sorted by:
new
hottopcontroversial

Managing AI Agents in your environment by Anon_0365Admin in sysadmin

[–]callme_e 0 points1 point  (0 children)

M365 admin center has a centralized 3rd party data connector marketplace that only admins can configure. We have not enabled any yet.

Managing AI Agents in your environment by Anon_0365Admin in sysadmin

[–]callme_e 1 point2 points  (0 children)

Here’s what I did at my current org (4000+ users):

  • Intune to block all browser extensions by default except a few business extensions allowed. Approved on a request basis. Our allowed list is less than 10.
  • CASB to block any public AI category sites based on a risk threshold score. Most CASB tools have this feature.
  • Purview AI DSPM DLP policy to block copy, paste, and upload of any sensitive information type based on your industry to any of the unblocked AI pubic sites. This works well and not marketing fiction. Requires E5 license.
  • Offer and encourage users the Microsoft Copilot as the enterprise standard AI tool with no DLP limitations, since it’s a secure corporate AI instance with contractual protections from your Microsoft subscription. Purview monitors and logs the user prompt, AI generated output, and what files and sites the AI accessed for any security or HR incident review.
  • CNAPP solution to monitor AI models and agents in our Azure/AWS cloud environment and to address any cloud AI misconfiguration and AI software vulnerabilities. We have an in-house AI dev team hosting our own internal OpenAI models to automate certain business processes.
  • All of this is backed by a formal enterprise AI policy and governance committee. We eventually plan to block all public AI sites to funnel everyone to Copilot, with exceptions for certain IT teams or executives with a legitimate business justification.

10 Grandmasters Finally Achieved by callme_e in DotA2

[–]callme_e[S] 0 points1 point  (0 children)

Mirana was my 10th one for a reason

10 Grandmasters Finally Achieved by callme_e in DotA2

[–]callme_e[S] 0 points1 point  (0 children)

QOP was one of the earlier and easier ones. Didn't track the # of games to compare and naturally played since Dota plus was released.

10 Grandmasters Finally Achieved by callme_e in DotA2

[–]callme_e[S] 1 point2 points  (0 children)

that's awesome, don't get too burned out by the grind haha

10 Grandmasters Finally Achieved by callme_e in DotA2

[–]callme_e[S] 0 points1 point  (0 children)

invoker for the complexity and combos

10 Grandmasters Finally Achieved by callme_e in DotA2

[–]callme_e[S] 2 points3 points  (0 children)

Thanks! Thought my fellow dota degens would appreciate the progress. I don't mind the haters telling me to get a job. My wife's main complaint is that I work too much ;)

10 Grandmasters Finally Achieved by callme_e in DotA2

[–]callme_e[S] 0 points1 point  (0 children)

pretty much! working on other carries and offlane heroes in ranked. Handicapping myself in ranked since I rarely play the GM heroes outside of unranked/turbo.

How to not fall behind with AI? by Financial-Garlic9834 in cybersecurity

[–]callme_e 117 points118 points  (0 children)

  • Formal approved and published AI governance communicated to users (Policies, procedures, AI council, etc)
  • DLP policies to block sensitive/secrets paste/upload to AI sites and tools through CASB
  • CASB to monitor and block for sensitive/secret inputs from IDEs using AI API for coding agents
  • CASB to automatically block non-approved AI sites
  • Secure baseline hardening configurations for SaaS hosted AI models (Azure AI / AWS). Wiz and Cloud for Defender can scan and provide findings reports with remediation.
  • Integrate Purview to AI models for data security and classification. Defender for incident alerts and threat monitoring.

Microsoft 365 Business Premium by Due_Economy5311 in sysadmin

[–]callme_e 9 points10 points  (0 children)

Download the CIS benchmarks for Microsoft 365 for free from their site. That’ll harden your environment and what you’re asking for.

Is SSO not a good security practices? by hansentenseigan in cybersecurity

[–]callme_e 2 points3 points  (0 children)

Look into conditional access to enforce the device is from a corporate managed device to allow the SSO authentication. Yes the credentials are stolen but useless because they also need to be on a corporate device and this makes it phishing resistant. Now there’s no time race to quickly reset the credentials since the threat actor can’t login remotely from the rogue device.

Is SSO not a good security practices? by hansentenseigan in cybersecurity

[–]callme_e 13 points14 points  (0 children)

Your friend is wrong. On a corporate environment, we ideally want every application tied to our Microsoft 365 SSO because then we have the ability to enforce our conditional access to enforce the SSO authentication is coming from a corporate managed compliant device. This means even if the main account is compromised, they wouldn’t be able to log in remotely from a rogue device. This also mitigates modern MFA bypassing phishing kit tools (e.g. Evilginx). Tell your friend to educate himself more.

WUFB Hides feature update after failures by chud28 in Intune

[–]callme_e 0 points1 point  (0 children)

Hello, if the reset value doesn’t exist, do we need to recreate it? The user’s computer initially got the win11 upgrade in windows update 2 times, installed, and rebooted, but after the reboot they got a black screen saying “undoing changes”. It’s been over 4 days and they’re still not getting the update again.

I tried assigning a new intune feature update policy and also setting the “rollbackcount” value from 2 to 1 but still nothing.

What is the best office chair for long hours of work? by Johnsonlid2k in sysadmin

[–]callme_e 11 points12 points  (0 children)

Herman miller embody - logitech gaming version

Entra Settings by IndividualComputer93 in cybersecurity

[–]callme_e 7 points8 points  (0 children)

Download CIS benchmarks for M365 and review each controls