For security reasons, we can't use NTP servers such as ”time.windows.com” through the internet. Please implement NTP Servers inside the Azure Data centers.

Glad to see the ability to send invoices via email has been implemented.

However, it's still NOT possible to opt-in for SUPPORT invoices via email. This minimizes the usefulness of invoices via email if I still need to go to the billing portal to access by support invoice.

Please implement the ability send support invoices via email. Thank you.

Right now, the "Match" and "notMatch" conditions only support # for digit placeholders and ? for letters. This is okay, but it would be much more useful to support regex expressions. This would needed for define complex naming policies and tagging standards.

Azure Revered Instances - Applying reservation to single or multiple VMs.

Looks like someone in Azure product team really missed ball on this. Basic things like selecting a VM to apply reservation is not even properly setup or documented. This shows poor work effort provided by the group worked on it.

The limit of tag count for a resource is 15, which is too small.
Is it possible to increase the value?

Please extend DNS zones solution to add forwarding & client features to implement the following in PaaS instead of with VMs:
https://github.com/Azure/azure-quickstart-templates/tree/master/301-dns-forwarder

Use case: use azure dns to forward dns queries to 168.63.129.16 & between subnets. Enterprise DNS would forward to Azure DNS. VNET has Azure-provided name resolution (*.internal.cloudapp.net). In this way Enterprise DNS could dynamically learn of a PaaS offering on VNET.

One Microsoft Cloud Client
Please provide one client for azure (or maybe also office365) with the possibility to expand this client with features.

Actually we have to install many small Clients for intunes, several for OMS and so on.

Maybe it could be one intunes managed client-Software and if there are for example on one machine OMS-features needed, then we can just choose which Feature on which client and the client downloads and installs everything. Same for AIP, Dynamics Plugins and so on.

Thanks, Martin

Currently, invoices are not prepared for payments of the Azure Add-On customers (external services) (i.e. SendGrid).

This causes problems in our accounting. Could you make them available?

Whitelist all Microsoft services including Azure Data Factory when the "Firewall and Virtual Network" option is enabled on Storage account and "Allow trusted Microsoft services to access this storage account" option is selected.

Similar option is already available on Azure Data Lake store, where we can access Data Lake from Data Factory pipelines after the firewall option is enabled.

Per application request, he wanted to change the WAF configuration to detection mode but this change can affect another applications that are locate di the same application gateway.
We disable rule 942400 but we want to allow either changing prevention/detection by rule or disabling rule by application.

Add slider bar in Choose VM Size pane in portal.azure.com when you do View all so you don't get the whole sha-bang all the time

Currently it seems that because the firewall rules for an Azure SQL DB are just proxy resources in an ARM template that you can not remove them via this mechanism. If you remove them from the ARM template, they are not removed from the Azure SQL DB resource. This means that it is not possible to properly source control the configuration as the source controlled configuration can differ from reality. I think it is vital to allow people to properly manage the Azure SQL DB as code that you work allow the rules to be removed via the ARM template.

When moving a resource (or resource group) to a new subscription.
ask for real movement after the validation, this would enable a dry test upfront for planning

Add the option to assign a security group to specific authentication methods.
i.e, Security Group "Azure Security Question" can be assigned to the Security Question authentication method. So that only objects in the group are given the Security Question method.