Microsoft Workloads on AWS

Category: AWS Systems Manager

Update AWS Tools for PowerShell at scale with AWS Systems Manager

In this blog post, I will show you how to update AWS Tools for PowerShell at scale within your environment by using the AWS Systems Manager Run Command. Manually updating AWS Tools for PowerShell across multiple instances can be time-consuming, inefficient, and error prone. These manual operational efforts typically result in a logistical nightmare, especially […]

Automated user creation and provisioning in Active Directory and Amazon WorkSpaces

For customers that have workloads in the AWS Cloud, a common use case is the provisioning of new user accounts in Active Directory, and subsequently, WorkSpaces for these new users. In this blog post, we will present an efficient and reusable solution to automate the creation, provisioning, and deprovisioning of Microsoft Active Directory (AD) user […]

Accelerate Remote Desktop Gateway deployments with AWS Launch Wizard

Introduction In this blog post, I am going to show you how easy it is to deploy a secure infrastructure to manage your Amazon Elastic Cloud Compute (EC2) instances for Microsoft Windows Server through the automation provided by AWS Launch Wizard. AWS Launch Wizard offers a guided way of sizing, configuring, and deploying AWS resources […]

Accelerate Amazon EC2 Auto Scaling for Microsoft Windows workloads

In this blog post, we will present a sample solution and provide recommendations on how to reduce both the cost and time associated with a Microsoft Windows Server instance joining an Amazon Elastic Compute Cloud (Amazon EC2) Auto Scaling group up to 78%. Customers using Amazon EC2 Auto Scaling often desire faster scale-out times to […]

Automate rotating IAM credentials for SQL Server backups to Amazon S3

In this blog post, we will look at how to automate the rotation of the AWS Identity and Access Management (IAM) credentials synchronized with Microsoft SQL Server credentials to meet password rotation requirements. Solution overview The IAM Access key and Secret access key are used to create a SQL Server credential; therefore, to rotate the […]

How to deploy Extended Security Updates for Windows Server 2012 on Amazon EC2 with AWS Systems Manager

In this blog post, I will guide you through the procedure necessary to prepare your Amazon Elastic Compute Cloud (Amazon EC2) workloads to receive Extended Security Updates (ESU) purchased from Microsoft. This is achieved by utilizing the Patch Manager and Run Command capabilities of AWS Systems Manager. Windows Server users are familiar with Microsoft’s regular […]

It’s end of support time again. Are your Microsoft Windows Servers secure?

With the upcoming end of support for Microsoft Windows Server 2012/2012 R2 on October 10, 2023, and the ongoing challenges faced by those on Windows Server 2008/2008 R2, many organizations find themselves in a delicate position. Transitioning away from these older versions isn’t always straightforward. Some organizations are running third-party software that is not yet […]

Rotate Active Directory credentials stored in AWS Secrets Manager

In this blog post, I will show you how to use AWS Systems Manager (SSM) Automation to keep a service account’s password synchronized in Microsoft Active Directory (AD) and a Secret in AWS Secrets Manager encrypted with an AWS Key Management Service (KMS) customer managed key (CMK). This blog post uses AWS Secrets Manager, but […]

Synchronize Active Directory users to AWS IAM Identity Center using SCIM and PowerShell

In this blog post, I will show you how to use PowerShell to synchronize changes to Microsoft Active Directory (AD) users and groups for federated access to Amazon Web Services (AWS). Introduction Some customers have a well-established Active Directory Federation Service (ADFS) implementation and would like to leverage it for federated access to AWS via […]

How to automate your Microsoft Windows Server upgrades using AWS Systems Manager

This blog post is the second of a four-part series on how to upgrade Windows Server 2012 and 2012 R2. The focus of this series is to provide options to handle the upcoming end-of-support event in October. Part 1 overviews the end-of-support dilemma, plus how to perform an in-place, manual upgrade along with an insight […]