367 - Keeping work and private separate: devices, apps, and accounts

This week we'll focus on Azure Container Apps Sandboxes - what they are, how they work, and why should you care. We also compare ACA Sandboxes to the numerous different capabilities in Azure that allow you to run containers - as well as just spinning up a VM to do your agentic tasks locally, or in the cloud.(00:00) - Intro and catching up.(03:45) - Show content starts.Show links- Azure Container Apps Sandboxes overview (Microsoft Learn) - concepts, compute comparison, tiers, sandboxes vs dynamic sessions- Snapshots and lifecycle for Sandboxes (Microsoft Learn) - suspend modes, auto-suspend/auto-delete, snapshot caveats- Egress policies and network controls for Sandboxes (Microsoft Learn) - rule model, credential injection, inspection modes- Azure Container Apps Sandboxes, Now Generally Available (Apps on Azure blog)- Introducing Azure Container Apps Sandboxes (preview announcement, June 2026)- Azure Container Apps pricing- Official samples repo- Give us feedback!

In this episode we talk about where the line should be between work and private devices. What your employer can and can't see, how work profiles, tenant restrictions, PAWs and Conditional Access let you draw those lines properly.(00:00) - Intro and catching up.(04:20) - Show content starts.Show links- What information can my organization see when I enroll my device? (Intune) - Apple User Enrollment methods in Intune (separate volume, privacy limits) - Data protection for Windows MAM (app protection on personal Windows devices) - Set up tenant restrictions v2 (blocking personal accounts and other tenants) - Privileged access devices (enterprise, specialized and privileged levels) - Configure and secure privileged workstations (Zero Trust adoption guidance) - Conditional Access architecture and personas - Conditional Access framework and policies (naming convention)

Microsoft Ignite 2026 is just around the corner. As is tradition by now, we take a look at what to expect from Ignite: the announcements, expectations, and sessions. Join us for a fun discussion on all things Ignite!(00:00) - Intro and catching up.(06:02 - Show content starts.Show links- Microsoft Ignite 2026 session catalog- Give us feedback!

Microsoft recently released the 2026 edition of the Digital Defense Report. It's a massive report, 103 pages in total. We dive deep into the report, and unpack the content and share our thinking and thoughts around it.(00:00) - Intro and catching up.(04:00) - Show content starts.Show links- Microsoft Digital Defense Report 2026 (landing page)- Full report (PDF, 103 pages)- Executive summary- Conditional Access: authentication flows (blocking device code flow)- Our previous MDDR episodes: 314 (2025), 275 (2024), 210 (2023)- Give us feedback!

In this week's episode, we look at recent Microsoft Tech updates. By popular request, we're expanding our scope beyond Azure to include Microsoft 365, Power Platform, and related Microsoft platforms and capabilities. What's new? What's interesting? What's retiring? (00:00) - Intro and catching up.(05:09) - Show content starts.Show links- Public Preview: Foundry Routines in Foundry Agent Service- Public Preview: Network egress controls for hosted agents in Microsoft Foundry- Generally Available: Publishing Microsoft Foundry agents to Microsoft 365 Copilot and Teams- Generally Available: Enable and disable controls for Microsoft Foundry agents in Agent 365- Generally Available: User-bound user delegation SAS for Azure Storage- Public Preview: Microsoft SQL Agent Skills- Generally Available: SQL Migration Agent Skills for assessment, migration, and validation- Public Preview: PostgreSQL skills and MCP plugin for Azure Database for PostgreSQL- Azure Updates: Retirement of Microsoft Dev Box - Generally Available: User-bound user delegation SAS for Azure Storage- Generally Available: Exceptions in WAF for Azure Application Gateway and Azure Front - Door- Public Preview: Azure Front Door profile and route level WAF policies- Generally Available: Microsoft Defender for Cloud support for Azure Container Apps- Generally Available: Confidential VMs for Azure Linux- Generally Available: Azure Database for PostgreSQL Flexible Server supports cross-tenant customer-managed keys- Retirement: Always Encrypted with Intel SGX Enclaves- Public Preview: PostgreSQL skills and MCP plugin for Azure Database for PostgreSQL- Microsoft 365: Upcoming Changes and End-of-Support Milestones- Windows 11 and Windows Server 2022 lifecycle reminders- Azure retirement updates- Microsoft Digital Defense Report 2026- ACS retirement- Agent 365 updates for September- Telephony providers for Entra SMS and Voice- Give us feedback!

Let's talk about sovereign cloud, and what it means, and what is relevant. We talk about our experience with sovereign solutions, what the risks are, and the varying aspects of sovereign solutions from Microsoft today in the market.(00:00) - Intro and catching up.(03:42) - Show content starts.Show links- One year on: Progress on our European digital commitments (Microsoft On the Issues)- Microsoft Sovereign Cloud adds governance, productivity and support for large AI models securely running even when completely disconnected (Official Microsoft Blog)- Microsoft offers in-country data processing to 15 countries for Microsoft 365 Copilot (with April 2026 update)- Microsoft sovereign cloud announcements (Azure Blog)- Microsoft’s Sovereign Cloud in 2026: How far does it go in addressing sovereignty risks? (KuppingerCole)- Microsoft admits it ‘cannot guarantee’ data sovereignty (The Register)- Not sovereign: Microsoft cannot guarantee the security of EU data (heise online)- AWS launches AWS European Sovereign Cloud (Amazon press release)- AWS European Sovereign Cloud: why a separate German region still can’t close the CLOUD Act gap (bex.co)- Sensitive data and Cloud Act: Microsoft France admits it cannot oppose an American injunction (ActuIA)- Give us feedback!

We've talked about Microsoft Sentinel a few years ago, and realized it's time to brush up our understanding of the new and interesting capabilities it has to offer. In this episode, we talked about where Sentinel is today, the retirement of the Azure Portal side, new AI-related capabilities, as well as the recently announced ISOC.(00:00) - Intro and catching up.(04:34) - Show content starts.Show links- What is Microsoft Sentinel data lake? (Microsoft Learn)- Microsoft Sentinel pricing- Plan costs and understand pricing and billing (Microsoft Learn)- What’s new in Microsoft Sentinel (Microsoft Learn)- What’s new in Microsoft Sentinel: August 2026- What’s new in Microsoft Sentinel: June 2026- What’s new in Microsoft Sentinel: RSAC 2026- UPDATE: New timeline for transitioning Sentinel experience to Defender portal- Onboard to Microsoft Sentinel data lake and graph (Microsoft Learn)- ISOC- Give us feedback!

We quite often talk about amazing enterprise-grade capabilities, like Azure Landing Zones, Data Lakes and clusters of super smart AI agents. But what about the small businesses? What do they need to get starting from scratch? In this episode we dissect the needs, the capabilities, the licenses, and security for anyone to get started in Azure and Microsoft 365!(00:00) - Intro and catching up.(03:00) - Show content starts.Show links- Microsoft 365 business plans and pricing- Azure Files Entra-only identities- Plan your Microsoft Entra join deployment - Windows Autopilot device preparation, user-driven Entra join - Plan for mandatory Microsoft Entra multifactor authentication- Give us feedback!

This week, we take a look at GitHub Enterprise, and why you should care. We talk about features, compliance, licensing, total cost, and preferred setups whether you're a small or large organization. Join us this week to level up your GitHub setup!(00:00) - Intro and catching up.(03:45) - Show content starts.Show links- GitHub pricing- Configuring SAML single sign-on for your enterprise (personal accounts mode)- About Enterprise Managed Users (SAML/OIDC/SCIM partner matrix)- Choosing an enterprise type (personal accounts vs EMU)- Entra ID SSO tutorial - GitHub Enterprise Cloud Organization- Entra ID SSO tutorial - GitHub Enterprise Cloud Enterprise Account- Give us feedback!

In this week's episode, we look at recent Microsoft Tech updates. By popular request, we're expanding our scope beyond Azure to include Microsoft 365, Power Platform, and related Microsoft platforms and capabilities. What's new? What's interesting? What's retiring? (00:00) - Intro and catching up.(05:35) - Show content starts.Show links- What's new in Microsoft Security: August 2026- Microsoft Foundry docs: What's new for August 2026- Resilience for long-running Microsoft Foundry hosted agents (preview)- Microsoft Entra Tenant Governance is now generally available- Copilot Code Review Reaches Azure Repos (InfoQ)- Announcing General Availability of Managed Instance on Azure App Service- Managed Instance on Azure App Service Reaches GA for Legacy Windows Apps- MCP Firewall in Global Secure Access- Microsoft Sentinel in Azure Portal will be retired March 31, 2027- Project HydraFusion- Azure Multicloud Interconnect with AWS- Agent 365 license clarification - Conditional Access Policies, Licensing in general- Give us feedback!