Optimize Windows PC protection and performance with intelligent insights

This article is contributed. See the original author and article here.

Today there are more than 1.3 billion active monthly devices on Windows 10. To keep these devices updated with feature and quality updates at such scale, we apply machine learning using diagnostic data to generate insights into how an update deployment is going. These insights help us better understand the dependencies between different components in the diverse ecosystem of Windows devices and applications, and help us maintain our focus on compatibility, one of our top priorities for updating Windows devices.


Our goal is to keep all Windows devices running smoothly and without interruption. To support you as you configure and manage updates across your organization, we provide several services that bring our machine learning insights to you. Using these insights, Desktop Analytics, Update Compliance, Microsoft Managed Desktop, and the Windows Update for Business deployment service can help you better plan, prepare, and deploy updates across your organization. By knowing which devices to update first and having access to details on why some devices may or should get updates later, these services can help you efficiently keep devices up to date across your PC estate. They can also help ensure that your end users stay performant and protected.


We recognize many organizations have more complex needs and regulatory requirements when it comes to making sure that Windows devices are kept secure and reliable with the latest updates. The services listed above are now powered by Windows diagnostic data collected from devices using the Windows diagnostic data processor configuration. Now generally available, the Windows diagnostic data processor configuration further empowers you to manage your organization’s diagnostic data. It provides you familiar tools to support data subject rights, including managing, exporting, or deleting data stored securely in your Azure tenant. It also lets you benefit from our technology without compromise. To learn more, please see our guide for IT and privacy professionals and get started with configuring Windows diagnostic data in your organization.

Azure Percept Audio – Custom Keywords and Commands

Azure Percept Audio – Custom Keywords and Commands

This article is contributed. See the original author and article here.

In the latest in my series of blog posts on the Azure Percept Developer Kit and specifically around the Audio System on a Module  (SoM), we look at how we can create and use Custom Keywords and Commands with the Audio SoM.


 


Previously


 


In the previous post – Azure Percept Audio – First Steps We got started with the Azure Percept Audio System on a Module (SoM).


 


We deployed a sample Hospitality application and saw how we could issue commands to the Percept DK, how it would respond, and how the Sample Application would simulate the effects of the commands on screen.


 


Azure-Percept-Screen-Time-0_17_5329-Large-1


 


In this post we’ll take the sample further by training our own Custom keyword and creating a Custom Command.


 


Custom Keywords


 


For the Azure Percept Audio, a Keyword is the word that the Percept DK“listens” for in order to begin listening for commands. Sometimes referred to as a “Wake-Word”, this word defaults to “Computer” in the Hospitality Sample.


 


We have access to some pre-trained keywords deployed along with the sample, allowing us to choose from;


 



  • Assistant

  • Abigail

  • Computer

  • Jayden


Which we can set by pressing the “change” link next to the “Custom Keyword” item below the toolbar area;


 


PerceptImages-CustomKeyword-Cropped


 


Hitting the Custom Keyword Change Link shows us the “Change custom keyword” flyout with the various options available to choose from.


 


image-25


 


Selecting another custom keyword and pressing the “Save” button at the bottom of the dialog will update the Percept DK, and we can then wake the device with the new Keyword.


 


Interestingly, I found that using the alternative keywords of Assistant and Abigail, allowed the Percept DK to wake faster than with the default of “Computer”, I’m not sure why this is to be fair, but it’s possibly due to the number of syllables in the word maybe?


 


Training our own Custom Keywords


 


In case none of the built in Wake Words are suitable, we can also train our own custom keywords to wake the device. We can do this directly from the Sample Application, allowing us to use a word of our own choosing;


 


PerceptImages-CreateCustomKeyword-Cropped


 


Pressing the “Create Custom Keyword” button in the toolbar at the top of the page allows us to configure and train our own custom keyword;


 


image-26


Here we can enter the keyword of our choosing, select an Azure Speech Resource and a Language, and pressing save will begin the training process.


 


image-29


 


Bear in mind however, that the keyword must have between 2 and 40 syllables to be accepted;









Microsoft 365 Certification is here to ease your concerns about data security while using 3P Apps

Microsoft 365 Certification is here to ease your concerns about data security while using 3P Apps

This article is contributed. See the original author and article here.

Picture2.png


 


Microsoft 365 App Compliance Program is designed to provide assurance to organizations and enterprise IT admins like you, that when your data interacts with a certified application, that application has undergone a security and privacy review. Microsoft 365 Certification requires a thorough assessment of an app and its underlying infrastructure against a series of security controls under these security domains:  



  • Application Security  

  • Operational Security 

  • Data Handling Security and Privacy  

  • Optional External Compliance Frameworks Review 


 


When an app undergoes Microsoft 365 Certification, a third-party assessor validates and assesses the app and its supporting infrastructure. An ISV must pass the controls in each of the following security domains to be awarded a certification: 


 


1. Application Security:
The application security domain focuses upon the following three areas:



  • GraphAPI Permission Validation – GraphAPI permission validation is carried out to validate that the app/add-in does not request overly ensures that the permissions requested are required for the functionality of the app.

  • External Connectivity Checks – Analyst will perform a walkthrough of the applications functionality to identify connections outside of Microsoft 365. Any connections which are not identified as being Microsoft or any direct connections to a service will be flagged and discussed during the assessment.

  • Application Security Testing – Application security testing in the form of penetration testing MUST be carried out if the application has any connectivity to any service not published by Microsoft. If the app operates standalone without connectivity to any non-Microsoft service or backend, then penetration testing is not required. 
    Learn More!


2. Operations Security:
This domain measures the alignment of an app’s supporting infrastructure and deployment processes with security best practices. There are various controls assessed in this layer like malware protection, patch management, vulnerability scanning and firewalls, account management and incident management, and change control to name a few.
Learn More!



3. Data Handling and Privacy:
Data in transit between the application user, intermediary services, and ISV’s systems will be required to be protected by encryption through a TLS connection. If an application retrieves and stores customer data, you will be required to implement a data storage encryption scheme that follows the specification as defined Here. This domain also tests controls like data at rest, data retention and disposal, data access management and GDPR.
Learn More!


 


4. Optional External Compliance Review
If external security frameworks have been included within the Publisher Attestation, certification analysts will need to check the validity of those compliance audit reports as part of the Microsoft 365 Certification assessment. These external frameworks can be leveraged in your certification assessment to expedite the process. Evidence for the following supported external compliance audits include:



If you have questions, please reach out to appcert@microsoft.com.


 


See the following resources to learn more about the Microsoft 365 App Compliance Program:


Zero Trust for Network & Infrastructure – Essentials Series – Episode 4

Zero Trust for Network & Infrastructure – Essentials Series – Episode 4

This article is contributed. See the original author and article here.

Apply Zero Trust principles and policies to your network and infrastructure with this essentials episode. It’s a high-level overview of the principles of the Zero Trust security model, spanning identity, endpoints, applications, networks, infrastructure, and data.


 


Screen Shot 2021-07-07 at 12.14.09 PM.png


 


Your network and its underlying configuration provides secure access to your resources. Infrastructure, whether on premises servers, local or cloud hosted VMs, containers, storage, or PaaS databases, all represent a critical threat vector. Jeremy Chapman, Director of Microsoft 365, walks you through how to apply the core Zero Trust tenets of verify explicitly, apply least privileged access, and assume breach for each of these layers, along with your options.


 



 





QUICK LINKS:








Link References:






Unfamiliar with Microsoft Mechanics?




 


Keep getting this insider knowledge, join us on social:










Video Transcript:



























Azure SQL News Update: July 2021

This article is contributed. See the original author and article here.

Today and every Wednesday Data Exposed goes live at 9AM PT on LearnTV. Every 4 weeks, we’ll do a News Update. We’ll include product updates, videos, blogs, etc. as well as upcoming events and things to look out for. We’ve included an iCal file, so you can add a reminder to tune in live to your calendar. If you missed the episode, you can find them all at https://aka.ms/AzureSQLYT.


 


You can read this blog to get all the updates and references mentioned in the show. Here’s the July  2021 update:


 


Product updates


Let’s start with what was announced and who came on the show.


 


The biggest launch we had this month was the announcement of the general availability of Azure Arc, including the General Availability of Azure Arc-enabled SQL Managed Instance (coming on July 30th). If you want to watch the launch event for Azure Arc, you can register here to view it on-demand. On Data Exposed Live last week, we had a special post-launch episode about how all this relates to SQL Server and Azure SQL. We brought on several members of the product group, and you can watch the session on-demand here.


 


Additionally, we made two public preview announcements, the first applies to Azure SQL Database and Azure SQL Managed Instance. This announcement was the support to use AAD-only authentication for SQL Database and Managed Instance to disable SQL authentication.


 


Last, but certainly not least, we announced the preview for using Azure SQL Database Hyperscale with named replicas to massively scale out read workloads and easily implement near-real time analytical solutions. We had the lead program manager of these capabilities, Davide Mauri, on the show to tell us more about it. In addition to the main blog post linked above, you can also find the announcement blog and security guidance for Named Replicas. I also referenced a Microsoft Mechanics episode, that you can find here.


 


Something that is relatively new that we got to dive into on the show is the Database Compare Utility. Mitch van Huuksloot came on and told us all about it. You can download the zip file that contains user guides, license information, notices, and a binary folder with a configuration file and spreadsheet input.


 


We also had our friend from Azure Data Factory, Wee Hyong Tok, on to talk about some of the latest updates in Azure Data Factory. One big announcement was the new and refreshing data factory home page, resulting in a more accessible and modern experience.


 


Videos


We continued to release new and exciting Azure SQL episodes this month. Here is the list, or you can just see the playlist we created with all the episodes!



  • Mara-Florina Steiu: Track and Record Data Changes with Change Data Capture (CDC) in Azure SQL

  • Jason Anderson: Azure SQL Database Ledger​ – The power of blockchain with the simplicity of SQL

  • Rajesh Setlem: Migrating to SQL: Get Started w/ Azure SQL Readiness Assessments & Migrations from ADS (Ep. 6)

  • [MVP Edition] with Monica Rathbun: Performance Tuning on Azure SQLDB and Readable Secondaries


 


We’ve also had some great Data Exposed Live sessions. Subscribe to our YouTube channel to see them all and get notified when we stream. Here are some of the recent live streams.



  • Deep Dive: Azure Cloud Experience for Data Workloads Anywhere

  • Something Old, Something New: Not really artificial, not really intelligence (Ethics and AI with Buck Woody)

  • Azure SQL Security series: Data Protection (Ep. 3)


 


Blogs


As always, our team is busy writing blogs to share with you all. Blogs contain announcements, tips and tricks, deep dives, and more. Here’s the list I have of SQL-related topics you might want to check out.



 


Special Segment: SQL in a Minute with Cheryl Adams


Cheryl and Mark Ghanayem came on to do a segment on documentation focused on the new Azure Database Migration Guides which you can find at https://aka.ms/datamigration. The highlighted one new guide recently released which dives into how to migrate MySQL on-premises to Azure.


 


Special Guest: Hasura


Adron Hall from Hasura came to talk about some new updates and connectors for their GraphQL product that integrates with SQL Server and Azure SQL. To learn more, check out their documentation.


 


Upcoming events


As always, there are a lot of events coming up this month. Here are a few to put on your calendar and register for from the Azure Data team:


July 14: DELL Webinar
–              Microsoft SQL Server is evolving… Is your company keeping pace?, Bob Ward

July 28:
EightKB SQL Server Internals Conference
–              Inside SQL Waits, Latches, and Spinlocks, Bob Ward
–              Deep Dive: SQL Server on Azure Virtual Machine Storage, Pam Lahoud


 


July 28: Database Professionals Virtual Meetup Group
–              Notebooks 101 for SQL People, Julie Koesmarno & Barbara Valdez


 


In addition to these upcoming events, here’s the schedule for Data Exposed Live:
July 14: Azure SQL Virtual Machines Reimagined: Measuring Performance & Monitoring Health (Ep.3)
July 21:
Ask the Experts with Bob Ward and Buck Woody
July 28:
Azure Data Studio Power Hour


Plus find new, on-demand Data Exposed episodes released every Thursday, 9AM PT at aka.ms/DataExposedyt


 


Featured Microsoft Learn Module


Learn with us! This month I highlighted the module: Architect modern applications using Azure SQL Database. In this module, you’ll break down a scenario for an application and build a multi-service solution based on the microservices approach. You’ll learn how to use modern database capabilities, like those found in the Azure SQL Database, to build a foundation for applications. You’ll also learn how to use GitHub Actions for CI/CD of databases.


 


Anna’s Pick of the Month


I know blockchain capabilities in Azure SQL Database technically launched in May, however, on Data Exposed we did a short episode and a deep dive. The more I learn about this technology and the scenarios it unlocks, the more I’m excited and impressed by it. Check out the videos for yourself and tell me I’m wrong!


 


Until next time…


That’s it for now! Be sure to check back next month for the latest updates, and tune into Data Exposed Live every Wednesday at 9AM PST on LearnTV. We also release new episodes on Thursdays at 9AM PST and new #MVPTuesday episodes on the last Tuesday of every month at 9AM PST at aka.ms/DataExposedyt.


 


Having trouble keeping up? Be sure to follow us on twitter to get the latest updates on everything, @AzureSQL. You can also download the iCal link with a recurring invite!


 


We hope to see you next time, on Data Exposed :)


–Anna and Marisa