Copilot
A Purview DLP policy for Copilot blocks sensitive prompts and files
Create a Purview DLP policy for Copilot in six steps and block sensitive prompts, external web search and labeled files before they reach your users.
11
A notebook from the field
Andreas in the Cloud
Hands-on knowledge about Microsoft 365, Copilot, Entra ID, Azure and Cloud Security – for IT professionals.
Andreas Hähnel · More about me
Featured articles
You will find all articles further down the page.
Featured · Microsoft 365
Microsoft 365 E7 adds Copilot, Entra Suite and Agent 365 on top of E5
Microsoft 365 E7 combines E5, Copilot, Entra Suite and Agent 365. Here is what the Frontier Suite offers and how to check your starting point in the tenant.
7 May 2026
All articles
Cloud Security
Microsoft Defender now blocks prompt injection attacks in email by default
Prompt injection protection in Defender for Office 365 is on by default. Learn which license you need and how to review detections in the Defender portal.
34
Microsoft 365
Six months of Microsoft 365 E7 – an interim verdict
Six months of Microsoft 365 E7 in customer projects: what the licence really delivers, what is missing and how a machine builder secured agents.
42
Cloud Security
Audit email remediation in Defender and see who approved each action
The new ApproverUpn field in Defender for Office 365 shows who approved each email remediation. Here is the KQL query I use to audit those approvals.
17
Microsoft 365
Targeted release retires in January 2027, so review your settings now
Targeted release ends in January 2027. Here is how to review your release preferences in the admin center and switch to Standard or Deferred release in time.
28
Copilot
A Copilot spending policy controls which users get usage-billed features
I set up a Copilot spending policy in the admin center so pilot users can use usage-billed features while Copilot Credits costs stay under control.
52
Azure
Windows Server 2016 end of support leaves you three months to act
Windows Server 2016 loses extended support on January 12, 2027. Take inventory now, then upgrade, move to Azure, retire the server or fall back on ESUs.
62
Entra ID
The admin consent workflow protects your tenant from consent phishing
Consent phishing is still a real risk. The admin consent workflow in Entra gives admins control over which app permissions are granted in the tenant.
73
Microsoft 365
Windows 10 ESU year two starts today and forces some practical decisions
Windows 10 ESU year two starts today. Organisations need to buy new keys, activate them on every device and rethink their plans as costs rise again.
101
Cloud Security
Defender XDR incident notifications can work for small IT teams
Small IT teams can stay on top of attacks with Defender XDR incident notifications if they tune email alerts, tags, queue filters and on-call plans.
134
