Insights on AI automation, ITSM integration, and the future of IT support.
Your Spoke VM Can't Reach the Internet Through the Firewall. Here's the Diagnostic Order That Actually Works.
The ticket looks simple. A VM in a spoke network can't reach the internet, even though it's supposed to route through the hub firewall. Someone checks the NSG. Looks fine. Someone checks the route table. Also looks fine. An hour later, still broken, and now there are three people staring at the same two screens that already looked correct the first time.
Read article →The Azure Landing Zone Prerequisite That Blocks Most First Deployments
You have Global Administrator on the tenant. You have Owner on the subscription. You run the deployment, and it fails. Nothing in the error message tells you why. This is the wall almost every first Azure Landing Zone deployment hits, and it is not in most quick start guides. The cause is a permission model that behaves differently than experienced Azure engineers expect, and the fix takes about five minutes once you know it exists.
Read article →