I build, write and speak about practical Microsoft cloud engineering: AI agents, Microsoft Intune, endpoint automation and Azure solutions that are meant for real production environments.
AI and Modern Device ManagementDual Microsoft MVP · Intune & Microsoft Foundry
In this blog post I explain how I secure Microsoft Foundry end to end: private networking for agents, Entra Agent ID and RBAC, customer-managed keys and guardrails. Written from an IT admin perspective, with…
Read article: Secure Microsoft Foundry: Network, Identity and Guardrails
Microsoft now offers two big platforms for building AI agents: Microsoft Foundry and Copilot Studio. In this blog post I explain in depth how both work, compare models, pricing, governance, and quality, and give…
Read article: Microsoft Foundry vs Copilot Studio: Which Agent Platform?
This is the first episode of my new unboxing series with Admin By Request. I explain what their Endpoint Privilege Management solution is, how temporary admin rights and per-process elevation work, and why the…
Read article: Admin By Request Unboxed: My Full EPM Walkthrough
In this blog post I show how to evaluate AI agents in Microsoft Foundry. I go through the built-in evaluators, the evaluation wizard in the portal, a runnable SDK example, and how continuous evaluation…
Read article: How to Evaluate AI Agents in Microsoft Foundry Step by Step
In this blog post I explain what Agent Skills are and why they are becoming an open standard across AI tools. I also show step by step how you can build your first own…
Read article: Agent Skills Explained: How to Build Your First Skill
In this blog post I show you how to build your first AI agent in Microsoft Foundry. We create a project, deploy a model, build the agent in the portal, test it in the…
Read article: Build Your First AI Agent in Microsoft Foundry Step by Step
AI agents like Claude Code and Copilot CLI run with your privileges. See how AI agent runtime protection in Defender for Endpoint blocks prompt injection.
Read article: Protect AI Agents with Microsoft Defender for Endpoint
Service Endpoints vs Private Endpoints, explained simply — where VNet Integration fits, and when to use an NSG, Azure Firewall or WAF. With diagrams.
In this blog post I explain how Microsoft Intune really works under the hood on Windows — including the new MMP-C and Declared Configuration channel — where every log lives, the tools I use,…
Read article: The Ultimate Intune Troubleshooting Guide: How It Works and How I Fix It
A plain, hands-on look at the latest AI models in June 2026 — OpenAI, Anthropic, Google, Microsoft MAI, Mistral and the Chinese open-weight models. I sort them by price, capability and use case, and…
