Modern security teams are not short on alerts. The bigger challenge is knowing what deserves attention first and responding before an incident spreads.


In this episode of Demystifying Microsoft, Austin Kelly from Sourcepass MCOE explains how Microsoft Defender has evolved beyond traditional antivirus into a broader security platform for identities, endpoints, email, collaboration tools, cloud applications and data. The episode covers five Microsoft Defender features that help organizations connect security signals, prioritize real risk, and respond faster to active threats.


What You’ll Learn:

• How Microsoft Defender has expanded beyond endpoint antivirus
• Why Attack Disruption matters when an attacker is already inside the environment
• How Unified XDR connects separate alerts into one security incident
• Why email, Teams, SharePoint and OneDrive remain major areas for attack prevention
• How Exposure Management helps prioritize vulnerabilities by actual risk
• Why vulnerability volume alone does not show what needs to be fixed first
• How Microsoft Defender can surface unusual data movement and insider risk
• Where Microsoft Security Copilot can support faster investigation without replacing security professionals

About the Host:
Austin Kelly is a Client Success Manager at Sourcepass MCOE, a company focused on helping organizations simplify, secure, and optimize their Microsoft environments. He works closely with businesses to evaluate licensing, improve security posture, and align Microsoft investments with real operational needs.



Episode Highlights:


02:04 Defender is More Than Antivirus

Austin explains why thinking of Defender purely as an endpoint antivirus misses most of what the platform now covers, including identities, email, cloud apps, devices and data.


03:03 Stopping an Attack While It Is Happening

Attack Disruption can automatically disable compromised accounts and contain affected devices. Austin explains why reducing the gap between detection and containment matters when attackers are trying to move laterally.


05:43 Protecting Collaboration

Email remains a common entry point, but the collaboration surface now extends across Outlook, Teams, SharePoint and OneDrive. Austin explains why protection needs to follow users across that stack.


07:36 Fix the Risks That Matter First

Finding hundreds of vulnerabilities is easy. Deciding which ones materially reduce risk is harder. Austin explains how Exposure Management helps IT prioritize accordingly.


09:01 Security Ultimately Comes Back to Data

Austin shifts the conversation from keeping attackers out to controlling where sensitive information goes. Unusual downloads, risky sharing, and suspicious user activity matter whether the cause is malicious or accidental.

Episode Resources:

Reach out to Sourcepass MCOE for a Microsoft Defender strategy that keeps up with the times: https://sourcepassmcoe.com/demystifying-microsoft-contact
Austin Kelly on LinkedIn


Quotes:

• “The problem isn’t finding those vulnerabilities. The problem is finding out which ones matter.”
• “Protecting the data itself is really what security is all about.”
• “AI isn’t replacing security professionals. It’s really helping them work smarter and respond faster.”
• “Microsoft Defender, it’s not just another antivirus product anymore. It is a security platform.”
  
  

Demystifying Microsoft is handcrafted by our friends over at: fame.so

GoDaddy can make Microsoft 365 easy to adopt when a company is small. The friction tends to appear later, when IT needs access to controls that sit outside GoDaddy’s managed experience.


In this episode of Demystifying Microsoft, Nathan Taylor sits down with Lindsay Cowan, Senior Sales and Business Development Manager at the Sourcepass Center of Excellence for Microsoft, to explain what actually happens when an organization moves away from GoDaddy Microsoft 365.


What You’ll Learn:

• Why growing organizations begin running into GoDaddy’s Microsoft 365 limitations
• The difference between a Microsoft 365 migration and GoDaddy defederation
• Why GoDaddy licensing should remain active until defederation is complete
• How staggered GoDaddy renewal dates complicate licensing decisions
• Why the Partner Center Web App needs to be checked and removed
• What happens to users during the defederation process
• Why Defender for Office 365 still requires configuration after licensing
• What to consider before changing a GoDaddy-created Microsoft tenant name
• Why post-defederation tenant hardening should be part of the project
  
  

About the Guest:

Lindsay Cowan is the Senior Sales and Business Development Manager at the Sourcepass Center of Excellence for Microsoft. She has spent five years with the Sourcepass team and works closely with organizations navigating Microsoft licensing, Microsoft 365 transitions and GoDaddy defederation projects.

About the Host:

Nathan Taylor is Senior Vice President and Global Microsoft Practice Leader at Sourcepass, where he leads the Sourcepass Center of Excellence for Microsoft, also known as the Sourcepass MCOE. With nearly two decades of experience, he helps organizations manage complex Microsoft cloud and security decisions by turning technology into secure, scalable outcomes.


Episode Highlights:


01:26 When “Easy” Starts Becoming Limiting

GoDaddy works well for many companies when they are getting started. Lindsay explains why that changes once IT needs greater control over Microsoft 365 administration, security, licensing, partner management and AI capabilities.


06:55 Defederation Is Not a Data Migration

Nathan explains what federation actually means and why removing GoDaddy’s layer does not require moving mailboxes or rebuilding the Microsoft environment. The underlying tenant stays where it is.


10:47 Don’t Cancel GoDaddy Licensing Early

One of the simplest mistakes can also create one of the biggest headaches. Lindsay explains why the existing licenses need to remain intact until the defederation work has been completed.


13:23 Deciding Whether to Rename the Tenant
Defederation can provide an opportunity to replace a randomly generated GoDaddy onmicrosoft.com tenant name. The tradeoff: changing it can break previously shared SharePoint URLs.


23:18 The Signs You’ve Outgrown GoDaddy
Lindsay says she often sees the conversation begin around 10 to 15 employees, when companies start wanting more control over security policies and the broader IT environment.


Episode Resources:

Hitting GoDaddy’s limits with Microsoft 365 as you scale? Let’s chat about the smoothest path forward for your team: https://sourcepassmcoe.com/demystifying-microsoft-contact


Lindsay Cowan on LinkedIn
Nathan Taylor on LinkedIn


Quotes:

• “At some point, easy turns into limiting.”
• “Security controls with a GoDaddy Microsoft account are extremely limited.” 
• “Saying that your tenant is now defederated, that is not the finish line. That’s the start of the race.”
  
  

Demystifying Microsoft is handcrafted by our friends over at: fame.so

Microsoft has a habit of dropping new capabilities into subscriptions without much noise. Business Premium is no longer just a "basic" option for small teams and Austin Kelly highlights why. The most immediate gain is the increase to a 100GB mailbox, which removes a long-standing frustration for heavy email users and eliminates the need for extra Exchange Plan 2 licenses.


The conversation moves to the security and compliance side of the house. Business Premium now serves as a base for advanced tools like Microsoft Defender and Microsoft Purview, bringing XDR, identity protection, and data governance within reach of smaller organizations. Austin explains how these tools provide visibility into threats and sensitive data, creating the necessary foundation for anyone looking to adopt AI.


Finally, the focus turns to Copilot for Microsoft. Austin describes the value of AI in a small business environment where employees often wear multiple hats. He clarifies that the business version of Copilot offers the same functionality as the enterprise version while maintaining the security boundaries already established in your Microsoft 365 tenant.


What You’ll Learn:

• Why the 100GB mailbox update eliminates the need for separate Exchange licenses
• How Business Premium now supports enterprise-grade security via Defender suite add-ons
• The role of Microsoft Purview in classifying data and preventing oversharing
• Why a secure Microsoft 365 environment is a prerequisite for AI adoption
• The ways Copilot for Microsoft helps small teams reclaim time from repetitive tasks
  
  

About the Host:

Austin Kelly is a Client Success Manager at Sourcepass MCOE, a company focused on helping organizations simplify, secure, and optimize their Microsoft environments. He works closely with businesses to evaluate licensing, improve security posture, and align Microsoft investments with real operational needs.


Episode Highlights:


[00:03:30] The 100GB Mailbox Update 

One of the biggest differences between business and enterprise plans has finally disappeared. Austin explains why moving from 50GB to 100GB is a massive win for IT management and user experience.


[00:06:15] Accessing Advanced Security 

Prevention is only half the battle. This section covers how the Defender Suite add-on allows smaller organizations to detect and respond to threats using tools that were previously only for E5 customers.


[00:09:30] Data Visibility with Purview 
AI is only as good as the data it accesses. Austin details how Purview helps organizations find their sensitive info and apply protection policies automatically.


[00:10:45] AI for the Multi-Hat Employee 
Small businesses don't always have the luxury of hiring more people. Austin describes how Copilot for Microsoft 365 handles drafting, summarizing, and analysis so your current team can focus on higher-value work.


Episode Resources:

Are you paying for add-ons that are now included in your base subscription? Our team can help you optimize your set-up to find cost savings. Get in touch today: https://sourcepassmcoe.com/demystifying-microsoft-contact

Austin Kelly on LinkedIn


Demystifying Microsoft is handcrafted by our friends over at: fame.so

Moving into an AI-centered workflow is a continuous process of trying, learning, and iterating rather than a one-time software rollout. Steve Adams highlights that while technology changes by the hour, human instincts and organizational habits often lag years behind. To see a real return on investment, leaders must align their AI efforts with existing business goals rather than getting distracted by technical novelties that don't impact the bottom line.


The conversation looks at the logistical reality of credit consumption and why frontier models aren't always the answer for every task. By understanding when to use heavy-hitting tools like Cowork and when to rely on leaner, efficient models, organizations can save hundreds of hours without ballooning their budget. Steve and Nathan also cover the necessity of starting with governance that works for the 85% of employees who use these tools for daily tasks, rather than getting paralyzed by extreme edge cases.


What You’ll Learn:

• The "Try, Learn, Iterate" framework for constant technical change
• How to align AI use cases with your actual annual business goals
• The difference between serial and parallel AI processing for productivity
• Why cultural readiness matters more than the Microsoft 365 Copilot ribbon
• Managing the cost of AI tokens and credits effectively
• Building an auditable governance structure for the average knowledge worker
  
  

About the Guest:

Steve Adams is the Chief Innovation Officer and President of produhktiv, where he leads the company's vision, culture, and growth. He is an AI expert enthusiast whose work centers on Microsoft's AI strategy and Microsoft 365 Copilot. With 13 years of experience at Microsoft and 15 years in the partner channel, Steve focuses on the user experience and on helping knowledge workers be more productive in secure and cost effective ways. Today he helps organizations modernize their training and enablement so teams can keep pace with the rapid evolution of AI.

About the Host:

Nathan Taylor is Senior Vice President and Global Microsoft Practice Leader at Sourcepass, where he leads the Sourcepass Center of Excellence for Microsoft, also known as the Sourcepass MCOE. With nearly two decades of experience, he helps organizations manage complex Microsoft cloud and security decisions by turning technology into secure, scalable outcomes.


Episode Highlights:


[00:05:13] The Ribbon Era vs. The AI Era 
Most users haven't changed how they use Outlook or Word in 20 years. We look at why the rapid pace of AI needs crossing mental blocks toward constant adaptation rather than waiting for a three-year update cycle.


[00:11:00] Finding Business Outcomes in the Hype 

AI can feel like a parlor trick if it isn't solving a real problem. Nathan and Steve talk about looking back at your annual planning to ensure your AI resources target the initiatives that actually drive the organization forward.


[00:22:24] The Right Tool for the Right Job 

Not every task requires a frontier model that costs thousands of dollars to run. Understand the balance between human efficiency and the cost of tokens to ensure your automation efforts remain profitable.


[00:29:26] The ROI of Parallel Processing 

Using Cowork to synthesize reports, spreadsheets, and presentations simultaneously can save 20 hours of manual labor. Hear how to justify the credit cost when the time savings are this significant.


[00:35:02] Solving the People Problem 

If you just give someone a license, the signals show they probably won't click the button. Adoption is a cultural challenge that requires a new way of thinking about readiness and training.


[00:37:30] Governance for the 85% 

Don't let the lack of case law stop you from enabling your team. Learn why creating guidance for the majority of your workers provides more value than worrying about extreme edge cases today.


Episode Resources:

Reach out to Sourcepass MCOE to build an AI strategy that sticks: https://sourcepassmcoe.com/demystifying-microsoft-contact

Steve Adams on LinkedIn

Nathan Taylor on LinkedIn


Quotes:

• "We learned how to use Outlook 20 years ago, and most of us still use Outlook exactly the same way that we always have.”
• “We didn't require thinking about change, and heaven forbid, in Office when we got the ribbon, that was the end of the world. But we were adapting to changes that came every three years."
• "AI, Copilot can do more things than we can imagine it could do. So I tell everyone to step back, look at your business goals. When you went into your annual planning meeting last year, what were the key initiatives you needed to get done? Let's focus our efforts, our investments, and our resources on the things that drive to the business goals."
• "We know for a fact that for the 85% of workers, if we give them the Copilot license and it shows up on their desktop, the signals tell us they're not going to click it.”
• “The way we adopt new software has to change. That's a mindset, a cultural mindset, not a technology problem."
  
  

Demystifying Microsoft is handcrafted by our friends over at: fame.so

The speed of AI innovation means that proofs of concepts that once took years now reach production in weeks. Nathan Taylor and Chance Weaver analyze how workflows went from chat interfaces to sophisticated agentic workflows within the Microsoft ecosystem. They even discuss Sourcepass MCOE’s experience helping partners move from theoretical interest to functional deployment using tools like Copilot Studio and the newly announced Agent365. 


As you know, identifying business problems is the first step toward effective automation. Chance shares his experience building a "Chief of Staff" agent to manage global roadblocks and explains why teaching internal teams to build their own agents is the most effective training method. They also address the "token economy," where efficiency in model selection becomes a financial necessity rather than just a technical preference.


What You’ll Learn:

• The structural advantages of Agent 365 for managing agent identity and auditing
• Differences between responsive Copilot, automated Cowork, and autonomous Scout
• Strategies for achieving token efficiency in a consumption-based pricing model
• Why local AI processing on Copilot PCs might change your cost structure
• The importance of data governance to prevent IP leakage into public models
  
  

About the Guest: 

Chance Weaver is the Global VP of AI Adoption for Pax8, where he helps partners implement and monetize AI technology through the Pax8 marketplace. He brings nearly three decades of experience in technology and business development to the role. Before joining Pax8, he founded and scaled a highly successful, Microsoft focused MSP in Southern California that he later sold to a large platform company, where he went on to lead its Microsoft practice and AI strategy across dozens of acquisitions. Today he leads global initiatives that help the partner community have deeper business conversations and pinpoint where the real opportunity to implement AI lies.


About the Host: 

Nathan Taylor is the Senior Vice President and Global Microsoft Practice Leader at Sourcepass, where he leads the Sourcepass Center of Excellence for Microsoft. His work is grounded in a simple idea: Microsoft should not be complicated. By removing complexity, confusion, and frustration from the Microsoft ecosystem, Nathan helps organizations focus on outcomes while getting the most from their Microsoft investment.

Episode Highlights:


[00:12:12] The Chief of Staff Agent Concept 

Chance explains his creation of an autonomous agent that monitors global projects and surfaces roadblocks daily. This tool acts as a proactive assistant, identifying potential issues before they disrupt operations for the leadership team.


[00:15:15] Security and IP Protection in AI 

Uploading sensitive business data to public models like Anthropic without enterprise licensing can result in a loss of intellectual property. Nathan and Chance stress why working with a partner like Sourcepass MCOE is vital for maintaining data sovereignty.


[00:20:32] Solving the Identity Crisis with Agent365 

Managing agents under a user's personal identity creates massive security and auditing risks. Agent 365 introduces a dedicated agent identity, allowing for full audit trails and professional lifecycle management of automated tasks.


[00:22:51] Microsoft’s AI Licensing Realities 

Current pricing models for tools like Agent 365 often feel out of reach for the average SMB. Microsoft is currently iterating on these structures, and businesses should expect significant changes as the licensing settles over the next six months.


[00:25:27] Preparing for the Token Economy 

Consumption-based pricing means that token efficiency is now an art that IT leaders must master. Understanding which models to use will determine the long-term profitability and sustainability of AI projects.


[00:26:40] Local Processing and Copilot+ PCs 

While most current Microsoft AI tools rely on cloud processing, the arrival of NPU-equipped hardware offers a path to lower costs. Running smaller models locally could eventually offset the token consumption costs associated with cloud-only workflows.


Episode Resources: 

Reach out to Sourcepass MCOE to see how your organization can build its own AI agents: https://sourcepassmcoe.com/demystifying-microsoft-contact 

Chance Weaver on LinkedIn 

Nathan Taylor on LinkedIn


Quotes: 

• "Agent365 being able to bring agent identity—having an identity for an agent, being able to track that identity, have full audit capability—is incredibly powerful. It solves a lot of those what do we do from a security standpoint from an agent? to manage agents for clients in a way that they would have difficulty doing before."
• "The token economy is coming. And you know, you gotta make sure as an SMB that you're working with a partner that understands which models you should use to basically—I call it token efficiency—to make sure that you have token efficiency when you're building out agents or when you're building out automations."
• "If you go to an SMB and you say, 'Hey, what are the problems in your business?' a lot of times they're like, 'I don't know.' They are just heads down trying to get stuff done on a day-to-day basis. So being able to have the conversations to help identify that or teach them a little bit about AI, I think this is incredibly powerful."
  
  

Demystifying Microsoft is handcrafted by our friends over at: fame.so

AI agents and Copilot for Microsoft 365 are transforming how teams manage data, but the sheer volume of options often leads to organizational paralysis. Nathan Taylor and Brittney Saultman address how the agent store can be overwhelming. By beginning with specific business outcomes, the way forward becomes easier to chart. 


They highlight the dramatic improvements in Cowork and the importance of personalizing Copilot to match your brand voice. The conversation covers the competitive edge of staying within the Microsoft ecosystem for security and auditability. Brittney shares how her own team automated repetitive CRM tasks and meeting follow-ups. By strengthening what only humans can do, you can delegate the rest to your digital assistant and reclaim your work week.


What You’ll Learn:

• How to identify business opportunities for AI agent implementation
• The functional advantages of the Copilot Frontier program
• Why staying in the Microsoft ecosystem ensures better data security
• Strategies for forcing behavior change during AI adoption
• The impact of Work IQ on personalized AI responses
• How to automate CRM entry and meeting management with Copilot for Sales
  
  

About the Guest: 

Brittney Saultman is a Partner Profitability Director with The Partner Masters, a business consulting firm specializing in Microsoft partnerships. She helps technology companies grow their Microsoft business by unlocking incentives and funding that expand customer technology needs. Her focus is on leveraging Microsoft partnership programs, AI and automation to increase organizational profitability and efficiency.


About the Host: 

Nathan Taylor is the Senior Vice President and Global Microsoft Practice Leader at Sourcepass, where he leads the Sourcepass Center of Excellence for Microsoft. His work is grounded in a simple idea: Microsoft should not be complicated. By removing complexity, confusion, and frustration from the Microsoft ecosystem, Nathan helps organizations focus on outcomes while getting the most from their Microsoft investment.

Episode Highlights: 

[00:03:10] Start with Opportunities Not Agents 

Brittney advises against shopping for agents like they are car parts. Instead, identify the specific business problems or profitability goals you want to solve before looking at technology.


[00:07:00] Automating Meeting Preparation with Cowork 

Nathan shares how he uses Cowork to review daily meetings and correlate email context. This simple automation makes his day more efficient by providing summaries of past interactions before he joins a call.


[00:11:00] Testing the Future with Copilot Frontier 

Enabling the Frontier program in your admin portal allows key users to access early features like cloud models. This gives organizations a head start on testing new capabilities before they hit the general commercial space.


[00:17:00] Doubling Portfolio Size Through Automation 

Hear now Brittney's delivery resources managed to double their client portfolios in two years by implementing Copilot for Sales. By automating CRM data entry and platform access, they saved enough time per task to significantly scale their operations.


[00:20:00] Personalizing AI for Brand Consistency 

Modern Copilot features allow users to tell the AI to avoid emojis or use specific factual tones. This personalization ensures that the output aligns with organizational branding and messaging across all documents.

Episode Resources: Reach out to Sourcepass MCOE to understand how to leverage AI agents for your business: https://sourcepassmcoe.com/demystifying-microsoft-contact 

Brittney Saultman on LinkedIn 
Nathan Taylor on LinkedIn

Quotes: 

• "We don't have problems in our companies. We have opportunities. And so if you start with what your goals are, right? And so your goals could be to be more profitable as an organization. Okay, well, what is your current profitability and what types of things are stopping you from becoming more profitable?"
• "Gone are the days of taking notes during your meetings. Like you get to be fully present and listening to everything. Cause if you're sitting there taking notes, then you're not listening, right? You're thinking that you're taking notes of what just occurred."
• "At what point will co pilot know you better than your spouse? That's a good question, honestly. Cause we spend so much time working, you know, and it's it's monitoring our behaviors."
• "I'm glad you brought it up because it's all the integration, right? It's pulling from and looking at your behavior like we just talked about. It's pulling from documents internal. And so there's a lot of security risks to other models, right? The free models that you have to be aware of."
• "My favorite frontier feature has been the inclusion of work IQ, which is Microsoft's underlying data layer where Copilot just has a better understanding of me and what I'm doing every day. It just knows my context, my emails. The power of researcher is not only that it can go do all that maybe Googling you would have done... but it also knows all your email and your teams and your recent documents." 
• "I figure out the things that only I can do and try to focus on those and things other people can do, I try to delegate those. And I think that mindset's kind of necessary for a co pilot world of, Hey, you just got another coworker. What can you delegate to them and what can't it do that only you can do?"
  
  

Demystifying Microsoft is handcrafted by our friends over at: fame.so

Microsoft Defender for Endpoint security and EDR telemetry offer a powerful fail safe for organizations. Nathan Taylor and Nick Ross look at the technical advantages of enabling passive mode to maximize Microsoft 365 licensing. They examine how this configuration allows businesses to retain their preferred third-party EDR while gaining access to Microsoft identity signals and SmartScreen phishing protection. 


The conversation highlights the value of the Microsoft XDR portal for threat hunting and how additional telemetry improves the accuracy of Security Copilot. By utilizing the built in sensor for Endpoint DLP and web content filtering, IT leaders can simplify their security stack without sacrificing performance.


What You’ll Learn:

• How to configure passive mode to prevent antivirus conflicts on Windows devices
• The specific telemetry benefits for Security Copilot and incident response
• Ways to implement Endpoint DLP to track data exfiltration to USB or personal email
• Why the Defender for Business vulnerability management tool outperforms basic checklists
• The truth about using block mode as a secondary detection engine for known threats
• Steps for testing this setup with a pilot group using Intune profiles
  
  

About the Guest:

Nick Ross is the CEO of CloudCapsule and a three-time Microsoft MVP specializing in Microsoft 365 security and automation. As the creator of the T-Minus 365 YouTube channel, he has built a following by breaking down complex Microsoft topics into practical guidance for MSPs, IT professionals, and SMBs.

Nick's career spans leadership roles at CloudCapsule, Sourcepass, Summit Technology, and Pax8, where he helped shape products and services across the Microsoft ecosystem. Known for his hands-on approach to security assessments, remediation, identity protection, and Microsoft best practices, Nick is dedicated to helping organizations secure and optimize their Microsoft environments.


Episode Highlights:

[00:02:45] The Concept of Passive Mode 

Nick explains that passive mode allows Microsoft security tools to coexist with third-party software like CrowdStrike. This setup ensures you still receive the benefits of threat and vulnerability management included in your current subscription without causing system instability.


[00:05:12] Connecting Identity to the Endpoint 

Nathan points out that Microsoft sees both sides of a connection, linking logins to the actual device. This visibility provides better detection for man in the middle phishing attacks that standalone EDR tools might miss.


[00:08:58] Preparing for the Era of AI 

AI tools require a massive amount of data to provide accurate results for security teams. Enabling the Defender sensor ensures Security Copilot has the telemetry needed to assist with complex incident response tasks.


[00:11:00] Endpoint DLP for Data Governance 

Nick describes how the Defender sensor tracks sensitive data movement, such as files being copied to USB drives or personal Gmail accounts. This functionality works natively in the operating system without requiring additional heavy agents.


[00:15:30] Automating the Configuration 

Most modern Windows devices detect an active third-party antivirus and switch to passive mode automatically. However, using specific registry keys is a best practice to ensure servers and workstations remain stable during the process.


[00:27:14] Consolidating the Security Stack 

Moving security signals into a single portal like Microsoft Lighthouse or the XDR dashboard reduces operational overhead. It allows teams to triage alerts from multiple clients or departments from one central location.


Episode Resources:

Standard security is a checklist. True resilience is a graph. If you want to understand how to use your security data to create a proactive defense strategy, reach out to the Sourcepass MCOE team: https://sourcepassmcoe.com/demystifying-microsoft-contact

Nick Ross on LinkedIn

Nathan Taylor on LinkedIn


Quotes

• "I like to think about it in the sense of the funnel. If SentinelOne does its job and it analyzes some event or action on the endpoint and says, 'hey, I don't think this is malicious,' then Microsoft could come in at the end of that and still say, 'this is malicious' and take action and block events."
• "ASR rules are super powerful and they can actually stop a lot, but they are super disruptive in legacy environments.”
• “So with modern clients, you can audit it for about forty-five days and probably see that nothing's gonna really break, and then enforce that, which gives you a lot of protections."
• "AI is always better with more data. And so if you're running security copilot and CrowdStrike, you probably still want passive mode because the data that Security Copilot gets through Sentinel and through collecting all those back end pieces of telemetry is going to help you someday with incident response."
• "Nothing turns a high-end computer into potato like two antiviruses fighting over a computer.”
  
  

Demystifying Microsoft is handcrafted by our friends over at: fame.so

Truly understanding government contracting requires more than just good intentions; you must have the right digital environment to really be suitable for it. Nathan Taylor and Lindsay Cowan look at the specific tiers of Microsoft’s government clouds to clarify which organizations actually need them. While GCC serves as an entry point for many civilian agencies, GCC High is the standard for contractors dealing with CUI and ITAR data. They explain that moving to these clouds is a full-scale migration, not a simple license toggle.


The conversation highlights the strategy of enclaving to manage costs and maintain productivity. By isolating sensitive data for a subset of users, organizations can avoid the restrictive feature sets and high costs of moving an entire workforce into a government-only tenant. Nathan and Lindsay also detail the eligibility process, including the importance of CAGE codes for validation. Using these identifiers fast-tracks approval and ensures that businesses can meet their contractual obligations without unnecessary delays.


What You’ll Learn:

• The structural differences between GCC and GCC High infrastructure
• How to use enclaves to limit compliance costs and user impact
• The role of CMMC and ITAR in choosing your cloud tier
• Why government cloud eligibility requires upfront validation
• The migration reality: Why you can't just flip a switch
• Procurement nuances for Azure Gov and Microsoft 365 government SKUs
  
  

About the Guest: 

Lindsay Cowan is a Senior Manager of Sales and Business Development at Sourcepass MCOE, a company focused on helping organizations simplify, secure, and optimize their Microsoft environments. With over a decade in the Microsoft ecosystem, she specializes in helping organizations maximize their investment in Windows and SQL Server technologies through strategic licensing and cloud adoption.

About the Host:
Nathan Taylor is the Senior Vice President and Global Microsoft Practice Leader at Sourcepass, where he leads the Sourcepass Center of Excellence for Microsoft. His work is grounded in a simple idea: Microsoft should not be complicated. By removing complexity, confusion, and frustration from the Microsoft ecosystem, Nathan helps organizations focus on outcomes while getting the most from their Microsoft investment.
Episode Highlights:

[00:02:35] Understanding Microsoft 365 GCC 

Understand the role of GCC as the initial entry point for government entities and how this tier uses logical segregation on commercial infrastructure to meet moderate impact data requirements.

[00:05:42] The Jump to GCC High and Azure Gov 

Learn how GCC High serves as a physically separate environment built specifically for the defense industrial base. This tier provides the rigorous data sovereignty and personnel screening required for ITAR and CMMC level two compliance.

[00:09:32] Managing Feature Delays Through Enclaving 

Moving to a government cloud often means seeing new features months after the commercial release. Nathan suggests using an enclave strategy to limit these restrictions and higher costs to only the users who handle sensitive data.

[00:19:14] Eligibility and the Power of Cage Codes 

Accessing these clouds requires strict validation from Microsoft to ensure the organization is a qualifying entity. Having a CAGE code acts as an identifier that speeds up the approval process significantly.

[00:32:55] The Reality of the Migration Process 

Transitioning to GCC or GCC High is a full lift and shift operation rather than a simple license change. Organizations must prepare for a complete data migration using specialized tools that meet high compliance standards.

[00:35:54] Compliance is Not Just a Security Upgrade 

A common myth is that government clouds are inherently more secure than commercial ones. These environments focus on compliance guarantees regarding who can touch data and where it resides rather than just adding security features.


Episode Resources: 

Reach out to Sourcepass MCOE to understand your options when it comes to government clouds: https://sourcepassmcoe.com/demystifying-microsoft-contact 

Lindsay Cowan on LinkedIn 

Nathan Taylor on LinkedIn


Quotes:

• "Microsoft is vouching for the people accessing it, and the data centers are US only, but all of the configuration, the policies, the procedures, all the things that really make up a compliance program are yours. 
• Microsoft's providing compliant plumbing. You're the one who's hooking up into the house and building the house."
• "It's not that it's more secure. What is different is that it is compliance guarantees about data residency, isolations, and who can touch it. 
• When you start looking into the ITAR and CUI controls, it's all about who's allowed to get to this data, and can you prove that?"
• "GCC does require eligibility validations. Confirming eligibility early is the best thing that you can do. 
• There's nothing worse than working with a client who is already envisioning this GCC environment and then perhaps they are not eligible."
  
  

Demystifying Microsoft is handcrafted by our friends over at: fame.so

Microsoft 365 human success and AI-powered performance take center stage as Nathan Taylor of Sourcepass MCOE welcomes Robin Daniels from Zensai. They analyze how organizations can move away from administrative HR tools toward systems that genuinely motivate people. Robin shares insights from his career at Salesforce and LinkedIn, explaining why investing in human potential leads to better business results. The conversation highlights agentic AI, showing how proactive tools work in the background to provide timely training and performance insights.


What You’ll Learn:

• How Zensai integrates human success directly into Microsoft 365 workflows
• The difference between reactive AI and proactive agentic AI
• Why traditional HR technology often fails to motivate high performance
• Strategies for training employees on Copilot and AI basics effectively
• How to maintain humanity and connection in a remote-first world
  
  

Leaders who want to use technology to augment their teams rather than replace them would find some inspiration in this episode. By removing mind-numbing administrative tasks, AI allows employees to focus on meaningful work that changes how society operates.


About the Guest:
Robin Daniels is the Chief Business Officer at Zensai, leading the charge for AI-powered human success platforms. With twenty-five years of experience at companies like Salesforce, LinkedIn, and Box, he focuses on how technology impacts the way we work and live. He co-authored a narrative on leadership that challenges CEOs to prioritize people over cost-cutting. Robin now helps organizations within the Microsoft ecosystem unlock the knowledge and skills their teams need every day.


Episode Highlights:

[00:03:00] Moving Beyond Administrative HR Tools 

Most HR platforms merely handle payroll and vacation requests rather than inspiring growth. Zensai aims to change this by focusing on motivation, skills, and the knowledge required for incredible work.


[00:06:00] The Power of Native Microsoft Integration 

Building tools directly into Teams and SharePoint ensures technology appears where people already spend their time which removes the friction of logging into separate systems to receive feedback or take courses.

[00:08:49] Combating AI FOMO with Consistent Learning 
Many leaders feel behind the curve because technology changes so rapidly every single day. The solution lies in taking small chunks of training that fit into the gaps between meetings.

[00:15:00] The Leadership Choice: Growth vs. Cutting 

Companies often use efficiency gains to reduce headcount instead of investing in new innovations. True success comes from having the courage to help employees grow into future roles.

[00:21:00] Restoring Human Connection in Work 

Remote environments can cause teams to lose the sense of camaraderie found at the water cooler. Technology should act as a bridge that creates community and a sense of belonging for every worker.

[00:26:42] Defining Agentic AI for Business 

Proactive technology works twenty-four seven in the background without needing constant user prompts. It identifies team sentiment and suggests training moments before a manager even asks for a report.

Episode Resources:
If you are looking to create a high performing culture by leveraging your Microsoft tools, contact us here: https://sourcepassmcoe.com/demystifying-microsoft-contact 

Robin Daniels on LinkedIn 
Nathan Taylor on LinkedIn

Quotes

• "We think of these two as being very much as both at the individual level, at the team level, and, of course, at the company level. But do so in a way that's really kinda inspiring and motivational for you. “
• “I think for the last twenty, thirty years, I think we've been oversold on the promises of HR technology."
• "The way you optimize human performance is by being there when people need it the most. Not this extra thing you have to go do.”
• “I've had access to learning platforms before and, hey, go take these great courses, and I never did it because it was always this extra thing that was something I had to remind myself."
• "The bad guy is really ignorance or trying to think that we wanna replace people with just technology. We don't wanna be on that side of history. We've made that kind of clear from a philosophical perspective."
  
  

Demystifying Microsoft is handcrafted by our friends over at: fame.so

Microsoft identity security is no longer just about requiring a password. Nathan Taylor, lead of the Sourcepass Center of Excellence for Microsoft, breaks down the rules for modern access control. You will see how Conditional Access functions as a Zero Trust enforcement layer, evaluating signals before any sensitive data is accessed. 

The conversation talks about how to properly scope policies, utilize report only mode, and maintain emergency break glass accounts for recovery. Organizations that implement these layers can block over 99% of common account compromise attempts.
What You’ll Learn:

• How to configure phishing-resistant MFA using FIDO2 passkeys for your most sensitive administrative roles.
• Methods for blocking legacy authentication to stop the vast majority of common credential stuffing attacks.
• The process for requiring managed or compliant devices to neutralize sophisticated token stealing maneuvers.
• Strategies for limiting administrative session lengths to reduce the window of opportunity for threat actors.
• Ways to implement active identity protection using risky sign in and risky user policies with Entra ID P2.
• The importance of separating administrative duties from daily email accounts to harden your organizational posture.
  
  

Episode Highlights:[00:04:15] The Identity Firewall Logic Nathan describes why modern security relies on Conditional Access as the primary Zero Trust enforcement tool. These rules act as digital gatekeepers, determining exactly how and when a user connects based on specific risk signals.

[00:07:30] Avoiding the Admin Lockout Implementing strict security can accidentally lock administrators out of their own systems if not handled carefully. This segment outlines the necessity of break glass accounts and the strategic use of report only mode during deployment.

[00:16:30] Redundant Layers for Admins While MFA for all users is a baseline, administrative accounts require an additional, dedicated layer of protection. This secondary policy ensures that even if an exclusion is made elsewhere, privileged access remains guarded.

[00:20:45] Shutting the Legacy Door 
Legacy authentication remains a massive vulnerability because it bypasses modern multi factor checks. Nathan explains how to identify and block these aging protocols while monitoring logs to ensure business continuity isn't disrupted.

[00:25:30] Phishing Resistance with FIDO2 Standard MFA is no longer enough to stop advanced attackers using separate cryptographic channels for authentication. The talk highlights why FIDO2 passkeys are the gold standard for protecting executives and high value data.

[00:31:15] Combating Token Stealing Threat actors are increasingly replaying stolen tokens to bypass identity checks entirely. Managed device policies solve this by requiring a known, trusted hardware signal before granting any access to the tenant.

About The Host - Nathan TaylorNathan Taylor is the Senior Vice President and Global Microsoft Practice Leader at Sourcepass, where he leads the Sourcepass Center of Excellence for Microsoft. His work is grounded in a simple idea: Microsoft should not be complicated. By removing complexity, confusion, and frustration from the Microsoft ecosystem, Nathan helps organizations focus on outcomes while getting the most from their Microsoft investment.

Episode Resources:Don’t let a single misconfigured rule become your organization's greatest vulnerability. Connect with our team of Microsoft problem solvers to turn these ten Conditional Access policies into secure outcomes for your environment:

• Sourcepass MCOE: https://sourcepassmcoe.com/demystifying-microsoft-contact
• Nathan Taylor on LinkedIn
• Microsoft Security Defaults article: https://learn.microsoft.com/en-us/entra/fundamentals/security-defaults
  
  

Quotes

• "Conditional access is Microsoft's zero trust enforcement layer. I like to call it the firewall rules for identity. It's the rules about where and how and when someone can connect to a tenant. This blocks 97% of the credential stuffing hacks, so it can be blocked by turning a blocking legacy off."
• "If you haven't been playing with FIDO2 passkeys on your tenants, you need to go play with FIDO2 passkeys because they are phishing resistant in ways that none of the other authentication methods are.”
• “FIDO2 passkeys use a separate cryptographic channel to authenticate you. They're not vulnerable to the same token stealing attacks."
• "It's worth looking at PIM PAM. It's very easy to add a couple intra ID P2 licenses to a tenant and build out PIM just in time access capability for those admin roles."

Demystifying Microsoft is handcrafted by our friends over at: fame.so