ModernBiz

Technical Series
Instructor Name
Date

Microsoft cloud for

small and midsize
businesses

Logistics and introductions

Class hours
Restrooms
Meals
Internet

Class Portal: https://cloud.holsystems.com/techseries/inst/beta

- The access code is ________
Microsoft Azure Pass
Presenter introduction

About this course

Audience: IT pros, consultants, partners

Objectives: Identify opportunities for partners to enable small- and medium-sized
businesses (SMBs) to increase efficiency and productivity while reducing IT operating
expenses (OpEx) by implementing hybrid cloud scenarios using Microsoft Azure services
and become proficient in designing and implementing Microsoft Azure technologies and
services for SMB customers.
Topics covered:
Overview of Microsoft Azure, partner opportunities, SMB trends, transacting Microsoft
Azure, reselling Microsoft Azure services, Microsoft Azure in Open Licensing
Microsoft Azure Backup, Microsoft Azure Storage, Microsoft Azure Site Recovery (ASR,
Microsoft Migration Accelerator
Microsoft Azure Virtual Machine workloads Infrastructure as a Service (IaaS)
Microsoft Azure Application Workloads Platform as Service (PaaS), and applications
on Microsoft Azure VMs
Microsoft Azure Virtual Machine Networks (VMNet)
Microsoft Azure Active Directory and Identity Management
Level: 200-300

Course
Schedule

Start

End

Content

9:00

9:30

Class Introduction, Partner Opportunities, SMB Trends

9:30

10:00

Module 1: Overview of Microsoft Azure

10:00

10:15

Module 1 Setup Azure Pass and Setup Azure Backup

10:15

10:30

Morning Break

10:30

11:15

Module 2: Azure Virtual Networks

11:15

12:00

Module 2 Lab: Create a Virtual Network and Site to Site VPN

12:00

1:00

Lunch Break

1:00

1:30

Module 3: Azure Virtual Machines

1:30

2:00

Module 3 Lab: Provisioning Azure VMs, protecting Azure VMs with

ASR

2:00

2:30

Module 4: Planning for Azure Workloads

2:30

3:00

Module 4 Lab: Implementing a replica domain controller in Azure

3:00

3:15

Afternoon Break

3:15

4:15

Module 5: Azure Active Directory

4:15

4:45

Module 5 Lab: Azure Active Directory Connect

4:45

5:00

Wrap up and Q&A

The modernization opportunity

The cloud is
enabling
compelling new
business models
for Microsoft
partners

Roughly one quarter of

SBs and one half of MBs
plan to shift their
budgets to more cloud
spending over onpremise spending.
- AMI1

With Microsoft, youre in control of

how you want to deploy:

Reduced capital
expense

Fast time to market

Physical Server
Elastic scale
AMI-Partners, March 25, 2013. U.S. SMB Trends & Server Market Insights.
Global availability

Virtualization

Cloud

Microsoft Azure
An open and flexible cloud platform that enables you to quickly build,
deploy, and manage solutions across a global network of Microsoftmanaged datacenters.
Build applications
using any language,
tool, or framework
Integrate public
cloud solution with
the existing IT
environment
99.95% monthly SLA
Automatic operating
system and service
patching

Usage-based services
App
services
Compute
Storage

Caching

Identity

Service
bus

Media

Virtual
machines

Websites

Cloud
services

Mobile
services

SQL
database

HDInsight

Tables

Blob
storage

Connect

Virtual
network

Traffic
manager

Network

CDN

Integratio
n

HPC

Analytics

Growing your business with Microsoft

Microsoft helps you expand your role as a service provider and business
Azure
advisor
Broaden your customer
base and services

Grow revenues and

increase margins

Accelerate your speed

to market

Reach new customers

Upsell to existing customers

Recurring revenues

Enables partners to

Cross sell within a single

platform
Enable and advise your
customers as they evolve
their business in the cloud

differentiate by bundling
establish long-term
your IP alongside other cloud
relationships with your
offerings
customers
Margins increase as you learn Cloud software is easier to
develop, test, and take to
how to offer fixed-fee
market
engagements with optimized
delivery and higher levels of
Lowers the barriers to entry
services
to offer managed services
Efficiently sell into SMBs
leveraging the skills that you
already have

Key Azure scenarios for small & midsize

customers
Data
Backup

Disaster
Recovery

Deployment in
VMs

Orders
AP
Product

SharePoint

Provide easy,
scalable
data backup
services in the
cloud

Offer peace
of mind with
ongoing cloudbased DR services

Host
Websites

CRM Acct

HR

SQL
Business
Virtual
Server Application Machines
Database
s
s

Quickly deploy and

manage customer
applications in the
cloud

Grow your business

helping customers
move their
websites to the
cloud

Typical Azure in Open deal size

$240

3 Azure in Open SKUs

yr

100GB of Azure Backup for 12Mo

$1,25 $2,400
0
10 Azure in Open SKUs

No outbound Bandwidth charges

No Backup Drives
No Backup Media (Tape, DVD
etc.)

ces applicable to US West Region

Backup

1 VM Protected by Azure Site

Recovery [Disaster Recover]
100 GB of GRS Storage for 12mo
100 GB of Outbound Bandwidth
for 12mo
1VPN Gateway*
Charges for Running a Medium
VM in Azure in Case of
Disaster/Testing for 15 Days in
12mo period

/yr

24Azure in Open SKUs

2 Proc 3.5GB RAM (A2 - Medium

VM)
750 Storage (locally Redundant)
25 GB Outbound Data Transfer
1VPN Gateway
Windows Server

No Windows Server Licenses or

CALs
No Server Hardware
No Power, Cooling etc.

No Capex or Opex Expenses to

Setup and Operate a Disaster
Recovery Datacenter

Site Recovery
* 1 VPN Gateway required per customer

Virtual
Machines

/yr

Microsoft Azure purchasing options

Microsoft helps you expand your role as a service provider and business
advisor
Open licensing
Direct on Azure.Microsoft.com
Enterprise
programs

agreement

Pay as you go

Flexible

Longer term

Zero upfront cost, cancel any

time

Flexibility with Volume

Licensing through a familiar
vehicle for SMBs

Offers discounts to customers

as part of a deeper and longer
term commitment to the
platform

No long-term commitment
Purchase with credit card

Opportunity for partners to

earn margins, incentives
Purchase through Distributors

Ability to consolidate spending

at the enrollment level.
Purchase through License
Service Providers (LSPs).

Azure in Open Licensing key concepts

SKU

Single SKU worth USD$100 in the Azure Portal (or local currency equivalent)
Can purchase unlimited SKUs that are issued onto single OSA Key
No minimum or maximum for the number of OSA Keys a customer can
purchase and activate

Terms

Prepaid service with the ability to purchase additional SKUs and add funds
at any time
Use against any eligible consumption-based Azure service
Azure Credit expires 12 months from activation date, but you have five years
to activate
No returns once service is activated in the Azure Portal

Eligibility

All Open programs and customer types

Existing Online Service (OLS) in Open process
Available in countries with Azure Direct and Open Volume Licensing Program
Partners

Monetary commitment concepts

Use case: 250GB of Microsoft Azure Backup for 12 months; ~$50/month

Each redemption creates a

unique 12-month
consumption period
Previous commitments are
exhausted first
Unused amounts cannot be
rolled over into future periods
12-month consumption period
starts when subscriptions are
redeemed
No limit to number of
redeemed subscriptions
Configurable alert emails

Customer
purchases $600
of Microsoft
Azure

Nov
2015

Dec
2015

Balance: $200
Alert email to customer / partner

Balance: $50

Nov
2016

12-month
expiration,
No rollover for
initial $600

Period
1
Customer
purchases
$1200
Balance: $1250

Period
2

12-month
expiration

Dec
2016

Licensing scenario

Jan
2015

Azure and Office 365 in Open

comparison
SKU Structure

Single SKU used for any eligible pay-as-you-go

Azure Service

Unique SKUs for each Office 365 Plan, as

well as Add-ons

Commitment

Monetary Commitment that expires 12 months

from activation

Customers pre-pay for 12 months of

service

Margin Structure
Business Processes
Reporting

Channel Impact

Aligned to cloud channel incentives for managed partners and distributor margin
Check with your Distributor for local terms
All Online Services in Open follow existing business processes
Leverage existing Distributor and VAR reporting constructs
Single SKU provides flexible building blocks to
scale partner business or customer services.
Top up and upsell opportunity for additional
services.
Partners drive consumption with ongoing
customer engagement.

Specific SKUs purchased for each service

offering.
Renewal motions have annual
anniversary.
Incremental seats added shift customer
end dates.

Three partner scenarios for Azure in

Open
Hybrid Resell &
Managed
Scenario
Resell
Scenario
description

Partner resells credits to a

customer. The customer
manages the Azure services
and account themselves.
Partner may or may not help
with activation, setup and
renewal timing.

Managed Services

Services

Partner and is managing Azure

services and account as a coadministrator. The Customer is
also involved in the service
and/or account management
and accesses to the portal.

Partner is providing a
customer solution and/or a
managed service solution,
and is doing the full support
and management of the Azure
underlying services.

Licensee

Customer

Customer

Partner

Administration

Customer is sole
Administrator

Partner / Customer CoAdministrators

Partner is sole Administrator

Partner creates Subscription
for each customer

Balance
Management

Customer signs up to receive

low balance alerts via email
and tracks consumption in the
portal. Customer contacts a
partner to buy more.

Partner and customer sign up

to receive low balance alerts
via email and track
consumption in the portal.
Partner recommends new
purchases.

Partner signs up to receive low

balance alerts via email and
tracks consumption in the
portal. Partner makes new
purchases.

Managed services

Can an ISV or MSP buy Azure in Open in their own name and deliver a
SaaS Application or a Managed Service to end customers?
Requirements

Azure is
subject to
Online Service
Terms across
EA, Direct &
Open

Customer Solution
Application or set of
applications that adds primary
and significant functionality to
the Microsoft Azure Services
and that is not primarily a
substitute for the Microsoft
Azure Services

View the full Online Service terms here:

http://www.microsoft.com/licensing/products/products.aspx.

Or

Managed Services
The MSP has the sole ability to
access, configure, and
administer the Microsoft Azure
Services,
The MSP has administrative
access to the virtual machines
The end-customer has
administrative access only to
its applications or virtual
machines

ModernBiz

Delivering SMB solutions with

Microsoft

Connect
with
customers

Increase
your sales

Adapt
to change

Understand
your
customer
Be
prepared
for the
unexpecte
d

Safeguard
your business

ModernBiz

Protect
and control
your data

Work
together
easily

Grow
efficiently

Get the
most out
of your
technology
Get your
work done
anywhere

Business
anywhere

Only with Microsoft

can you leverage a
complete, flexible,
familiar platform to
grow your business
delivering solutions
that address your
customers key
business
challenges.

A wealth of partner resources

ModernBiz Sales &
Marketing Campaign
Resources

Azure in Open
Licensing Partner
Resources

http://aka.ms/modernbiz

http://aka.ms/azurevar

To and thru-partner
presentations, Case
studies, video animations,
digital assets, digital
destinations
#modernbi

Presentations, datasheets,
FAQs, pricing calculator

Cloud SureStep
http://aka.ms/cloudsures
tep
A three-phase process that
helps you make money
with Microsoft Online
Services. Each phase
contains all the assets and
resources needed to
support you every step of
the way. Already have a
cloud business? Cloud Sure
Step can still help you
expand and maximize your
business

Module 1: Introduction
to Microsoft Azure

Module 1 Objectives
what you will learn
Overview of Microsoft Azure Services for

SMBs
Azure IaaS
Azure PaaS
Azure Web Sites
Azure Cost Calculator
Azure Identity Management
Data Protection Challenges
Storage vs. Backup vs. Disaster Recover
(DR)
Azure Backup Architecture

Demo

Microsoft Azure Management Portal

Microsoft Azure IaaS at a glance

Application
s
Data
Runtime
Middleware

Customermanaged

OS

Virtualizati
on
Servers
Storage
Networking

Virtualizati
on
Servers

Storage
Networking

Microsoft Azure PaaS at a glance

Application
s
Data

Customer
managed

Virtualizati
on
Servers
Storage
Networking
Runtime
Middleware
OS

Servers

Virtualizati
on
Networking

Middleware

Storage

Runtime

OS

Microsoft Azure Virtual Machines:

Infrastructure services: Build it or bring it; we run it
Overview
Microsoft Azure

Deploy applications to the cloud

Extend your environment

Onpremises

Virtual
machines

Best platform for SharePoint and

SQL Server development and test
Remot
e
worker
s

Scalable on-demand infrastructure

Best in class price-performance and
end-to-end support

Data backup in the cloud: Overview

Provide scalable data backup in the cloud

Microsoft Azure

Reliable file and storage backup with

Volume Shadow Copy (VSS) supported
workloads if System Center Data
Protection Manager (DPM) is deployed

Encrypted backups and global,

geo-redundant datacenters

Onpremises

Consumption-based pricing. No
hardware and backup media costs
Intuitive management with familiar
tools across on-premises and cloud

Windows
Server

Provision more storage for your

customers as needed

Hosting websites in the cloud: Overview

Grow your business: Help customers move their websites to the cloud
Build, deploy, and manage
websites on
a flexible cloud platform

Microsoft Azure

Deliver peace of mind hosting on a

global network of managed
datacenters

Onpremises

Offer a scalable cloud infrastructure

for seasonal applications or defined
lifecycle websites
Extern
alwork
ers

Web
server
s

Manage your customers websites

using familiar tools across onpremises and cloud environments
Provision a production web
application
in minutes

Identity and access management

Enable single sign-on between on-premises and cloud identities
overview
Enable single sign-on across multiple
cloud and on-premises applications
with Active Directory Federation
Services

Microsoft Azure

Integrate cloud with on-premises

Active Directory with Active Directory
Synchronization

Microsoft Azure
Active Directory
(AAD)

Onpremises

Consumer
identity
providers
PCs and
devices
Microsoft apps

Windows
Server
Active
Directory

Third-party
cloud/hosting

Create and manage identities in the

cloud
Help secure access to on-premises
and cloud apps with Microsoft Azure
Multi-Factor Authentication
Use Microsoft Azure Active Directory
(AAD) to manage Office 365 along with
other Microsoft and external cloud
services

Scenario: How much is your IT costing?

CALs
Two servers
and
operating
system

$10,00
0

$10,000
Two years of facility
operating

$10,00

On-premises
backup solution
with support for
cloud archiving

$2,800

with agents

costs

per server
about $32,800 / 24 months =
~$1333.33 /month for two datacenter-caliber servers

Total
Costs

With 7 small virtual machines, this comes out to ~ $1,90.47 per virtual
machine per month

Pricing out solutions

Demo

Microsoft Azure Cost Calculator

Data protection challenges

Rapid data growth

Operational challenges

Storage costs growing

Data rates growing
at more than 40% per year Backup costs scale with
data
Management complexity of
storage, backup, and offsite
protection all scale with

Its expensive
to protect all
that data
Some data
may go
without
protection

Storage, backup, and disaster recovery: a

comparison
Storage
Backup
Disaster Recovery
Get easy,
economical storage
that can scale
as needed
Scale up or down easily
to meet changing needs
Access your data
from anywhere
Use with a choice of
operating systems

Get fast, simple

backup and an easy
way to restore lost
files
Backup files to a
secondary location
Quickly restore files
when accidentally
deleted or lost
Retain files and
data for legal
requirements

Protect your data

and get your
systems back online
quickly
Keep a replica of the
entire server
infrastructureupdated
in near real-time

Get applications
and services
back up and
running in
minutes

Microsoft Azure Backup

Simple and reliable server backup to the cloud
Reliable offsite data
protection

A simple and
integrated solution

Efficient backup and

recovery

Convenient offsite
protection
Safe data with georeplication
Encrypted backups

Familiar interface
Microsoft Azure integration

Efficient use of
bandwidth and storage
Flexible configuration
Flexibility in recovery
Cost-effective and
metered by usage

Microsoft Azure Backup pricing

$0.20 per GB /month
No associated restore

charges
No server licenses
required

Scenario: Simple cloud backup

Contoso has
invested
over

$2,50
0
in software to
operate thirdparty Backup
backup
Microsoft Azure
tools
tool is free and

supports all of the

applications

Contoso
pays
between
$100$150 per
month for
online
storage
The Microsoft
Azure
Calculator
makes it easy
to find out the
monthly costs
for the storage

Contosos data is
backed up and
encrypted
onpremises, and
encrypted over the
wire during the
transfer. It is
encrypted
in Microsoft
Azure

Contoso is the
only owner of
the encryption
key

Select recovery services

Option 1: Create a backup vault

Option 2: Select an existing vault

Microsoft Azure Backup quick start

Download vault credentials

Download Microsoft Azure Backup

Agent

Install the Agent on the server

Configure proxy settings

Use custom proxy settings

Prerequisites and installation

Server registration

Select vault credentials

Enter passphrase

If your passphrase is lost or forgotten, the data cannot be recovered. Microsoft

Service Online does not save or manage this passphrase. It is strongly
recommended you save your passphrase to an external location like a USB drive
or network drive.

Registration complete
Registration Complete

Proxy Configuration

Vault Credentials

Encryption Setting

Registration

Open Schedule Backup wizard to configure backups for items in this server

Register

Close

Setup summary

Create a backup vault

under Recovery Services

Register server

Enter vault
credentials

Download vault
credentials for the backup
vault

Download and install

agent on the onpremises server

120 days retention with a daily backup

schedule

120 weeks retention with a weekly

backup schedule

9-year retention with a monthly

backup schedule

Demo

Microsoft Azure Backup

Partner
Opportunities:
Implement Azure
Backup as a cloud
backup solution for
SMB customers
Provide better restore
point and retention
polices than other
solutions to meet
customer SLAs
Start a pilot for SMB
customers using
Azure IaaS, PaaS, and
storage services

Module 1 Summary
Microsoft Azure overview and
calculating costs
Microsoft Azure Backup

Microsoft Azure tools

Hands-on Lab 1
Setup Azure Pass
Microsoft Azure Backup

Module 2: Azure Virtual

Networks

Module 2 Objectives
what you will learn
Overview of Microsoft Azure Virtual Networks
Azure Virtual Network Provisioning
Point to Site VPN
Site to Site VPN
Dynamic IP Addressing
Virtual IP Addressing
DNS Management
Traffic Manager Overview
Microsoft Migration Accelerator
MMA Overview
MMA Architecture

Scenario: Virtual IP addressing in the

cloud
Contoso has decided that migrating to Microsoft Azure is a costsavings move and will improve productivity by allowing
employees
To use mobile devices to access commonly used intranet data
and applications from the road
The next challenge is to set up
virtual networking on the
Microsoft Azure side and to
connect the on-premises users
and resources to the Microsoft
Azure cloud

As part the pilot

rollout of Microsoft
Azure virtual
machines, the Virtual
IP Addresses (VIPs)
will be set up and the
Dynamic IP Address
(DIPs) configured

Microsoft Azure
Virtual Network

Set up virtual private networks

in the cloud

Manage as extensions of
on-premises datacenters

Use logical isolation with

network configuration options

Create subnets, private IP

addresses

Bring your own DNS

VPN Device

On-premises

Extending your
infrastructure

Gatewa
y
Subnets in
Microsoft Azure

Point-to-site and site-to-site

Microsoft Azure
virtual network
Site-to-site
VPN
<subnet
1>

<subnet
2>

<subnet
3>

On-premises
VPN
VPN
Gateway

Virtual Network

Hardware VPN or
Microsoft RRAS

Your datacenter
Point-to-site
VPN
Individual
computers behind
corporate firewall

Remote workers

DNS
Server

More options for getting your virtual

network started

Windows Server
New: Software-based
VPN gateway

Routing and
Remote Access
Service (RRAS)

IKE v1, IKE v2

Generic VPN devices
must support

AES 128, 256

SHA1, SHA2

Microsoft Azure Virtual

Network
Your virtual branch office or
Microsoft
Azure

VM 1
Subnet 2

VM 2

ROLE
1

Subnet 1

datacenter in the cloud

Extend your enterprise networks into
Microsoft Azure networking on-ramp for
migrating existing apps and services to
Microsoft Azure
Enables hybrid apps that span cloud and
your premises
A protected private virtual
network in the cloud
Secure private IPv4 networks fully contained
within Microsoft Azure
IP address persistence
Inter-service DIP-to-DIP communication

Scenario: Site-to-site connectivity

Contoso is concerned about
the complexities and IP
addressing challenges of
connecting Microsoft Azure
public cloud services with
on-premises IT infrastructure

The process will use

existing RAS/VPN
services to start a pilot
for a limited number of
users and resources

Connecting the office to the Microsoft Azure

public cloud and to the on-premises resources
is a fairly simple process. It takes place on the
Microsoft Azure side when you use IPSEC to
set up an encrypted connection to the server.

If the pilot is successful, Contoso will invest in

a new VPN appliance that will offer better
performance, monitoring, and logging

IP addressing in Microsoft Azure virtual

networks
Multiple ways to access a virtual machine by IP address:
Virtual IP Address (VIP)
An internet-facing IP address that is not bound to a specific computer or
network interface card
The cloud service that the virtual machine sits within is assigned the VIP
You can have multiple virtual machines in a cloud service; they share the
same VIP
Dynamic IP Address (DIP)
Microsoft Azure uses DHCP to dynamically assign this IP address to your
virtual machine. You rely on DHCP. Do not statically configure your IP
address even for domain controllers
The IP address lease directly equates to the lifetime of the virtual
machine.

Creating a virtual network in the

Management Portal
Custom Create VNet

Quick Create VNet

Extending your infrastructure

Securely connect to the Microsoft Azure Virtual Network from anywhere
Uses VPN client in Windows operating system
Traverses firewalls and proxies
Microsoft

On-premises
datacenter

Azure datacenter

Site-to-site
VPN

VPN

VPN

Point-to-site VPN

Individual
computers behind
corporate firewall
Remote workers

Demo

Microsoft Azure Virtual Networks and

Gateways

Hands-on Lab 2A
Create a Microsoft Azure Virtual Network
Create a Site to Site Gateway

User Microsoft Azure DNS, or

bring your own DNS
Microsoft Azure DNS (IDNS)
You can create your own hostnames
You dont need to configure anything
Resolves VMs by hostname within the same cloud service
Resolves VMs by Fully Qualified Domain Name (FQDN) within the
same virtual network
Machine names are modeled explicitly and registered in the DNS
service
Standard DNS lookups are supported
Bring your own DNS (BYODNS)
Name resolution between cloud services
Multiple hostnames for the same virtual machine
Cross-premises name resolution
Reverse lookups (PTR)
Wins and NetBIOS name resolution

Microsoft Azure Traffic Manager

Build highperforming cloud

applications

Planning for
disaster recovery

Upgrade cloud
applications
seamlessly

How does Traffic Manager work?

1. User requests information using the company domain name.
2. The DNS Resource Record (DNS RR) for the company domain uses a

CNAME record and points to a Traffic Manager domain in Microsoft

Azure Traffic Manager.
3. The Traffic Manager domain is part of the Traffic Manager profile that
you create. You also create rules within this profile. The rules you
select dictate the load balance method you want to use and what you
want to monitor for health.
4. Traffic Manager processes the rules and returns the DNS name of the
cloud service, which is later resolved to the IP address.
5. The user contacts the service directly, by IP address. This information
is cached on the clients computer. This means the client will continue
to interact with the selected service until that time-to-live (TTL) value
expires.

How do I configure Traffic Manager?

You can configure Traffic Manager in the Management Portal.
1. Create a Traffic Manager Profile.
2. Add endpoints.
3. Configure the DNS TTL.
4. Select the load balancing method.

Round Robin
Performance
Failover (be sure to adjust the failover order)

5. Configure Monitoring.

You can either monitor / (default directory of the services) or create a file with
the same name in each cloud service and allow Traffic Manager to perform an
http(s) GET on the file. Then specify in Traffic Manager.

6. Save your changes.

Demo

Connecting on-premises Networks to

Azure

Scenario: Migrating workload

On-premises
workloads on HyperV
and bare metal
Need an
orchestrat
ed
migration
solution
for HyperV to
Microsoft
Azure

Contoso has several VMs

that are currently running
on-premises and need to go
to Azure
Contoso has about eight Windows Server
2003 machines that need to be migrated
to Windows Server 2012 R2. Instead of
buying new in-house sever hardware,
Contoso has decided to invest in
Microsoft Azure IaaS for the new hosting
platform.
Most applications have been tested, so
the bulk of the migration will be moving
VM and servers to Microsoft Azure.

Microsoft Migration Accelerator: Key

features
Heterogeneous
Multitenant Migration
workloads

Portal

Microsoft Migration Accelerator (MMA)

migrates Windows physical and virtual
workloads and Amazon Web Services
(AWS) workloads into Microsoft Azure,
regardless of underlying hardware and
storage

MMA provides a web-based portal with

three levels of tenancy for self-service
and SI partner-driven migrations

N-tier application
recovery

Best-in-class cutover
time

MMA performs guest-level application

discovery and enforces consistency
across all VMs in a multitier application

MMA performs end-to-end recovery

orchestration such as network and
endpoint adaptation and recovery
sequencing

MMA: Prerequisites
Sign-up
Preview
announced on
Microsoft Azure
homepage, blogs
Accept preview
terms on landing
page
Request MMA
Portal sign-up,
bits, and
documentation
access

Subscribe
Get a Microsoft
Azure
subscription
Bandwidth
S2S VPN or NAT
IP for Cloud
Gateway
Sign-up response
email with followup instructions

Provision
Download
software and set
up two
management
VMs in Microsoft
Azure
subscription
Download
software and set
up one
management VM
on premises

MMA: Workflow
Discover
Physical,
virtual, AWS
Application
(SharePoint)
Windows 2008
and above

Protect
Select
Microsoft
Azure
subscription
Replication
settings
Map storage
account

Cut over
Select servers
and recovery
order
VM and
network
settings
Specify end
points

93

MMA components
The following components are required for cloud services to
work:
Mobility Service
Master Target (MT)
Process Server (PS)
The Migration Accelerator (MA)
Configuration Server (CS)

MMA: Reference architecture

VMware

Physical

Other
rc
O

n
io
at

Storage

Data
Chann
el

r
st
he

Comput
e

Process
Network Server

Master
Config.
TargetServer

Customer 1

MMA
Multitenan
t
Portal

Physical

an n e l
Data Ch

Other

Master
Config.
TargetServer

Customer 2
Comput
e

Storage

Customer 2

Network
s

Process
Server

O
rc
he
st
ra

VMware

ti
on

Customer 1
Datacenter

Microsoft Azure

Microsoft Azure

95

Outbound port configurations

Outbound ports to open for data communication: The Configuration
Server (CS) uses HTTPS (443), and the Process Server (PS) uses ports
9443 and 9080

Primary server discovery

1. Discover
VWware, physical,
and AWS primary
workloads

3. Primary workload
application details
2. Select one or
more primary
workloads

Install mobility service

Provide credentials
and select push
server

Create server groups

Automatic or
manual server
groups

Grouped servers list

Microsoft Azure subscription discovery

Register Microsoft
Azure subscription

Replication and target settings

Provide replication
settings
Select Microsoft Azure
subscription and
storage account

Monitoring

Monitor protected
servers per
customer

Detailed replication
settings and trends

Select servers for cutover

Servers selected for

migration

Partner
Opportunities:
Grow business by
expanding SMB
customer networks
to Azure using S2S
VPN
Grow customer
relationships by
integrating onpremises servers
with Azure to meet
business needs in a
timely manner
Migrate VMs with
MMA to reduce risk
and complexities

Module 2 Summary
Virtual Networks overview

Site-to-site communications

Partner / appliance landscape

Microsoft Migration Accelerator

Hands-on Lab 2B
Connect on-premises environment to Azure

Module 3: Microsoft
Azure Virtual Machines

Module 3 Objectives
what you will learn
Overview of Microsoft Azure Virtual

Machines
Azure IaaS
Supported Servers and Roles
Availability Sets
Affinity Groups
Deploying Workloads
VM Tiers
Azure Site Recovery
Architecture
Creating Protection Groups

Microsoft Azure Infrastructure as a Service

(IaaS)
Scalable on-demand
Virtual
Machines

Windows
Server

infrastructure in the
cloud

Linux

Your app in
the public
cloud
VHD

Import
VHDs

Your
datacenter

Microsoft Azure

Growing list of validated

and Microsoft-supported
workloads
Secure private network
connection to onpremises
Connect with onpremises Active
Directory and domains
Use what you know and
manage with System
Center
Integrate with Microsoft
Azure app, data, and

Scenario: Azure IaaS

Contoso expects
to
implement 10+
new
VMs this year

Contoso will SAVE

approximately

40

Aging hardware
will need to
upgraded and new
hardware will
need to be
purchased to
support the new
machines

As the number of
workloads and hosts
grows, servicing the VMs
and hosts
becomes more complex
and manual

of the IT costs of running onpremises servers by migrating their

virtual machines to Microsoft Azure

Servers supported on
Microsoft Azure Virtual Machines
Microsoft BizTalk Server
Microsoft Dynamics AX
Microsoft Dynamics GP
Microsoft Dynamics NAV
Microsoft Forefront Identity Manager
Microsoft High Performance Computing (HPC) Pack
Microsoft Project Server
Microsoft SharePoint Server
Microsoft SQL Server
Microsoft System Center
Microsoft Team Foundation Server

Server role support on

Microsoft Azure virtual
Active Directory Domain Services
machines
Active Directory Federation Services
Active Directory Lightweight Directory Services
Application Server
DNS Server
File Services
Network Policy and Access Services
Print and Document Services
Remote Access (Web Application Proxy)
Remote Desktop Services*
Web Server (IIS)
Windows Server Update Services

Persistent Virtual Machines

with geo-replication

Microsoft Azure
Storage

Availability sets
Meet SLA by
deploying multiple
instances in
availability sets
Ensure availability
during updates and
maintenance
Adds Continuous
Availability for
Applications

Fault Domain

Fault Domain

Rack

Rack

Virtual
Machine

Virtual
Machine

IIS1

Web Availability Set

Virtual
Machine

SQL1

IIS2

Virtual
Machine
SQL Availability Set

SQL2

Affinity groups
Locate your compute,
network, and storage
resources close
together in the same
datacenter
Get better
performance
Get lower latency
Reduce egress costs

Affinity
Group

You bring it; we run it

Virtual
Machines

Scalable, on-demand
infrastructure for your
apps

Import
VHD

Business
application
SQL
Windows Server
Server
Active Directory

Apps with public Web front

ends, variable traffic sitting in
a perimeter network
Existing custom apps,
specialty servers with batch
processing patterns
No app changes same VHD
format
Manage with tools you know

Inter
net

Windows Server
Active Directory

System CenterMicrosoft
Operations
Server
Manager

On-

Business users

Microsoft Azure

Business users

Scenario: Preparing to move

workloads to Microsoft Azure
Contoso is ready to
move several
production
workloads to
Microsoft Azure VMs

The onpremises
environment
will remain
unchanged to
avoid the risk
of downtime

Once communications and access is

tested,
application deployment, virtual
networking, and Active Directory
integration
testing
will to
begin
Contoso
wants
use a phased
approach of integrating Microsoft
Azure and on-premises IT resources
to ensure a smooth
transition

2-3 on-premises VMs

will be imported into
Microsoft Azure to gain
confidence and comfort
with the VHD import
tools
Contoso will work with an experienced
cloudintegration partner to create the onpremises
integration with Microsoft Azure IaaS
The solution will allow Contoso to
services

expand and converge infrastructure

as needed to keep up with demands
and save costs

Build, test, deploy

Enable innovation
with test and
development
labs in the cloud

VHD

> PowerShell
Windows
Server

Cost effective

Use existing
development tools and
languages
Access on-premises

SQL Server

Lab Sandbox

Improved developer
agility
Ship-tested in realistic
scale

Virtual
Machines
Virtual
Machines
Virtual
Machines

Visual Studio

Developer

Onpremises

Microsoft Azure

Microsoft Azure VM security

considerations

The VM is connected to the Internet

RDP inbound is enabled by default
RDP port 3389 cannot be used
Use a strong password
The VM has unlimited outbound network access
Who can control the VM?

Microsoft Azure Virtual Machine tiers

Charge rate by the minute
Microsoft charges for virtual machines by the minute
Prices are listed as hourly rates and are billed based on total number of minutes when
the virtual machines run for a partial hour
Basic compute tier
New tier of compute instances
Similar in configuration to the Standard tier, but with lower prices
Does not include load balancer and auto-scaling
Well-suited for single instance production applications, development workloads, test
servers, and batch-processing applications that might not require these features
Standard compute tier
This tier of compute instances provides an optimal set of compute, memory, and I/O
resources for running a wide array of applications
Include both auto-scaling, load balancing, and internal load balancing capabilities at
no additional cost
Internal load balancing feature is currently in preview

Basic tier virtual machine

sizes
Size

A0

CPU
cores

Memory Disk sizes virtual machine

768 MB

A1

Shared
(0.25)
1

A2

3.5 GB

A3

7 GB

A4

14 GB

1.75 GB

OS = 127
GB
OS = 127
GB
OS = 127
GB
OS = 127
120 GB
OS = 127
240 GB

Max 1TB
disks

GB, Temporary = 20

Max.
IOPS
(300 per
disk)
1x300

GB, Temporary = 40

2x300

GB, Temporary = 60

4x300

GB, Temporary =

8x300

GB, Temporary =

8x300

Standard tier virtual machine

sizes
Size

CPU
cores

Memor
y

A1

Share
d
1

A2

768
MB
1.75
GB
3.5 GB

A3

7 GB

A4

14 GB

A5

14 GB

A6

28 GB

A7

56 GB

A8

56 GB

A0

Disk sizes virtual machine

OS =
GB
OS =
GB
OS =
GB
OS =
GB
OS =
GB
OS =
GB
OS =
GB
OS =
GB
OS =

Max. data disks

(1 TB each)

127 GB, Temporary = 20

Max. IOPS
(500 per
disk)
1x500

127 GB, Temporary = 70

2x500

127 GB, Temporary = 135

4x500

127 GB, Temporary = 285

8x500

127 GB, Temporary = 605

16

16x500

127 GB, Temporary = 135

4X500

127 GB, Temporary = 285

8x500

127 GB, Temporary = 605

16

16x500

127 GB, Temporary = 382

16

16x500

Demo

Provisioning and managing virtual

machines

Azure Site Recovery (ASR)

What it takes to keep business running when disaster
strikes
Automate,
automate, automate
Too
many complications,problems
and
mistakes
Tighter
integration
systems
and availability /
Too
much
data with between
insufficient
protection
data protection
Eliminate tape management
Time-intensive
media management
Implement
testable
solutions
for data
Untested
DR
& decreasing
recovery
recovery
confidence
Achieve cost
and operations stability
Increasing
costs

Scenario: Disaster recovery for

Hyper-V workloads
Contoso has some
workloads running in
Microsoft Azure and
some on-premises

The onpremises
environment
will need to be
protected with
off-site replicas

The disaster recovery solution needs to

be powerful enough to recover groups of
servers that operate together (2- and 3tier applications) as one
Contoso wants to ensure a smooth
transition from on-premises Hyper-V
to Microsoft Azure and visa versa.
Microsoft Azure will serve as the
recovery site

10-15 on-premises VMs

need to be protected
with no more than 15
minutes of data loss

The disaster recovery solution needs to

be simple to use and include
orchestrated recovery of all or some
VMs. It must support the easy addition
of new workloads
The solution will allow Contoso to
expand and converge infrastructure
as needed to keep up with demands
and save costs

Key Components of ASR

On-premises to Microsoft Azure protection (Site-toAzure)
Microso
ft Azure
Microsoft
Azure Site
Recovery

n
ratio
t
s
e
Orch and
tion
a
c
i
l
Rep nnel
Cha
Agen
t

Comput
e

Storage

Network
s

On-

Virtual Machine, storage, and

network

tio
a
r
st
e
ch n
Or

Microsoft Azure Site Recovery

How it works: Initial configuration
1.
up site
3. Sign
Create
2.
Create vault
Download agent
Download registration file

4.

Install and register agent on hosts

5. Publish virtual
machines metadata over
HTTPS channel

Windows
Server 2012
R2

Primary site
(On-premises)

AD
SQ
L
LOB

Microsoft Azure Site Recovery

How it works: configuring protection and map

7. Configure
8.
Create Azure
Protection
Virtual Network.
networks
Group and select the RPO

Virtual Network

Storage

6. Create Microsoft Azure

Storage Accounts

AD

Windows
Server 2012
R2

SQ
L
LOB

Primary
Site
(On-

Microsoft Azure Site Recovery

How it works: Configuring protection of clouds and

networks
Site: An abstracted view of
host group to represent a site
or branch.
Protection Group
configuration: Streamlined
configuration of replication
settings, including RPO,
recovery points, VSS-snapshot
integration, and initial
replication.

Microsoft Azure Site Recovery

How it works: enable virtual machine protection

9. Enable protection for
virtual machine

11. Configure virtual

machine network
Virtual Network

Storage

10. Start replication to

customer-owned storage
account
Windows
Server 2012
R2

Primary site
(On-premises)

AD
SQ
L
LOB

Microsoft Azure Site Recovery

Enable Protection for
a VM
Protect virtual machine from
portal
Automatically map to closest
Microsoft Azure size. You can
change it
Guest supported by Microsoft
Azure IaaS
VHDX is supported
Data size supported up to 16TB
16 data disks of 1TB each

Microsoft Azure Site Recovery

How it works: Author Recovery Plan
13. Create recovery plan
Virtual Network

Storage

Windows
Server 2012
R2

Primary site
(On-premises)

AD
SQ
L
LOB

Microsoft Azure Site Recovery

Orchestrated recovery using recovery plans (RPs)

Orchestrated steps for

recovery
Script integration
Manual actions

Microsoft Azure Site Recovery

How it works: Executing Recovery Plans

14. Execute recovery plan

AD
SQ
L
LOB
Virtual Network

Storage

Virtual Machines

15. Orchestrate failover to

recovery site when primary site
is down
16. When primary site is back online,
execute a failover to on-premises
System Center
Virtual
Machine
Manager

Primary site
(On-premises)

AD
SQ
L
LOB

Scenario: Hosting disaster recovery for

SMB customers
Option 1: Partner manages
SMB Microsoft Azure
subscription using a
Microsoft Azure account
setup specifically for the
SMB customer

Option 2: Partner
creates a
subscription for each
SMB customer and
uses shared storage
vault and Vnet

Partner acts as a trusted consultant and

service provider that handles all aspects
of site level disaster recovery for the SMB
customer
Partner performs periodic failover
tests with the SMB customer

Partner sells each SMB

customer Microsoft
Azure through Open
Licensing to pay for ASR
and associated
Microsoft Azure
resources
SMB benefits from
enterprise-class
disaster recovery at a low annual cost,
and partner benefits by reselling
Microsoft Azure services and consulting
Service provide model opens the
door for other hosted Microsoft
Azure services

Microsoft Azure Site Recovery

Executing recovery plans
Test failover
-

No impact on production

Planned failover
No data loss

Unplanned failover
Flexible failback

Demo

Microsoft Azure Site Recovery

Summary
Single click failover
Corporate
VPN
local/remote admin
Microsof
t Azure s
iteto-site V
PN

VPN
Server
LOB Apps

Planned failover
SQL
Server

On-premises

Mic
ros
oft
to-s Azure
i te
VPN point-

LOB Apps

SQL
Server

PROTECTED

Microsoft Azure

Linux

Corporate
network

Unplanned failover
RDS

Test failover

Microsoft Azure
production network

Linux

Microsoft Azure test

network

RDS

Partner
Opportunities:
Grow business by
expanding SMB
infrastructure to the
Azure cloud using
Hybrid deployments
of VMs
Improve SMB
customer
recoverability with
ASR while increasing
revenues with Azure
Open

Module 3 Summary
Microsoft Azure VM overview

Microsoft Azure VM Affinity Groups

Provisioning VMs
AD
SQ
L
LOB

Protecting workloads with ASR

Hands-on Lab 3A
Provisioning VMs
Monitoring and managing VMs

Hands-on Lab 3B
Azure Site Recovery

Module 4: Planning Azure

Workloads

Module 4 Objectives
what you will learn
Overview of Azure VM domain controllers
Business drivers for domain controllers in

Azure
Azure considerations for domain
controllers
Read only domain controllers
Deployment of replica domain controllers
to Azure
Deploy of read only domain controllers to
Azure
Overview of SharePoint deployments to Azure

Traditional
Datacenter

Microsoft Azure

Virtual
Machines

Cloud
Services

Mobile
Services

Web
Sites

Applications

Applications

Applications

Web Applications

Mobile
Applications

Data

Data

Data

Data

Data

Firewall

Firewall Rules

Firewall Rules

Network

Virtual Network

Virtual Network

O/S

O/S

Virtualization
Hardware

Focus on Application

Scenario: Deploying applications

Contoso is
ready to
start its
application
testing and
authentication
to Microsoft
Azure VMs and
applications
from devices
running inhouse

Deployment of a replica
Domain Controller, a
SharePoint 2010
Foundation Server, and a
SQL Server 2014
Standard Edition server

Contoso users can access

applications from their
desktops in the office and
can access the intranet
website using the private
IP address space used for
in-house resources

Once the final phase of the testing is completed, the

rollout will be to integrate the on-premises Active
Directory Domain Services environment with the Microsoft
Azure Active Directory infrastructure to ensure a single
sign-on experience for users

Active Directory on a Microsoft Azure

VM
Business drivers:
Support for prerequisites for existing applications such as SharePoint
High availability solutions for SQL Server databases using AlwaysOn
Availability Groups
Disaster recovery solution for branch offices and a limited set of virtual
machines
Dev/Test workloads

Microsoft Azure VM considerations for

Domain Controllers
Do not sysprep the Domain Controller
From an existing physical machine
P2V a physical machine and move to Microsoft Azure
Move the Domain Controllers VHD file to Microsoft Azure
Create the VM from the VHD
Starting with a new VM
Build a new VM and replicate directory to Microsoft Azure

Microsoft Azure VM considerations for

DCs
Attach a data disk (caching turned off)
Do not use D:\ ( temporary physical disk)

Put logs and account database on attached disk to avoid data loss

Microsoft Azure VM considerations for

DCs
IP addressing
Microsoft Azure VMs require use of a DHCP leased IP address.
The lease is an infinite dynamic lease but not the same as static assigned address that
you would expect to use in and on-premises environment
The leased IP address is routable for the duration of the lease, which is determined by
the lifetime of the service (or VM)
Dont try to assign a static IP to your VM. You will lose communication to it.

Microsoft Azure VM considerations

Deploy DNS on the Domain Controller
The Microsoft Azure DNS does not cover the Active Directory DNS records needed
Register the DNS server in the virtual network

Read-Only Domain Controllers

When to deploy a Read-Only Domain Controller
Staging a Read-Only Domain Controller
Attaching a Read-Only Domain Controller

SharePoint support on Microsoft Azure

Product support
The Microsoft hosted virtualization solution supports SharePoint
Server 2010 and 2013, as well as required technologies such
as Microsoft SQL Server, when these products and technologies
are deployed on the Microsoft Azure platform
FAST Search support
Do not support Microsoft FAST Search Server 2010 for
SharePoint deployments on Microsoft Azure

SharePoint architecture tips

IOPS most important factor
Optimize SQL Server storage
Only SharePoint is on the C: drive

Scale Out, Not Up

Move content databases to separate SQL Server instances
Move search databases to separate SQL Server instances
Add more Web Front End (WFE) servers for scaling SharePoint services
Add dedicated Search servers and SQL Server

Single virtual machines template

Web/app tier
1 x large
(4 cores and 7GB)

Identity tier
1 small
(1 core and
1.75GB)

SQL

AVET
SPWE
B

AVSE
T
SQL

Active Directory/DC/DNS

LB

Data tier
1 x A6
(4 vores and
28GB)

WEB/APP

80

20000
Admin

AVSET
DCSET

Cloud service
Virtual network
Microsoft Azure

Highly available template

LB

Web tier

WEB

APP

SQL Active Directory/DC/DN

2 x large
(4 cores and 7GB)

AVSE
T
SPWE
B

App tier
2 x large
(4 cores and 7GB)

AVSE
T
SPAPP

AVSET
SQLHA

AVSE
T
DCSE
T

80

Data tier
2 x A6
(4 cores and 28GB)
1 x small (Quorum)
(1 core and 1.75GB)

Identity tier
2 small

20000
Admin

Cloud service

(1 core and 1.75GB)

Virtual network
Microsoft Azure

Partner
Opportunities:
Grow revenues by
providing customers
with new IaaS
instances using
Azure VMs
integrated with on
premises domains
Provide SMB
customers a single
sign on solution by
integrating on
premises domains to
Azure

Module 4 Summary
Active Directory Domain Services

SharePoint VMs

Hands-on Lab 4
Deploy a Domain Controller in Microsoft Azure

Module 5: Azure Active

Directory

Module 5 Objectives
what you will learn
Overview of Azure Active Directory
Cloud Identity Management
Discover compatible SaaS applications
Working with Hybrid Identities
Azure Active Directory Application Proxy
Multifactor Authentication
Overview of Azure Active Directory Connect
Setup
Synchronization

Identity as the control plane

Simple
connection
Windows Server
Active Directory
Other
directories

Self-service

Single
sign on
Username

SaaS

Microsoft
Azure
Public
cloud

Onpremises

Microsoft Azure Active Directory

Office 365

Cloud

What is Microsoft Azure Active Directory?

A comprehensive identity and
access management cloud
solution
It combines directory services,
advanced identity governance,
application access
management, and a rich
standards-based platform for
developers

Discover all SaaS apps in use within your

organization

10x

as many cloud apps are in

use than IT estimates

Source: Help Net Security 2014

Microsoft Azure Active

Directory
Cloud App Discovery

Comprehensive
reporting

SaaS app category

Number of users
Utilization volume

Your directory on the cloud

Connect and sync onpremises directories with
Microsoft Azure.

* Microsoft Azure Active

Directory Connect

Windows
PowerShell
SQL
(ODBC)
LDAP
v3
Web services
( SOAP, JAVA,
REST)

Other directories

Microsoft Azure
Active Directory

Making hybrid identity simple

Microsoft Azure Active
Directory Connect
DirSync

Microsoft Azure
Active Directory
Sync
FIM+Azure Active
Directory
Connector

ADFS

Consolidated deployment assistant

for your identity bridge component

Microsoft Azure Active Directory Connect

Sync Engine

ADFS

ADFS is an optional component for

authentication in Hybrid
implementation Password sync can
replace ADFS for more scenarios.

Delivering a seamless user

authentication experience
Active Directory
Microsoft
Azure
Identity synchronization
with password (hash)
sync

Identity
synchronization

User attributes are synchronized using Identity

Synchronization services including a password
hash, Authentication is completed against
Microsoft Azure Active Directory

Microsoft Azure
User attributes are synchronized using Identity
Synchronization tools, Authentication is passed
back through federation and completed against
Windows Server Active Directory

AD FS

Preintegrated SaaS apps in the App

gallery

Your directory on the cloud

Connect and Sync on-premises
directories with Microsoft Azure
Other Directories

Microsoft Azure

2400+ Preintegrated popular

SaaS apps
Easily publish on-premises web
apps via Application Proxy +
custom apps
through a rich standards-based
platform.

SaaS apps

Web apps
Integrated
(Microsoft Azure Active
custom apps
Directory Application
Proxy)

Identities and applications in one place

Microsoft Azure Active

Directory Application
Proxy

Microsoft Azure
Active Directory

https://app1contoso.msappproxy.net/

Application Proxy

A connector that auto connects to the cloud service

Multiple connectors can be deployed for
redundancy, scale, multiple sites, and different
resources
DMZ

Connectors are deployed usually on corpnet next

to resources

Resource
M I C R O S O F T C O N F I D E N T I A L I N T E R N A L O N LY

Corporat
e
Network

Users connect to the cloud service that routes

their traffic to the resources via the connectors

Connecto
r

Connecto
r

Resource

Resource

http://app1

Centrally managed identities and

access
Comprehensive identity and
access management console
SaaS
apps

Centralized access
administration for
preintegrated SaaS apps and
other cloud-based apps
Secure business processes
with advanced access
management capabilities
IT
professional

Your cloud apps ready when you are

Multi Factor Authentication - How it

works
Mobile apps

145676
ALERT

Phone calls

Text
messages

Rich standards-based platform for

developers
Custom
LOB applications can integrate with Microsoft Azure
Active Directory

Sign in to Active Directory-integrated applications with cloud

identities
OAuth2 and
OpenID Connect

Active Directory-integrated applications can access Office

365 and other web APIs

SAML

Applications can extend Microsoft Azure Active Directory

schema
Cross-platform support (iOS, Android, and Windows)
Open standards
(SAML, OAuth 2.0, OpenID Connect, Odata 3.0)

WS-Federation

REST based Graph API

Microsoft Azure
Active Directory

SCIM

Microsoft Azure Active Directory Connect

Synchronizes users, groups, and

contacts to Microsoft Azure Active

Directory
Users will have a different

password in Microsoft Azure Active

Directory than they have for the
on-premises Active Directory

Demo

Installing and running Microsoft Azure

Active Directory Connect

Partner
Opportunities:
Grow business by
expanding creating
seamless
authentication
between on
premises services
and Azure resources
and VMs
Guide SMBs through
SaaS application
deployment with
single authentication
and Identity
management

Module 5 Summary
Microsoft Azure Active Directory
Microsoft Azure Active Directory
Connect
Third-party SaaS support and Office
365 integration

Hands-on Lab 5
Microsoft Azure Active Directory
Connect

Wrap up and Q&A

The benefits of selling Azure

Budget
Realignme
nt

Frees up CapEx needed for low

margin hardware for other,
higher margin services

Reduce
nonbillable
time

Eliminate consultant travel

time and drive up utilization
rates

Strategic
Relationshi
p

A shift from the break-fix IT guy

toward cloud strategy and oncall service availability

Increase
Margins

Aggressive investments in
channel incentives create a
higher upside on the sale

Geographic Removes reliance and

expectation that someone
Reach

needs to be physically present

to solve issues increases
valuation

Why Microsoft
Microsoft offers compelling competitive differentiation to customers
Single vendor across clouds private, public and hosting provider.
Single point of support for infrastructure, OS, services, and
applications.

Tenured experience and enterprise credibility.

Single vendor for Infrastructure-as-a-Service (IaaS) and Platform-asa-Service (PaaS).
SharePoint, SQL Server, and Windows Server run best on Microsoft
Azure.

Introducing our new technical benefits

structure
Effective end of
September 2014

Cloud
Performance

Competencies:
Cloud Platform
Cloud Productivity,
Small and Midmarket Cloud

Hybrid

On Premises

Competencies: App Dev, Collab

Competencies:
All other

& Content, Communication, Data

Platform, Datacenter, Dev &
Deployment, Messaging, Mid Market
Solution Provider, Project & Portfolio
Mgmnt

50 Advisory Hours, Pre-sales Support, Partner Support Community

Gold

Unlimited Signature Cloud

Support*

20 Product Support Incidents

10 Signature Cloud Support
Incidents*

20 Product Support Incidents

20 Advisory Hours, Pre-sales Support, Partner Support Community

Silver
Action Pack
Network

Unlimited Signature Cloud

Support*

15 Product Support Incidents

15 Product Support Incidents

5 Signature Cloud Support

Incidents*

5 Advisory Hours (with first cloud sale), Partner Support Community

10 Product Support Incidents
Partner Support Community
Online Interactive Sessions
*Currently limited to Office 365 and Microsoft
Azure

Find out more in the support section on www.Microsoft.com/partner

Continue learning with Azure Internal Use

Rights
What to
Test?

Why?

Where to
Start?

Azure Scenarios for SMB

Develop expertise now in

a controlled environment
using $100 of monthly
Azure credits at no charge

Partner Programs, Azure

Technical Scenario 101s

Azure Benefits through MPN (MAPS)

Azure Benefits through MSDN
Find out more: http://Aka.ms/azureiur

Azure 101s
Azure Backup Virtual Machines Active Directory
Websites

Incentives and promotions

Make a strong start with timely new offers designed to give you an edge
Check out your local incentives
Microsoft offers a rich incentive program with a growing focus on
cloud-related incentives
Expand your cloud practice to earn margin and cloud incentives
with Azure in Open Volume Licensing for SMB
Check out MPN for more information http://aka.ms/incentives

Connect with your local Microsoft or Distributor team to

learn more about other promotional offers in your area

Get started
Power up your
marketing and
sales

http://aka.ms/modernbiz
Azure in Open content http://aka.ms/AzureVAR

Hone your
technical skills &
learn more about
Azure in Open

More Tech Series content, on demand! http://

aka.ms/smblearningpath
Cloud Sure Step http://aka.ms/cloudsure-step

Capitalize on
current incentives

http://aka.ms/incentives