When a client has their VMs inside VNets, and those VMs are not exposed to Internet, the only option to get to them is P2S VPN. But it uses certificates for authentication (which is not a good idea either). What's worse (!), there NO LOGGING!!! I mean, come on Azure team! This is like a security whole. No one knows who, when and from where got inside a perimeter??? This shouldn't even be here, this should be done from the very beginning.

Sometimes when using a virtual machine, the connection will drop and from the Azure Portal we can see that the virtual machine is rebooting. It would be nice if there was a warning before a reboot.

Enable the native Connector Export and Import functions provided in the AADConnect interface to allow connector configuration backup/restore operations to the same or different AADConnect servers.

Currently MS Azure notifies customers during scheduled outages, however, in the event of an emergency outage, where a customer's server is rebooted, (due to a host hardware failure, or whatever), all customers affected should be notified as a courtesy. We had an outage and had our services not started currently due to a password issues, we would have known that the server went down.

Provide Azure SQL Database service on Azure Stack for compatibility with Azure in the cloud, as currently Stack only supports SQL Server 2016.

Azure App services now support AAD, Google, Face book , Twitter and Microsoft accounts as Identity providers. A generic Open Id compliant Id provider configuration would enable many B2E scenarios

We would suggest Microsoft to lunch azure in Cambodia soonest

We want to make a Oracle application auto-scale (scale-out,scale-in) using IaaS. So the concern with the application is, it supports Admin role enablement only in one VM in its cluster. So if we define a scale set and in case of scale-in the VM with Admin role enabled shuts down then that will be a problem for us. Thus can we have a feature to exclude some VM's from scale-in, so that such business scenarios can also be fulfilled by Azure.

Thanks & Regards,

Pratik

Build a data center (Azure region) to Finland or Sweden. As it stands there is a lot of distance to closest data center from Finland or Sweden.

Having data center close to the customers would bring new customers and also improve service quality to old customers.

Allow groups to be delegated access to manage users in the on-premise Multifactor Server User portal

https://social.msdn.microsoft.com/Forums/azure/en-US/29f8d1a7-d756-46fc-b0d5-857c08e8a56c/multifactor-authentication-server-user-portal?forum=windowsazureactiveauthentication

I have an app Service in Azure that contains some folders and files.

There is a user who has to upload some files to an isolated folder or drive that my app can reach. He has to upload them via ftp.

I like to limit the users access to only one folder or a specific drive that my app service can reach.

We also use Amazon Web Services and looking for metrics in Azure similar to the status checks which you can find here.
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/monitoring-system-instance-status-check.html

As these allow us to monitor for problems such as the following and deal with them using automated runbooks or scale out our hardware :-

System
- Loss of network connectivity
- Loss of system power
- Software issues on the physical host
- Hardware issues on the physical host that impact network reachability

Instance
- Failed system status checks
- Incorrect networking or startup configuration
- Exhausted memory
- Corrupted file system
- Incompatible kernel

Is video distribution of H.265 encrypted with Widevine DRM possible?

The process for capturing VM image and restoring it is much more easier on the classic portal than on the Azure portal. Is there any possibility similar functionality to be added on the new portal?

Why wasn't user domain logins one of the first things added to Azure MFA Server? That makes the most sense. I mean seriously. I understand application 2FA but user login without 2FA is an even higher security risk.

It would be great if user's last password change date is exposed through Microsoft Graph API as it is exposed through MSOL cmdlet.

Provide ability to download an SSL certificate from the key vault for use in other services (e.g. Azure API Management which only accepts uploaded certs).