Author: Link State

Senior System Engineer in an Enterprise Telecommunications Company. Over 25 years of experience in IT, Virtual environments, Datacenter & Cloud (Azure) with Microsoft focus :MCP,MCTS, MCITP,MCSA x3, MCSE x2 Core Infrastructure & Coud Platform - Azure Administrator Associate - Vmware: VCP-DCV 2022, specialized in data protection & DR systems - Veeam: Veeam Legend - VMCE - VMCA. Security-oriented. (Backups are never enough!).

Azure Application Gateway: Practical Configuration Guide

02/06/202603/06/2026

Link State No Comments

In this article, we shall discuss “Azure Application Gateway: Practical Configuration Guide”. This post provides a practical, real-world inspired walkthrough for configuring an Azure Application Gateway. The goal is to help engineers quickly understand how to design, name, and connect all required components for a production-ready setup. Please see Azure Managing Subscriptions with PowerShell: From…

AWS/Azure/OpenShift

Azure Managing Subscriptions with PowerShell: From Login-AzAccount to Resource Control and Private Endpoint Verification for Azure File Share”

02/06/202610/06/2026

Link State No Comments

Azure Managing Subscriptions with PowerShell: From Login-AzAccount to Resource Control and Private Endpoint Verification for Azure File Share”

In this guide we shall discuss “Azure Managing Subscriptions with PowerShell: From Login-AzAccount to Resource Control and Private Endpoint Verification for Azure File Share””. In the world of cloud computing, efficient resource management is essential to ensure security, performance, and cost control. Microsoft Azure provides several tools to manage complex environments, including PowerShell, which allows…

AWS/Azure/OpenShift

Azure Arc for SQL Server PAYG: Installation, Connectivity Requirements and Operational Best Practices

01/06/202609/06/2026

Link State No Comments

Int his topic, we shall discus “Azure Arc for SQL Server PAYG: Installation, Connectivity Requirements and Operational Best Practices”. As organizations increasingly adopt hybrid and multi-cloud strategies, Azure Arc-enabled SQL Server with Pay-As-You-Go (PAYG) offers a flexible way to extend Azure governance, security, and billing capabilities to on-premises and non-Azure environments. Pleaae see How to…

AWS/Azure/OpenShift

How to Assign a Public IP to Azure Virtual Machine (VM)

01/06/202609/06/2026

Link State No Comments

How to Assign a Public IP to Azure Virtual Machine (VM)

This guide describes the procedure for associating a Public IP address to an Azure Virtual Machine (VM) at the network interface (NIC) level. In Azure, VMs are deployed with private IP addressing by default within an Azure Virtual Network (VNet), ensuring internal-only communication unless explicitly exposed. Please see How to Upgrade Veeam ONE to 13.0.2.6723…

AWS/Azure/OpenShift

Azure Resource Locks: Protecting Critical Cloud Resources from Accidental and Malicious Deletion

12/05/202612/05/2026

Link State No Comments

Azure Resource Locks: Protecting Critical Cloud Resources from Accidental and Malicious Deletion

In modern cloud environments, infrastructure protection is no longer optional. Organizations operating on Microsoft Azure must ensure that business-critical workloads, networking components, storage accounts, and security services are protected not only from accidental human errors, but also from unauthorized or malicious actions. In this guide, we shall discuss “Azure Resource Locks: Protect Resources from Accidental…

AWS/Azure/OpenShift

Active Directory Vulnerability Assessment with Purple Knight: Domain Controller Owner Is Not an Administrator

16/04/202616/04/2026

Link State No Comments

Active Directory Vulnerability Assessment with Purple Knight: Domain Controller Owner Is Not an Administrator

The Hidden Backdoor: Auditing Domain Controller Ownership with Purple Knight. In today’s threat landscape, Active Directory (AD) remains one of the most critical and most targeted components of enterprise infrastructure. In this guide, we shall discuss “Active Directory Vulnerability Assessment with Purple Knight: Domain Controller Owner Is Not an Administrator”. Please see Set Special File…

Windows Server

AZURE Kubernetes Service (AKS) upgrade minor version from 1.32.3 to 1.33.7

26/03/202626/03/2026

Link State No Comments

In this article, we shall discuss the folloing topic “AZURE Kubernetes Service (AKS) upgrade minor version from 1.32.3 to 1.33.7”. Updating a managed Kubernetes environment is rarely just a routine maintenance task. It is a critical operation that directly affects the platform’s stability, security, and the availability of its features. Please, see How to protect…

AWS/Azure/OpenShift

Azure File Sync : How to enable Self-Service restore

16/03/202619/05/2026

Link State No Comments

Azure File Sync : How to enable Self-Service restore

Azure File Sync is a service for centralizing an organization’s file shares in Azure Files while keeping the flexibility, performance, and compatibility of a Windows file server. In this article, we shall discuss “Azure File Sync : How to enable Self-Service restore”. Please, see Unicode Manipulation: CVE-2026-25177 Privilege Escalation in AD, how to replace Veeam…

AWS/Azure/OpenShift

Unicode Manipulation: CVE-2026-25177 Privilege Escalation in AD

12/03/202625/03/2026

Link State No Comments

This article discusses “Unicode Manipulation: CVE-2026-25177 Privilege Escalation in AD”. On March 10, 2026, Microsoft disclosed a new security vulnerability affecting Active Directory Domain Services (AD DS). Please, see How to run Apps as an administrator on Windows, and how to Enable Exploit Protection feature on Windows using the Windows Security App, Microsoft Endpoint Configuration…

Windows Server

Resolving VSS Errors: Veeam AD Backups failing with SentinelOne

17/02/202618/02/2026

Link State No Comments

Veeam application-aware backups of Active Directory domain controllers can fail when SentinelOne blocks the VSS and BCD operations Veeam needs for NTDS-aware snapshots. These failures usually appear as VSS errors and “Updating BCD failed” or similar messages in Veeam job logs. In this guide, we shall discuss the “Resolving VSS Errors: Veeam AD Backups failing…

Backup

Hardening Your Infrastructure: A Guide to VMware VBS and MS GPO Credential Guard in VBR v13

29/01/202629/01/2026

Link State No Comments

Hardening Your Infrastructure: A Guide to VMware VBS and MS GPO Credential Guard in VBR v13

Veeam Data Platform v13 adopts a “security-first” architecture, actively protecting backup infrastructure against modern threats, and continues to support advanced security features for Windows-based components, including VMware Virtualisation-Based Security (VBS) and Microsoft Group Policy Object (GPO) Credential Guard. In this guide, we shall discuss “Hardening Your Infrastructure: A Guide to VMware VBS and MS GPO…

Backup, Windows Server

How to create a two-way Active Directory Trust

30/12/202530/12/2025

Link State No Comments

In this guide, we shall discuss how to create a two-way Active Directory Trust. A two-way trust will be created between these domains. This means that the two domains will be able to share their resources with each other. Please, see [AZURE] MSSQL Creating a new Azure SQL Database (PaaS), [AZURE] Restore MSSQL Server on…

Windows Server

How to create a new Azure SQL Database [PaaS]

30/12/202531/12/2025

Link State No Comments

In this article, we shall discuss “how to create a new Azure SQL Database [PaaS]” using the Azure Portal, highlighting the key steps, the most relevant configuration options, and the architectural considerations to keep in mind from the very beginning. Please, see How to create a two-way Active Directory Trust, [AZURE] Restore MSSQL Server on…

AWS/Azure/OpenShift, Oracle/MSSQL/MySQL