1.
Sr. Solution Architect , Microsoft Most Valuable Professional, Microsoft Technical
Community Leader, Microsoft Certified Trained ,MCPD ,MCTS , MCTIP. For SharePoint and
.NET /Azure
Vice -President, Technology Middle east and Europe (DAVIGOLD LLC)

2.
Windows Azure
$

3.
pay only for what you use


4.
no upfront costs

5.
per minute billing

6.
no charge for
$ stopped VMs

7.
Global
Footprint

8.
Pay for what you use

9.
Cloud Computing

10.
Virtual Machines




11.
VM with VM with p eprseisrtseinstt ednrivt edrive

12.
VM with VM with p eprseisrtseinstt ednrivt edrive

13.
VM with VM with p eprseisrtseinstt ednrivt edrive

14.
VM with persistent drive

15.
Load Balancing and High Availability

16.
Windows Azure Virtual Networks
Build virtual networks that scale
• Traditional, familiar approach to build extension to datacenter
• Scalable approach to building virtual networks
Control over network configuration
• Define your own IP address ranges
• Be compliant with corporate IT security policy
Enables rich hybrid scenarios
• Hybrid apps can reach all or portion of the on-premise network
• Works with both Windows and non-Windows systems

17.
10.1.2.0/24 10.1.3.0/24
10.2.2.0/24 10.2.3.0/24

18.
SQL Database




19.
Web Sites
 Build with ASP.NET, Node.js or PHP
 Deploy in seconds with FTP, Git or TFS
 Easily scale up as demand grows

20.
Windows Azure Web Site Service
Load Balancer
(1 of n)
Reserved Instance
Virtual Machine with
IIS already setup
(1 of n…)
Load Balancer
(2 of n)
Server Failure….
(2 of n…)
Deployment
Service
(FTP, WebDeploy,
GIT, TFS, etc)
Dev tool or
Automation
Script
(1 of 2)
Reserved Instance
Virtual Machine with
IIS already setup
(2 of 2)
Reserved Instance
Virtual Machine with
IIS already setup
(2 of 2)

21.
AutoScale – Built-into Windows Azure
• AutoScale based on real usage
• CPU % thresholds
• Queue Depth
• Supports schedule times

22.
Storage





23.
Active Directory
 Active Directory in the Cloud
 Integrate with on-premises Active Directory
 Enable single sign-on within your apps
 Supports SAML, WS-Fed, and OAuth 2.0

24.
application
building blocks
Cloud services

25.
Agenda

26.
Test.
Please browse to this
url and verify no web
site is there
http://SpAzureService.CloudApp.Net

27.
Script is already running!
Why?
• It’s a long script
• 2 hours to run in prior tests
• Started running it at least an hour before this talk began
• Timing should let the script finalize about 30 – 45mn into this talk
K

28.
Virtual Machines on Azure

29.
Cloud Models
Applications

30.
MSDN Azure Benefits
Subscription Levels
Subscription
Level
Visual Studio
Professional
with MSDN
Visual Studio Test
Professional with
MSDN
MSDN Platforms
Visual Studio
Premium with
MSDN
Visual Studio
Ultimate with
MSDN
Azure Credits
included per
month
$50 $50 $100 $100 $150
Spending Limit
No Production Work

31.
Other ways
Pay as you go
Pricing Calculator:
http://azure.microsoft.com/en-us/pricing/calculator/
Free Trial
http://azure.microsoft.com/en-us/pricing/free-trial/

32.
Modern Development
Get hip

33.
Dev / Test
SP DR3
(Large)
Cloud Service
Virtual Network
Windows Azure
SQL DR1
(A6)
SP DR1
(Large)
AD1
(X-Small)
SQL DR2
(A6)
SP DR2
(Large)
SP DR4
(Large)
SP DR5
(Large)
Visual Studio Online
Test Agents

34.
Extranet and Public-Facing Internet
Windows Azure On Premises
Cloud Service
Virtual Network
Active
Directory
Site developers and
authors
VPN Tunnel
Internet Zone
Anonymous
Extranet Zone Default Zone
Windows Windows
SAML
FBA
Visitors
Partners and
Customers

35.
Affinity
Group
K

36.
K

37.
K

38.
K

39.
K

40.
Azure Account
80

41.
SharePoint 2013 Automation Scripts
PowerShell Scripts
• Automated deployment of Active Directory, SQL Server and SharePoint 2013.
• AD, SQL, SharePoint, in that order
• Uses various technologies to configure VM’s, AD DS, Disks, SharePoint.
Two Sample Configurations Available
• HighlyAvailable and SingleVMs
Download from GitHub
• https://github.com/Azure/azure-sdk-tools-samples
• Script as run today. Customized, debugged
• https://github.com/mabranda/SPAzurePoSh
K

42.
Single Virtual Machines Template
LB WEB/APP SQL AD/DC/DNS
80
20000
Cloud Service
Virtual Network
Windows Azure
Web/App Tier
1 x Large
(4 Cores & 7 GB)
Data Tier
1 x A6
(4 Cores & 28 GB)
Identity Tier
1 Small
(1 Core & 1.75 GB)
K

43.
My Environment Setup
Available via Web Platform Installer
Source code managed in GitHub
Visual Studio 2013
…or your favorite PowerShell Script Editor (ISE, PowerGUI)
PowerShell Tools for Visual Studio 2013
Available on Visual Studio Gallery.
Can install directly from Visual Studio
Used only to run PoSh within Visual Studio.
All debugging, etc can be done in PowerShell ISE.

44.
Technologies used in VM Connectivity
Credential Security Service Provider
Enables a client program to delegate credentials from the client computer to the target server.
Used by RDP
An open-standard management protocol.
Simple Object Access Protocol (SOAP)-based, firewall-friendly protocol
Remotely exchange management data with any computer device that implements the protocol.
Microsoft’s implementation of WS-Management

45.
Script Templates
MS Official on GitHub
https://github.com/Azure/azure-sdk-tools-samples
Script as run today.
Customized, debugged
Updates in Azure PowerShell causes some of the commands to fail
https://github.com/mabranda/SPAzurePoSh

46.
Preparation
Set-ExecutionPolicy ByPass
Suppresses all confirmation, warnings, lets you run unsigned code
Enable-PSRemoting
Enables PowerShell Remoting. Win 7 or later.
Will fail if a network connection is listed as “Public”
Enable-WSManCredSSP -role client -delegatecomputer "*.cloudapp.net“
Enable CredSSP for delegation of credentials
$regKey = "HKLM:SYSTEMCurrentControlSetControlLsaCredsspPolicyDefaultsAllowFreshCredentialsDomain"
Set-ItemProperty $regKey -Name WSMan -Value "WSMAN/*.cloudapp.net“
Enable CredSSP

47.
Preparation
Start > Run > gpedit.msc
Navigate to Computer Configuration > Administrative Templates > System > Credentials Delegation
Allow Delegating Fresh Credentials
Enable
Add Servers > wsman/*.cloudapp.net
Allow Delegating Fresh Credentials with NTLM-only server authentication
Enable
Add Servers > wsman/*.cloudapp.net
May need to gpupdate for changes to take effect

48.
Check your subscription
Depending on prior installations, subscription level, you may not have enough cores / storage, etc to
successfully run the script.
Check Cores
Get-AzureSubscription -Current -ExtendedDetails

49.
Running the script
Will call all other scripts
Fill out all parameters in the call to Autoconfigure
Fill out the values in the XML configuration files

50.
Outdated Cmdlets
Rapid Release means we update the Azure module often enough so that old paths and cmdlets may be outdated.
Web Platform Installer has latest version
Verify your version using
(Get-Module).Version
Current version as of 7/10/2014 is 0.8.4

51.
DisableLoopBackCheck!

52.
Storage Accounts Gotcha
Storage Account can only contain numbers and lowercase characters.
Will cause an error when calling Create-AzureStorageAccount.
Must be between 3 and 24 characters.
I was using SpAzureStorage, which won't work. Changed to spazurestorage.

53.
Other issues
$store.Open([System.Security.Cryptography.X509Certificates.OpenFlags]::ReadOnly)
$store.Certificates | ?{$_.Subject -like "*SpAzure*"} | select DNSNameList
$store.Close()
Had to use “STS#0”
Noted in the SpAzurePoSh project on GitHub

54.
Connecting
Visible on the Virtual Machines management node on Azure
Add the RDP endpoint to an mstsc command to connect.

55.
Resources
Windows Azure Training Kit
Kirk Evans Presentation from SPC14

56.
SharePoint 2013 Automation Scripts
https://github.com/windowsazure/azure-sdk-tools-samples

57.
start now.
http://WindowsAzure.com

58.
Deep technical content and
free product evaluations
TechNet Virtual Labs
Hands-on deep technical labs Free, online,
technical courses
Download Microsoft software
trials today.
Find Hand On Labs. Take a free online course.
Technet.microsoft.com/evalcenter Technet.microsoft.com/virtuallabs microsoftvirtualacademy.com