How is least privilege different in 2025? Richard talks to Bailey Bercik about the ongoing efforts to minimize users, administrators, and applications' privileges in 2025. Bailey talks about the power of Entra Permissions Management to help you see what permissions are going unused on various accounts so that you can tailor rights to individual accounts without things becoming unmanageable. Artificial intelligence is a forcing function for many permission issues, with these new tools potentially creating problems when given unnecessary rights. But those same tools can help you understand where permissions are being underutilized and help protect your systems!

Links

• Principle of Least Privilege
• Enable Permission Management
• Entra Permissions Management
• Microsoft Security Copilot
• Copilot in Microsoft Entra
• SEC545: GenAI and LLM Application Security
• How Attackers Use Apps to Attack Video

Recorded December 16, 2024

For the first show of 2025, let's talk about being a sysadmin in the coming year. This is the sixth year of Richard going solo on the show to talk about the things he's seen in the past year and speculate a bit on the next year, at least for sysadmins. Economic uncertainty is still a thing, as is employment. The security situation continues to be tough - and getting worse. But remarkable new tools, including large language models, are on the horizon to make things a bit easier. The adoption rates for LLMs aren't as quick as some people would like, but things are happening, and they can provide value. However, you have to do your homework. Oh, and then there's Windows!

Links

• Microsoft Copilot
• Microsoft 365 Copilot
• Microsoft Security Copilot
• GitHub Copilot
• Privileged Identity Management
• Extended Security Updates program for Windows 10
• Plan for Windows 10 EOS with Windows 11, Windows 365, and ESU
• LAPS
• Microsoft Fabric

Recorded December 31, 2024

What does Windows want for Christmas? Richard chats with Paul Thurrott about the crazy year that Windows has had and what 2025 holds. Paul starts with the Ignite keynote that focused on Windows being an open platform - which sounds funny on the surface, but has some logic to it! Security is a key part of that story, which brings up the issues around Crowdstrike and the Secure Future Initiative. And then there's Windows 10 going out of support in 2025 - what choices do you have going forward? Two grumpy old men ring out the year – have a great holiday season!

Links

• Secure Future Initiative
• Windows Security and Resiliency
• What's new in Windows Security, Productivity, and Cloud
• Windows Server 2025
• Windows 10 End of Support

Recorded December 5, 2024