Microsoft 365 Copilot Chat is no longer just a conversational wrapper around generative AI. It is becoming a structured intelligence layer that sits across the Microsoft 365 data plane, orchestrating context from multiple document types, identities and workloads. What makes this evolution technically interesting is not the interface. It is how context is constructed, secured…
Month: March 2026
10 Entra ID Configurations That Should Not Be Left in Their Default State
Every Azure architect eventually realises the tenant works, but it is not engineered. Microsoft gives you the building blocks. It is your job to turn them into an identity architecture. Here are the configurations that should not remain in their default state. 1. Replace Security Defaults with Conditional Access Security Defaults are a starting baseline….
Windows 11 Update Breaks Offline Login — What That Really Means
If you heard about a recent Windows 11 update causing “Can’t sign in because your device needs an internet connection” errors — you’re not imagining things. Multiple reports, official feedback and user reproduction steps confirm that after installing the latest cumulative update, some devices refuse to let users sign in if they cannot reach Microsoft’s…
Security That Delivers ROI
When cybersecurity starts generating business value Hello everyone. As usually Alex here, so today I would like to talk about something quite interesting. Security is usually treated as an unavoidable expense. Organisations purchase protection tools, build SOC teams, implement policies and, if we are being honest, mostly hope that nothing catastrophic happens inside the infrastructure….
Kerberos Is Moving to AES by Default: Are Your Domains Ready?
Hi everyone, Alex here again. Today we’re talking about a change in Active Directory authentication that may look small on paper but could have very real operational consequences if administrators are not prepared. In just over a month, the April Windows update will shift Kerberos service tickets to AES encryption by default, moving domains further…
Secure Boot Certificate Expiration in 2026: What Windows Administrators Need to Know
Hi everyone, Alex here again. Today we’re going to talk about a piece of Windows infrastructure that most people never think about — until it suddenly matters. I’m talking about Secure Boot and the upcoming expiration of the Microsoft 2011 certificate in October 2026. Nothing is going to explode overnight, but if you manage Windows…
Microsoft 365 E7: Microsoft’s Next Big Enterprise Bundle?
Hi everyone, Alex here. Welcome back to the blog. Over the past few weeks I’ve been seeing more and more conversations around a possible Microsoft 365 E7 licence. Nothing official has been released yet, but enough signals have appeared across the ecosystem to start piecing together what Microsoft might be preparing. So I decided to…
Architecture Over Illusion: How I Secure Azure Environments in the Real World
When people say “we secure Azure”, they usually mean a collection of enabled settings. MFA is on. Defender is enabled. Policies are applied. Secure Score looks respectable. Formally, everything appears correct. In practice, that may not be the case. The cloud does not forgive illusions. It scales faster than teams can fully grasp the consequences…