Advertise on podcast: RunAs Radio

What does the world look like after Microsoft Deployment Toolkit? Richard talks to MDT creator Michael Niehaus about the life and death of MDT. Michael talks about his early days at Microsoft, when he created a better way to manage operating system images so you can build and rebuild Windows PCs for your organization. But MDT had been in maintenance since 2013, without specific support for Windows 11. And now, some security concerns have ended support entirely. So what happens next? Michael offers fixes to keep MDT safe to use, and some alternatives if you want to keep managing your own images! Links Microsoft Deployment ToolkitMichael's Post of the MDT VulnerabilityWindows AutopilotFriends of MDTMDT Retirement NoticeMicrosoft Intune2Pint DeployRMMS ConferenceiPXE AnywhereRecorded February 17, 2026

How does your company communicate with its employees today? Richard chats with Emily Mancini about her work with companies that manage internal communications. Emily talks about the power of email, collaborative messaging like Teams, and the Microsoft Viva products Engage and Amplify. The conversation digs into knowing where your people look for info, how they communicate, and what they want to connect with. Being able to measure the response to different communication means helps you to work on better messages and methods - the goal is to enable employees to connect with and utilize the resources of the organization, creating a stronger company culture! Links Microsoft Viva Engage Microsoft Viva Amplify Create and Send a News Digest Recorded March 9, 2026

AI Agents can be powerful tools for an organization - but are they a security risk? Richard talks to Niall Merrigan about his experiences dealing with the various ways that LLMs can be attacked, starting with prompt injection. While some attacks are humorous, others can be very serious, especially in the context of agents, where the right prompt can cause an agent to use its capabilities to access or affect data outside its expected behavior. This has already led to several well-publicized CVEs, including the ServiceNow Privilege Escalation advisory. New tools have emerged to help restrict prompts and keep agents on task - but as with all things security, this is another set of tools you need to get familiar with! Links AI Recommendation PoisoningDetecting Prompt Injection AttacksMark Russinovich Crescendo Multi-Turn LLM Jailbreak AttackCross-Site Scripting (XSS)Cameron Mattis LinkedInPrivilege Escalation in ServiceNow AI PlatformAzure AI Content Safety Prompt ShieldsTask AdherenceSimon Willison's Lethal TrifectaMicrosoft Agent 365PyRITOWASP Securing Agentic Applications GuideRecorded February 16, 2026

Are you ready to take a look at Richard's home lab? Richard goes solo to share insights about the new infrastructure, hardware, and automation in his seaside home. He discusses the challenges posed by its remote location, including unreliable power and connectivity. You'll find plenty of details about networking, computing infrastructure, automation, telemetry, and experiments with AI technologies. Get an exclusive behind-the-scenes look! Links Kubernetes Ubiquiti Enterprise Campus Aggregation Proxmox nVidia H200 GPU Prometheus Grafana Video Tour of Home Lab Recorded April 1, 2026

Configuration drift is real - how do you control it in your Azure tenant? Richard talks to Nik Charlebois-Laprade about his ongoing work on desired state configuration DSC for Microsoft 365 tenants. Microsoft365DSC has been an open-source tool for managing configuration for some time, but today it has become a preview product called Unified Tenant Configuration in Microsoft Graph. Nik talks about managing multiple tenants, including a single tenant, using reference configurations that help you detect and correct configuration changes. It's early days for the product, but there's a ton of power here to keep your tenant working the way you expect! Links Microsoft365DSCUnified Tenant ConfigurationRecorded February 13, 2026

How does artificial intelligence become more sustainable? Richard chats with Darshna Shah about her experiences as Chief AI Officer at Elastic. Darshna discusses the resources required to run large language model experiments, the pressure this has put on the electrical grid, and more. The conversation turns to efficiency - and the idea that there is little incentive in the current land grab around LLMs to be more efficient - that the focus is on growing quickly. But as technologies mature, efficiency becomes a key competitive advantage! Links RDeepEvalAzure AI Evaluation SDKGitHub Green Software FoundationRecorded January 29, 2026

SQL Server 2025 is released - what's in it, and what happens next? Richard chats with Bob Ward about the huge array of announcements coming out of Ignite around SQL Server 2025, including AI-related features, new reliability and performance options, engine improvements, and more! The tooling for SQL Server also continues to evolve, including making Copilot available through SSMS and as part of the SQL extension to Visual Studio Code. And there's more to come - have a listen! Links SQL Server 2025SQL Server 2025 UnveiledSSMS with Erin StellatoSQL Server Management StudioJSON Data in SQL ServerManaged Identity for SQL ServerSQL Server in Microsoft FabricMirroring SQL Server in FabricNext-Generation SQL Managed InstanceMSSQL Extension for Visual Studio CodeRecorded January 5, 2026

How can you hire and get hired in 2026? While at NDC London, Richard chatted with Suzi Edwards-Alexander about her experiences recruiting technology folks into companies. Suzi talks about developing interview practices that actually reflect the job, rather than examining esoteric knowledge or certifications - it's possible to have an interviewing experience that is actually enjoyable! The conversation dives into the power imbalance between employers and employees and how to resist being seen as lesser for not being employed. Work should be a mutually beneficial experience - we have to do better! Links AppartenirRecorded January 29, 2026

What does it take to get your SaaS offering on multiple cloud providers? Richard chats with Steve Buchanan about his new role at JAMF, which focuses on a mobile device management product for Apple devices. Originally built as a SaaS product on AWS, Steve is helping to build out the JAMF stack on Azure to support a broader range of customers. Steve talks about Kubernetes as the common ground among the major cloud players, but you need to dig into the rest of the tooling to minimize differences across implementations. That means cloud-agnostic tools for deployment, identity, instrumentation, and more! The good news is that there are plenty of tools out there to help you, but it does take time to work out your suite of tools to get consistent results, no matter where the backend resides. Links JAMFOpenTofuElastic Kubernetes ServiceAzure Kubernetes ServiceGoogle Kubernetes EngineMicrosoft IntuneiOS and IntuneOktaPrometheusGrafanaSteve's Pluralsight ClassesKAgentSOC 2 Type 2Recorded January 8, 2026

How have large language models impacted hacking? Richard talks to Erica Burgess about her experiences using LLMs for red team hacking, collecting bug bounties, and identifying vulnerabilities in systems. Erica discusses the power of LLMs to generate a variety of viewpoints on a potential exploit and help the hacker think "out of the box." Coordinating multiple agents to attempt a variety of exploits, retrieve information, and otherwise deal with the drudgery parts of hacking means a skilled operator can move faster - what once would be days of work can be minutes. Where does AI in hacking go? Lots of scary places - but also pointing the way to new ways to protect systems! Links Burninator SecRecorded January 24, 2026

You're using Active Directory Certificate Services - but is it configured securely? Richard talks to Ron Arestia about his work with organizations implementing their own Public Key Infrastructure (PKI) with ADCS. Ron explains how poorly configured ADCS enables lateral attacks within an organization once an initial breach occurs, allowing black hats to move throughout your network. A well-designed PKI system has tiers of protection, with the top level completely disconnected from the network. Or do you really need your own PKI system? The conversation digs into the various scenarios, including third-party options. Certificates are the top level of security for your organization - you need to get it right! Links Active Directory Certificate ServicesWindows Hello for BusinessCertified Pre-OwnedMicrosoft Defender for IdentitySecure Privileged AccessPass the HashMicrosoft Cloud PKI for Microsoft IntuneMicrosoft Entra Conditional AccessMicrosoft AutopilotRon's BlogRecorded February 6, 2026

Ready to get started with Purview? Richard chats with Erica Toelle about the first steps you can take to harness the power of Purview in your organization. Erica explains that Purview is an umbrella product that covers several infosec technologies, including information rights management, data loss prevention, structured data governance, and more. When preparing for M365 Copilot, you want to start tagging sensitive information in your organization, and Purview can help by using LLMs to identify potentially sensitive content. You can also monitor how data is used, the types of prompts sent to M365 Copilot, and more. This can help you bootstrap M365 Copilot by using Purview to see which data Copilot uses, and then tune the access rules for that data. "Getting your data estate in order" is not a destination; it's a journey, and Purview can give you a map! Links Microsoft PurviewData Security Posture ManagementData Governance with Microsoft PurviewConditional Access with Microsoft PurviewSharePoint Advanced ManagementMicrosoft 365 ArchiveEndpoint Data Loss PreventionPurview Browser ExtensionRecorded January 7, 2026

Business Process Automation has been around a long time - what are the latest approaches? Richard talks to Ian Cooper about his work building BPA workflows in organizations - starting on paper or a whiteboard to make sense of the process before bringing tools into the equation. Ian talks about building repeatable workflows that are well-documented and source-controlled, typically through GitHub. As workflows get more complex, you'll need orchestration engines that can handle failures and provide telemetry to identify when and where things go wrong. And make sure you let users know how things are going - or they will worry! Links KafkaDurable FunctionsGitHub ActionsTemporalPulumiOpenTelemetryRecorded December 5, 2025

How do you get an idea to implementation in your organization? Richard chats with Amber Vanderburg about the work she's done helping teams understand the process of getting projects started and finished. Amber talks about defining a clear starting line, ending line, and dead line. While many projects are important, prioritization is the challenge. This means often other priorities have to be resolved before something new can be started - you need resources and time to be successful. Working through the process takes time, but the alternative is failure to meet expectations. It takes planning and clear communication to get things done! Links Pathwayz GroupMythical Man MonthThe Four Disciplines of ExecutionSpeed of TrustThe Culture MapRecorded December 4, 2025

What's coming in 2026 for Azure? Richard chats with CVP and Chief Product Officer for Azure, Jeremy Winter, about the announcements at Ignite and what we can expect in Azure over the next year. Jeremy talks about new features for migrating workloads to Azure, creating more reliable application implementations, the vast array of AI-related technologies being released, and more! The conversation also digs into the new data centers being built all over the world, and how they are becoming more efficient with resources. Links Azure CopilotAzure SRE AgentAzure Resiliency AgentAzure MigrateKubernetes FleetAzure HorizonDBAzure Red Hat OpenShiftAzure FairwaterRecorded December 3, 2025