RunAs Radio

How is zero-trust security evolving? Michele Leroux Bustamante discusses the challenges CISOs face today in controlling access to infrastructure, authenticating and authorizing users, and managing the ongoing evolution of an organization's dependencies. The conversation digs into the variety of stacks available to address various elements of an organization's security requirements. Michele also talks about the NIST Cybersecurity Framework as a starting point for understanding the security elements your organization needs to focus on and improve—security is a continuum, not a destination! Links Azure Entra Auth0 Duende KeyCloak NIST Cybersecurity Framework Open Policy Agent Policy Server Defender for Cloud Azure API Management Azure Front Door Recorded October 29, 2025

On July 19, 2024, a misconfigured file sent as part of an update to the Falcon Sensor suite by CrowdStrike caused service outages worldwide. Liam Westley talks about his experiences executing the incident management plan at his company that day—even though his company did not use the software! Liam talks about dealing with the regulatory requirements of a finance company as part of incident planning, and how the software and services supply chain can lead to outages because those companies are affected. A great story about the day of the incident and the improvements in planning and resiliency that followed! Links CrowdStrike Incident Timeline Azure Front Door Recorded October 29, 2025

What does it take to be ready to deploy M365 Copilot in your organization? Richard talks to Nikki Chapple about her latest incarnation of the M365 Copilot Readiness Checklist, working step-by-step to bring M365 Copilot into the organization without causing data leak issues. Nikki discusses utilizing existing tools to accurately identify sensitive data, archiving outdated information, and monitoring data usage by both users and agents - allowing you to detect issues before they escalate. The conversation also delves into the process of identifying issues, discussing policy changes, and how to communicate those changes so that people can take advantage of the power of these new tools without feeling threatened. It's a journey! Links Microsoft Purview SharePoint Advanced Management Defender for Cloud Apps Restricted SharePoint Search Microsoft 365 Archive SharePoint Restricted Content Discovery Data Security Posture Management for AI Nikki's Readiness Checklist M365 Copilot Oversharing Blueprint Microsoft Purview Secure by Default Blueprint Prevent Data Leaks to Shadow AI Blueprint Recorded November 7, 2025

The seasonal gift show is back - Joey Snow and Rick Claus bring their lists of great gifts for sysadmins. You know they're impossible to buy for, so we are making it easier for you with a range of prices and seriousness for your favorite sysadmin. Useful gadgets, upgrades to older devices, and some fun stuff that reminds the sysadmins in your life that you get their struggles. Share this show and toy list with everyone you know who struggles to find the right thing! Links USB Tester Battery Daddy USB Air Duster Smart Soldering Iron Pro Tech Go Toolkit Effing Candle Co Dumpster Fire Pencil Holder NES Cartridge Hard Drive Enclosure PicoKVM CO2 Meter Wireless Headphones Digital Photo Frame Super-Knips with Lead Catcher Inkplate 6COLOR Insta360 Link 2 Home Assistant Voice Throw Throw Burrito Bose Ultra Open Earbuds Ubiquiti Cloud Gateway Fiber Recorded October 30, 2025

How can Azure Site Reliability Engineering Agents help your Azure infrastructure? While at Techorama in Utrecht, Richard chatted with Deepthi Chelupati about the LLM service that helps you build and maintain more reliable applications and infrastructure in Azure. Deepthi talks about monitoring deployment problems, handling errors in production, and application telemetry in operation as areas where Azure SRE Agents can help catch issues earlier and let you respond faster. The conversation dives into the array of capabilities and where you can provide information to administrators so they can decide how to proceed—perhaps pushing information to development or starting a recovery process of some kind. How you use Azure SRE Agents is up to you! Links Azure SRE Agent PagerDuty Azure Monitor Azure DevOps Recorded October 28, 2025

How resilient are your Azure deployments? Richard chats with Chris Ayers about his work on Azure reliability - not only for customers using Azure, but for Azure itself! Chris focuses on the Well-Architected Framework as a guideline for thinking through all the elements of resiliency in Azure. As with all things, there are trade-offs of cost and reliability - you'll want to build a spreadsheet to balance the cost of an outage against the expenses of resiliency services in Azure - and your own labor to maintain it! Chris provides his own talks and an extensive list of links for you to build up a comprehensive analysis of resiliency options - check it out! Links FastTrack Azure Status Azure Well Architected Framework Virtual Machine Scale Set Deployment Stamps Pattern Automatic Scaling in Azure App Service Azure Monitor Azure Command-Line Interface Copilot in Azure Azure Advisor Azure Proactive Resiliency Library v2 Azure Front Door Chris' Azure Resiliency Talk Recorded October 3, 2025

The future of updating Windows is here! Richard talks to Aria Hanson about Windows Autopatch, the consolidation of Microsoft's various update mechanisms to keep your managed Windows devices current. Aria discusses the deprecation of Windows Server Update Services (WSUS) and the move to always-on cloud updates. The conversation turns to the various techniques for quickly rolling out updates to machines while still allowing the process to stop if there are problems, whether you first update IT workstations, then beta testers, and so on. There's also the Windows Roadmap to give you a heads-up on new features and updates coming, so you can decide in advance whether they will be available on your machines, without changing your overall update policies! Links Windows Autopatch WSUS Deprecation Windows Update Client Policies Microsoft Intune Entra Groups Intune App Management Autopatch Group Policies Windows Roadmap Recorded October 27, 2025

How can the new AI tools help DBAs? Richard chats with Grant Fritchey about his experiences using various types of LLMs to help with his work as a DBA. Grant discusses having an LLM open as a side window to pass questions by, such as ideas for tuning, query optimization, scripts, and so on. Not all LLMs are the same - it's worth experimenting with different tools! The conversation delves into the long-term picture of AI supporting the DBA role, enabling more work to be accomplished in less time. Some of the work that used to be complex or tedious has become easier, but the need for people to assess outcomes remains essential. Links PostgreSQL Perplexity Copilot for SQL Server Management Studio dbverse GitHub Copilot in VS Code Recorded September 29, 2025

How do you become a cybersecurity expert? While at Cybersecurity Intersection in Orlando, Richard chatted with Paula Januszkiewicz about her career in cybersecurity. Paula talks about insatiable curiosity to understand how things work the way they do - why an exploit happens and following the twists and turns that lead to root cause and permanent solutions. The conversation delves into the balance between education and experience, the types of work available in cybersecurity, and pursuing your passion! Links Cybersecurity Architect Expert Microsoft Entra Microsoft Sentinel Microsoft Defender for Cloud Kusto Query Language Recorded October 5, 2025

It's time to retire NTLM - but how? Richard chats with Steve Syfuhs about the need and challenge of retiring an ubiquitous authentication protocol first used in the 1990s. While guidance to move away from NTLM has been available since 2010, it has only become feasible in the past couple of years, and Microsoft is now providing tooling to make the transition easier. Steve discusses enabling auditing of NTLM usage - recent improvements will allow you to view which services rely on NTLM. Sometimes, a configuration change can resolve the problem, and now there is Microsoft Negotiate to help as an intermediary in determining which protocol to use. Retiring NTLM won't happen overnight, but it will happen, and you can start preparing for it today. And if you need help or advice, email [email protected] ! Links NTLM Blocking and You Deprecating NTLM is Easy and Other Lies Microsoft Negotiate Remote Desktop Gateway Role Kerberos on Windows Server The Evolution of Windows Authentication Recorded September 25, 2025

How do you manage for failure? While at KCDC, Richard chatted with Amy Norris about building a culture that supports dealing with failure in a healthy way. Amy focuses on clear communication - about expectations, positive feedback, negative feedback, and more! The challenge is creating a safe place for people to ask questions and talk clearly about what they see happening in the environment. We can only get better when we can see the problems folks are having - it takes time, patience, and lots of communication to make that happen! Links Atlas 9 Recorded August 14, 2025

How do you know if one of your accounts has been part of a security breach? Richard chats with Troy Hunt about HaveIBeenPwned, a free service that allows individuals to receive notifications when their accounts appear in a security breach. Troy discusses other services available alongside HaveIBeenPwned for sysadmins, including password checking, identifying accounts associated with a specific domain, and more. When considering the cost of managing a customer with an exploited account, being able to prevent or mitigate potential risk is highly valuable. Links HaveIBeenPwned Park Mobile Settlement Snowflake Data Breach Recorded September 25, 2025

You're down - is it your servers, or someone else's? While at the Kansas City Developers Conference, Richard sits down with Mandi Walls from Pager Duty about her experiences dealing with incidents involving vendor services. It might be your cloud provider, or some other SaaS element of a pipeline, or even an open-source library dependency in an important internal application that can cause a problem. What are the next steps? Mandi talks about having a software and services bill of materials so that you know what dependencies you have, where to check their status, and how to get help when you need it. Our systems are more complicated than ever - you need a plan to deal with the incidents! Links Azure Status SBOM Tool Vendor Incidents with Jeff Martins Recorded August 14, 2025

The days of the one-year SSL certificate are coming to an end - are you ready? Richard chats with Todd Gardner about the upcoming requirement from the Certification Authority Browser Forum to limit SSL certs to 200 days starting March 2026 - and they keep getting shorter until by 2029, certificates will last no longer than 47 days! If you haven't already automated certificate renewal, it's time to start moving in that direction. Todd talks about CertKit as a new approach to automating certificate renewal across various services, making it much easier. Still in the experimental phase, you can be part of the process and make your certificate life easier now! Links Let's Encrypt ACME Client Implementations The Great SSL Certificate Panic Certification Authority Browser Forum ZeroSSL trackjs CertKit Recorded August 19, 2025

How do you get your organization trained up to use AI tools? Richard talks to Stephanie Donahue about her work implementing AI tools at Avanade and with Avanade's customers. Stephanie discusses how many workers are bringing their own AI tools, such as ChatGPT, to work and the risks that represent to the organization. Having an approved set of tools helps people work in the right direction, but they will still need some education. The challenge lies in the rapidly shifting landscape and the lack of certifications. However, you'll have some individuals eager to utilize these tools, often on the younger side, and they can help build your practice. The opportunities are tremendous! Links ChatGPT Enterprise Learning M365 Copilot Secure and Govern Microsoft 365 Copilot Microsoft Purview Responsible AI at Microsoft Microsoft Viva Engage Recorded July 18, 2025

Episode 1000! Richard Campbell invites Paul Thurrott to join him to celebrate the milestone episode and answer questions from listeners. From the creation of the podcast to the role of Windows in the modern world, the impact of ARM, Cloud, and many other technologies - all addressed in this super-sized episode. And yes, artificial intelligence is part of the conversation—and will be part of the workflows that sysadmins utilize on a day-to-day basis. Thanks to all the folks who sent in questions for this special show - and thanks for listening! Links Does Windows Still Matter Windows Server 2025 ARM in Azure Azure FastTrack Cloud Adoption Framework for Azure Microsoft Viva Recorded August 31, 2025

What are common mistakes folks are making with their Azure tenant(s)? While at the Kansas City Developers Conference, Richard chatted with Scott Sauber to run down his top ten list of issues he checks on for all his customers using Azure. From tenant ownership to naming conventions, policies, identities, and cost controls - there are a lot of things you can do to make your Azure experience more reliable, cost-effective, and efficient. Check out the links for more details on each of the potential issues! Links Azure Service Groups Azure Naming Conventions Azure Naming Tool Azure Tagging Strategy Azure Policy Managed Identities DefaultAzureCredential TLS in Azure App Service SSL Labs Federated Identity Credentials Budgets and Cost Alerts Azure Reservations Azure Savings Plan Recorded August 14, 2025

How do you secure your organization's data to let AI technologies work safely? Richard chats with Martina Grom about her experiences helping sysadmins responsibly bring the power of Microsoft M365 Copilot into their organizations. Martina discusses setting up security and monitoring with tools like Microsoft Purview, enabling visibility into where copilots are working and who is using them. Once the measuring tools are in place, you can begin to establish limitations for the AI without compromising regular employee workflows. Check the show links for a list of great tools you can use to get M365 Copilot working for your organization safely! Links Governance Toolkit 365 EU AI Act Data, Privacy, and Security for Microsoft 365 Copilot Translating with Copilot Configuring SharePoint with Entra ID Microsoft Purview Data Loss Prevention Microsoft Purview Compliance Manager Data Security Posture Management for AI SharePoint Advanced Management Copilot in Microsoft 365 Admin Centers Recorded July 16, 2025

Are you tapping the power of Microsoft Graph? Richard chats with Tony Redmond about his work teaching people to leverage Microsoft Graph and all the insights it can provide about their organization. Tony views Graph as one of the key skills a sysadmin needs to manage an M365 tenant, alongside Exchange Online, SharePoint, and Teams. Throw in some Entra ID skills with Graph and you're ready to take on the rest - and there's a lot! Tony is also responsible for the excellent Office 365 for IT Pros book, now in its 12th edition for 2026. These are the fundamentals that can help you embrace the Copilot future we're all facing - and there's a lot to learn! Links Graph PowerShell SDK Azure Automation Office 365 for IT Pros 2026 Edition Maester Agent Governance in M365 Secure Future Initiative Linkable Identifiers in Microsoft Entra Recorded July 24, 2025

What can the financial services sector teach us about adopting Copilot in our organizations? Richard chats with Christina Wheeler about her work at Microsoft, where she helps companies leverage large language model technologies. Christina discusses data security, which is crucial in the financial services industry due to its numerous regulations. The data security mindset of using tools like Purview and Data Loss Prevention helps to carve out data sets that can be used with Copilot. The conversation also turns to the Power Platform arena and Dataverse, tools that make it easy to embrace Copilot. There's a progression of security and capability, from internal apps to assisting staff with online work, to ultimately providing a means for customers to interact with a Copilot. There's a lot to learn, but the tools are there to make it possible! Links Microsoft Purview Power Platform Data Loss Prevention Power Virtual Agents Microsoft Dataverse Copilot Studio Azure AI Foundry Recorded July 7, 2025

How do you get from ClickOps to DevOps? While at Build, Richard chatted with Steven Bucher about using Copilot in Azure to help build PowerShell scripts with Azure CLI to get you moving down the path of repeatable deployment. Steven talks about interacting with Copilot in Azure through the Portal, Azure CLI, and PowerShell. Using tools like GitHub Copilot in Visual Studio Code can help you start making Infrastructure as Code in Bicep or Terraform to move you along the path of automating reliable deployments! Links Copilot in Azure Azure CLI Terraform AI Shell PowerShell 7.5 Bicep GitHub Copilot on VS Code Recorded May 19, 2025

How do you bring AI agents to your organization? Richard chats with April Dunnam about her experiences with Copilot Studio, Microsoft's tool for building various agents for your organization. April discusses the multiple approaches available today for utilizing generative AI and the benefits of leveraging template-driven and low-code solutions to capitalize on the latest features in agentic AI. The conversation also delves into the relationship between M365 Copilot and Copilot Studio for creating extensions and focused functionality. There's a significant amount of power here if you take the time to learn the tools! Links Microsoft Copilot Studio Build your First Copilot Studio Agent in Minutes Playright MCP Testing Copilot Studio Agents Agent Flows Dataverse MCP April's Copilot Estimator Recorded July 8, 2025

What's happening with Fabric in 2025? While at Build, Richard chatted with Arun Ulag about the fantastic progress Fabric has made in the past year. Arun discusses expanding the product line beyond analytics to include real-time intelligence and hosting primary data workloads. The goal is to make it incredibly easy to get your organization's "data estate in order"... not just for security and analytics, but also for your upcoming AI-related workloads. Arun also discusses the power of conversational interfaces to access data, helping leaders get answers quickly and allowing analysts in your organization to build resources that can answer those questions quickly. Links Microsoft Fabric Recorded May 20, 2025

How does a PowerApp become a fully-fledged software application? Richard chats with Luise Freese about her experience of taking a PowerApp built by an individual through the "onboarding process" of becoming a complete software application, including requirements, tests, deployment pipeline, security, user training, and more. It's easy to create a prototype of an application with PowerApps, but once you move beyond the basics, there's a significant amount of work that's essential to the long-term health of the app. Luise discusses how often PowerApps utilizes "free" data sources, such as SharePoint lists, rather than the underlying datasets that require a license. This hinders performance and reliability; it's better to work with the right APIs and data sources. It's also an accomplishment, as what started as an individual's automation is now a part of the suite of applications that a company depends on! Links Power Apps and Power Automate Luise's Blog Post Microsoft Power Platform Center of Excellence Starter Kit Entra ID for Power Apps Recorded June 27, 2025

How has Azure been innovating lately? While at Build Richard chatted with Azure CTO Mark Russinovich about some of the latest innovations in Azure, including some of the new hardware available. Mark talks about working with hardware manufacturers to build servers optimized to the workloads the largest Azure customers need. The conversation also explores the new innovations in AI and how Azure is being optimized to serve those workloads - and be shaped by them! Mark also talks about how material science is evolving with generative AI technologies leading to a discussion about the coming role of quantum computing - and how that will live in the cloud as well! Links Scott and Mark Learn to... Azure F-Family VMs Hollow Core Fiber Majorana 1 Quantum Processor Recorded May 20, 2025