Within the Office 365 Group Expiration setup there should be a way to set it such that all groups *except* specific ones are subject to the expiration setting. As it stands now it's the other way around; all groups or only the selected ones. In an environment where users are permitted to created their own groups (something I was told even Microsoft allows) you really need the expiration feature enabled by default. But there are certainly use cases where as an admin you will want specific groups exempted from this setting.

Azure Revered Instances - Applying reservation to single or multiple VMs.

Looks like someone in Azure product team really missed ball on this. Basic things like selecting a VM to apply reservation is not even properly setup or documented. This shows poor work effort provided by the group worked on it.

The limit of tag count for a resource is 15, which is too small.
Is it possible to increase the value?

Please extend DNS zones solution to add forwarding & client features to implement the following in PaaS instead of with VMs:
https://github.com/Azure/azure-quickstart-templates/tree/master/301-dns-forwarder

Use case: use azure dns to forward dns queries to 168.63.129.16 & between subnets. Enterprise DNS would forward to Azure DNS. VNET has Azure-provided name resolution (*.internal.cloudapp.net). In this way Enterprise DNS could dynamically learn of a PaaS offering on VNET.

We have auto start in dev test labs can this feature be added to azure for VMs

Per application request, he wanted to change the WAF configuration to detection mode but this change can affect another applications that are locate di the same application gateway.
We disable rule 942400 but we want to allow either changing prevention/detection by rule or disabling rule by application.

We want to connect several devices with our Azure VNET via the VPN Gateway. Therefore the VPN Gateway is configured for P2S connections.

We want to restrict the devices so that they can only communicate with certain other devices.

To implement this functionality we need to assign the VPN Gateway subnet a NSG. Furthermore this NSG should be dynamic, because the IPs provided by the VPN Gateway to its clients clould not be predetermined.

Currently NSGs are not supported for VPN Gateway subnets as well as there is no way to control IP allocation for connecting devices.

Usually when you create a resource you do not know when was created and by whom, the information in logs is available only for a determined period of time and then lost, that is something that will be very helpful to include in the Overview section.

Currently it seems that because the firewall rules for an Azure SQL DB are just proxy resources in an ARM template that you can not remove them via this mechanism. If you remove them from the ARM template, they are not removed from the Azure SQL DB resource. This means that it is not possible to properly source control the configuration as the source controlled configuration can differ from reality. I think it is vital to allow people to properly manage the Azure SQL DB as code that you work allow the rules to be removed via the ARM template.

We have a managed service provider and some customers that need a degree of permissions at the subscription level. There are several resource groups that I do not want them to have the same level of access they have at the subscription level. For instance, I would like to remove them from the Azure Automation RG or provide them read level access to our OS image folder.

Add slider bar in Choose VM Size pane in portal.azure.com when you do View all so you don't get the whole sha-bang all the time

Cosmos DB can be used with Cassandra API but it is not possible to create table with static columns. Cosmos DB should support static columns.

Add the option to assign a security group to specific authentication methods.
i.e, Security Group "Azure Security Question" can be assigned to the Security Question authentication method. So that only objects in the group are given the Security Question method.

complete explanation at https://social.msdn.microsoft.com/Forums/sqlserver/en-US/b0c08c5d-a6aa-4ec7-9b54-87807cf81548/sql-server-2012-sqlcmd-unexplained-behaviour-returning-output-containing-square-brackets-?forum=sqltools

Basically, SQLCMD does not behave the same way since SQL 2012 when a message starts with an opening bracket.
The following command returns an empty string when previous version returned the entire text:
sqlcmd -b -E -S -Q "RAISERROR('[A][B][C]',10,1)"
this one removes the firs value between brackets:
sqlcmd -b -E -S -Q "RAISERROR('[A] [B][C]',10,1)"

When moving a resource (or resource group) to a new subscription.
ask for real movement after the validation, this would enable a dry test upfront for planning

Azure Active Directory B2B account.

Now there isn't possiblity to generate report, if B2B user has activated account or not. It would be good to have feature to list not activated users from administrative perspective. Example when doing acocunt clean up.

There are fields in profile like Source which contain Invited user or Resend invitation button is visible. Those indicates if user hasn't activated invitation.

Or even have automatic removal on directory, if invitation hasn't been approved within X days, B2B account is removed automatically. As if account hasn't been activated, it cannot be used anywhere.