-1605024168396.png


 


See Bot Telemetry logger, name constants here.


 


There are no plans to unify the two telemetry schemas at this time. They were designed independently, so you need to know how they log, to understand what you should expect. By that way, you can generate meaningful PowerBI reports from your Application insights data.


 


Hope you like my blogpost,


Stay tuned for the next one,


Mert

SAP on Azure General Update – November 2020

SAP on Azure General Update – November 2020

This article is contributed. See the original author and article here.

1. Update to SAP on Azure Documentation


Several important updates to Azure documentation have been made recently.


Customers and Partners are recommended to regularly review the SAP on Azure documentation pages as new features and configurations are continuously improved.


The main SAP on Azure site https://azure.microsoft.com/en-us/solutions/sap/


SAP on Azure Resources https://azure.microsoft.com/en-us/solutions/sap/resources/


SAP on Azure Updates on the main Azure site https://azure.microsoft.com/en-us/updates/?query=sap


SAP on Azure Documentation “Getting Started”  https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/get-started


 


Important Update for Linux High Availability customers – set the Linux kernel parameter net.ipv4.tcp_keepalive_time=300.  It is recommended to set this parameter on DB, Application Servers and Central Services VMs. This now aligns with SAP Note: 1410736 – TCP/IP: setting keepalive interval


https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/high-availability-guide-suse


RHEL 8.1 is now supported on Azure VMs https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/high-availability-guide-rhel-pacemaker


 


The Microsoft documentation has been changed to recommend using the azure-lb resource agent. This is further explained in this SAP Note


2922194 – Linux Utility NetCat Running SUSE Pacemaker Stops Responding https://launchpad.support.sap.com/#/notes/0002922194


HA Scenarios are documented here https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/sap-high-availability-architecture-scenarios


 


Updates to Storage Configurations for Hana and AnyDB databases.  Note some updates to blocksizes, host cache settings and new UltraDisk configurations


Considerations for Azure Virtual Machines DBMS deployment for SAP workload – Azure Virtual Machines | Microsoft Docs  – https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/dbms_guide_general


 


SQL Server Azure Virtual Machines DBMS deployment for SAP workload – Azure Virtual Machines | Microsoft Docs https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/dbms_guide_sqlserver


Oracle Azure Virtual Machines DBMS deployment for SAP workload – Azure Virtual Machines | Microsoft Docs https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/dbms_guide_oracle


IBM Db2 Azure Virtual Machines DBMS deployment for SAP workload – Azure Virtual Machines | Microsoft Docs https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/dbms_guide_ibm


SAP HANA Azure virtual machine storage configurations https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/hana-vm-operations-storage


 


SAP documentation on storage configuration can be found here:


HANA – https://help.sap.com/viewer/2c1988d620e04368aa4103bf26f17727/2.0.05/en-US/4c24d332a37b4a3caad3e634f9900a45.html


SAP ASE (Section 3.7) – https://help.sap.com/doc/4f95c9e3741a1014955595407d8604de/CURRENT_VERSION/en-US/Inst_nw7x_unix_ase_abap.pdf


Oracle – https://help.sap.com/viewer/4b99f675d74f4990b75a8630869a0cd2/CURRENT_VERSION/en-US/9c578484622840bea589ff0eaf1ffa7a.html


DB2 – https://help.sap.com/viewer/4fbd902c7c76410bb82c6311dd4dc94b/CURRENT_VERSION/en-US/713eb64f45c6448c8dbe8a51b85680ee.html


 


2. Azure Linux OMS Agent Now Supports Python3


Older versions of the Azure Linux OMS Agent did not run or deploy after the Python release was updated to Python3 using the package python3-azure-mgmt-compute. 


This issue is now resolved and the Linux OMS Agent now supports modern Python releases on Suse 12.x and Redhat.


Customers who are running Suse 15.1 will still be unable to use the full functionality as the Dependency Agent is not released for Suse 15.1 or Oracle Linux.


https://docs.microsoft.com/en-us/azure/azure-monitor/platform/agents-overview#supported-operating-systems


The Dependency Agent will stay in “Transitioning” status and the only data populated into Log Analytics will the in the “Heartbeat” and “InsightsMetrics” tables.  Check this blog site regularly for updates on the Dependency Agent for Suse 15.1


Cameron_MSFT_SAP_PM_0-1605218259776.png


 


3. High LOGWRITE Waitstat on SQL Server TDE Databases Due to Certificate Revocation List Not Accessible    


The majority of customers running SAP on SQL Server on Azure are encrypting database using SQL Server TDE AES-256.  An important feature of the SQL TDE mechanism is the Certificate Revocation List https://docs.microsoft.com/en-us/sql/relational-databases/security/encryption/encryption-hierarchy?view=sql-server-ver15


 


Several support cases have been analyzed recently where Firewall policies have blocked access to network resources that are checked by the Certificate Revocation mechanism.


The problem manifests as intermittent slow LOGWRITE and on AlwaysOn systems a the command TM REQUEST may be waiting on HADR_SYNC_COMMIT.  The problem occurs on a regular periodic basis.  SQL Server will run very slowly for approximately 180 seconds and them return to normal


 


There are two solutions to this problem:



  1. Turn off Certification Revocation (not recommended)

  2. Ensure that the Firewall is configured to allow access to the addresses in the whitelist in this link


https://docs.microsoft.com/en-us/azure/app-service/environment/firewall-integration


4. Recommended Blogs for SAP on Azure Customers & Consultants  


Many new useful blogs have been created by Microsoft for SAP customers


SAP on Azure: Load Balancing Web Application Servers for SAP BOBI using Azure Application Gateway


https://blogs.sap.com/2020/09/17/sap-on-azure-load-balancing-web-application-servers-for-sap-bobi-using-azure-application-gateway/


SAP on Azure: Tomcat Clustering using Static Membership for SAP BusinessObjects BI Platform


https://blogs.sap.com/2020/09/04/sap-on-azure-tomcat-clustering-using-static-membership-for-sap-businessobjects-bi-platform/


Four Node AlwaysOn Cluster Across Azure Regions : https://blogs.sap.com/2020/10/20/sap-on-azure-sap-netweaver-7.5-on-ms-sql-server-2019-high-availability-and-disaster-recovery-with-4-nodes-alwayson-cluster/


SAP On Azure : HIGH AVAILIABILITY setup for SAP NETWEAVER with SAP ASE 16 DB on WINDOWS SERVER https://blogs.sap.com/2020/04/27/sap-on-azure-high-availiability-setup-for-sap-netweaver-with-sap-ase-16-db-on-windows-server/


SAP HANA HSR Multi-tier Longer Chains on Azure Geographic Clusters.  Tertiary solutions are explained by Apparao in this blog


https://www.linkedin.com/pulse/sap-hana-hsr-multi-tier-longer-chains-azure-geographic-apparao-sanam/


Oracle customers can use this new upcoming blog series to setup and configure Oracle Linux 8.2, Oracle DB 19.8 with ASM and Dataguard.


https://techcommunity.microsoft.com/t5/running-sap-applications-on-the/sap-on-oracle-setup-on-azure-part1/ba-p/1865024


End to End Monitoring on the internal Microsoft SAP system.  This includes the ability to read events such as ST22 shortdumps and correlate these events with infrastructure availability


https://www.microsoft.com/en-us/itshowcase/monitoring-sap-end-to-end-on-azure


5. Oracle Linux & PTP Timer – Especially for Oracle ASM Systems  


Oracle Linux customers may receive errors in Oracle error logs similar to the text below.  If this is seen it is recommended to edit the chrony.conf file and add the PTP timer


 


Warning: VKTM detected a forward time drift.


Time drifts can result in unexpected behavior such as time-outs.


Please see the VKTM trace file for more details


 


Check chrony configuration with the following command


chronyc sources -v


In chrony.conf, add line below,


refclock PHC /dev/ptp0 poll 3 dpoll -2 offset 0


 And restart the chronyd, systemctl restart chronyd.service


 [root@oracle77 ~]#  chronyc sources -v


210 Number of sources = 5


 


  .– Source mode  ‘^’ = server, ‘=’ = peer, ‘#’ = local clock.


/ .- Source state ‘*’ = current synced, ‘+’ = combined , ‘-‘ = not combined,


| /   ‘?’ = unreachable, ‘x’ = time may be in error, ‘~’ = time too variable.


||                                                 .- xxxx [ yyyy ] +/- zzzz


||      Reachability register (octal) -.           |  xxxx = adjusted offset,


||      Log2(Polling interval) –.      |          |  yyyy = measured offset,


||                                     |          |  zzzz = estimated error.


||                                 |    |          


MS Name/IP address         Stratum Poll Reach LastRx Last sample


===============================================================================


#* PHC0                          0   3   377    12  +5187ns[+8446ns] +/- 1124ns ßLocal PTP clock source is added


^- undefined.hostname.local>     2   6    77    57   -251us[ -236us] +/-   81ms


^- tick.hk.china.logiplex.n>     2   6    77    55   -884us[ -887us] +/-   63ms


^? stratum2-01.hkg01.public>     2   7     1    46   -822us[ -827us] +/-   54ms


^- time.cloudflare.com           3   6    77    55  -2205us[-2208us] +/-   43ms


***************************************************************************************


6. Azure CLI Commands After Python3 Update on Suse


After updating to the latest Python3 release Azure CLI may stop working.  The error message will be similar to “No module named azure.cli.__mail___; ‘azure.cli’ is a package and cannot be directly executed”


The message appears after updating to the latest Python/Python3 libraries and the package for the Azure SDK (python-azure-mgmt-compute on SLES12 ; python3-azure-mgmt-compute on SLES15)


 


Follow this procedure to resolve the problem on Suse 15.1:



  1. sudo zypper install –oldpackage azure-cli-2.0.45-4.22.noarch

  2. sudo zypper rm -y –clean-deps azure-cli

  3. Follow the standard installation procedure as detailed here https://docs.microsoft.com/en-us/cli/azure/install-azure-cli-zypper?view=azure-cli-latest


For more information review  https://github.com/Azure/azure-cli/issues/13209#issuecomment-652164784


 


On Suse 12.x the problem presents differently


# az login
Traceback (most recent call last):
File “/usr/lib64/python3.4/runpy.py”, line 170, in _run_module_as_main
“__main__”, mod_spec)
File “/usr/lib64/python3.4/runpy.py”, line 85, in _run_code
exec(code, run_globals)


 


Follow this procedure to resolve the problem on Suse 12.x:



  1. Run this command to check the Python3 path


which python3
/usr/local/bin/python3



  1. If the python3 path is /usr/local/bin/python3 then run this command


sudo ln -sf /usr/local/bin/python3 /usr/bin/python3



  1. Run az self-test  


7. SAP License Key May Become Invalid on Azure VMs


Some customers may notice that the SAP License Key on their systems may become invalid and SAP starts running on a temporary license key.  This issue is explained in these SAP Notes. 


https://launchpad.support.sap.com/#/notes/2937144 2937144 – Linux on Microsoft Azure: Upgrade to RHEL 8, SLES 12 SP5 or SLES 15 SP1 results in invalid SAP license


2975682 – Azure – SAP license invalid after reboot of VM due to changed hardware key with Linux guest OS https://launchpad.support.sap.com/#/notes/0002975682


https://launchpad.support.sap.com/#/notes/2243692    2243692 – Linux on Microsoft Azure (IaaS) VM: SAP license issues


8. SAP Note for Proximity Placement Groups      


A new SAP Note discusses how to reduce latency between Database and SAP Application servers.  Note 2931465 includes instructions on how to run /SSA/CAT.  This utility is the most reliable and best way to measure latency between the database and application server.  Ideally the result in the Acc DB and E. Acc DB columns should be below 100. 


Only the Database and Applications servers for a single SID should be in PPG.  The ASCS does not need to be in PPG.  PPG should be kept as small and compact as possible.  The communication between the SAP Application and the ASCS is not highly latency sensitive


2931465 – Reduce network latency (RTT) using Proximity placement groups on Microsoft Azure https://launchpad.support.sap.com/#/notes/2931465


https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/sap-proximity-placement-scenarios


9. Update on Support Matrix for SAP on Azure  


In recent months many new features have become available for SAP customers.  The list below is a very brief overview of recommended features and updated documentation



  1. RHEL 8.1 – is released and Generally Available for Azure  

  2. Suse 15.2 is now certified for Netweaver and Hana

  3. Recommended stack for Oracle Customers – Oracle Linux OL 8.2 + Oracle 19.8c + Grid + ASM.  ASM is highly recommended for all new Oracle systems.  Oracle 18 is not recommended and will be EOL soon

  4. Windows 2019 – fully supported for NetWeaver and most standalone SAP components.  Hyper-V support matrix can be found here

  5. Azure Backup for Hana now supports RHEL https://docs.microsoft.com/en-us/azure/backup/sap-hana-backup-support-matrix  

  6. Azure now supports shared disks https://docs.microsoft.com/en-us/azure/virtual-machines/disks-shared-enable?tabs=azure-cli

  7. A new page documents HA scenarios including using Azure Shared Disks https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/sap-high-availability-architecture-scenarios


10. Saptune Version 2 – Update to Saptune 2 Recommended


Suse has updated Saptune for both Suse 12.x and 15.x


Run the command rpm -qa | grep -i saptune to check the version of Saptune


The blog below explains how to update and migrate to Saptune 2.  Saptune 2 contains important updates to improve supportabilty and stability.


https://blogs.sap.com/2019/12/16/suse-lets-migrate-saptune-to-version-2/


https://blogs.sap.com/2019/05/03/a-new-saptune-is-knocking-on-your-door/


11. Azure Monitor for SAP


Azure Monitor for SAP is now in preview and supports VMs and HLI.  Hana and SQL Server Databases are supported currently.  Telemtry from Pacemaker Cluster is also collected and displayed.  Azure Monitor for SAP is a free of charge service


A very small collector VM is required.  Further documentation can be found here


https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/azure-monitor-overview


12. SAP on Azure – Customer Success Stories   


Cathay Pacific has recently completed moving their SAP S4HANA system to Azure M-series.  SAP application servers are running on E-series.  As part of the project S4HANA was upgraded to 1809.


 


Orica has completed their global S4HANA global transformation with more than 50 countries on a single instance


Azure Load Balancer – switch from Netcat to more reliable Socat was completed this in the Q1’20.


SAP HANA upgrade to SPS 5 in progress 


SuSE 12 Support Pack 5 upgrade in progress 


Gen2 VM Migration – S/4HANA Database migrated to Gen 2 VM [M208ms_v2 (208 vcpus, 5700 GiB memory)] for both nodes in Cluster and in DR VM [E32s_v4 (32 vcpus, 256 GiB memory)].


Azure Application Proxy is used for Fiori launchpad and 1,400+ applications deployed.   Azure Backup is used for SQL Server and HANA,  Azure Site Recovery for DR and Azure Monitor for SAP Solutions for Production systems


More information can be found here: https://customers.microsoft.com/en-us/story/orica-mining-oil-gas-azure


13. Troubleshooting Checklist for Hana Performance Issues     


Customers experiencing performance or reliability issues with SAP Hana installations are highly recommended to follow the troubleshooting process.  The list below is a basic checklist that should be followed before raising a support case to Microsoft and SAP:


 



  1. Check the VM type used and verify Hana Certification https://www.sap.com/dmc/exp/2014-09-02-hana-hardware/enEN/iaas.html#categories=Microsoft%20Azure

  2. Check the Storage Configuration Guide has been followed https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/hana-vm-operations-storage

  3. Ensure the root disk is large enough.  Very small root disks can cause performance problems

  4. Check Write Accelerator is enabled on Log Disks

  5. Check host cache settings is as per the Storage Configuration Guide

  6. Check Accelerated Networking enabled https://docs.microsoft.com/en-us/azure/virtual-network/create-vm-accelerated-networking-cli

  7. Check PPG is configured and run /SSA/CAT as per 2931465 – Reduce network latency (RTT) using Proximity placement groups on Microsoft Azure https://launchpad.support.sap.com/#/notes/2931465

  8. Install and run the latest Minicheck – check the “C” column.  Any “X” in the C column should be investigated.


1999993 – How-To: Interpreting SAP HANA Mini Check Results https://launchpad.support.sap.com/#/notes/1999993


2600030 – Parameter Recommendations in SAP HANA Environments https://launchpad.support.sap.com/#/notes/2600030


14. R3load Based Hana System Copy – Tables >2 Billion Rows


SAP do not generally recommend copying Hana based systems with R3load and there are multiple issues that can occur when performing Homogeneous or Heterogenous system copies using R3load.


One issue is how to handle tables with more than 2 Billion rows.  Hana supports 2 Billion rows per table partition. 


2369936 – Overview of system copy options for systems based on SAP HANA


2784715 – SWPM: Using R3load-based migration for SAP System on HANA when tables contain more than 2 billion rows


15. Very Large Busy Hana VMs Freeze Due to Memory Exhaustion


Very large busy Hana VMs may sometimes freeze due to Linux kernel memory exhaustion.


The procedure below should be reviewed and discussed with the Linux vendor and implemented if appropriate


 


Steps to implement solution:


Set these kernel parametners


vm.min_free_kbytes = 65536


vm.zone_reclaim_mode = 0


 


(a) Get the current value of parameter “vm.min_free_kbytes”


[ root ] # sysctl vm.min_free_kbytes


(b) Increase minimal free memory and monitor for next 5 working days.


[ root ] # sysctl -w vm.zone_reclaim_mode=1


# sysctl -w vm.min_free_kbytes=Y


Example : # sysctl -w vm.min_free_kbytes=98304


(c) monitor in next 5 working days to see if message “Error 11 Resource temporarily unavailable” and/or


“Freeing unused kernel memory” still being reported.


[ root ] # egrep -i “Error 11|Resource temporarily unavailable|Freeing unused kernel memory” /var/log/messages


(d) If messages “Error 11 Resource temporarily unavailable” and/or


“Freeing unused kernel memory” are still reported, continue to increase another 50% ( value Z )


the value vm.min_free_kbytes using command “sysctl -w vm.min_free_kbytes”


[ root ] # sysctl -w vm.min_free_kbytes = Z


(e) If message “Error 11 Resource temporarily unavailable” and/or


“Freeing unused kernel memory” are/is no longer reported, make the


change settings permanently, add an appropriate line to the /etc/sysctl.conf


Refer: https://www.cyberciti.biz/faq/howto-set-sysctl-variables/


 


Information for Redhat 8.1 can be found here https://www.redhat.com/cms/managed-files/Handout%20Performance%20Analysis%20and%20Tuning%20Red%20Hat%20Enterprise%20Linux%202019.pdf


An additional note that should be reviewed on large Hana systems is listed below


1980196 – Setting Linux Kernel Parameter /proc/sys/vm/max_map_count on SAP HANA Systems


https://launchpad.support.sap.com/#/notes/1980196


Additional Links & Notes


Azure Files NFS 4.1 is now in Preview https://azure.microsoft.com/en-us/updates/azure-files-support-for-nfs-v41-is-now-in-preview/   Azure Files NFS removes the need for a highly available NFS VM infrastructure


 


SAP on Azure Free Online Training Course.  Exam AZ-120: Planning and Administering Microsoft Azure for SAP Workloads


https://docs.microsoft.com/en-us/learn/certifications/exams/az-120


A free Certification Exam offer is here https://docs.microsoft.com/en-us/learn/certifications/microsoft-build-cloud-skills-challenge-2020-free-certification-exam-offer


 


Older JVM have been desupported and are not Customer Specific Maintenance only.   2981029 – Desupport of platform combinations for SAP JVM 5 and 6 https://launchpad.support.sap.com/#/notes/2981029


 


When testing Suse Pacemaker cluster the following procedure is useful


Simulating a Cluster Network Failure  https://www.suse.com/support/kb/doc/?id=000018699 


 


New Azure Hana Large Instances are available https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/hana-available-skus


S224OM [4 socket, 9TB (3TB DRAM + 6TB Optane)] – OLTP Scale Up


S896 [16 socket, 12TB] – OLTP with Scale Up and Scale Out


S672 [12 socket, 9TB] – OLTP with Scale Up and Scale Out


S448 [8 socket, 6TB] – OLTP with Scale Up and Scale Out


S672M [12 socket, 18TB] – OLTP Scale Up


S448M [8 socket, 12TB] – OLTP Scale Up


 


Important News About SAP Kernels can be found here


https://wiki.scn.sap.com/wiki/display/SI/SAP+Kernel%3A+Important+News


2880246 – SAP Kernel 722 EX2: General Information and Usage  https://launchpad.support.sap.com/#/notes/0002880246


 


Important or Interesting SAP Notes


2950585 – SAP ASCS/ERS fails in Windows Failover Cluster  https://launchpad.support.sap.com/#/notes/0002950585


2944287 – How to harden SAP systems regarding NTLM relay exploits? https://launchpad.support.sap.com/#/notes/0002944287


2931465 – Reduce network latency (RTT) using Proximity placement groups on Microsoft Azure https://launchpad.support.sap.com/#/notes/0002931465


2890138 – AL11 Alias Mapping for Windows File share on SAP running on Linux https://launchpad.support.sap.com/#/notes/0002890138


2887797 – Permissions problems to access SAPMNT share on Windows  https://launchpad.support.sap.com/#/notes/0002887797


2937583 – SAP NW JAVA is not coming up after disabling TLS 1.0 and enabling TLS 1.2


https://launchpad.support.sap.com/#/notes/0002937583


2922820 – DBSL Support for SQL Server 2019 https://launchpad.support.sap.com/#/notes/0002922820


2917949 – Apply JDBC driver 8.2 https://launchpad.support.sap.com/#/notes/0002917949


2906652 – Deliver Microsoft JDBC Driver 8.2 https://launchpad.support.sap.com/#/notes/0002906652


 


A good presentation on Suse deployment for SAP


https://www.suse.com/c/trust-suse-for-maximizing-sap-system-availability-part-1-of-2/


 


Thanks to Sarah Young for providing these links on Azure Security


Top 10 Best Practices for Azure Security (documentation) – https://aka.ms/azuresecuritytop10


Top 10 Best Practices for Azure Security (video) – https://youtu.be/g0hgtxBDZVE


Microsoft Cloud Adoption Framework for Azure – https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/?WT.mc_id=modinfra-9720-socuff


Microsoft Security Documentation site – https://docs.microsoft.com/en-us/security/


Microsoft Cybersecurity Reference Architecture (MCRA) Slides – http://aka.ms/mcra


Microsoft’s lead security architect’s useful documents list – https://aka.ms/markslist


Azure Security Podcast – https://aka.ms/azsecpod


Azure Security Community Webinars – https://aka.ms/SecurityWebinars


 

Experiencing Data Access Issue in Azure portal for Log Analytics – 11/13 – Resolved

This article is contributed. See the original author and article here.

Final Update: Friday, 13 November 2020 02:06 UTC

We’ve confirmed that all systems are back to normal with no customer impact as of 11/13, 01:20 UTC. Our logs show the incident started on 11/13, 00:25 UTC and that during the 55 minutes that it took to resolve the issue customers may have experienced with missed or delayed Log Search Alerts or experienced difficulties accessing data for resources hosted in West US2 and North Europe
  • Root Cause: The failure was due to one of our backend services
  • Incident Timeline: 55 minutes – 11/13, 00:25 UTC through 11/13, 01:20 UTC
We understand that customers rely on Azure Log Analytics as a critical service and apologize for any impact this incident caused.

-Eric Singleton

Service Fabric Community Q&A call 50

This article is contributed. See the original author and article here.





We will have our Service Fabric Community Q&A call for this month on Nov 19th 10am PST. 


 


Update: This will be our last community call for 2020 to accommodate for the upcoming holiday season. We encourage you tune in to last one for this year to learn about updates and ask questions. We will publish Holiday Schedule in a separate post.


 


Starting Aug 2020, we introduced a framework for our monthly community session. In addition to our normal Q&A in each community call we will focus on topics related to various components of the Service Fabric platform, provide updates to roadmap, upcoming releases, and showcase solutions developed by customers that benefit the community.


 


Agenda:



Join us to learn more on the above topics with cool demos on how to use them and ask us any questions related to Service Fabric, containers in Azure, etc. This month’s Q&A features one session on:



As usual, there is no need to RSVP – just navigate to the link to the call and you are in. 




[Guest Blog] Ability lies within your vulnerability

[Guest Blog] Ability lies within your vulnerability

This article is contributed. See the original author and article here.

David Brown, an Accessibility and Inclusion leader at Phoenix Software, a Microsoft Partner based in the UK, shares his personal journey with Dyslexia and how he leverages Microsoft 365 tools for accessibility.


 


By pushing the button and opening the door to issues like race, accessibility, sexuality and religion, we are given opportunities that we may never have been presented with. I don’t think I could have ever imagined that Microsoft would be asking me to write a blog.  


 


Picture of a disabled access door buttonPicture of a disabled access door button


 


As someone with dyslexia, I’m passionate about inclusion. I spent most of my childhood undiagnosed, struggling to read and write until the age of 14 when I finally started to get the support I needed. That, however, ended abruptly when I left education and started in the workplace. I’d often try to hide my dyslexia and, until just a few years ago, I’d ask my partner and friends to proofread my emails to avoid embarrassment and therefore hide my accessibility needs. 


 


Fast forward to today, I’m sitting on my sofa using Microsoft Dictate in Word Online, not even pausing to consider spelling and punctuation.  


 


Those diagnosed with dyslexia are often great thinkers, and weirdly, great communicators, but unfortunately in my case that went untapped until I found the tools that I needed to unlock my potential.  


 


Now, I’m not saying that I’ve ‘made it’, but the moment I stopped hiding my vulnerability and my disability, I found opportunities you wouldn’t believe. I now lead the Modern Workplace and Accessibility practice at Phoenix Software and every day I get the opportunity to help the UK Public Sector become more inclusive by utilizing these skills and Microsoft’s amazing accessibility features. I’m also the Director of Accessibility & Inclusion for York Pride, ensuring it becomes a more inclusive event for our community.


  


Inclusive and Accessible Design 


Push the disabled access door button…it opens wider than you could imagine! 


 


Have you ever walked into a hotel and pressed the disabled access door button either for your own need or simply as your huge suitcase won’t fit through the dreaded revolving door? You don’t need to have a physical disability to see how poorly designed revolving doors are – they’re inaccessible by design. 


 


The power of inclusive design is something we can all benefit from, whether it be a dropped curb, tactile paving, voice-activated technology, or clear and concise print design. 


 


Accessible tech excites me. Cortana, Microsoft 365’s (M365) learning tools, robotic synthetics dictation and live captioning (to name a few), but what really excites me is the impact that accessible design brings.


 


Coincidentally, Microsoft has just rolled out a fantastic new feature for its M365 productivity suite which helps streamline something I have always struggled with – transcribing.  


 


The feature, called Transcribe in Word, gives you the ability to open the Word app on your desktop, and in the near future on your smartphone, and begin transcribing anything being said by multiple people in the room with you or on Microsoft Teams. You can also quickly grab portions of a transcribed conversation and drag them into your document. 


 


To access this new feature, just click the Dictate button in the toolbar and select the Transcribe option. 


 


Delivering accessibility and inclusion to transform education and impact lives in the community


One of the best examples customer engagements I’ve had the privilege of supporting is City College Peterborough. The college prides itself on the important role it plays in the Peterborough community, where it works with organizations of all shapes and sizes, and people from all backgrounds, to achieve their goals.


 


Utilizing Microsoft Teams has meant that the College now has one platform upon which they’ve built their internal communication strategy. All staff have access and can use this to hold learner files, enabling them to do their job more efficiently and effectively. They are also able to better support their learners including those in need of additional support.  An example of one such student is Ziah.


 


Ziah’s journey started in the Schools for Independence Group and, following a Cerebral Palsy diagnosis, he needed a frame to walk as well as other aids. The college have seen him excel and noted great improvements year on year. Thanks to the support of the college and having the right tools such as the Surface Go and Microsoft Teams, Ziah is fully independent and ready to leave the college. He is currently on work placement, and the college knows that the use of Microsoft Teams and the Surface Go is the best thing to help him excel now and in the future.


 


Learn more and watch Ziah’s story in our City College Peterborough Case Study



So why am I writing this?


Well, I want to talk to you about the opportunities that accessibility can bring to you and your organization. 


 


For much of my life I’ve hidden my accessibility needs, certainly in the corporate world it has been deemed unprofessional to discuss things that don’t fit the norm. Working within the tech industry, certainly a few years ago, I was convinced, with justification, that my career progression would be limited. Thankfully things have changed, and although there is progress to be made, by questioning, listening and adapting we all have greater opportunities than ever before. 


 


Only recently have I been honest with my employer about my Dyslexia, and only after discovering the amazing tools available, built-in to the software I already used, have I gained opportunities I could never have imagined. I have been asked to speak at events like Microsoft Inspire, Future Decoded, GAAD and more. I’ve built a profitable practice for Phoenix delivering hundreds of Accessibility workshops to Public Sector Organizations and I’ve recently been appointed the Accessibility & Inclusion Director for York Pride. However, more importantly, I’ve helped thousands of individuals, like me, benefit from the capabilities of inclusive technologies. 


 


Organizations can benefit from the implementation of a diverse workforce and generate new revenue streams by engaging with more people. Take, for example, something as simple as Accessibility Checker in M365


 


checker.png 


 


Using this ensures that the content you create is accessible to everyone, and might mean you reach a customer/individual that you may otherwise have missed. 


 


Rather than an organization pushing out a blanket statement, organizations should be doing what  employees and customers want to see to back up statement. Do you provide training? Do you provide a platform for your staff to discuss and support these statements? Open discussion of these issues is in itself education. 


 


This approach has benefitted Phoenix and our customers via Microsoft Accessibility Fundamentals https://docs.microsoft.com/en-us/learn/paths/accessibility-fundamentals/ .


 


Hundreds of our staff and customers have completed this free online certification designed to educate organizations and individuals on the tools Microsoft offer to support with accessibility.


 


I talk about accessibility everyday due to my passions, but seeing a huge part of our business complete this accreditation without instruction has been inspiring. It’s led to employees being comfortable talking about their own hidden disabilities and encouraged everyone to think more inclusively. Hopefully you will too. 


 


Take care, be kind and thank you for taking the time to think about inclusion. 


 


Additional Resources





 

Secure your GitHub deployment using Microsoft Cloud App Security

Secure your GitHub deployment using Microsoft Cloud App Security

This article is contributed. See the original author and article here.

Welcome to newest post in our series on how to protect your API Connected Apps using Microsoft Cloud App Security (Microsoft CAS).


As our first App, we’ll discuss easy steps to protect and gain more visibility and control on GitHub. We’ll publish other Blogs on Salesforce, Box and AWS in the coming weeks. If there is an App you would like to be covered in future blogs, let us know in the comments.


 


Why connect GitHub?


Connecting GitHub to MCAS will get you the following benefits:


























Benefit



Description



Policy or template



Compromised account or insider threat



The built-in Threat Detection policies in Microsoft Cloud app Security will apply to GitHub as soon as you have connected it. No additional configuration is necessary: by simply connecting you will start seeing new alerts when applicable.


 



“OAuth app creation (GitHub)”



Data Leakage Protection



While the GitHub API connector does not allow content inspection, you can use MCAS to view and alert when a GitHub repository is shared, or when files are being downloaded at a high rate (mass download)


 



“Repository access level becomes public (GitHub)”


 



SaaS Security Posture Management (SSPM)



Some developers may not be network security experts and we often see risky settings in our customers’ GitHub environments, such as allowing repositories to be shared or changing admin permissions. MCAS can notify you if such action happens, empowering you to act fast, rather than react after a misconfiguration lead to data leakage.


 



“Enablement of private repository forking (GitHub)”


 



  


Connect GitHub to Microsoft Cloud App Security


To get these benefits you will need to connect Microsoft Cloud App Security to your enterprise GitHub instance.


We have already documented the steps to connect MCAS to GitHub in the step-by-step guide here.


Or if you prefer, check our video below.


 


Quick config – Quick Value!


To ease  your MCAS configuration protecting your GitHub environment, we have added a few built-in templates for Activity Policies, that will simplify your tasks.


These built-in templates are available out of the box, and they can be used to create policies after you have connected MCAS to GitHub.


You can see the use of these templates in action in our video:


 


We recommended that you enable all these templates in your environment (by default they have no impact on end-users at all). Once the policies are created, they can be adjusted and filtered if the alerts become too chatty or too quiet.


GitHub Template list:


Picture1.png


 






















Template



Description



Repository access level becomes public (GitHub)



This template will help generate an alert when a repository becomes accessible publicly. If the data in this repository is business critical, or represents corporate IP, it could be posing a high risk of data leakage.


 



Enablement of private repository forking (GitHub)



This policy template will trigger an alert when an admin changes a key security setting “Enablement of Repository Forking”. When repository forking is enabled, users accessing a repo could duplicate (“Fork”) it, making it potentially easier to exfiltrate. Note that this policy does not alert when a repository is forked, but rather when forking becomes allowed. Of course, if Repository Forking is something that your GitHub team needs to allow, do not enable this template.


 


 



OAuth app creation (GitHub)



Oauth apps can be a very easy way for attackers to take control of an app account without requiring a username and password.


As for many other apps, GitHub allows Oauth apps to connect to it and potentially access its data, download code, or change administrative configuration. For that a token must generated.


By creating a policy based on this template, you can be alerted when a new Oauth app token is created in your GitHub environment, letting you know ASAP when a potential risk is detected.


Note: in addition to detecting new OAuth tokens, it is also recommended to integrate GitHub with Conditional Access App Control and prevent downloads altogether from risky sessions. More info here



 


Below is an example of the configuration of one of our templates:


Picture2.png


 Of course, after creating a policy from one of these templates, you can edit them to add any additional filters to tailor them to your specific needs.


 


Create your own policy and use advanced configuration.


The templates we discussed here are all activity policies. They can allow you to quickly configure very common use cases.


However, for any advanced, or less common scenario, activity policies can be configured manually, using the Activity types presented by MCAS from the GitHub API (a real-life example is presented below).


 


Here are a few best practices when configuring these:



  • Single or repeated activity?

    • That would depend fully on your needs, but cases where several repositories are shared in a short period of time could be a good indicator of data loss.



  • Activity filters: filters are the most important part of the Activity policy as they allow to device what kind of event must be captured.

    •  App: always start with selecting the App you are creating the policy for (here, GitHub). This will limit the number of entries when trying to apply a filter on the Activity Type.

    • Activity Type: this is often the most important filter. The list of activities caught by MCAS for each app can be very broad. For GitHub, it can be a sharing activity, or adding users to a repository. Based on your needs, review them, and select the appropriate filter. When in doubt, a good way to validate the behavior of a specific activity is to use the Activity Log in MCAS and filter on the type of Activities being evaluated. Another, more advanced option to get a better grasp on each of the activity is to view the GitHub API reference.

    •  Other filters can bring additional value, whether it is for GitHub or other apps, and they should be reviewed as needed.




Now let’s review a more concrete example, with a real-life use case:


Allowing Deletion or Transfer of Repository was enabled. 


Following the same principle as some of the templates defined above, this policy will trigger when an admin changes the GitHub tenant’s setting allowing a repository to be deleted. This does not mean that the action has happened, but rather that it was allowed and there may have been a malicious or erroneous configuration. 


 


To configure that, apply the following filters in your Activity Policy:


Picture3.png


 


You can add additional filters, such as location, usernames, etc. to personalize the policy.


 


Real time control


The policies and controls we have discussed above are all relying on GitHub’s APIs to query activities and information about the current user context.  While this allows monitoring activities very specific to GitHub, it is an out of band connection (cloud to cloud, users are never aware of this connection) and as such, data is received by MCAS in Near Real Time.


 


For use-cases where real time controls are required, we can leverage another component of MCAS: Conditional Access App Control.


This feature allows MCAS to act as a reverse proxy in the cloud, and allows for a real time control of several activities, for GitHub or any other Cloud App:



  • Control file downloads

  • Control file Uploads (including malware detection)

  • Control or prevent Cut/Copy/Paste/Print


Some of the most common scenario used with Conditional access app Control with GitHub are:



  • Block download of code files to unmanaged devices

  • Prevent upload of code containing malware.

  • Prevent copying data from an unmanaged device.


More info on how to use Conditional Access App control is available here:



You can also learn about how to deploy Conditional Access App Control in the videos here:



 


Share your use case!


Now that you know all you need to get started with protecting GitHub using Microsoft Cloud App Security, please share with us your thoughts and your use cases. We would love to hear your feedback on our GitHub integration.


 


(By@Gershon Levitz, Idan Basre and @Yoann Mallet

Announcing a Free Curriculum: Web Development for Beginners

This article is contributed. See the original author and article here.

 


Everyone’s a beginner at some time in their career, whether it’s when you are in school, in a boot camp, a postdoctoral program, or as an experienced developer learning a new technology.


Learn with us!


Over the past summer, Azure Advocates and Project Managers have been hard at work creating lessons and tutorials for beginners around the world who want to become professional web developers. We launched several beginner video series, and now, in the same vein, we have created a curriculum that you can access completely free of charge to take your first steps with JavaScript, CSS, and HTML, the building blocks of the web.


Here on the Academic Team in Azure Advocacy, we have partnered with colleagues across our large department of educators, advocates, managers and content creators to create for you 24 lessons spanning 12 weeks that you can take either in full or in part, at your leisure from the safety of your own home. They are freely open to be used as you like, via GitHub. Teachers, you can use this content within GitHub Classroom!


Meet the team!


 






 


Pedagogy



What’s pedagogy? It’s the way you teach, what underlying values inform your teaching style and choices.



We have chosen two pedagogical tenets while building this curriculum: ensuring that it is project-based and that it includes frequent quizzes. By the end of this series, students will have built a typing game, a virtual terrarium, a ‘green’ browser extension, a ‘space invaders’ type game, and a business-type banking app, and will have learned the basics of JavaScript, HTML, and CSS along with the modern toolchain of today’s web developer.


 



What about non-English speaking learners? We are working to translate this curriculum to several languages, so please stay tuned!



Curriculum Structure


Each of the 24 lessons includes:


 



  • optional sketchnote

  • optional supplemental video

  • pre-lesson warmup quiz

  • written lesson

  • for project-based lessons, step-by-step guides on how to build the project

  • knowledge checks

  • a challenge

  • supplemental reading

  • assignment

  • post-lesson quiz


By ensuring that the content aligns with projects, the process is made more engaging for students and retention of concepts will be augmented. We also wrote several starter lessons in JavaScript basics to introduce concepts, paired with video from the “Beginners Series to: JavaScript” collection of video tutorials, some of whose authors contributed to this curriculum.


 


In addition, a low-stakes quiz before a class sets the intention of the student towards learning a topic, while a second quiz after class ensures further retention. This curriculum was designed to be flexible and fun and can be taken in whole or in part. The projects start small and become increasingly complex by the end of the 12 week cycle.


 


While we have purposefully avoided introducing JavaScript frameworks so as to focus on the basic skills needed as a web developer before adopting a framework, a good next step to completing this curriculum would be learning about Node.js via another collection of videos: “Beginner Series to: Node.js“.


 



Whether you’re a student or a teacher, we welcome your feedback! The issues are open on the repos for you!



Special thanks to Floor Drees, Christopher Harrison, Chris Noring, Yohan Lasorsa, Jasmine Greenaway, and Tomomi Imura for their work on this curriculum!


Without further ado, please meet Web Development For Beginners: A Curriculum!

Organize School and Class Information with Microsoft Lists

Organize School and Class Information with Microsoft Lists

This article is contributed. See the original author and article here.

We know the world of education is becoming increasingly more complex. With hybrid and remote learning, there is more information to track than ever. Fortunately, new technology can help teachers, students, and administrators get organized. Gone are the days of juggling information between paper planners, computer files, and group chats – Microsoft 365 has you covered.


1.jpg


 


Introducing Microsoft Lists
Microsoft Lists helps you optimize your productivity and save time by managing your information closely, critical for modernizing your classroom. Lists provide a simple, smart, and flexible way to organize information, and is included in your Microsoft 365 subscription. Use Lists as a standalone Microsoft 365 application or add Lists to your Microsoft Teams channel to collaborate with full functionality (Microsoft Lists is now a default option within Microsoft Teams for Education). For teachers, students, and administrators alike, lets walk through some key Lists features and use cases.


2.jpg


 


Organize and track information in one central hub
Lists provides an easy to use interface to manage a variety of information. There are numerous ready-made templates available in the app that give a starting point for your list creation. Teachers can use the Work item tracker template to track lesson plans, which comes with columns to note progress, priority, and due dates. Students can use the template to create a study plan or project outline. Other templates like Asset manager, Event itinerary, or Recruitment tracker can be helpful for administrators from a school planning perspective. Asides from creating a list from one of the templates, you can create a list from scratch or import data from Excel into a new list. Choose to start one right from the Lists app, Microsoft Teams, or your SharePoint site.


CreateAList.png


 


Each item in your list can be as complex or as simple as you make it. Attach files and due dates to list items so everyone is on track and can access everything in one place. Lists are also customizable, with built-in settings to edit layouts – no coding required. Filters, views, and color formatting make it easy to add personal flair to your or your classroom’s lists.


lists.png


 


Plus, access and edit your lists on the go with the Lists mobile app, now in preview for iOS. Fill out this form to get early access to the Lists Mobile App (iOS).


 


Foster classroom collaboration and sharing
If you’re using Lists with your classroom, it’s a great way to encourage students and teachers to work together. Share a list from a SharePoint site or class Teams channel to give everyone live access to view and edit. Anyone can leave comments on list items, @mention others to draw attention, and open a chat window alongside your list. Students can work remotely on a shared list with their group and keep track of project responsibilities among members. Teachers can create a list in their class Teams channel to organize classroom resources and assignments, providing instant access to students and filterable views so they can find exactly what they are looking for.


lists2.png


 


Lists also lets you add rules and notifications to items, triggering reminders to specified class members with upcoming due dates. For example, students working on a group project can set up email notifications to each assigned member when an item deadline is coming up.


CreateARule.png


 


Unlock your school or classroom’s full potential
Microsoft Lists handles project management and organization so you and your students can focus on what’s really important: growth and learning. Lists offers endless flexibility to create a solution for your needs.



Lists integrates with Microsoft’s Power Platform, allowing you to easily customize a list form. Change the size, orientation, or display of a list, and save your new form for others to use. Teacher evaluations coming up? Administrators can create an evaluation questionnaire with Microsoft Forms and use Power Automate to automatically send details to a list. Similarly, add automation to an incident list to track details from classroom incident report forms, creating an easy way to keep records and analyze trends.


lists3.png


 


Get Started with Lists
You can read about more education-specific use cases in this informational flyer, or watch a quick Lists for education tutorial. Ready to equip your school or classroom with Lists? Launch the Lists app from the app launcher of your organization’s Microsoft 365 homepage or add a Lists tab to your Microsoft Teams channel to get started. You can find best practices, guides, and resources on creating a Lists adoption plan for your organization on the Lists Adoption site.



For additional Lists resources, head over to the Lists Resource Page.

FTC warns companies to stop peddling fake COVID treatments and cures

This article was originally posted by the FTC. See the original article here.

Here at the FTC, we’ve seen people pitching COVID treatments like gemstone bead bracelets, water filtration systems, indoor tanning with red light UV therapy, copper water bottles, high dose vitamin C IV drips, juices and supplements, stem cell treatments, ozone therapy, laser light treatments, and more. All of these products and treatments have one thing in common: there is no evidence — as required by law — that they work against the Coronavirus.

Brought to you by Dr. Ware, Microsoft Office 365 Silver Partner, Charleston SC.