Note for the future.
I wish I remembered this every time.
Unmanaged disks (aka classic Azure disks) where the VHD lives inside a storage account are end of life at the end of September 2025.
We have a handful that are underpinning some older appliances.
Finding them is a simple Kusto search:
resources
| where type == “microsoft.compute/virtualmachines”
| join kind=leftouter (ResourceContainers | where type==’microsoft.resources/subscriptions’ | project subscriptionName=name, subscriptionId) on subscriptionId
| where properties.storageProfile.osDisk.managedDisk == “”
| extend osDiskName = properties.storageProfile.osDisk.name
| extend osDiskUri = properties.storageProfile.osDisk.vhd.uri
| project subscriptionName,resourceGroup, vmName = name, osDiskName, osDiskUri
| union (
resources
| where type == “microsoft.compute/virtualmachines”
| mvexpand dataDisk = properties.storageProfile.dataDisks
| where dataDisk.managedDisk == “”
| extend dataDiskName = dataDisk.name
| extend dataDiskUri = dataDisk.vhd.uri
| project vmName = name, dataDiskName, dataDiskUri, resourceGroup
)
Went into Mailchimp and did some much needed cleanup.
Archived some 50% of the mailing list that had unsubscribed.
I need to dig more into the platform, it’s been neglected for too long.
I’ve been using this term to describe football, aka American football, aka gridiron, for many many many years.
I was surprised that there were zero hits on either Google or Bing search for this term.
This is absolutely a blog post to make sure it gets indexed 😀
Today was the end of my experiment with MySQL PaaS in Azure.
To be honest – performance, metrics and security were as described. Private connectivity within the virtual network, horizontal and vertical scaling, great metrics.
I got burned twice.
Once with a “potential bug” that burned $65k of Azure spend in a few hours (that was eventually refunded!), more recently with the Azure portal throwing errors continually.
I’ve exported the data, reimported to an IaaS MySQL/MariaDB instance – and moved on.
This turned out to be really simple; and there are some really good tools and docs at https://dmarcian.com/
Then enable DKIM signing in the Defender portal https://security.microsoft.com
Email and Collaboration –> Policies and Rules –> Threat Policies –> Email Authentication settings
It might take a while for the DNS records to propagate.
Finally test the DMARC and DKIM settings, I used the DMARC Record Checker https://dmarcian.com/domain-checker
If you end up looking to use DMARC reporting, and sending to a third party/alternate domain – you also need to set up DNS records in the receiving domain:
Recent Comments