Episodes

Active Directory (AD) is the single crown-jewel system: compromise it and an attacker can own identities, files, mail, GPOs—everything. Breaches rarely hinge on zero-days; they accelerate through identity abuse: one phished user → lateral movement (pass-the-hash/ticket reuse) → privilege escalation (DCSync, Golden Ticket) → domain-wide control. Three weak domains do most of the damage: (1) oversized admin blast radius (no tiering/least-privilege), (2) lax PKI/certificate templates that mint “invisible” admin, and (3) sloppy hybrid identity sync that turns on-prem compromise into cloud compromise (and back). Fixing these three closes the fastest paths to total takeover.

Your SharePoint isn’t “old” — your legacy workflows are. The episode shows how to modernize without rebuilding: keep your lists/libraries, then layer Power Apps for usable front-ends, Power Automate for reliable approvals, AI Builder to auto-classify/extract from PDFs, and Copilot Studio for conversational retrieval and actions. It stresses urgency: SharePoint 2010 workflows are retired; 2013 workflows are disabled for new tenants (Apr 2, 2024) and fully retire in SharePoint Online on Apr 2, 2026. Quick audits + replacements turn a “2013 dungeon” into an AI-powered hub—with governance intact (AI Builder training data stored in Dataverse, visible only to the model owner or approved admins).

Identity is the real border now. In Microsoft cloud the firewall is no longer the decisive wall — Entra ID is. Modern attackers don’t smash doors; they log in using harvested, phished, or purchased credentials. That’s why a password-only world is effectively a natural-1 on defense. Real protection comes from layered verification — MFA so a stolen password no longer opens the castle, Conditional Access so logins are judged in the context of risk, Privileged Identity Management so admin power is temporarily granted instead of permanently exposed, and SSO so users stop creating their own insecure shortcuts. Identity isn’t just a login form, it is the security surface. If Entra ID is weak, every downstream system inherits that weakness. Strengthen identity first — because the attack path starts there now.

Microsoft Fabric fundamentally changes how Power BI handles data. With OneLake and Direct Lake, Power BI can now query lakehouse tables directly with performance similar to Import mode — without creating duplicate copies or maintaining complex refresh cycles. The winning Fabric pattern is simple: Dataflows Gen2 → Lakehouse → Pipelines → Semantic Model → Direct Lake report OneLake becomes the governed vault (think: OneDrive for data). Purview delivers lineage + labeling from day one. Fabric admin controls let you enable it safely in trial capacity first — not in full production. Dataflows Gen2 hydrates the lakehouse. Pipelines keep it alive — and alert you when the 3am goblin breaks a step. Semantic models + Direct Lake then turn that hydrated lakehouse into fast, governed, analytics-ready Power BI. When you blend those moving parts — Fabric stops being a “feature” of Power BI and becomes the platform that powers it.

AI agents are about to feel like real coworkers inside Teams—fast, tireless, and dangerously literal. This episode gives you a simple framework to keep them helpful and safe: manage their memory, entitlements, and tools, and layer prompting, verification, and human-in-the-loop oversight. You’ll learn how to prevent “Agentageddon” with practical governance, risk tiers, and monitoring so agents boost throughput without blowing up compliance.

SharePoint Premium with SharePoint Advanced Management (SAM) is the governance backbone that keeps Copilot from turning oversharing into a data leak. You’ll learn how to spot risky sites with Data Access Governance (DAG), lock down visibility with Restricted Access Control (RAC), use Site Access Reviews to make owners accountable, and apply AI Insights to prioritize fixes. Think moat + walls + watchtowers: RBAC is the moat; SAM builds the walls; DAG/AI Insights are the watchtowers; owners are the guards.

Your first Copilot Studio agent shouldn’t guess policy—it should cite it. This episode shows how to recreate a bad reply in the Test pane, ground answers in real docs, shape a trustworthy persona, and publish a pilot that survives Teams/SharePoint quirks. Treat Studio as sparring, not proof; ground, persona-tune, and channel-test before you scale.

If you can paste the exact title of a file into intranet search and still get nothing back, you don’t have a user problem—you have an Information Architecture (IA) problem. This episode shows how to fix the foundations so both humans and Copilot can actually find things. We break IA into six core elements—global navigation, hub navigation, local navigation, metadata, search, and personalization—and explain how each one supports the others. You’ll see why “Studio-perfect” AI is useless if your sites are a maze, why flat site architecture + hubs beat old nested subsites, and how mandatory, lightweight metadata (content types, owner, status, region) turns search from guesswork into precision. We’ll map the three navigation layers (world, region, street), show quick tests to spot bloat and dead ends, and explain how audience targeting + Viva Connections deliver the right content to the right roles without manual tinkering. Bottom line: fix the map, tag the loot, and target the drop—then C…

Rolling out Microsoft 365 Copilot is only the tutorial, not the boss fight. Your first agent may look perfect in Copilot Studio, but production exposes the real challenges: grounding answers in authoritative sources, governance to prevent sprawl, monitoring for reliability, and licensing/cost controls so the meter doesn’t explode mid-month. Think in layers: the foundation model, orchestrator, grounding, and skills/connectors must operate as one stack—or you’ll scale confident nonsense. Choose the right build path: Copilot Studio for low-code speed and admin guardrails; Teams/Agents Toolkit for full-stack control, custom orchestration, and deep integrations. Then feed the brain: connect SharePoint, Dataverse, Graph data, and external systems (securely) so responses come with citations, not guesses. Lock down Purview labels, DLP, diagnostics logs, and least-privilege roles before broad release, and watch the copilot consumption meter (or PAYG) so testing doesn’t drain production. Succes…

In a recent podcast, Mirko Peters discussed the challenges of choosing between Synapse Link and Dataflow Gen 2 for Dataverse pipelines, emphasizing the importance of making informed decisions to avoid project failures. The conversation highlighted issues that arise when multiple teams create overlapping data links, leading to data duplication and governance chaos. Peters illustrated the differences between the tools: Synapse Link offers greater control and rollback capabilities but requires more complex setup, while Dataflow Gen 2 allows for quick, user-friendly data transformations but lacks robust governance features. He stressed the need for discipline in managing refresh schedules to prevent data loss and budget overruns. The discussion took place in the context of organizations needing to align their data management tools with their specific operational needs, advocating for a tailored approach rather than a one-size-fits-all solution. This topic is crucial as it addresses the po…

Old-school contact centers feel like permanent firefighting: fragmented channels, missing context, repeat questions, and burned-out teams. Dynamics 365 Contact Center flips that script with sentiment analytics and Copilot. Real-time models read tone, word choice, and pacing to detect frustration early, then route priority cases to the right human before tempers spike. From there, autonomous agents take the grunt work—creating/updating cases, organizing knowledge, and building intent libraries—so people focus on judgment calls, not copy-paste. Copilot adds “conversation superpowers”: structured summaries, source-backed answers, and draft replies you can edit, which kill dead air and the dreaded “can you repeat that?” At scale, queues evolve into a proactive engagement engine: sentiment-based routing, predictive alerts, omnichannel continuity, and supervisor dashboards that forecast spikes and shift staffing before backlogs form. The payoff is practical—shorter handle times, fewer escal…

In this episode, we break down the essential steps for securing web applications on Microsoft Azure, focusing on Azure App Service and its built-in security capabilities. You’ll learn what Azure App Service is, why it’s a powerful platform-as-a-service (PaaS) option, and how it simplifies deployment, scaling, and management of web apps, APIs, and mobile apps. We also highlight the key benefits of using Azure—including automatic updates, integrated security features, and seamless scalability. We walk through the core features of Azure Web Apps, such as authentication and authorization options, IP restrictions, TLS encryption, Azure DDoS protection, and integration with tools like Azure Front Door, Azure SQL Database, and Microsoft Entra ID. You’ll also hear how to get started with App Service, choose the right App Service Plan, manage deployments, and follow best practices with CI/CD pipelines, managed identities, and secure secret storage using Azure Key Vault. The episode also …

In this episode, we dive into how to replace measures in Power BI using DAX, helping you simplify your data model, improve report performance, and create more accurate, maintainable calculations. We explain what measures are, why they’re essential for interactive Power BI reports, and how they differ from calculated columns. You'll learn when and why replacing a measure makes sense—whether for performance gains, model cleanup, or updating outdated logic. We walk through the step-by-step process of replacing measures in Power BI Desktop, including analyzing existing DAX, deciding between a new calculated column or a revised measure, and updating visuals to ensure accurate results. We also cover common troubleshooting issues like broken visuals, context-related errors, and performance bottlenecks—and how to avoid them. The episode also explores DAX fundamentals, including essential functions like CALCULATE, VAR, SUM, and SWITCH, along with best practices for writing clean, efficie…

In this episode, we explore Dynamics 365 Sales, Microsoft’s powerful CRM solution designed to help organizations manage customer relationships, streamline sales processes, and drive revenue growth. We break down what Dynamics 365 Sales is, how it fits within the broader Dynamics 365 suite, and why it’s a leading choice for sales teams looking to modernize their workflows. You’ll hear about the platform’s key features—sales force automation, sales forecasting, Microsoft 365 and LinkedIn Sales Navigator integration, Copilot capabilities, and mobile access. We discuss the core CRM concepts behind Dynamics 365 and how it enables a complete 360-degree customer view, empowering sellers to personalize interactions and close deals faster. The episode also highlights the major benefits of Dynamics 365 Sales, including improved productivity through automation, more accurate forecasting, streamlined sales pipelines, and stronger customer engagement. We compare the Dynamics 365 Sales Profes…

In this episode, we break down Microsoft Power BI’s pricing structure to help you understand the different license options, costs, and features available across the Power BI ecosystem. Whether you're comparing Power BI Free, Pro, Premium Per User, or Premium Per Capacity, this guide gives you a clear explanation of how each plan works and what it offers. We discuss how Power BI pricing supports everyone—from individual users exploring Power BI Desktop to large enterprises relying on dedicated capacity and advanced analytics. You’ll hear how each licensing model fits different business needs, what Power BI Pro includes for collaboration and report sharing, and when it makes sense to invest in Premium for scalability, AI-powered features, and improved performance. We also explore Power BI Embedded for app developers and explain how consumption-based pricing factors into capacity planning. The episode covers the key factors to consider when choosing a Power BI plan, including user …

In this episode, we break down the Azure Cloud Adoption Framework (CAF), Microsoft’s end-to-end guide for helping organizations plan, migrate, govern, and operate their cloud environments with confidence. We explore how CAF provides a structured, repeatable approach to cloud adoption—aligning business strategy, culture, processes, and technology to ensure a smooth and successful cloud transformation. You’ll learn the core components of the Azure CAF, including strategy development, planning, readiness, adoption, governance, and ongoing management. We explain why these phases matter, how they reduce risk, and how they help organizations build well-architected, secure, and cost-optimized cloud environments. We also discuss how to assess cloud readiness, define measurable business outcomes, and select the right cloud strategy for your workloads. The episode covers essential governance practices—such as Azure Policy, compliance controls, and cost management—along with best practices…

In this episode, we explore how Power BI and Microsoft Teams work together to create a seamless, collaborative analytics experience. We break down how Power BI’s powerful data visualization capabilities integrate directly into Microsoft Teams, allowing organizations to share insights, discuss reports, and make data-driven decisions without switching apps. You’ll learn the basics of Power BI—connecting to data, creating reports, and publishing dashboards—alongside an overview of Microsoft Teams as a unified workspace for communication and collaboration. We explain how embedding Power BI reports into Teams channels enhances visibility, streamlines discussions, and keeps everyone aligned around the same analytics. The episode walks through practical steps for embedding, sharing, and accessing Power BI content in Teams using the Power BI app. We highlight how teams can collaborate in real time, discuss insights directly next to visualizations, and make reporting part of everyday wor…

In this episode, we walk through how to integrate with Microsoft Dynamics 365 using its powerful API capabilities, focusing on the REST-based Web API that provides secure and flexible access to CRM data. We start with an introduction to Dynamics 365 as a suite of intelligent business applications and explain how its CRM features—sales, marketing, and customer service—become even more powerful when connected through APIs. You’ll learn about the different API options in Dynamics 365, including the Web API and Organization Service, and why REST APIs are the go-to choice for modern integrations. We cover the essentials of getting started: setting up your Dynamics environment, configuring permissions, authenticating with OAuth 2.0, and making your first API call using standard HTTP methods. The episode also breaks down how to perform key data operations—creating, retrieving, updating, and deleting CRM records—using the Dynamics 365 Web API. We discuss how to handle JSON responses, ma…

In this episode, we dive into Microsoft Fabric, the unified data and analytics platform reshaping how organizations manage, analyze, and act on their data. Designed to bring Power BI, Data Factory, Azure Synapse, and other Microsoft services into one integrated environment, Fabric simplifies everything from data ingestion and transformation to advanced analytics and real-time reporting. You’ll learn what Microsoft Fabric is, why analytics play a central role in modern data platforms, and how Fabric creates a single source of truth across your organization. We break down the major components—Fabric Data Warehouse, Data Factory, data engineering tools, SQL capabilities, data science workflows, and seamless Power BI integration. These features enable businesses to build scalable data pipelines, perform complex analytics, and visualize insights effortlessly. The episode explains how Fabric enhances Power BI through real-time analytics, unified data access, and deeper integration wit…

In this episode, we break down Power Pages—Microsoft’s low-code tool for building secure, data-driven websites—and explain how its licensing, capacity limits, and alternative solutions compare. You’ll learn what Power Pages is, how it integrates with Dataverse and the Power Platform, and why organizations use it to quickly create customer portals, partner sites, and self-service web experiences without heavy custom development. We cover the key features of Power Pages, including its low-code design studio, support for authenticated and anonymous users, and native integrations with Power Apps, Power Automate, Power BI, and Dynamics 365. You’ll hear how these capabilities help teams build interactive sites that connect directly to business data and automate workflows across the Microsoft ecosystem. A major focus of the episode is the Power Pages licensing model—how authenticated and anonymous user licenses work, how page views affect pricing, and how Power Apps or Dynamics 365 lic…

AI isn’t an edge case in your SIEM anymore—it’s a participant. This episode asks a hard question: when Copilot surfaces a confidential file your user can technically access, is that a breach, a policy gap, or “works as designed”? We walk through why AI access alerts don’t fit classic kill-chain thinking and how overshared data + weak labeling turn Copilot into an accidental exfil partner. The fix isn’t panic; it’s alignment: Purview/DSPM to map sensitivity and label history, DLP & label-based exclusions to block AI from high-risk content, Defender XDR to correlate AI access with endpoint movement, and prompt/interaction auditing so investigations have receipts. You’ll get a mental model for AI incidents (“malicious, overreach, or justifiable?”), the signal bridges your SOC needs (label change → AI access → downstream movement), and a prewired combo that turns noisy “Copilot touched a file” events into guided, evidence-backed actions. By the end, you’ll have a practical blueprint to…

In this episode, we dive into how R and SQL Server work together to create a powerful data analytics workflow. You’ll learn why SQL Server excels at storing, organizing, and retrieving large datasets, while R specializes in statistical analysis, visualization, and machine learning. When combined, these two tools streamline data processing, reduce duplication of effort, and enable deeper, more efficient data insights. We explore common use cases—such as running SQL queries from R, analyzing SQL Server data with R’s statistical packages, and using R to create visualizations or predictive models based on SQL data. The episode also walks through how to set up your environment, install the required R packages (RODBC, DBI, odbc, sqldf), and configure ODBC connections so R can query SQL Server directly. You’ll learn best practices for writing SQL queries inside R scripts, using T-SQL features, fetching data into R data frames, and mapping R data types to SQL Server types without losing…

In this episode, we break down how modern development teams can fully automate their CI pipelines using dev containers, container images, and command-line tooling. We explore why containerization has become foundational to DevOps workflows, how development containers ensure consistent coding environments, and how automation tools like Docker, GitHub Actions, and CLI utilities streamline everything from build to deployment. You’ll learn what containers are, why they solve the “works on my machine” problem, and how dev containers—powered by devcontainer.json and VS Code—give developers reproducible, portable workspaces. The episode walks through the core components of a CI pipeline, including source control triggers, automatic builds, container image creation, and deployment stages that rely on Docker and container registries. We explain how Dockerfiles define your application’s build instructions, how base images impact performance and security, and how multi-stage builds can dra…

In this episode, we explore how organizations can turn Dynamics 365 Business Central telemetry into powerful insights using Microsoft Power BI. Telemetry is one of the most valuable—and often underused—capabilities in Business Central. It captures performance data, user behavior, errors, and system activity, giving administrators a complete view of how their environment is running. We begin by breaking down what Business Central telemetry is, why it matters, and how it helps companies identify performance issues, track usage, and optimize their configurations. The episode explains how telemetry is collected through Azure Application Insights and what kinds of data Business Central emits—everything from page views and API calls to background sessions and extension behavior. Listeners learn the practical steps for enabling telemetry in the Business Central admin center and how Azure Application Insights becomes the hub for querying, monitoring, and alerting on system activity. We …