Microsoft Mechanics Podcast
Apply the newest engineering from Microsoft to the work you do every day. Mechanics is Microsoft's official video series for IT Pros, Solution Architects, Developers, and Tech Enthusiasts. Watch as Microsoft engineers show you how to get the most from the software, service, and hardware they built. Through in-product demos, recommendations, how-to's, and tips, they simplify complex topics so you can share them with clients, peers, and your management team. These are in-depth looks at Microsoft 365, Azure, Data and AI, Surface, Windows, and the Power Platform. Get up to speed and subscribe.
info_outline
Fight AI with AI | Multi-Agent Security Defense
10/13/2026
Fight AI with AI | Multi-Agent Security Defense
Match AI-powered attacks at machine speed with Project Perception. Point red, blue, and green AI agent teams at a known threat actor, confirm which vulnerabilities attackers can reach, then deploy KQL detections, harden your posture, and merge a tested code fix in minutes with Microsoft Defender. Stay in control and approve key actions before agents run them. Run Microsoft’s pre-built playbooks or build your own, and manage sessions from the Defender portal or from your terminal with the MCP plug-in. Keep token costs low with MAI Cyber Flash, a purpose-built security model inside MDASH. Dave Weston, CVP Microsoft Security, shares how Microsoft’s threat intelligence and incident response expertise power agents you direct. 👥 Who it's for: SOC analysts, security engineers, and red and blue teamers evaluating agentic AI for defense, plus AppSec and DevSecOps teams who own vulnerability remediation. ⏱️ Chapters: Fight AI-powered attacks with AI agents How AI attacks adapt mid-breach Jailbroken and abliterated models Inside the Project Perception security stack Red, blue, and green agent teams Playbooks that orchestrate agent workflows Ask Perception if you're protected Red team agents emulate a threat actor Approve high-impact agent actions MDASH findings confirm reachable vulnerabilities Blue team agent writes KQL detections WAF, auth check, and tested code fix Pull request merged into production Session reports and MCP terminal plugin MAI Cyber Flash keeps token costs low Join the Project Perception preview AI helps attackers find, weaponize, and exploit vulnerabilities at a speed and scale no human team can match. Jailbroken and abliterated models generate custom tooling that adapts mid-breach, leaving defenses that hunt for known techniques chasing a target that changes every time. Project Perception answers with a full agentic security stack. It starts with trillions of daily security signals, correlates them in the Microsoft security graph, and uses multiple AI models, including purpose-built ones, to reason over risk and prioritize what matters most. Specialized agents act on that reasoning: red team agents simulate attacks and prove where you're vulnerable, blue team agents investigate and build detections, and green team agents harden posture and remediate. Playbooks orchestrate them through proven SOC workflows, and codified actuators let agents perform the fix instead of only recommending it. In the demo, one prompt, "Is my organization protected against Onyx Sleet?", launches threat intelligence, reconnaissance, and pen test agents. They pull MDASH code-scanning findings and confirm an internet-exposed SQL injection. A detection authoring agent writes KQL detections to cover the gap, and the posture remediation agent shields the app with a web application firewall, adds an authorization check, and produces a tested code fix merged through a pull request. Agents stop and ask before any high-impact action, so you stay in control. Every session produces a shareable report with the attack path, remediation plan, and timeline. An MCP tool plugin runs the same work from your terminal, and MAI Cyber Flash, a dedicated cybersecurity model inside MDASH, handles most vulnerability work to keep token costs low. 🔗 Related links: ► Get started at ► Unfamiliar with Microsoft Mechanics? Microsoft’s Official Video Series for IT — Subscribe — Microsoft Tech Community: — Podcast: ►Join us on social: — — — —
/episode/index/show/microsoftmechanics/id/43269273
info_outline
Build Automated Agents, Workflows, and Apps - New in Copilot Studio
10/05/2026
Build Automated Agents, Workflows, and Apps - New in Copilot Studio
Take a business process from prompt to production by building agents, workflows, and apps in one place with Copilot Studio. Describe the agent you need and generate its instructions and reusable skills, choose the model, connect MCP tools and specialist agents, then test its quality at scale with Evaluations. Trigger workflows from incoming email, classify submissions, hand work to your agents, and pause for human review on the decisions that need it. Track timing and paths for every step in the Activity tab. Then generate a full stack app on your Dataverse data so your team can filter, review, and approve every bid from one shared view. Jack Rowbotham, Copilot Studio Senior Product Manager, shares how to automate a procurement process for bids from multiple vendors, using agents that reason, route, and recommend. 👥 Who it's for: IT admins, Power Platform makers, solution architects, and developers building agentic solutions, plus operations and procurement teams automating reviews and approvals. ⏱️ Chapters: Build agents, workflows, and apps in one place Automate a multi-vendor bid review end to end Build an agent from a prompt Add models, MCP tools, and specialist agents Test the bid agent in Preview Evaluations Automated workflows Track every run in the Activity tab Build an app from a prompt Approve bids from the team app Get started with Copilot Studio Copilot Studio brings agents, workflows, and apps together in one place, all running on the GitHub Copilot harness. In this video, a supplier email triggers a workflow, a bid evaluation agent checks the bid against tender requirements, and the procurement team makes the final call in a shared app. Describe the agent you want, including the requirements to assess, the logic to apply, and the live data source to connect to. Copilot Studio reasons over your prompt, maps out its build steps, and generates the agent's name, instructions, and skills for requirement coverage and evidence verification. Connect Work IQ for supplier emails and the Dataverse MCP server for bid data, keep Claude Sonnet as the reasoning model, ground the agent in an RFP example PDF, and add a Supplier Risk specialist agent. Test the agent in the Preview tab and watch its chain of thought as it flags gaps in certification, cold-chain handling, and insurance minimums. Then run Evaluations with your own conversations, auto-generated tests, or a CSV file. Here, 18 test cases met the evaluation criteria 89% of the time. In the Workflows tab, drag in an Outlook "When a new email arrives" trigger, a Classify step for RFP submissions, a Get Attachment connector, and an Agent step running the Bid Evaluation Agent. An if/else Human Review step brings in a person on flagged bids, and the Researcher agent and a recommendation agent finish the job before results land in Dataverse. Finish in Apps by describing a Bid Management App connected to your Dataverse table, or to sources like SharePoint through connectors. Apply company branding with a follow-up prompt, then filter bids that need human review and approve decisions from the app. Try it for yourself at copilotstudio.microsoft.com. Subscribe to Microsoft Mechanics for more videos like this. 🔗 Related links: — Get started with Copilot Studio: ► Unfamiliar with Microsoft Mechanics? Microsoft’s Official Video Series for IT — Subscribe: — Microsoft Tech Community: — Podcast: ► Join us on social: — — — —
/episode/index/show/microsoftmechanics/id/43175383
info_outline
Create agents fast with Agent Builder in Copilot
09/23/2026
Create agents fast with Agent Builder in Copilot
Build a specialist AI agent without writing a line of code. Describe what you want in one prompt, and Copilot Agent Builder generates the name, instructions, skills, and knowledge setup for you — grounded only in the SharePoint sites, files, and Copilot Connectors you choose. Teach your agent a Skill to handle recurring work, like drafting weekly status emails from your own template, then test it in Preview before you publish. Share it with people or groups and set exact permissions, track real usage in the new Monitor tab, and push your best agents into your org's Agent Store catalog. Ned Friend, Group Product Manager for Copilot Agent Builder shares how to turn an agent into a tool your whole team can run, measure, and trust. 👥 Who it's for: Team leads and managers who want trusted, repeatable answers for their team, plus IT admins and Microsoft 365 power users building specialist Copilot agents without code. ⏱️ Chapters: Build specialist agents inside Copilot Ground agents in trusted org knowledge Create a new hire onboarding agent Natural-language agent creation Ground answers in SharePoint knowledge Skills for repeatable tasks Precise knowledge grounding Preview and test before publishing Share your agent with set permissions See the new hire's agent view Usage monitoring Publish agents to your org catalog Copilot Agent Builder lets you create a specialist agent by describing what you want it to do in plain language. Agent Builder interprets that prompt and automatically generates the agent's name, description, instructions, skills, knowledge sources, and suggested prompts, which you can review and edit directly. Ground every answer in the exact knowledge you choose: SharePoint and OneDrive files, Outlook email and calendar, Microsoft Teams chats and meetings, or external business systems connected through Copilot Connectors. Turn on web search only when you want the agent to research beyond your organization, like competitor or customer research. Add Skills to teach the agent repeatable, multi-step work — in this video, a weekly status update email built from a real template, matching its tone, sections, and formatting automatically. Preview and test the agent before publishing, then share it with people or groups and set whether they can use it or edit it. Once your agent is live, the Monitor tab tracks total sessions, daily active users, average messages per session, average duration, and which knowledge sources get used most. For agents with strong adoption, publish them to the Built by your org section of the Agent Store for wider use across your organization. Try Copilot Agent Builder for yourself — it's included with Copilot. Subscribe to Microsoft Mechanics for more videos like this. ► Unfamiliar with Microsoft Mechanics? Microsoft’s Official Video Series for IT — Subscribe — Microsoft Tech Community: — Podcast: ►Join us on social: — — — —
/episode/index/show/microsoftmechanics/id/43005838
info_outline
New Agent 365 controls for Microsoft admins
09/01/2026
New Agent 365 controls for Microsoft admins
Govern every AI agent running across your organization with Agent 365. Track agents from Microsoft, Amazon, Google, and Salesforce in one registry, sync in agents you're already running on AWS Bedrock, Google Cloud, Databricks Genie, and Anthropic Claude, and lock down shadow AI with default blocks and Execution Container isolation. Agent 365 inspects your environment for every agent Microsoft and partners have registered, then layers control on top. Reusable security policy templates apply Conditional Access, Access Packages, and Custom Security Attributes the moment you approve an agent, Tools governance blocks risky MCP servers and connectors org wide, and the Adoption Dashboard breaks down usage by group, job function, and license type for every manager in your org. Jeremy Chapman, Microsoft 365 Director, shares how to bring every agent in your organization under one governed registry, and how to shut down shadow AI before it ever compromises your environment. 👥 Who it's for: IT admins, security engineers, and identity teams governing AI agents across Microsoft 365, Entra, Purview, Defender, and Intune; solution architects designing agent access, tools, and security policy at scale; developers and DevOps teams building and registering agents and custom MCP servers in Copilot Studio, Agent Builder, and Foundry; and team leads, finance, and IT leaders tracking agent adoption, usage, and spend across the organization. ⏱️ Chapters: Why you need an AI agent control plane See every AI agent across your environment with the unified agent registry Track local AI activity with OpenTelemetry and the Agent Map Sync AI agents from AWS Bedrock, Google Cloud, Databricks and Claude with Registry Sync Approve, publish and block AI agents across your organization Manage MCP servers, plugins and connectors with Tools governance Apply reusable security policy templates across Entra, Purview, Defender and Intune Block shadow AI and isolate local agents with Microsoft Execution Containers Track agent adoption and usage with the Agent 365 dashboard Set spending limits and cost alerts for AI agents Monitor AI agent costs and buy prepaid credits Get started with Agent 365 today Agent 365 gives you one place to govern every AI agent running across your organization, no matter where it was built or who owns it. In this demo, the unified agent registry surfaces agents from Microsoft Foundry, Copilot Studio, Agent Builder, and SharePoint, alongside agents from Amazon, Google, and Salesforce, each with its identity, owner, permissions, and usage history attached. Local AI running on managed devices shows up too, logged through standardized OpenTelemetry and mapped visually in the Agent Map so you can trace connections between agents, people, data, and tools. Registry Sync pulls in agents you're already running on AWS Bedrock, Google Cloud, Databricks Genie, and Anthropic Claude with nothing more than a connection string, and from the same registry you approve agents for broader use, publish or pin them to specific groups, automate ownership handoffs when an employee leaves, and block any agent you don't want in production. From there, Agent 365 puts you in control of what agents can touch and how they're secured. The Tools view gives you one place to see every MCP server, plugin, and connector your agents rely on, block the risky ones, and approve or reject new tool requests as they come in. Reusable security policy templates apply Conditional Access, Access Packages, and Custom Security Attributes the moment you approve an agent, drawing on native signals from Microsoft Entra, Purview, Defender, and Intune so your identity, data security, SecOps, and device teams enforce the same controls. Shadow AI running as unsanctioned local agents gets blocked by default through Intune policy and isolated from user sessions with Microsoft Execution Containers. Team leads and managers track adoption and usage in the Agent 365 Dashboard, filtered by group, organization, job function, or license type. IT and finance teams set monthly spending limits, per user budget caps, and weekly usage alerts for Copilot Cowork and the Work IQ API, and can pre purchase discounted credits to keep spend predictable. 🔗 Related links: ► Get started at ► Unfamiliar with Microsoft Mechanics? Microsoft’s Official Video Series for IT — Subscribe — Microsoft Tech Community: — Podcast: ►Join us on social: — — https://www.linkedin.com/company/microsoft-mechanics/ — —
/episode/index/show/microsoftmechanics/id/42643030
info_outline
Windows 365: Five Years In, See What's New
08/21/2026
Windows 365: Five Years In, See What's New
An AI agent works inside your Windows 365 Cloud PC from a Teams chat on your phone — finding downloaded files, editing documents, and drafting emails with your laptop lid closed. Microsoft Scout, a new Autopilot agent powered by the open source OpenClaw project, runs on your own Cloud PC using your identity, your files, and your apps. Developers get a Developer Optimized Cloud PC preloaded with GitHub, VS Code, and Node.js that runs Foundry Local for token-free AI coding, and input and output protection capabilities black out the screen when anyone tries to capture a sensitive file. Bhavya Chopra, Windows 365 Partner Director, joins Jeremy Chapman, Microsoft 365 Director, to show how Windows 365 now covers every seat — end users, developers, admins, and the AI agents working alongside them. 👥 Who it's for: architects and IT teams deploying AI agents like Scout and Windows 365 for Agents, developers who want a pre-configured cloud coding environment with local AI, security and compliance teams enforcing data loss prevention on remote desktops, and admins managing Cloud PC connection health. ⏱️ Chapters: What's new across Windows 365 Cloud PCs Why Cloud PC adoption keeps accelerating Healthcare and telecom Windows 365 case studies Sign in to a full Windows desktop anywhere Block screenshots with input and output protection capabilities Pull table data from images with Click to Do Resume your Cloud PC session on an iPad Publish Cloud Apps with Windows 365 Flex Give AI agents a dedicated Cloud PC Run Microsoft Scout from a Teams chat Code on a Developer Optimized Cloud PC Run local AI with Foundry Local and Phi-4 Track Cloud PC connection health in Intune Troubleshoot connection issues with an AI agent What's next for Windows 365 Microsoft Scout takes instructions from a Teams chat and carries them out inside your Cloud PC — locating a report in the Downloads folder that never synced to OneDrive, summarizing it, appending the summary to the file, saving it, then drafting an email with the document attached and holding it for review. It reports progress back in Teams the whole time, so nothing requires touching the physical device. For agent workloads that need isolation instead, Windows 365 for Agents provisions a dedicated Cloud PC with its own unique identity and scoped access, and the same agentic infrastructure powers Computer Use in Researcher. Developer Optimized Cloud PCs skip the environment build entirely: sign in to a machine already loaded with GitHub, VS Code, and Node.js, then run Foundry Local against the Phi-4-mini small language model to generate an app and run it — CPU spikes visible in Task Manager and Windows Machine Learning profiling in VS Code confirm inference is local, with no cloud tokens spent to code or to run the finished app. Input and output protection capabilities black out the Cloud PC screen the instant someone attempts a screenshot from the accessing device, and extends the same block to third-party screen recorders and key loggers. Alongside it, AI-enabled Cloud PCs running at least 8 vCPUs add Click to Do, which lifts text out of non-selectable images and graphical tables straight into Excel, plus Semantic Search across the desktop. Sessions roam: disconnect on a laptop, reconnect on an iPad, and apps and display settings come back as you left them. Windows 365 Cloud Apps with Windows 365 Flex publishes individual apps from a shared Cloud PC pool with user experience sync across Windows, macOS, iOS, Android, and the browser. And in the Intune admin center, new monitoring dashboards track connection health, failures, round trip times, and license utilization in near real time, while an admin agent in preview triages issues to a root cause — like a regional cohort set to TCP-only transport instead of UDP with RDP Shortpath. 🔗 Related links: ► Check out ► See the latest Windows 365 updates at ► Unfamiliar with Microsoft Mechanics? Microsoft's Official Video Series for IT - Subscribe - Microsoft Tech Community: - Podcast: ► Join us on social: - - - -
/episode/index/show/microsoftmechanics/id/42487815
info_outline
Build your first Power App from data in seconds
07/16/2026
Build your first Power App from data in seconds
Build a fully working model-driven app from your existing Dataverse, SharePoint, or SQL data in under a minute — screens, navigation, and forms included. Generate new pages from a natural language prompt with Generative Pages, auto-populate records from any document in seconds with Automatic Form Fill, and embed Copilot to query your app data directly. Layer in an Agent Feed to proactively surface decisions, missing data, and action items, then connect to Outlook and Microsoft 365 through Work IQ to act on your app data without leaving your inbox. Jed Brown, Power Platform Group Product Manager, shares how to turn existing business data into a modern, AI-powered app. ► QUICK LINKS: - Create apps using Power Apps - Create an app from existing data - Copilot + Form Fill Assist - AI-generated pages from a prompt - Agent feed for proactive intelligence - M365 integration via Work IQ - Wrap up ► Link References Build your first Power App today at ► Unfamiliar with Microsoft Mechanics? Microsoft's Official Video Series for IT - Subscribe - Microsoft Tech Community: - Podcast: ► Join us on social: - - - -
/episode/index/show/microsoftmechanics/id/42119500
info_outline
Microsoft Entra Suite hands-on tour of identity and network access protections
07/15/2026
Microsoft Entra Suite hands-on tour of identity and network access protections
Unify identity and network access controls. Enforce least privilege access across every app and resource. Wire lifecycle workflows directly to your HR system to strip stale permissions on role changes, gate sensitive data behind biometric step-up verification, and replace your VPN with per-app, identity-scoped access that revokes tokens the moment risk spikes. Secure AI usage at every layer. Block confidential data from reaching public AI tools and stop adversarial prompt injections before your agents process them. John Damon, Microsoft Entra Suite Senior Product Manager, shares how to lock down identity, network access, and AI usage from a single control plane. ► QUICK LINKS: - Identity and network controls - Lifecycle Workflows - Verified ID with Face Check - Request access for direct reports - Global Secure Access + Token Revocation - Secure AI usage - Network DLP / ChatGPT Block - Prompt Injection Protection - Wrap up ► Link References Check out our related deep dives at For more information, go to ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: • Talk with other IT Pros, join us on the Microsoft Tech Community: • Watch or listen from anywhere, subscribe to our podcast: ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: • Share knowledge on LinkedIn: • Enjoy us on Instagram: • Loosen up with us on TikTok:
/episode/index/show/microsoftmechanics/id/42102065
info_outline
New agentic platform in Dynamics 365 for Sales and Service
07/14/2026
New agentic platform in Dynamics 365 for Sales and Service
Qualify a lead, close a case, or walk into a renewal meeting fully briefed, all from the sales and service agents built into Dynamics 365. Ask a question and pull a grounded answer straight from your CRM and your calendar. Hand a prompt to Copilot Cowork and walk away with updated records, a finished presentation, and a drafted email, ready before your next meeting. Auto-fill a case description as you work, and walk into every quality review already scored against your team's framework. Eric Boocock, Dynamics 365 Principal Program Manager, shares how these agents move with you from first prospect touch to case resolution, right inside the apps you work in every day. Along the way, he explains the mechanics of how everything works and your options to customize the experience with your own skills and instructions. ► QUICK LINKS: - Agentic platform in Dynamics 365 - Sales Qualification & Opportunity Agents - Case Management & Quality Evaluation Agents - Sales Agent in action - Copilot Cowork - Automate repeated tasks - Power behind agentic platform - Custom skills via Power Apps + Dataverse - Wrap up ► Link References Get started at ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: • Talk with other IT Pros, join us on the Microsoft Tech Community: • Watch or listen from anywhere, subscribe to our podcast: ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: • Share knowledge on LinkedIn: • Enjoy us on Instagram: • Loosen up with us on TikTok:
/episode/index/show/microsoftmechanics/id/42070710
info_outline
Tokenomics | The new AI currency & your options explained
07/09/2026
Tokenomics | The new AI currency & your options explained
Control what you're billed on. Tokens are the currency of AI, and how you design your app determines how many you spend. Compress conversation history instead of resending it raw, cap output tokens with matching prompt instructions, and cache static context so each reuse costs a fraction of the first request. Route each prompt to the right model by complexity, or set Model Router in Microsoft Foundry to handle that automatically — balanced, quality, or cost mode. Then optimize the whole stack. Run Agent Optimizer to test your prompt, model, and tool configurations together and surface better setups. Use Toolbox to dynamically select only the tools each request needs and cut input token overhead by 90%. April Gittens, Microsoft Principal Cloud Advocate, joins Jeremy Chapman, Microsoft 365 Director, to share how to seize control of AI token spend through smarter app design. ► QUICK LINKS: - Tokenomics foundation - Token cost basics - Context Window creep - Reduce unnecessary tokens - Trim context costs - Cap output tokens - Cache for savings - Model cost tradeoffs - Model Router - Toolbox in Microsoft Foundry Toolbox - Agent Optimizer - Other cost drivers - Wrap up ► Link References Check out the tools in Microsoft Foundry at For more about managing AI costs go to ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: • Talk with other IT Pros, join us on the Microsoft Tech Community: • Watch or listen from anywhere, subscribe to our podcast: ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: • Share knowledge on LinkedIn: • Enjoy us on Instagram: • Loosen up with us on TikTok:
/episode/index/show/microsoftmechanics/id/42007830
info_outline
Deploy Windows updates to counter AI-discovered threats
07/07/2026
Deploy Windows updates to counter AI-discovered threats
The speed that AI can now discover and exploit vulnerabilities means that our defenses also need to adjust. For the devices that you manage where you can afford to tighten deployment timelines, we'll explain updated recommendations and show you how to speed up patching. It starts with assessing your risk exposure for unpatched devices using the new Autopatch report in Microsoft Intune, then tightening deferral policies on the devices where it makes sense, using Hotpatch to activate protection on install — without requiring reboots. Windows Autopatch automates your update deployments using rings to progressively apply updates to the device groups that you help define, including updates for Windows, Microsoft 365 Apps and the Edge browser. And to keep internal resources protected, you can enforce access controls using Conditional Access to block non-compliant devices. Jeremy Chapman, Microsoft 365 Director, shares what's changed along with the approaches you can take to help counter the growing number of AI-discovered vulnerabilities and stay protected. ► QUICK LINKS: - AI and Windows patch management - Updated patching deferral thresholds - Hotpatch on by default - Windows Autopatch report - Ring-based deployment + M365 Apps servicing profile - Conditional Access for non-compliant devices - Wrap up ► Link References For what you can do beyond patching, go to ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: • Talk with other IT Pros, join us on the Microsoft Tech Community: • Watch or listen from anywhere, subscribe to our podcast: ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: • Share knowledge on LinkedIn: • Enjoy us on Instagram: • Loosen up with us on TikTok:
/episode/index/show/microsoftmechanics/id/41987090
info_outline
Zero Trust security for AI agents
07/02/2026
Zero Trust security for AI agents
Apply Zero Trust controls to every AI agent in your environment across identity, tool usage, and data access. Extend Conditional Access in Microsoft Entra to evaluate every agent authorization request in real time against the same risk signals as human users. Assign each agent its own managed identity with Entra Agent ID and scope permissions with Access Packages. Govern your MCP catalog as a software supply chain — unapproved tools don't run, and approved servers lock behind Azure API Management. Log every agent tool call, API access, and data lookup into Microsoft Sentinel for continuous anomaly detection. Purview Insider Risk Management auto-assigns risk levels so you can investigate fast or revoke access entirely. DLP and sensitivity labels in Microsoft Purview restrict what agents can reach and auto-inherit to everything they generate, and Data Access Governance maps exactly what each agent can access before a prompt fires. Jeremy Chapman, Microsoft 365 Director, shares how to put these controls into practice across every managed, self-hosted, and shadow agent in your estate. ► QUICK LINKS: - How AI changes Zero Trust - Zero Trust principles - How to apply Zero Trust principles - Conditional Access for Agent Identities - Entra Agent ID + Access Packages - Runtime Observability - DLP, Sensitivity Labels + Data Access Governance - MCP catalog - AI apps & experiences - Wrap up ► Link References Watch the rest of this series at For additional resources, check out ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: • Talk with other IT Pros, join us on the Microsoft Tech Community: • Watch or listen from anywhere, subscribe to our podcast: ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: • Share knowledge on LinkedIn: • Enjoy us on Instagram: • Loosen up with us on TikTok:
/episode/index/show/microsoftmechanics/id/41935545
info_outline
Secure containers from code to runtime | Microsoft Defender
06/29/2026
Secure containers from code to runtime | Microsoft Defender
Secure containerized apps end-to-end using Microsoft Defender for Cloud. Correlate cross-cloud attacks into a single incident, catch runtime threats that image scanning misses, and block vulnerable images before they reach production. Investigate container hijacking, isolate compromised pods with Security Copilot-guided remediation, and close the loop from SOC to dev by pushing CVE fixes to GitHub and syncing resolution back to Defender. Matt McSpirit, Microsoft Azure expert, shares how to detect, investigate, and remediate container threats in one connected workflow. ► QUICK LINKS: - Secure containers in Microsoft Defender - Cross-cloud incident - Runtime detection - Investigate and build context - Security Copilot incident report & containment - Prevention - Recommendations and take action - Wrap up ► Link References Get started at ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: • Talk with other IT Pros, join us on the Microsoft Tech Community: • Watch or listen from anywhere, subscribe to our podcast: ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: • Share knowledge on LinkedIn: • Enjoy us on Instagram: • Loosen up with us on TikTok:
/episode/index/show/microsoftmechanics/id/41862555
info_outline
Find and fix app issues - Azure Copilot Observability Agent
06/25/2026
Find and fix app issues - Azure Copilot Observability Agent
Cut through alert noise and move from detection to root cause using the Azure Copilot Observability Agent. It autonomously investigates incidents, correlates signals across logs, metrics, alerts, application health, and ML anomalies, then surfaces root cause with charts and recommended next steps. Extend coverage to your AI agents in Microsoft Foundry, track Gen AI errors and token consumption with trace-level detail, and write plain-language instructions to tune autonomous behavior to match your team's workflow. Matt McSpirit, Microsoft Azure expert, shares how to take full control of incident response at scale. ► QUICK LINKS: - Azure Copilot Observability Agent - How to use it as you work - Unified Full-Stack Telemetry - Root Cause Investigation - Investigate further - Re-run the investigation - Autonomous Alert Correlation & Triage - Natural Language Agent Customization - Wrap up ► Link References Get started at ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: • Talk with other IT Pros, join us on the Microsoft Tech Community: • Watch or listen from anywhere, subscribe to our podcast: ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: • Share knowledge on LinkedIn: • Enjoy us on Instagram: • Loosen up with us on TikTok:
/episode/index/show/microsoftmechanics/id/41800640
info_outline
Build Agent Architecture using AI Landing Zones
06/25/2026
Build Agent Architecture using AI Landing Zones
Build enterprise-ready AI agents that scale without sacrificing security or control using Microsoft Azure. Establish a shared Governance Hub to centralize model access, MCP catalogs, and policy enforcement, then give every agent a traceable identity, runtime protection, and data governance through Agent 365. Layer in Microsoft Fabric's Ontologies so your agents reason over real business context, not just raw data. Choose your runtime — no-code, hosted container, or custom — and deploy a production-grade environment in minutes using the AI Landing Zone accelerator. Matt McSpirit, Microsoft Azure Expert, joins Jeremy Chapman, Microsoft 365 Director, to share how to architect, govern, and scale a full agent mesh across the Microsoft stack. ► QUICK LINKS: - Build secure AI agents - Accelerate development, reduce risks - Model Gateway + MCP Gateway - Agent 365 Unified Control Plane - Azure Policy + Azure Monitor - Intelligent data platform - OneLake in Microsoft Fabric - Microsoft Purview data governance - Fabric IQ with Ontologies - Landing Zones - Three Hosting Runtimes - AI Landing Zone Accelerator - Scalability - Wrap up ► Link References Check out ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: • Talk with other IT Pros, join us on the Microsoft Tech Community: • Watch or listen from anywhere, subscribe to our podcast: ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: • Share knowledge on LinkedIn: • Enjoy us on Instagram: • Loosen up with us on TikTok:
/episode/index/show/microsoftmechanics/id/41800605
info_outline
New Security Controls in Edge for Business
06/25/2026
New Security Controls in Edge for Business
Enforce your existing Microsoft security policies directly in the browser, where your users actually work, using Microsoft Edge for Business. Extend Conditional Access, Purview DLP, and Defender controls into every session, across managed and unmanaged devices. Block sensitive data from reaching unsanctioned AI services, lock contractors into your data boundary on devices you don't manage, and control clipboard and screenshot actions by location. Manage extensions by permission type from the Microsoft 365 admin center and shut down scareware before users respond. Jeremy Chapman, Microsoft 365 Director, shares how to deploy these controls using the security stack you already have. ► QUICK LINKS: - Security built into the browser - Shadow AI Data Blocking - Contractor Work Profiles - Configuration - Advanced DLP & Clipboard Controls - How to set it up - Extension Management - Protect from threats - Wrap up ► Link References To get started, check out ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: • Talk with other IT Pros, join us on the Microsoft Tech Community: • Watch or listen from anywhere, subscribe to our podcast: ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: • Share knowledge on LinkedIn: • Enjoy us on Instagram: • Loosen up with us on TikTok:
/episode/index/show/microsoftmechanics/id/41800545
info_outline
Rayfin | Go from prompt to production backend
06/18/2026
Rayfin | Go from prompt to production backend
Build production-ready enterprise apps in hours, not months. Describe the app you want using Rayfin's open-source SDK with GitHub Copilot, and generate your full backend in code — schemas, relationships, and access policies included. Deploy to Microsoft Fabric with a single CLI command and immediately inherit enterprise data security, identity controls, and audit compliance already in place across your data estate. Connect your app's live operational data to years of historical records in Fabric from the moment you deploy, no pipelines, no data movement. Query across both datasets using a Fabric data agent you spin up directly on your app's data. Will Thompson, Microsoft Fabric Principal Product Manager, shares how to take an app from idea to governed production deployment in a single session. ► QUICK LINKS: - Simplify backend complexity - Home delivery service app - Data analysis app - See the build experience - Copilot Generates Full Backend - Authorization defined alongside schema - One CLI Command Deploys to Fabric - Create analytics app & add pages - App Data Connects to Fabric Data Estate - Conversational Data Agent on App Data - Wrap up ► Link References Get started at ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: • Talk with other IT Pros, join us on the Microsoft Tech Community: • Watch or listen from anywhere, subscribe to our podcast: ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: • Share knowledge on LinkedIn: • Enjoy us on Instagram: • Loosen up with us on TikTok:
/episode/index/show/microsoftmechanics/id/41685710
info_outline
Agent 365 | Identity & Access Controls in Entra
06/09/2026
Agent 365 | Identity & Access Controls in Entra
Take control of every AI agent, managed or not, running in your environment using Agent 365 and Microsoft Entra. Surface agents across AWS Bedrock, Google Vertex, Databricks, and Salesforce in one registry, assign Entra Agent IDs via CLI or SDK, and enforce least-privilege access through Conditional Access policies and Agent Blueprints, all without rebuilding your existing identity infrastructure. Lock down agent activity with sign-in logs that capture every authentication attempt, policy hit, and failure. Govern agents as first-class identities alongside your users, apps, and devices, and draw a hard line between managed and unmanaged AI in your organization. Vince Smith, Microsoft Entra Principal Product Manager, shares how to establish full visibility, access control, and lifecycle governance for AI agents using Microsoft Entra and Agent 365. ► QUICK LINKS: - Visibility and control with Agent 365 - Multi-platform registry sync - Assign Agent ID - Agent Blueprints - Conditional Access for agents - Sign-in logs audit trail - Unblock the agent - Wrap up ► Link References Check out ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: • Talk with other IT Pros, join us on the Microsoft Tech Community: • Watch or listen from anywhere, subscribe to our podcast: ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: • Share knowledge on LinkedIn: • Enjoy us on Instagram: • Loosen up with us on TikTok:
/episode/index/show/microsoftmechanics/id/41585725
info_outline
Introducing Azure HorizonDB - PostgreSQL
06/03/2026
Introducing Azure HorizonDB - PostgreSQL
Run enterprise Postgres workloads on Azure HorizonDB with around 3x the throughput of self-managed deployments — zone-resilient by default, no architectural trade-offs. Call AI models directly from SQL, build durable vector pipelines inside the database, and deliver high-accuracy similarity search at massive scale with DiskANN and AI re-ranking, all without leaving PostgreSQL. Debug and optimize queries faster with the Azure HorizonDB VS Code extension. Visualize execution plans, let Copilot generate fixes, and clone production data to test environments in seconds. Charles Feddersen, PostgreSQL Partner Director PM, shares how to put all of it to work on Azure. ► QUICK LINKS: - Azure HorizonDB features - Open-source PostgreSQL - How it works - Performance - Enterprise-ready security - Memory & storage work together - AI Model Management + AI Functions - AI Pipelines - DiskANN + AI Re-ranking - VS Code Extension + Data Cloning - Wrap up ► Link References Check out our blog at ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: • Talk with other IT Pros, join us on the Microsoft Tech Community: • Watch or listen from anywhere, subscribe to our podcast: ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: • Share knowledge on LinkedIn: • Enjoy us on Instagram: • Loosen up with us on TikTok:
/episode/index/show/microsoftmechanics/id/41524975
info_outline
Agent 365 | Security Operations in Defender
05/29/2026
Agent 365 | Security Operations in Defender
Surface every AI agent in your tenant and expose the ones throwing security signals — across both the IT and SOC view. Triage high-severity alerts as IT in the Microsoft 365 admin center, then pivot into the full incident graph as a SOC analyst in Microsoft Defender. Block malicious tool invocations the instant they fire and catch jailbreak attempts on Copilot Studio agents before they take hold. Trace a compromised user back to suspicious agent activity, then trigger Microsoft Entra conditional access to revoke the session and force a password reset straight from the incident. Hunt overpermissioned agents with pre-built advanced hunting templates — including one that exposes every agent running MCP tools on the maker's standing credentials — and pull risky builds from the Agent Store using the Agent Registry. Spencer Berg, AI & Security Product Manager, shares how to turn agent risk signals into coordinated remediation across Defender, Entra, and the Microsoft 365 admin center. ► QUICK LINKS: - Stay in control with Agent 365 - Gain visibility with unified control plane - Unified IT & SOC agent view - Real-time blocking and jailbreak detection - Auto-revoke via Entra conditional access - Prevent future incidents - Advanced hunting for AI agents - Block risky agents - Wrap up ► Link References Check out ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: • Talk with other IT Pros, join us on the Microsoft Tech Community: • Watch or listen from anywhere, subscribe to our podcast: ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: • Share knowledge on LinkedIn: • Enjoy us on Instagram: • Loosen up with us on TikTok:
/episode/index/show/microsoftmechanics/id/41460860
info_outline
Microsoft Entra Tenant Governance | Find Configuration Drift
05/27/2026
Microsoft Entra Tenant Governance | Find Configuration Drift
Ensure your tenant configuration doesn't drift from defined security and compliance requirements with Microsoft Entra Tenant Governance. Capture configuration as code across 200+ resource types in Entra, Intune, Exchange, Teams, Defender, and Purview. Turn that snapshot into a Monitor. It scans for drift every six hours and flags every policy change. Extend control to the tenants you don't fully see today. Entra Tenant Governance surfaces them automatically through B2B, multi-tenant app, and billing signals. Request governance with role-based templates. Complete the secure approval handshake in the Entra admin center, then administer the governed tenant from a single browser using the roles forged in that handshake. Jeff Staiman, Microsoft Entra Principal Product Manager, shares how to bring every tenant under one governance model. ► QUICK LINKS: - Prevent tenant configuration drift - Create a configuration baseline - Detect configuration drifts - Identify related tenants to govern - Governed tenants - Incoming request - Set up monitoring - Wrap up ► Link References Get started at Restrict tenant’s connections at ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: • Talk with other IT Pros, join us on the Microsoft Tech Community: • Watch or listen from anywhere, subscribe to our podcast: ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: • Share knowledge on LinkedIn: • Enjoy us on Instagram: • Loosen up with us on TikTok:
/episode/index/show/microsoftmechanics/id/41442000
info_outline
Automate evaluations | Microsoft Foundry
05/21/2026
Automate evaluations | Microsoft Foundry
Build AI agents that meet your standards for quality, safety, and performance using Microsoft Foundry. Trace every run end-to-end, generate synthetic datasets to stress-test on demand, fire automated Red Team attacks at your own agents, and pin down why evaluations fail — all from the Microsoft Foundry control plane. Lock in guardrails that inspect every tool call at runtime, define the risks once, and enforce them across every agent run. Mohammad Abuomar, Responsible AI Principal Architect, shares how to turn a coding agent into production-ready software inside Foundry. ► QUICK LINKS: - Microsoft Foundry control plane - See a finished agent - See where the agent started - Traces - Built-in monitoring - Evaluation types - Red team evaluations - Evaluation results - Built-in Guardrails - Wrap up ► Link References Get everything you need in Microsoft Foundry at ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: • Talk with other IT Pros, join us on the Microsoft Tech Community: • Watch or listen from anywhere, subscribe to our podcast: ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: • Share knowledge on LinkedIn: • Enjoy us on Instagram: • Loosen up with us on TikTok:
/episode/index/show/microsoftmechanics/id/41372125
info_outline
Microsoft Excel Beginners Tutorial (2026)
05/18/2026
Microsoft Excel Beginners Tutorial (2026)
This is the Microsoft Excel guide and tutorial for beginners. If you're new to and getting started with Excel or coming from another app, in this video we teach the basics of Excel, the user interface, core concepts, and how to work with basic data. We'll show you how to build a full Excel workbook from scratch using natural language prompts with Copilot. Format cells, write formulas, and analyze a year of data. Generate sample data, calculate totals, apply conditional formatting, and pin down outliers across columns and rows, all from your browser at excel.new. Share the workbook by name, group, or email and co-author with teammates across web, desktop, and phone. Every edit syncs to OneDrive in real time. Jeremy Chapman, Microsoft 365 Director, shares how to go from blank workbook to analyzed, shared spreadsheet in one sitting. If you have a work or school accounts, Copilot Chat is available at no additional cost if you have Microsoft 365 A1/A3/A5, Business Basic/Standard/Premium, E3/E5, F1/F3, G3/G5, and Office 365 A1/A1 Plus/A3/A5, E1/E1 Plus/E3/E5, F3, G1/G3/G5. If you have a personal Microsoft account, Copilot is available with Microsoft 365 Personal, Family, or Premium in Microsoft 365. For Family and multi-user accounts, only the subscription owner can use Copilot in the desktop apps. ► QUICK LINKS: - Excel Essentials - Start from a blank workbook - Core terms and concepts - Generate Sample Data with Copilot - How to work with the numbers - Copilot Writes Your SUM Formulas - Conditional Formatting from a Prompt - Outlier Analysis with Reasoning - Real-Time Co-Authoring in OneDrive - Wrap up ► Link References Check it out at ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: • Talk with other IT Pros, join us on the Microsoft Tech Community: • Watch or listen from anywhere, subscribe to our podcast: ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: • Share knowledge on LinkedIn: • Enjoy us on Instagram: • Loosen up with us on TikTok:
/episode/index/show/microsoftmechanics/id/41335205
info_outline
Work IQ | Data, Context, Skills & Tools for Copilot and Your Agents
05/13/2026
Work IQ | Data, Context, Skills & Tools for Copilot and Your Agents
Ground every Microsoft 365 Copilot response in your real work data. Pull context from SharePoint, OneDrive, Teams, email, and meetings — all through Work IQ. Draft Word documents that carry your existing sensitivity labels, and resolve calendar conflicts in Outlook. Run multi-step Copilot Cowork workflows that generate files, schedule meetings, and send status updates from a single prompt. Extend the same knowledge layer to ServiceNow, CRMs, and other non-Microsoft systems with API and MCP Server connectors in the Microsoft 365 admin center, or build your own agents in code against the Work IQ API. Jeremy Chapman, Microsoft 365 Director, shares how data, context, and skills & tools combine into a single grounding layer for Copilot and your custom agents. ► QUICK LINKS: - Work IQ Knowledge Layer - Copilot Chat experiences - Work IQ in your apps - Auto-Applied Sensitivity Labels - Copilot Cowork Agentic Workflow - Admin Center Connectors - Work IQ API for Developers - Wrap up ► Link References Check out the latest updates at ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: • Talk with other IT Pros, join us on the Microsoft Tech Community: • Watch or listen from anywhere, subscribe to our podcast: ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: • Share knowledge on LinkedIn: • Enjoy us on Instagram: • Loosen up with us on TikTok:
/episode/index/show/microsoftmechanics/id/41282610
info_outline
Azure Arc | On-prem + Multi-cloud Management
05/08/2026
Azure Arc | On-prem + Multi-cloud Management
Managing Servers, and Kubernetes across on-prem, and multiple clouds, can quickly become complex, especially when you're juggling multiple tools. In this video, we explore how Azure Arc simplifies hybrid and multi-cloud operations by providing a single, consistent control plane for managing your entire infrastructure across Linux and Windows, on-prem, in Azure, or in any cloud. Once connected, you can patch Windows and Linux together with Azure Update Manager, enforce CIS benchmarks and Azure Security Baselines through Azure Policy, and pull consistent inventory, tags, and RBAC across your whole estate. Auto-recover unbootable Windows Server 2025 machines with Quick Machine Recovery, audit and configure WinRE using built-in Azure Policy. Run your virtual machines as Azure Virtual Desktop session hosts on Nutanix, VMware, Hyper-V, or using physical Windows hardware. Satya Vel, Azure Arc Principal Group PDM Manager (https://x.com/satya_vel) shares how to make Azure your operational standard for every workload, anywhere it runs. Learn more about Azure Arc at https://aka.ms/AzureArcServer, or join the community at ► QUICK LINKS: - Azure Arc in hybrid environments - Transitioning to Azure Arc - Unified management - How to bring in servers and containers - Inventory management - Patching - Auto-manage future updates - One-time update - Configuration in a hybrid environment - Auditing Windows machines - Microsoft Defender for Cloud - Desktop virtualization - Wrap up ► Link References For more information go to ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: • Talk with other IT Pros, join us on the Microsoft Tech Community: • Watch or listen from anywhere, subscribe to our podcast: ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: • Share knowledge on LinkedIn: • Enjoy us on Instagram: • Loosen up with us on TikTok:
/episode/index/show/microsoftmechanics/id/41199575
info_outline
Agent 365 | Your Security & Compliance Controls
05/07/2026
Agent 365 | Your Security & Compliance Controls
Keep AI agents operating under control and within your data security and compliance policies using Agent 365. Block agent access to labeled files at runtime, stop sensitive data from leaving in agent-drafted emails, and catch agents that cross conduct lines using the same Microsoft Purview controls you already run for users. Map every risky agent action in Insider Risk Management, drill into Activity Explorer for interaction-level detail, and pull regulator-ready forensics from Purview Audit. Shilpa Ranganathan, Microsoft Purview Partner Group Squad Leader, shares how IT and data security teams can govern agent behavior on a single Agent 365 control plane built into the Microsoft tools already used. ► QUICK LINKS: - Agent security, compliance, & IT - IT & data security teams using Agent 365 - Visibility with Microsoft Purview - End user perspective - DLP on Agent-Initiated Messages - Communication Compliance for Agent Behavior - Data Security admin in the Purview portal - Policy violations - Purview Audit - Microsoft 365 admin center - Wrap upn in the Purview portal ► Link References Check out ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: • Talk with other IT Pros, join us on the Microsoft Tech Community: • Watch or listen from anywhere, subscribe to our podcast: ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: • Share knowledge on LinkedIn: • Enjoy us on Instagram: • Loosen up with us on TikTok:
/episode/index/show/microsoftmechanics/id/41199675
info_outline
Operations Context for AI | Ontology in Fabric IQ
04/28/2026
Operations Context for AI | Ontology in Fabric IQ
Build a shared semantic foundation for your enterprise data in Microsoft Fabric IQ. Generate a full business ontology from an existing Power BI semantic model, map entities and relationships, and embed real-time operational signals alongside business rules that live inside the ontology with the data and its meaning. From there, trace cascading operational impacts across your business through the relationship graph, stand up Operations Agents in natural language with Teams-based actions, and connect the same ontology as a knowledge source in Copilot Studio or Azure AI Foundry. Chafia Aouissi, Fabric IQ Principal PM Manager, shares how to model your business operations, embed intelligence in your data, and deploy agents that act on it. ► QUICK LINKS: - Unify models & data with Fabric IQ - Generate an ontology - Bring in Power BI reports - View across multiple data sources - Define rules - Built-in ontology graph - Fabric IQ agents - Fabric IQ as Knowledge Source - Wrap up ► Link References Get started at ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: • Talk with other IT Pros, join us on the Microsoft Tech Community: • Watch or listen from anywhere, subscribe to our podcast: ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: • Share knowledge on LinkedIn: • Enjoy us on Instagram: • Loosen up with us on TikTok:
/episode/index/show/microsoftmechanics/id/41054915
info_outline
Windows App Management in Microsoft Intune
04/27/2026
Windows App Management in Microsoft Intune
Take command of your full app layer in Microsoft Intune. Audit every managed and unmanaged app per device with full metadata — publisher, architecture, disk size, install location, uninstall command — to expose shadow IT before it spreads. Pull curated Win32 apps straight from the Enterprise App Catalog or upload PowerShell .ps1 scripts to control exactly how each app installs. Stage rollouts in rings with Deployment Plans, pause or cancel any deployment in flight, and auto-trust every app you push using App Control for Business with Managed Installer — extending the same trust to new device builds with Autopilot, now up to 25 apps. Keep your fleet current automatically as vendors publish new versions through the Enterprise App Catalog, or trigger updates on demand from the Guided Upgrade Supersedence report. Nicole Zhao, Microsoft Intune Product Manager, shares how to put these built-in enhancements to work across every managed device. *Intune Deployments is currently in private preview. Capabilities shown are subject to change and not yet generally available. Check out aka.ms/RSAC26-Intune-Blog from the RSA Conference for additional security context and guidance when managing apps with Microsoft Intune. ► QUICK LINKS: - Built-in app management - App Inventory Visibility - Enterprise Application Management (EAM) - PowerShell Script Installer GA - Ring-Based Deployment Plans - Managed Installer Auto-Trust - Enterprise App Catalog Auto-Update - Guided upgrade supersedence - Wrap up ► Link References Check out ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: • Talk with other IT Pros, join us on the Microsoft Tech Community: • Watch or listen from anywhere, subscribe to our podcast: ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: • Share knowledge on LinkedIn: • Enjoy us on Instagram: • Loosen up with us on TikTok:
/episode/index/show/microsoftmechanics/id/41034015
info_outline
Foundry Agent Service + Microsoft Agent Framework Explained
04/22/2026
Foundry Agent Service + Microsoft Agent Framework Explained
Move your AI agents from prototype to production using Microsoft Foundry Agent Service. Deploy directly from your local environment, run with secure identity and scoped permissions, and monitor every interaction so you can debug, improve, and scale without losing control. Publish agents into the tools your team already uses and ensure every action is traceable, governed, and isolated. Ground your agents in real work and business data to generate outputs that are actually useful. Pull from emails, meetings, and operational systems to create personalized insights, documents, and presentations. Build faster with familiar tools and frameworks, then manage performance, cost, and quality across all your agents as they scale. Jeff Hollan, Partner Director, AI Agent Services, shares how to operationalize AI agents across your organization—from deployment to real-world impact. ► QUICK LINKS: - Build single and multi-agentic workloads - Build agents at scale with Foundry - Demo: Sales meeting preparation agent - How it works - Access controls - Publish the agent - Direct integration with Microsoft 365 - Work IQ, Foundry IQ, & Fabric IQ - Agent creation - See what's happening in the code - Manage performance - Wrap up ► Link References Go to the Microsoft Foundry to build your first project at Check out ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: • Talk with other IT Pros, join us on the Microsoft Tech Community: • Watch or listen from anywhere, subscribe to our podcast: ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: • Share knowledge on LinkedIn: • Enjoy us on Instagram: • Loosen up with us on TikTok:
/episode/index/show/microsoftmechanics/id/40887180
info_outline
Claude + GPT | Multi-model intelligence in Copilot
04/09/2026
Claude + GPT | Multi-model intelligence in Copilot
Access Anthropic and OpenAI models directly from Microsoft 365 Copilot. Generate briefing documents, presentations, and Excel files from a single prompt with Copilot Cowork, pulling from your emails, calendar, and SharePoint through Work IQ — and fold in new tasks mid-run without stopping. Using Copilot Cowork, you can use the same platform that powers Claude Cowork. It’s designed for long-running, multi-step task automation. Use Critique in Researcher to pair a generation model with a dedicated review model, applying source reliability and evidence grounding before the report lands. Run model Council to submit one prompt to GPT and Claude simultaneously and compare their full reasoning side-by-side. These experiences with Copilot Cowork and Researcher are available now if your organization has the Frontier Program enabled. Jeremy Chapman, Microsoft 365 Director, shares how to choose, direct, and compare the right AI model for every task, all from within Microsoft 365. ► QUICK LINKS: - Copilot capabilities - Copilot Cowork - Mid-Run Task Injection - Output - Researcher Critique: Dual-Model Pipeline - Work IQ Auto-Retrieval - Model Council - Wrap up ► Link References Try it at ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: • Talk with other IT Pros, join us on the Microsoft Tech Community: • Watch or listen from anywhere, subscribe to our podcast: ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: • Share knowledge on LinkedIn: • Enjoy us on Instagram: • Loosen up with us on TikTok:
/episode/index/show/microsoftmechanics/id/40780140
info_outline
Labeling Files is Worth It | Speed & Protection Benefits in Microsoft Purview
03/25/2026
Labeling Files is Worth It | Speed & Protection Benefits in Microsoft Purview
Take control of your data by discovering sensitive information across every file type and location with Microsoft Purview Information Protection. Classify your data, apply clear labels, and enforce protections that automatically adapt to human and AI interactions so you can reduce risk without slowing down workflows. Proactively monitor, assess, and respond to risk in real time. Use labeling and layered policies to stop accidental sharing, manage AI access, and maintain consistent protection across your organization. Matt McSpirit, Microsoft Mechanics expert, joins Jeremy Chapman to share how to turn scattered data into actionable security that moves as fast as your team and AI. ► QUICK LINKS: - Microsoft Purview data protection - Data Loss Prevention - Layered approach in addition to DLP - Unified classification - How sensitive data is determined - Create trainable classifiers - Distinction between classification and labeling - Configure policy protections - DLP in action - IRM in action - See how protections show up - Move from reactive to proactive protection - Wrap up ► Link References For deeper guidance, go to ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: • Talk with other IT Pros, join us on the Microsoft Tech Community: • Watch or listen from anywhere, subscribe to our podcast: ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: • Share knowledge on LinkedIn: • Enjoy us on Instagram: • Loosen up with us on TikTok:
/episode/index/show/microsoftmechanics/id/40599640