Chris Gill (@cfgcloud.io - Bsky)

I'm honored to have a signed copy of my book Configuring @windowsserver Hybrid Advanced Services Exam Ref AZ-801 entered into the Microsoft library in Redmond during the #MVPSummit! Thanks @MVPAward a.co/d/iUcCO9O #Microsoft #AZ801 #CloudComputing #HybridCloud

Every agent will need its own computer. And with new Hosted agents in Foundry, every agent gets its own dedicated enterprise-grade sandbox, with durable state, built-in identity and governance, and support for any harness or framework. Read more: devblogs.microsoft.com/foundry/introd…

InTUI - Intune Terminal User Interface Install-Module -Name InTUI A PowerShell terminal UI for managing Microsoft Intune resources via Microsoft Graph API. Mimics the Intune admin center experience directly in your terminal.

👋 Folks, I'm starting a new series of Entra Hardening tips from today. Here's how it will work. One new tip every weekday (I take a break on weekends). ---- Tip #1: Privileged accounts in Entra ID should be cloud native identities If your privileged accounts in Entra ID are synced from on-prem AD then you have a problem. Attackers that compromise your on-prem infrastructure can pivot to the cloud, into Entra ID and gain access to the cloud servers, data, Microsoft 365 and other SaaS apps. Why? We've seen this happen multiple times. The biggest ones have been Solorigate (compromise ADFS and pivot to cloud), other examples include Storm-0501 (compromise AAD Connect server) and more. The Fix? Reduce the blast surface. Don't allow accounts synced from on-prem to be granted privileged roles. Instead create admin accounts natively in Entra ID and grant privileged roles to these cloud only accounts.

FYI - After installing the April 2026 Windows security update (KB5082063) and rebooting, non‑Global Catalog (non‑GC) domain controllers (DCs) in environments that use Privileged Access Management (PAM), might experience LSASS crashes during startup," Microsoft said in a release health dashboard update. Microsoft is working on a fix, meanwhile contact Microsoft Support for Business for mitigation measures. bleepingcomputer.com/news/microsoft… #PatchTuesday #Security #Microsoft #Windows #MSIntune

Enterprise state roaming is moving to Windows Backup for Organizations! This is great news! learn.microsoft.com/en-us/windows/… #MSintune #Windows11

PDFs are officially dead. Someone just built a tool that turns PDFs into clean, structured Markdown at 100 pages/sec 🤯 No GPU. No API cost. No messy parsing. Just raw, usable data. Here’s what it handles effortlessly: • Tables → perfectly extracted • Broken layouts → auto-fixed • Nested data → structured cleanly • Scanned chaos → turned readable This isn’t a small upgrade. This wipes out 90% of manual data cleaning overnight. The tool is OpenDataLoader And yes… it’s open-source. Repo → github.com/opendataloader…

Microsoft Zero Trust assessment: a structured way to evaluate identity, devices, apps, and infrastructure security maturity. #ZeroTrust isn’t a strategy problem anymore—it’s an execution problem. This helps quantify gaps and prioritize next steps. buff.ly/VFLhuui

Back in the lab building more terminal tools. Today I’m sharing Intune-LAPS — a PowerShell module built for Intune admins who are tired of the portal click routine. If you manage Windows LAPS in Intune, you probably know this path by heart: Intune > Devices > Windows > Device Name > Local Admin Password > Show Local Administrator Password > Copy It works, but it is slow, repetitive, and painful when you do it often. So, I built Intune-LAPS to make that process faster from the terminal. With it, you can: retrieve the local admin password copy it to your clipboard rotate it on demand get on with your day GitHub: github.com/markorr321/Int… PowerShell Gallery: powershellgallery.com/packages/Intun… Landing Page: intune-laps.orr365.tech Less clicking. More doing.

The @GitHub Research folks released a "Rubber Duck" agent for the Copilot CLI. Automatically get a review from a model from a different AI family. And their data shows that yes, this does in fact help. Quite a bit.

Azure MCP Server 2.0 just dropped. Self‑host your agentic workflows on Azure and give AI agents a secure, standard way to take action across your cloud. Open source. Game changing. Read More ➡️ msft.it/6010QfdEu

🚨RESEARCHERS JUST MATHEMATICALLY PROVED THAT AI LAYOFFS WILL DESTROY THE ECONOMY.. AND EVERY CEO ALREADY KNOWS IT.. BUT NONE OF THEM CAN STOP.. Two researchers from UPenn and Boston University just published a paper called "The AI Layoff Trap".. They proved something terrifying.. Every company replacing workers with AI is also firing its own customers.. Every laid-off employee is someone who used to spend money.. When enough people lose their jobs.. Nobody can afford to buy anything.. And the companies that fired everyone go bankrupt selling products to an economy with no purchasing power.. Every CEO can see this coming.. The math is obvious.. Fire workers.. Lose customers.. Lose revenue.. Collapse.. But here's the trap.. No company can afford to stop.. If you don't automate.. Your competitor will.. They cut costs.. Undercut your prices.. Steal your market share.. And you die anyway.. So every company automates.. Knowing it's collectively suicidal.. Because the alternative is dying alone while everyone else survives.. It's a Prisoner's Dilemma.. And the researchers proved it mathematically.. The numbers are already stacking up.. Block cut nearly half its 10,000 employees this year.. CEO Jack Dorsey said AI made those roles unnecessary and that "within the next year, the majority of companies will reach the same conclusion".. Salesforce replaced 4,000 customer support agents with AI.. Goldman Sachs deployed an AI coder that lets one senior engineer do the work of a five-person team.. Over 100,000 tech workers were laid off in 2025 alone.. AI was cited as the primary driver in more than half the cases.. 80% of US workers hold jobs with tasks susceptible to AI automation.. And here's what should scare policymakers.. The researchers tested every proposed solution.. Universal Basic Income.. Doesn't fix it.. It raises living standards but doesn't change a single company's incentive to automate.. Capital income taxes.. Don't fix it.. They change profit levels but not the per-task decision to replace a human.. Worker equity and profit sharing.. Narrows the gap but can't close it.. Collective bargaining.. Can't fix it.. Because automating is a dominant strategy.. No voluntary agreement between companies is self-enforcing.. Only one thing works.. A Pigouvian automation tax.. A per-task charge that forces every company to pay for the demand it destroys when it fires a worker.. The researchers call it a "Red Queen effect".. Better AI doesn't solve the problem.. It makes it worse.. Because every company sees a bigger market share gain from automating faster than rivals.. But at the end.. Everyone automates equally.. The gains cancel out.. And the only thing left is more destroyed demand.. The paper's conclusion is devastating.. This isn't a transfer from workers to company owners.. Both sides lose.. Workers lose their income.. Companies lose their customers.. It's a deadweight loss that harms everyone.. And no market force can break the cycle.. The AI layoff trap isn't a prediction.. It's already happening.. And the math says it won't stop on its own.

Your brand new Windows laptop came with dozens of apps you never asked for. - Ads in your Start menu. - Telemetry tracking every click. - Bing hijacking your search bar. - Microsoft Copilot you can't turn off. - Recall taking screenshots of everything you do. One script removes all of it. It's called Win11Debloat. Not a sketchy optimizer from a pop-up ad. A lightweight PowerShell script that strips Windows down to what it should have been from the start. Here's what it removes: → Bloatware apps — Candy Crush, TikTok, Instagram, Clipchamp, Teams, and dozens more → Telemetry — diagnostic data, activity history, app-launch tracking, targeted ads → Ads — tips, tricks, suggestions in Start menu, Settings, notifications, and lock screen → Bing — removed from Windows search, your search bar searches your computer again → Microsoft Copilot — disabled and removed → Windows Recall — the AI that screenshots everything you do, disabled → Edge clutter — ads, suggestions, and MSN news feed, disabled Everything that actually works stays. Your apps. Your files. Your settings. Nothing breaks. One command. That's it. Your laptop is clean. Works on Windows 10 AND Windows 11. Microsoft spent years adding things to Windows that nobody wanted. This script spent years removing them. 43,800+ stars on GitHub. MIT Licensed. 100% Open Source. (Link in the comments)

Microsoft is quietly taking over the Enterprise AI Agent stack. And most people have only seen ~10% of it. Everyone talks about Copilot. Some know Azure. A few use GitHub Copilot. But underneath... Microsoft has built a full-stack AI ecosystem —from models → to agents → to governance. Here’s the full breakdown 👇 📌 1. Models (the brain) Azure GPT-5.1, Phi-4, MAI-1, KOSMOS-2, Florence 2, MAI-Voice This is the intelligence layer powering everything. 📌 2. Frameworks (the builder layer) Semantic Kernel, AutoGen, Task Weaver, Agent Framework These are what let you actually build AI agents. 📌 3. Responsible AI (the guardrails) Azure AI Content Safety, Purview, Defender, Entra Security + governance baked in from day one. 📌 4. Productivity (the distribution) Excel, Teams, Outlook, PowerPoint AI is not a feature. It’s embedded in daily workflows. 📌 5. Image & Video (creative layer) Designer, Clipchamp, Copilot Image Content creation → fully inside the ecosystem. 📌 6. Coding (developer layer) GitHub Copilot, VS Code, Azure AI Toolkit From writing code → to deploying → AI is everywhere. 📌 7. AI Agents Microsoft Copilot, SharePoint Knowledge Agents, Copilot Studio, Dynamics 365, Power Platform, Viva Learning Agent, Edge Copilot, Security Copilot , The autonomous layer that ties the entire ecosystem together And this is just the outer surface of the Microsoft Core offering. If we start to dive deeper into Azure AI, the layer goes even deeper. This just shows Microsoft's commitment on helping enterprises adopt agentic AI. Not only do they make it very easy with no-code tools like Power Platform, but also allows you to customize it and build custom agents using their agent frameworks and tools. Save 💾 ➞ React 👍 ➞ Share ♻️

Congratulations to all of the new and returning @MVPAward MVPs being recognized for your incredible efforts in and for the community! Welcome and reach out if you have any questions - happy to help! #MVPbuzz #CloudFamily #CommunityRocks

Experience the magic of our Moon mission wherever you go! ✨ Download free, mobile wallpapers and bring your device into the new era of exploration: go.nasa.gov/4bYzen1

#Microsoft has updated the Device Security UI in #Windows 11 to include a visual indicator for the status of Secure Boot #certificate updates. This is most helpful, especially for consumers. #security #certificates #pki #uefi support.microsoft.com/en-us/topic/se…

Testing, testing, and testing some more. #DriverAutomationTool v10 is nearly ready. ✅ Unified BIOS Catalog created ✅ Intune driver testing done ✅ Proxy auth added I'm looking for testers with varied makes/models and #MSIntune testers. Please drop me a DM.

If you're feeling nerdy and just have to know how browser SSO works, read this amazing write-up 😎 @sperincsu/microsoft-edge-and-google-chrome-browser-sso-on-windows-7a1e5592766b" target="_blank" rel="nofollow noopener">medium.com/@sperincsu/mic… For those feeling less nerdy, the browser makes calls to get PRT/device auth from CloudAP/WAM. Private mode doesn't allow those calls, so no device state.

Wow 👀 Anthropic's red team report is quite a read red.anthropic.com/2026/mythos-pr…

#SecureBoot certificate updates are coming, and you need to take action ASAP! This guide walks through everything you need to know: Intune policies, reporting, firmware considerations, and how to actually validate success. systemcenterdudes.com/how-to-update-… #MSIntune #Windows #ConfigMgr