2023.12.12
Year-end 2023: AI, identity, and hybrid lessons
2023 year-end: Azure OpenAI landings, Copilot permissions reality, Storm-0558, MOVEit, Entra rename, and funded priorities for the next year.
2023 field notes.
12 notes from 2023. Product names and recommendations reflect that year — not today's catalog. Current notes (2024–)
Archive
// pre-2024 field notes// 2023 · 12 posts · archive year page
2023// 12 posts
2023.11.14
Secure Future Initiative: what customers should ask Microsoft — and themselves
Microsoft Secure Future Initiative 2023: engineering culture signals, customer logging expectations, identity hardening, and questions for your QBR.
2023.10.17
Copilot readiness checklist: permissions first, licenses second
Microsoft 365 Copilot readiness 2023: oversharing cleanup, labels, pilot cohorts, network, and why buying seats before ACL hygiene is backwards.
2023.09.19
Microsoft Entra ID: the rename, and the operations that did not change
Microsoft Entra ID 2023 rename field notes: portal labels, Conditional Access, app registrations, and identity ops discipline under a new brand.
2023.08.15
MOVEit, Cl0p, and third-party risk for Microsoft-centric shops
MOVEit Cl0p 2023 lessons: file transfer surfaces, vendor inventory, isolation, and how Microsoft estates still get burned by non-Microsoft edges.
2023.07.18
Storm-0558 and signing-key lessons for every Microsoft tenant
Storm-0558 July 2023 field notes: consumer key abuse, mailbox access lessons, logging gaps, and what customer tenants should verify and demand.
2023.06.13
AVD FinOps in 2023: autoscale, reservations, and unit cost truth
AVD FinOps 2023: host pool unit economics, autoscale pitfalls, reservations, FSLogix storage cost, and chargeback that changes behavior.
2023.05.16
Phishing-resistant MFA mandate reality
Phishing-resistant MFA 2023: number matching is not enough, FIDO2 and WHfB for admins, legacy exceptions, and measuring authentication strength coverage.
2023.04.18
Data governance for AI: Purview and DLP readiness
Data governance for AI 2023: labeling, DLP, retention, dataset inventories, and readiness work before Copilot or Azure OpenAI touch sensitive corpora.
2023.03.21
Microsoft 365 Copilot announced: a field read for IT and security
Microsoft 365 Copilot March 2023 field read: permissions are the product, SharePoint hygiene, DLP, pilot design, and why oversharing becomes an AI incident.
2023.02.14
Azure OpenAI Service landing for regulated organizations
Azure OpenAI Service 2023 landing: subscriptions, private networking, logging, abuse monitoring questions, RBAC, and a responsible first workload.
2023.01.17
Enterprise GenAI: from panic to pilot discipline
Enterprise generative AI January 2023: shadow usage, approved Azure OpenAI paths, data boundaries, and pilot metrics that survive the board.