.svg){kind=small}
Why Shadow AI Creates Insider Risk in Microsoft 365
September 2026 | 34 minutes
Shadow AI is changing what insider risk means in Microsoft 365, as AI workers and autonomous agents access data and act without the identity, judgement, or audit trail of a human employee. Learn why AI agent security is now an insider threat problem, and how visibility, AI governance, and human oversight close that gap.
5 Microsoft Defender Features that Help Stop Attacks Faster
August 2026 | 14 minutes
Cyberattacks no longer target just endpoints. Explore how Microsoft Defender helps organizations secure Microsoft 365 with Attack Disruption, Unified XDR, Exposure Management, and advanced email protection.
How to Move from GoDaddy to Microsoft 365 Without a Full Migration
August 2026 | 25 minutes
Moving away from GoDaddy Microsoft 365 sounds like a migration, but it is really a defederation. Your tenant, mailboxes, and files stay in place while you remove GoDaddy's authentication and management layer to unlock native Microsoft 365 administration, security, and licensing controls. The work comes down to sequencing the change correctly and hardening the tenant afterward with Defender for Office 365, MFA, and email authentication.
What's New in Microsoft 365 Business Premium for 2026
August 2026 | 11 minutes
Microsoft 365 Business Premium now includes a 100 GB mailbox and supports Microsoft Defender and Microsoft Purview add-ons. Learn how these 2026 updates affect licensing costs, security, data governance, and Microsoft 365 Copilot readiness.
5 Reasons Employees Ignore Microsoft 365 Copilot and How to Fix It
August 2026 | 30 minutes
Most Microsoft 365 Copilot rollouts stall for cultural reasons, not technical ones, because a license alone does not change how people work. Real AI adoption depends on a try, learn, iterate mindset, aligning Copilot use cases with business goals, matching each task to the right model to control AI credit consumption, and building Microsoft Copilot governance around the 85% of knowledge works who use these tools daily.
What Happens When an AI Agent Goes Rogue in your Microsoft Tenant
August 2026 | 23 minutes
AI adoption is accelerating from simple Copilot prompts to autonomous AI agents that handle real operational work across Microsoft 365. Building "Chief of Staff" agents in Copilot Studio, managing agent identity and audit trails with Agent 365, and mastering token efficiency in the emerging token economy are becoming essential to any SMB AI strategy. Strong data governance and local processing on Copilot + PCs round out a secure, cost-aware approach to Microsoft AI agents.
How to Roll Out Microsoft Copilot Without Wasting the Investment
July 2026 | 27 minutes
Rolling out Copilot for Microsoft 365 without wasting the investment starts with a specific business outcome, not the agent store. Copilot has matured fast, with Cowork reducing reporting errors and WorkIQ pulling context from your emails, meetings, and documents. The payoff comes down to deliberate adoption and staying inside the Microsoft ecosystem, where AI usage stays auditable and your data stays in your tenant.
The Threats Microsoft Defender Sees Before your EDR
July 2026 | 29 minutes
Microsoft Defender passive mode lets organizations run a third=party EDR like SentinelOne or CrowdStrike alongside the Microsoft sensor in Windows, avoiding antivirus conflicts while unlocking features already included with Microsoft 365 Business Premium. This adds threat and vulnerability management, SmartScreen phishing protection, Endpoint DLP, and richer telemetry for the Microsoft XDR portal and Security Copilot.
The GCC High Trap that Kills DoD Contracts
July 2026 | 40 minutes
GCC, GCC High, and Azure Government deliver the compliance guarantees CUI, ITAR, and CMMC Level 2 require. Learn how eligibility, enclaving, and migration shape the right path for your organization.
The Costly Mistake Companies Make When Rolling Out Agentic AI in Microsoft 365
July 2026 | 33 minutes
Agentic AI inside Microsoft 365 moves beyond reactive prompts to proactively surface training, flag team sentiment, and remove repetitive admin work directly inside Teams and SharePoint. Organizations that integrate human success into the Microsoft 365 ecosystem instead of bolting on separate HR tools get more from their Copilot investment, retain talent longer, and build stronger performing teams.
10 Conditional Access Mistakes Leaving your Microsoft 365 Tenant exposed
July 2026 | 36 minutes
Conditional Access is the firewall for identity in Microsoft 365, decided where, when and how users connect to a tenant. This episode breaks down the 10 baseline Conditional Access policies every Microsoft 365 tenant should have. plus two bonus policies with Entra ID P2, covering phishing-resistant MFA with FIDO2 Passkeys, blocking legacy authentication, stopping token theft with managed devices, and hardening admin account under Zero Trust enforcement.
Why Microsoft Copilot Keeps Disappointing your Team
July 2026 | 44 minutes
The Microsoft Copilot Frontier program unlocks early access to Claude Opus in Excel, Copilot Cowork for multi-app workflows, Work IQ for brand voice intelligence, and Microsoft Agent 365 for governing digital identities. Small, specialized AI agents reduce hallucinations, and a quarterly training strategy with internal champions drives real Copilot adoption.
How Attackers Bypass Microsoft 365 MFA Without Stealing Passwords
July 2026 | 13 minutes
Device code flow is the side door attackers use to bypass MFA in Microsoft 365. Learn how to audit Entra ID sign-in logs and build a Conditional Access policy that blocks the vector without breaking Teams phone or conference rooms.
Why Hackers Hate Passkeys: Microsoft FIDO2 Explained with Dom Kirby
June 2026 | 39 minutes
MFA alone no longer protects Microsoft 365. AiTM phishing and token theft bypass SMS, one-time passwords, and push notifications. Phishing-resistant MFA with FIDO2 passkeys, Microsoft Authenticator, and Windows Hello for Business closes the gap through Microsoft Entra ID and conditional access.
Microsoft Entra: The Security Advantage Most Teams Overlook
June 2026 | 28 minutes
Microsoft Entra Suite delivers Zero Trust security across Microsoft 365 and Conditional Access, Entra ID Governance, Identity Protection, and VPN replacement through Private Access, while extending identity control to AI agents and aligning with Microsoft licensing in Microsoft 365 E7.
Navigating SQL Server Licensing and Windows Server Strategies
June 2026 | 37 minutes
How Microsoft CSP licensing for Windows Server and SQL Server impacts core counts, CAL requirements, and Azure costs through Hybrid Use Benefit across on-prem and cloud environments.
Mastering Microsoft Migrations in M&A
June 2026 | 23 minutes
Where merger and acquisitions projects inside Microsoft 365 break down across identity management, device integration, data cleanup, legacy infrastructure, and licensing alignment.
Microsoft 365 Security, Simplified: 8 Must-Do Tenant Hardening Moves to Cut Breach Risk
June 2026 | 23 minutes
How to harden a Microsoft 365 tenant with Conditional Access Policies, close the direct send phishing vulnerability, and navigate Defender for Business vs. Plan 1 and Plan 2 licensing for organizations under 300 seats.
What Microsoft Just Changed and Why It Impacts your IT Roadmap
June 2026 | 27 minutes
Microsoft is pushing AI, security, and licensing changes at the same time. The real question is what actually impacts cost, control, and day-to-day operations right now.
Avoiding a Surprise Bill for Expired Microsoft Subscriptions
June 2026 | 25 minutes
Microsoft is replacing free grace periods with Extended Service Terms, a paid extension at a 23% premium that changes how organizations manage licensing renewals and cost optimization.
How Does E7 Change the Way you Plan for Microsoft AI Costs?
May 2026 | 43 minutes
Microsoft is shifting AI in Microsoft 365 toward consumption-based licensing, introducing new cost, security, and governance challenges for organizations adopting agents.
How to Choose Between Business Premium, E3, and E5
May 2026 | 44 minutes
Microsoft 365 licensing decisions often lead to overspending, driven by misaligned Business Premium, E3, and E5 usage rather than actual security or operational needs.
The Microsoft 365 Security Mistakes That Lead to Breaches
May 2026 | 29 minutes
Business email compromise in Microsoft 365 is often driven by gaps in MFA, Conditional Access, email authentication, and unmanaged accounts that attackers actively exploit.
Where Microsoft 365 E7 Fits in a Security First AI Strategy
May 2026 | 27 minutes
Microsoft 365 E7 highlights a shift from AI capability to control, as organizations look to govern how AI agents operate across identity, security, and enterprise workflows.
Preventing Business Email Compromise in Microsoft 365
May 2026 | 16 minutes
Microsoft 365 account compromises are increasing, often due to phishing, token theft, and identity control gaps that many organizations fail to recognize.
Demystifying Microsoft was created to bring clarity to complex Microsoft environments where decisions carry real risk. The podcast focuses on how Microsoft works in practice, examining real challenges across architecture, licensing, security, and cost management without commentary or hype.
The podcast is hosted by Nathan Taylor, Senior Vice President and Global Microsoft Practice Leader at the Sourcepass Center of Excellence for Microsoft. With more than 20 years of experience supporting small and mid-sized organizations, Nathan brings a pragmatic perspective shaped by real world deployments, security strategy, and close collaboration with Microsoft.
Demystifying Microsoft is built for those accountable for Microsoft decisions and outcomes, offering context and insight to help teams move forward with confidence.
.svg)
A Simple Way to Stay Informed
