Practical articles on IT, Microsoft 365, AI and digitalisation.
New articles straight to your inbox.
AI agents run in Copilot Studio, Azure AI Foundry and dozens of other environments — but who manages their identity? Entra Agent ID is now generally available and brings Conditional Access, Identity Protection and lifecycle management to non-human identities. What does this mean for IT teams looking to deploy AI safely?
Read article →
NDES, the Certificate Connector, and on-premises AD CS have long been a source of maintenance and failures. Microsoft Cloud PKI replaces this entire certificate chain from the cloud for Intune-managed devices — and is now included in Microsoft 365 E5 from 1 July 2026 at no extra cost.
Read article →On 14 July 2026 Microsoft removes the last fallback option for RC4 in Kerberos. Anyone who still has service accounts or legacy devices relying on RC4 after Patch Tuesday will hit authentication failures. What changes, which systems are at risk, and what steps should you take this week?
Read article →
Microsoft Purview introduces the Data Security Triage Agent: an AI agent that automatically triages DLP alerts and prompts users via Teams to remediate sensitive files themselves. Public preview launched in June 2026. What does it do exactly, which licence do you need, and how do you enable it?
Read article →
Microsoft is actively rolling out Defender for Office 365 Plan 1 to all Microsoft 365 E3 tenants. That sounds like good news, but part of the protection turns on automatically. Admins who haven't prepared their mail flow and security configuration will be surprised — by blocks that affect users without the admin having configured anything.
Read article →
From July 2026, external users trying to access a SharePoint link via the old one-time passcode method will receive 'access denied'. Microsoft is retiring SharePoint OTP authentication and making Entra B2B guest accounts mandatory for external sharing. What changes, who is affected, and what should IT administrators do now?
Read article →
Manually packaging and superseding every Chrome, Zoom, or 7-Zip update is one of the most time-consuming tasks in endpoint management. Enterprise Application Management in Intune addresses this with a managed catalogue and automatic updates, included in Microsoft 365 E5 from 1 July 2026.
Read article →
From Q3 2026, Microsoft automatically rolls out Intune Suite capabilities for E3 and E5 tenants. Remote Help, Advanced Analytics, Endpoint Privilege Management, and Cloud PKI are now included. But provisioning is not the same as use: without configuration, none of these capabilities reach your end users.
Read article →
Conditional Access policies grow with your environment — but so do the gaps. New employees, shadow IT applications, AI agents with their own identities: each can fall outside your existing policies. The Conditional Access Optimization Agent in Microsoft Entra scans your tenant daily and shows exactly where coverage is missing.
Read article →
On 6 July 2026, Entra ID Conditional Access extends to Windows Hello for Business enrolment and macOS Platform SSO registration. Policy requirements such as trusted locations and authentication strength will then apply during device registration — not only at sign-in. Which policies need reviewing, and what can you still do this week?
Read article →Microsoft is rolling out Authoritative Sites for SharePoint in Copilot this week. With a single PowerShell command you mark a site as a trusted source, so Copilot Chat and Copilot Search consistently prioritise its content over random documents elsewhere in the tenant. How it works, which sites to mark first, and how it relates to Restricted Content Discovery.
Read article →Microsoft has rolled out the Vulnerability Remediation Agent for Intune to all customers in public preview this month. The agent analyses CVE data from Defender Vulnerability Management, prioritises vulnerabilities per device, and surfaces remediation recommendations directly in the Intune admin centre. How does the new Entra agentic identity work, which licences are required, and what can you configure this week?
Read article →
Calling over the internet has long been the standard, but what is under the hood? We explain VoIP for SMEs, from SIP and codecs to IVR and call queues, and how to switch without hassle.
Read article →