Enterprise in the cloud

Finally the long awaited (multi) Device query (MDQ) arrived by the end of February. Time to have a look at it again, as we already have tested it during the private preview. The PG already did a lot of work based on the feedback of the participants, but one thing I directly notice and miss is the ability to export data or to be able to use it outside the query area in some other form. And thing of course, is the 50000 limit of the query, which for bigger companies will be an issue.  Since I use our Log Analytics data on a daily basis, I am curious about MDQ.   So, let’s look at some testing I did over the last 3 weeks.  Device entity A good thing to know, were I ran it to, is  the fact the Device entity is a linked object and implicitly part of all other entities. So, there is no need to join, and when you do, you will get a syntax error. So, this query, which looks to be a valid query, will give a syntax error! But, the funny enough you can do the join the othe...

   Back in the days when we had SCCM, we could easily setup phased deployments. In a cloud native world these controls are missing, but  we can create phased deployments based (dynamic) groups.  In this blog post I will show you how to set it up and use it. Groups First of we need to create groups that contains the devices for each phase. You can of course fill those groups manually, but in larger environments Dynamic Groups will be a better option. We will use the first character of the DeviceId in our dynamic query to select the devices per group.  Keep in mind that the DeviceId is containing hexadecimal characters, so that means 16 options (0 till F) per character. How big you want to make the groups is up to you, but I have chosen for a group for each first character, so 16 groups. With 16 group you have around 6.25% of your devices per group. Of course this is a bit depending on the size of the environment, for 60K+ clients environment the distribution look...