If LAN is legacy, what is the UN-legacy...?
-
@scottalanmiller said:
This only works because those people were deemed separately to need Windows 10 and would be staying up to date on the latest Windows. While other teams are moving to Linux and there Azure AD won't work (yet.)
Are they going to be introducing AADFS or a similar SSO option?
-
@wirestyle22 said:
@Dashrender Printers being your bane using your example. Sorry I got lunch I've been away
It's not about drives, it's about deploying printers.
I haven't looked at AAD enough yet to look at printers - But I'm guessing since AAD doesn't have Group Policy (or at least I don't think it does) you can't use AAD to deploy printers. So now printers all end up like stand alone devices from 25 years ago or more and manual driver deployment or a third party deployment solution.
-
@coliver said:
@scottalanmiller said:
This only works because those people were deemed separately to need Windows 10 and would be staying up to date on the latest Windows. While other teams are moving to Linux and there Azure AD won't work (yet.)
Are they going to be introducing AADFS or a similar SSO option?
According to Scott, things like O365 already work with SSO with AAD.
-
@scottalanmiller said:
@wirestyle22 said:
@Dashrender Printers being your bane using your example
LOL, I'd quote who you are responding to
That was many posts ago. sorry! -
@coliver said:
@scottalanmiller said:
This only works because those people were deemed separately to need Windows 10 and would be staying up to date on the latest Windows. While other teams are moving to Linux and there Azure AD won't work (yet.)
Are they going to be introducing AADFS or a similar SSO option?
ADFS already merges AD and Azure AD if you want to do that. We do not, ADFS ads a lot of problems. It can be cool, but it is a pain too. Don't do it casually.
My guess is that they are going to expand Azure AD to promote Azure and Office 365 services because that is going to be where the money is. But it is just a guess.
My hope is that MS gets this all set up and get Mac OSX and Linux to authenticate to it. Even if only CentOS/RHEL, Linux Mint, Ubuntu, Zorin and OpenSuse get it working, that would be amazing.
-
@Dashrender said:
@wirestyle22 said:
@Dashrender Printers being your bane using your example. Sorry I got lunch I've been away
It's not about drives, it's about deploying printers.
I haven't looked at AAD enough yet to look at printers - But I'm guessing since AAD doesn't have Group Policy (or at least I don't think it does) you can't use AAD to deploy printers. So now printers all end up like stand alone devices from 25 years ago or more and manual driver deployment or a third party deployment solution.
I do not believe that it does, it does not "include" it, but you might be able to get it to work otherwise.
However GP requires a legacy file server structure, so we need to see that evolve into something more modern, too.
Right now, the answer for that is dropping AD and GPO and moving to MDM instead. That's the way that most places that do this are going.
-
@Dashrender said:
@coliver said:
@scottalanmiller said:
This only works because those people were deemed separately to need Windows 10 and would be staying up to date on the latest Windows. While other teams are moving to Linux and there Azure AD won't work (yet.)
Are they going to be introducing AADFS or a similar SSO option?
According to Scott, things like O365 already work with SSO with AAD.
Yup, at least to some degree. What I want MS to do is to give us hooks into the SSO. SSO for Windows 10 + Office 365 is wonderful, but limited. I want my third party CRM and my ownCloud and my XO and stuff like that to all authenticate to Azure AD.
I think that they will, if they don't, Google is going to grab that market from them in no time and then it will be too late.
-
So you think that Azure AD is going to go the way of SSO services like FaceBook and Google have today, and websites or applications will just implement a standard interface to it and people can log into services with AAD, Google, Twitter or Facebook?
-
@scottalanmiller said:
@Dashrender said:
@coliver said:
@scottalanmiller said:
This only works because those people were deemed separately to need Windows 10 and would be staying up to date on the latest Windows. While other teams are moving to Linux and there Azure AD won't work (yet.)
Are they going to be introducing AADFS or a similar SSO option?
According to Scott, things like O365 already work with SSO with AAD.
Yup, at least to some degree. What I want MS to do is to give us hooks into the SSO. SSO for Windows 10 + Office 365 is wonderful, but limited. I want my third party CRM and my ownCloud and my XO and stuff like that to all authenticate to Azure AD.
I think that they will, if they don't, Google is going to grab that market from them in no time and then it will be too late.
This is what I meant. Give the customer the ability to deploy applications that use AAD as the authentication source.
-
@scottalanmiller said:
Right now, the answer for that is dropping AD and GPO and moving to MDM instead. That's the way that most places that do this are going.
This statement to me more or less implies that MDM vs AD and GPO are sorta related. They serve a lot of the same functions. I know MDM doesn't provide authentication - but it could.
This is why I always felt that MS should have an MDM solution as part of AD, now instead it should be part of AAD.
-
@Reid-Cooper said:
So you think that Azure AD is going to go the way of SSO services like FaceBook and Google have today, and websites or applications will just implement a standard interface to it and people can log into services with AAD, Google, Twitter or Facebook?
Precisely. This is purely a prediction on my part, but that is where I see this going. Microsoft can provide a high end, enterprise version of what Google and others are already doing. If they don't it is a lost market ripe for the picking.
-
@scottalanmiller said:
@Dashrender said:
@coliver said:
@scottalanmiller said:
This only works because those people were deemed separately to need Windows 10 and would be staying up to date on the latest Windows. While other teams are moving to Linux and there Azure AD won't work (yet.)
Are they going to be introducing AADFS or a similar SSO option?
According to Scott, things like O365 already work with SSO with AAD.
Yup, at least to some degree. What I want MS to do is to give us hooks into the SSO. SSO for Windows 10 + Office 365 is wonderful, but limited. I want my third party CRM and my ownCloud and my XO and stuff like that to all authenticate to Azure AD.
I think that they will, if they don't, Google is going to grab that market from them in no time and then it will be too late.
Agreed - facebook and Google already do this with their authentication systems.
-
@scottalanmiller said:
@Reid-Cooper said:
So you think that Azure AD is going to go the way of SSO services like FaceBook and Google have today, and websites or applications will just implement a standard interface to it and people can log into services with AAD, Google, Twitter or Facebook?
Precisely. This is purely a prediction on my part, but that is where I see this going. Microsoft can provide a high end, enterprise version of what Google and others are already doing. If they don't it is a lost market ripe for the picking.
If they can pull this off, think about how easy it would be to onboard a new employee. Instead of creating dozens of accounts for them all over the web, they just have an account you created for them in AAD or Google or FB.. when they quit or get fired.. just as easy to disable them all too.
-
Yes, and I'm sure that they can. It is just a matter of getting them to actually do it. Imagine a Facebook-like account integration, but enterprise with central account control!?! Who wouldn't pay for that! And the tie-in to MS services would be awesome. I think it is a huge win for them, I can't believe that they didn't do this years ago.
-
Oh, apparently I'm totally out of touch.
Ask and you shall receive...
https://channel9.msdn.com/Blogs/Open/Using-Azure-AD-for-Linux-logins
-
@scottalanmiller said:
Oh, apparently I'm totally out of touch.
Ask and you shall receive...
https://channel9.msdn.com/Blogs/Open/Using-Azure-AD-for-Linux-logins
I see a project for Scott this afternoon.
-
No, no time, I'm afraid. But that is definitely my project for the morning! I am SO excited!!
-
My question would be if we migrate to something like this what will our jobs consist of in the future? We are just going to work directly with servers at a cloud provider or read EULA's and managing permissions and licensing?
-
@Dashrender said:
@scottalanmiller said:
Oh, apparently I'm totally out of touch.
Ask and you shall receive...
https://channel9.msdn.com/Blogs/Open/Using-Azure-AD-for-Linux-logins
I see a project for Scott this afternoon.
It's after 9PM here, you know!
-
@wirestyle22 said:
My question would be if we migrate to something like this what will our jobs consist of in the future? We are just going to work directly with servers at a cloud provider or read EULA's and managing permissions and licensing?
Ah, I gave an awesome (so I like to say) talk on this at the MangoGuild meet up in NYC last year... the "moving commodity line of IT". I'll do a video about it sometime "soon". Stuff like this, eliminating the pointless parts of our jobs, is good, not bad, for us. It allows us to focus on adding value to the business and doing things that can't be automated. It lets us spend our time thinking, learning, being creative and solving tough problems that humans are good at and computers are bad at. The last thing that we want to do is spend our time doing "busy work" handling inefficient systems because we have little way to have serious business value if we do that.
