Folks, for years people assumed Azure Active Directory ran on Active Directory. It didn’t. It never did. That confusion is one of the reasons Microsoft renamed it to Entra ID. Some folks (looking at you @PrzemyslawKlys 👀) still haven’t gotten the memo. There’s a second myth that’s even more costly. That you need domain controllers in the cloud to manage your servers. You don’t. And Tarek explains why it’s not just unnecessary, it’s a real security risk. So be honest. Are you still running DCs in the cloud?

I think most people multi-tasking with agents could benefit from slowing down most of the stuff you're doing wont really matter- what's your P0? what would it look like if you gave it your full attention?

It's time to drop support for Windows PowerShell, and move to PowerShell 7. Yes, even if it doesn't yet ship in-box with Windows Server. Just install it by default - you can still use WinRM, no need to switch to SSH. .NET Framework is *ancient* and lacks a decade of improvements

This month's Patch Tuesday release addresses a critical #security vulnerability in the #Microsoft Network Device Enrollment Service (NDES). This is a Remote Code Execution (RCE) vulnerability rated critical with a CVSS score of 8.1. If you use NDES with the #msintune certificate connector, update soon. msrc.microsoft.com/update-gu…

It's been a long time coming but PSWSMan v3 for #PowerShell has been released powershellgallery.com/packag…. This is a major upgrade that moves away from the C omi library to a C# WSMan stack. No more root required, better Enter-PSSession experience, and lots more features enabled.

I’ve never tripped on LSD, but I have watched Björk’s live performance of “Cornucopia” on a red-eye flight from Maui to Charlotte after taking Sudafed. ✈️ My goodness, she is intensely and uniquely creative! 🤯

🤔 Why should the AI Administrator role in #MicrosoftEntra be considered Control Plane (Tier 0)? At first glance, it might seem particularly privileged just to manage #AgentIdentities. But there's an aspect that often gets overlooked. (1/7) 👇

Cybersecurity has "assume breach" as a key concept. AI safety/security probably needs a coherent "assume misalignment" concept.

#MDDR 2026 is out – a must-read for everyone in #MicrosoftSecurity. Password spray still leads by volume, but post-authentication attacks keep gaining ground: token theft shows up as a distinct post-compromise tactic. Check out the full report: aka.ms/MDDR2026

It felt like we would never see a day when the Microsoft Graph PowerShell module would implement ALC and help solve dependency conflict issues.😩That day is finally here, thanks to @svrooij! 🎉👏 Release 2.41.0 is hot off the press with his excellent #mvpbuzz-worthy work!🙏💛

Microsoft will make most Microsoft Learn GitHub repo's private by the end of the year. It's a wider problem, which I don't think has been thought through, so here are mine > ourcloudnetwork.com/microsof… As someone who has personally spent many hours of their time, both creating completely new official Learn articles and creating pull requests to fix mistakes in existing articles, it's a shame to see that recognition disappear. #Entra #Learn #Microsoft

We still laugh about this moment three years later…! 😂

If you're unable to run Active Directory PowerShell scripts because RSAT is not on your computer and you don't have admin rights to install it, there are still options. Example: this line in PowerShell will get you the FQDN of a global catalog domain controller:

Shouldn’t the guide just say “stop posting your API keys into every agent?” 🤭😉 I really like the idea, but we MUST secure our tools and credentials first, THEN do the awesome things!

Honestly, how did Gmail not filter this spam immediately?! 😨

Microsoft Scout is now “Autopilot.” I’m sure that won’t confuse anyone. 😆 Maybe they should have called it “Surface Duo” or “Zune.” 😋

Defender for Identity sensor v3 on ADFS, ADCS, and Entra Connect sync is now in preview! 🥳 Make sure you have at least one, reachable DC running the v3 sensor as well ;)

ISOC in Microsoft Defender is a benefit for M365 E5 and E7 customers, it is not a new product. Those lucky customers will save 44% off 3P security log ingestion. I spent all day reading and broke it down here to bring it to you straight: patriotconsulting.com/blogs/…

It's a gray, rainy, Astra High on Fast kind of day. 👨‍💻