Microsoft Cloud Adoption Framework, commonly called CAF, helps organizations avoid one of the most common cloud mistakes: moving into Azure before deciding how the environment should actually work. Creating an Azure subscription and deploying a virtual machine is easy. Building an environment where applications, security, networking, costs, governance, and operational responsibilities remain manageable as the organization grows is much harder. CAF provides Microsoft's structured guidance for tha...

Azure Image Builder solves a problem that becomes increasingly difficult as environments grow: manually creating and maintaining standardized virtual machine images. The traditional process often starts with a clean VM. An administrator installs Windows updates, applications, monitoring agents, security tools, certificates, and configuration changes. The VM is tested, generalized, and finally captured as an image. That approach can work, but it depends heavily on people remembering every step. W...

Microsoft Copilot can feel remarkably intelligent in a demo. It can find a project document, summarize a policy, extract information from SharePoint, and connect pieces of enterprise content into a convincing answer. But there is a fundamental architectural limitation hiding behind that experience: retrieval is not memory. Copilot can search your organization, but that does not mean it has built a persistent understanding of your organization. In this deep dive, we explore the difference between...

In this episode of the M365 Show, Mirko Peters speaks with Fergus Kidd, Microsoft MVP, Co-Founder and CTO of FieldPal AI, about moving enterprise AI beyond the desk. While much of the conversation around Microsoft Copilot, generative AI and productivity focuses on knowledge workers, Fergus makes the case for the people maintaining infrastructure, repairing equipment, carrying out inspections and keeping essential services running. These frontline teams often work with limited connectivity, limit...

Azure Compute Fleet is designed for a very different scale of compute problem. Creating one virtual machine is straightforward. But when a workload suddenly needs hundreds or thousands of workers, choosing one exact VM size can become a major limitation. The VM size you selected might not have enough capacity in your preferred region. Another size could work, but pricing may be different. Spot VMs can dramatically reduce costs, but Azure can reclaim them. Managing all of those options manually q...

Azure Update Manager brings operating system patching into one central Azure-native service. Instead of managing updates through scattered tools, separate server lists, and disconnected reports, it gives IT teams a common place to assess missing updates, schedule maintenance, install patches, and verify what actually happened afterward. The important question isn't simply whether patching started. It's whether every required machine was successfully updated, which systems failed, which servers s...

Azure Elastic SAN addresses a storage problem that often appears only after an Azure environment begins to grow. One virtual machine with one Managed Disk is simple. But as more VMs, databases, and applications appear, each workload can end up with separate disks, separate performance limits, and separate capacity decisions. The result can be inefficient: one workload may be paying for storage performance it rarely uses while another workload needs additional capacity that it cannot borrow. Azur...

Microsoft 365 transformation is often discussed as though success can be engineered by following the right framework closely enough. Define the strategy, prepare the environment, migrate workloads, establish governance, train users, measure adoption, and continue optimizing. On paper, the process appears logical and comprehensive. In practice, organizations can follow almost every recommended step, successfully deploy Microsoft Teams, SharePoint, OneDrive, Microsoft 365 Copilot, and the wider Mi...

Microsoft’s AI strategy becomes much easier to understand once we stop asking which model is better. The important question is no longer whether MAI-1 can beat Phi-4, whether Phi-4 is more efficient, or which model should become the enterprise standard. Those questions assume that both models are competing for the same job. They are not. Microsoft is building toward an architecture in which different forms of intelligence perform different roles. Phi-4 represents the fast, efficient Runtime laye...

Microsoft Defender Vulnerability Management goes far beyond running a vulnerability scan and installing patches. The real challenge isn't finding vulnerabilities. It's deciding which weaknesses create the most risk, what should be fixed first, who should fix it, and whether the remediation actually worked. A vulnerability scan might return hundreds or thousands of CVEs. Defender Vulnerability Management adds the device, threat, exposure, and business context needed to turn that enormous list int...

Microsoft’s AI strategy becomes much easier to understand once we stop asking which model is better. The important question is no longer whether MAI-1 can beat Phi-4, whether Phi-4 is more efficient, or which model should become the enterprise standard. Those questions assume that both models are competing for the same job. They are not. Microsoft is building toward an architecture in which different forms of intelligence perform different roles. Phi-4 represents the fast, efficient Runtime laye...

Artificial intelligence was supposed to transform how organizations access information, make decisions, and execute work. Microsoft Copilot, enterprise AI agents, and generative AI promised to remove the barriers between employees and organizational knowledge. But many companies are discovering a fundamental problem: employees can ask AI better questions and receive better answers, yet they still have to navigate SharePoint, Excel, business applications, approval systems, and other tools to actu...

Microsoft Defender External Attack Surface Management, or Defender EASM, helps organizations understand a critical security question: what can someone outside your company actually see? Your public footprint is much larger than your official website. Forgotten subdomains, old campaign pages, test environments, cloud services, public IP addresses, certificates, and internet-facing servers can remain visible long after the teams that created them have moved on. Defender EASM approaches security fr...

Microsoft Defender for Cloud can sound like another antivirus product because of the Defender name. In reality, its scope is much broader. Instead of focusing on a single laptop or server, Defender for Cloud helps organizations understand and improve the security of their entire cloud environment. It shows how securely resources are configured, identifies suspicious activity, and helps teams prioritize what should be fixed first. ㅤ ㅤ WHY CLOUD SECURITY GETS COMPLICATED Modern cloud environments ...

Every organization creates contracts, financial reports, employee records, policies, and countless business documents that must be retained for legal, regulatory, and operational reasons. While modern work happens across SharePoint Online, OneDrive, Microsoft Teams, and Exchange Online, organizations still need clear rules defining which documents become official records, how long they must be preserved, and when they can safely be deleted. In this Microsoft Knowledge Nuggets episode, Mirko Pete...

Despite the rapid growth of Artificial Intelligence, Power BI continues to be one of the most valuable business intelligence platforms available today. In this episode of M365.FM, Microsoft Fabric Super User and Microsoft MVP Thummalacherla Krishnakanth explains why strong analytics foundations remain essential, even in the AI era. The discussion explores Power BI, Microsoft Fabric, DAX, Power Query, enterprise reporting, dashboard design, governance, and the future of business intelligence. Whe...

Business communication has evolved far beyond email. Employees collaborate through Microsoft Teams chats, Outlook emails, Viva Engage, Microsoft 365 Copilot, and other digital communication platforms every day. While these tools improve productivity, they also create new risks involving workplace misconduct, regulatory compliance, sensitive information, insider threats, and inappropriate communication. In this Microsoft Knowledge Nuggets episode, Mirko Peters explains Microsoft Purview Communica...

Every day, employees open files, share documents, send emails, modify Microsoft Teams settings, update compliance policies, and perform countless actions across Microsoft 365. When a security incident, compliance investigation, or legal request occurs, organizations need clear answers about what happened, who performed the action, and when it took place. In this Microsoft Knowledge Nuggets episode, Mirko Peters explains Microsoft Purview Audit in plain English, showing how the Unified Audit Log ...

Choosing the right virtual desktop platform has become one of the most important decisions for organizations modernizing their workplace. Although Azure Virtual Desktop (AVD) and Windows 365 are often compared, they solve different business challenges. In this episode of M365.FM, Microsoft MVP Shabaz Darr explains the architecture, licensing, deployment strategies, and real-world use cases for both platforms. The discussion provides practical guidance for IT leaders, cloud architects, Microsoft ...

The way people work has fundamentally changed. Employees now access business applications from home offices, airports, customer sites, coffee shops, and mobile devices instead of sitting inside a corporate network. Traditional VPNs were designed for an era when applications lived inside company data centers and network boundaries provided the primary layer of security. In this Microsoft Knowledge Nuggets episode, Mirko Peters explains Microsoft Entra Global Secure Access (GSA) in plain English, ...

Modern cloud environments are no longer accessed only by people. Applications, automation workflows, Azure services, DevOps pipelines, AI agents, and background jobs all require secure access to business resources without relying on human interaction. In this Microsoft Knowledge Nuggets episode, Mirko Peters explains Microsoft Entra Workload Identities in plain English, showing how software securely authenticates to Microsoft 365, Azure, Microsoft Graph, and enterprise services without storing u...

Moving workloads into Microsoft Azure is only the beginning of a successful cloud journey. Building a cloud platform that is secure, scalable, automated, and developer-friendly requires a completely different mindset. In this episode of M365.FM, Microsoft MVP Jev Suchoi explains how Platform Engineering helps organizations build reusable cloud foundations that enable innovation while maintaining governance, security, and operational excellence. The discussion explores Azure Landing Zones, Infras...

Modern identity security extends far beyond passwords and multi-factor authentication. While Microsoft Entra ID, passkeys, and MFA help verify that someone controls a sign-in method, they cannot prove important real-world facts such as employment status, completed security training, professional certifications, contractor relationships, or verified identity during account recovery. In this Microsoft Knowledge Nuggets episode, Mirko Peters explains Microsoft Entra Verified ID in plain English, sh...

Windows 365 Link is Microsoft's purpose-built access device for Windows 365 Cloud PCs, designed to deliver a secure, simplified desktop experience without storing applications, files, or user profiles locally. Rather than functioning as a traditional Windows PC, Windows 365 Link acts as a secure gateway that connects employees directly to their personal Cloud PC running in Microsoft's cloud. In this Microsoft Knowledge Nuggets episode, Mirko Peters explains Windows 365 Link in plain English, cov...