Mastering Microsoft Entra Private Access: Step-by-Step Deployment Guide

Entra Private Access

Mastering Microsoft Entra Private Access: Step-by-Step Deployment Guide

Unlock secure, seamless remote access to internal resources with Microsoft Entra Private Access! This comprehensive tutorial walks you through everything you need to know—from understanding the requirements to deploying Entra Private Access in your environment. Learn how to configure connectors, create application segments, enable Conditional Access policies, and even troubleshoot common issues.

Perfect for IT professionals and Azure enthusiasts, this step-by-step guide demystifies the setup process with real-world demos and actionable insights. Stay till the end to explore advanced features like private DNS configuration and make your deployments more efficient. Don’t forget to like, subscribe, and share with fellow tech enthusiasts!

Registry settings code used in the video:

# Configuration script for Entra Private Access Connector
# See https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-configure-connectors

# This code is provided 'as is', without warranty of any kind

#Disable  HTTP 2.0
Set-ItemProperty 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp\' -Name EnableDefaultHTTP2 -Value 0

# Enable TLS 1.2
$TLSPath = 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\'
$ClientPath = 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client'
$ServerPath = 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server'
if (!(Test-Path $TLSPath)) {
    New-Item -Path $TLSPath
    New-Item -path $ClientPath
    New-Item -path $ServerPath
    }
Set-ItemProperty 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client' -Name DisabledByDefault -value 0
Set-ItemProperty 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client' -Name Enabled -value 1
Set-ItemProperty 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server' -Name DisabledByDefault -value 0
Set-ItemProperty 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server' -Name Enabled -value 1
Set-ItemProperty 'HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319' -Name SchUseStrongCrypto -Value 1

Links:

Zero to Hero with Azure Virtual Desktop
https://www.udemy.com/course/zero-to-hero-with-windows-virtual-desktop/?referralCode=B2FE49E6FCEE7A7EA8D4

Hybrid Identity with Windows AD and Azure AD
https://www.udemy.com/course/hybrid-identity-and-azure-active-directory/?referralCode=7F62C4C6FD05C73ACCC3

Windows 365 Enterprise and Intune Management
https://www.udemy.com/course/windows-365-enterprise-and-intune-management/?referralCode=4A1ED105341D0AA20D2E

A Beginner’s Guide to the AZ-900
https://www.udemy.com/course/beginners-guide-az-900/?referralCode=C74C266B74E837F86969

Licensing Information
https://learn.microsoft.com/en-us/entra/global-secure-access/overview-what-is-global-secure-access#licensing-overview

Connector Ports and URLs
https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-configure-connectors#prepare-your-on-premises-environment

Connector Configuration Settings
https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-configure-connectors

GSA Status Icons
https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-install-windows-client#client-statuses-in-system-tray-icon

Set IPv4 Preferred
https://learn.microsoft.com/en-us/entra/global-secure-access/troubleshoot-global-secure-access-client-diagnostics-health-check#ipv4-preferred

Disable QUIC
https://learn.microsoft.com/en-us/entra/global-secure-access/troubleshoot-global-secure-access-client-diagnostics-health-check#quic-not-supported-for-internet-access

Hide or Unhide System Tray Menu Buttons
https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-install-windows-client#hide-or-unhide-system-tray-menu-buttons

Leave a Comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Scroll to Top