RunAs Radio

A severe set of exploits have hit the on-premises Exchange server world. Richard talks to Tony Redmond about the so-called Hafnium exploits, a collection of four zero-day exploits that can allow an attacker to run arbitrary code on Exchange servers visible to the internet. Exchange Online is not affected, and it appears that on-premises Exchange servers only accessible by VPN are also safe. The patches are available for Exchange 2010 on upward, but it is likely too late for tens of thousands of Exchange servers. What happens now?Links:Office 365 IT ProsJohn Hammond Hafnium AnalysisTony's Blog Post on HafniumMicrosoft Post on Hafnium Exploit

What is Azure Purview, and how can it help you with data governance? Richard chats with Laurie Litwack about the preview version of Azure Purview. Laurie discusses how Purview focuses on an overall view of data in an organization - collecting metadata about data wherever it is stored. That means collecting information about data in databases, file shares, on-premises, in the cloud, even on the various SaaS platforms like Salesforce. The result is a data catalog that can help your organization utilize data more effectively, as well as understand where sensitive data exists and is being created!Links:Azure PurviewTry Azure Purview

Are your teams secure? Richard chats with Tobias Zimmergren about securing Office 365 Teams - both internally and externally! The challenge of Teams collaboration is the risk of sharing too much - and as Tobias says, by default, everyone can see everything. Certain teams in your organization, like HR, legal, and RnD, have to limit who can see their collaborations: Teams has information barriers to protect sensitive collaborations. Tobias also dives into eDiscovery and Data Loss Prevention, two huge topics on their own, and typically connected with Exchange: But also important with Teams. Get secure!Links:Managing Teams SecurityManaging External Access in TeamsSecurity and Compliance in TeamsInformation Barriers in Microsoft TeamseDiscovery Solution in Microsoft 365Office 365 Data Loss PreventionMicrosoft Defender for Office 365Microsoft Cloud App Security

What's the right way to migrate SQL workloads to the cloud? Richard chats with Anna Hoffman about the expanding array of choices we have today for moving your SQL Server to Azure. Anna talks about the great support for running SQL Server in an Azure Virtual Machine - and why that sometimes makes the most sense for folks! Then there's moving into Azure SQL, which has some differences to regular SQL Server, but you will find it familiar. The conversation also turns to migrating other databases as well - and the migration tools that provide guidance and tooling to make it easier than ever!Links:Data ExposedSQL Server on Azure Virtual MachineAzure Data Migration Guidance

How does your IT career evolve? Richard chats with Michael Levan about his career journey and some ideas of how your career can evolve as well! The conversation starts out at the help desk, where many IT folks get started, interacting with the various applications in the organization as well as the staff. Michael talks about thinking more broadly about your career, whether self-employment makes sense, how you learn, how you teach, and how you grow!Links:Deep WorkCloudSkills

Everyone needs source control! Richard chats with Nicole Stevens about what IT Pros need to know around source control. Normally the purview of developers, source control is useful anywhere you have text that needs to be stored, versioned, and protected. Nicole talks about how you can use GitHub in a private repository to manage your own scripts - keep track of the changes you make over time, be able to go back to old versions, and so on. And when the whole team gets involved, it gets even more interesting!Links:GitHubGitHub Workflow

What happens when our most private thoughts are ransomed? Richard talks to Sami Laiho about the Vastaamo Ransomware hack. Sami talks about how the hacker succeeded over months to steal private healthcare records, including transcripts of therapy sessions, and then attempted to ransom the company to get the data back. When the company refused to pay, the hacker contacted the individual patients with ransom demands and released several hundred private records in the process. Ransomware attacks are no joke - and Sami was both a victim and one of the folks fighting against the hack. In the end, spending time, energy, and money on protecting data your organization's data is important - you can't wait until after an attack to fix it. Not all genies will go back into the bottle.Links:Wired Story of the Vastamo Hack

Secrets Management ships for PowerShell! Richard chats with Sydney Smith who is the product manager for Secrets Management about how this PowerShell extension helps you access and manage multiple key stores in your organization and provides secrets for your PowerShell scripts. Sydney talks about how the development process of Secrets Management was done out in the open, on GitHub, with lots of feedback from the community. It works with multiple key stores, including its own, and leaves room for you to provide very granular security to your secrets - take a look!Links:PowerShell GalleryAzure Key VaultKeePassAWS Key Management ServiceWindows CredManPowerShell SecretStore on GitHubPowerShell SecretManagement on GitHub

Does M365 work for small business? Richard chats with Ian Williamson about his work as a sole IT person in a small business trying to move into Microsoft 365. Ian talks about how many of the features (and documentation) for Microsoft 365 is aimed at organizations much bigger than what he is working in - and often digging into features his tenant doesn't have! The conversation also focuses on the challenges of identity: Making sure your personal Microsoft identities don't collide with your M365 identities, how to untangle that mess, and perhaps, at some point, actually get some real benefits from M365!Links:Perform an Internal Admin TakeoverDetermining Tenant TypeMicrosoft Hibernates SMB SupportM365 Security Defaults

Do your tools help you work the way you want to? Richard chats with Heather Newman about the concepts of work-life balance and how your tools can make it harder to do the right thing for you and your organization. Heather also dives into the new etiquette around communication, the value of attention, using time and energy wisely. Can our tools help? It's all in how you use them!Links:Debbie Ireland Work Life BalanceOffice DelveThe Power of Full EngagementDriving Adoption BlogJason Stephenson MusicModern Workplace Change