Microsoft Entra Private Access protections for on-premises & private cloud network resources

Take advantage of Azure Cosmos DB for your AI-driven applications. Seamlessly integrate with large language models like ChatGPT, for real-time operational efficiency and limitless scalability. With its built-in vector search engine and multi-model support, Azure Cosmos DB for MongoDB vCore optimizes for just-in-time data retrieval, so you can build cutting-edge solutions at any scale.

Kirill Gavrylyuk, General Manager for the Azure Cosmos DB team, joins Jeremy Chapman to share how you can increase performance and cost-effectiveness, whether managing millions of users globally or building smaller-scale apps.

► QUICK LINKS:

00:00 - Get your database ready for AI with Azure Cosmos DB
02:33 - Solve for real-time data access requirements
03:39 - Automatic scaling
05:35 - How Azure CosmosDB works for copilot-style apps
06:38 - App using vectorized data
07:24 - Jupyter notebook demo
09:19 - Vector indexing and search in Cosmos DB
10:14 - Building a small copilot-style app
12:10 - Run smaller apps serverless
12:35 - Set maximum throughput thresholds
13:39 - Auto scale using Cosmos DB
14:38 - Wrap Up

► Link References:

See how Cosmos DB vector search capabilities work at https://aka.ms/CosmosVector 

Get a free trial at https://aka.ms/trycosmosdb 

► Unfamiliar with Microsoft Mechanics? 

As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft.

• Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries

• Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog

• Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast

► Keep getting this insider knowledge, join us on social:

• Follow us on Twitter: https://twitter.com/MSFTMechanics 

• Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/

• Enjoy us on Instagram: https://www.instagram.com/msftmechanics/

• Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics

For enterprise-grade architecture, data privacy, and control, build your own private ChatGPT style app using OpenAI GPT models with the Azure AI services. You can start with open-source samples for design and the user interface along with Azure containers or Azure App Service, then customize what it can do with Azure AI Studio. Importantly, to ensure its enterprise-ready with the right security and scale considerations in place, Azure Landing Zones provide the architectural best practices for apps like this. Landing Zone Accelerators simplify deployment for dedicated app-level subscriptions and scoped security and broader policies. Layering these recommendations and approaches helps ensure that your ChatGPT style private app meets enterprise requirements.

Microsoft Azure expert, Matt McSpirit, shares how to build your own private ChatGPT-style apps and make them enterprise-ready using Azure Landing Zones.

► QUICK LINKS:

00:00 - Build your own private ChatGPT 
00:43 - Benefits of building your own private chat experience 
02:07 - Use an open source ChatGPT-style app sample 
03:16 - Connect your ChatGPT-style experiences 
04:12 - Enhance chat experience with Azure AI Studio 
04:45 - Architecture and security with Azure Services 
06:44 - Landing Zone configuration and accelerators 
07:49 - Wrap Up

► Link References:

Go to the Azure OpenAI Landing Zone at https://aka.ms/OpenAILZ

Get ChatBot UI open-source code in GitHub at https://aka.ms/GitHubChatBotUI

To use Bicep templates, go to https://aka.ms/LZ 

Check out Landing Zone accelerators at https://aka.ms/LZAccelerators

Watch our show on Azure AI Studio at https://aka.ms/AIStudioMechanics

Watch our show on Azure Landing Zones at https://aka.ms/LandingZoneMechanics

► Unfamiliar with Microsoft Mechanics? 

As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft.

• Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries

• Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog

• Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast

► Keep getting this insider knowledge, join us on social:

• Follow us on Twitter: https://twitter.com/MSFTMechanics 

• Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/

• Enjoy us on Instagram: https://www.instagram.com/msftmechanics/

• Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics

Increase productivity and creativity with Microsoft Copilot, offering tailored experiences for both personal and work use. With a foundational free option for personal tasks and an advanced version, Microsoft Copilot Pro integrated with office apps, Copilot optimizes generative AI responses. For work use, unlock commercial data protection and comprehensive in-app experiences with Copilot for Microsoft 365, streamlining tasks across Microsoft 365 apps like Teams for enhanced collaboration and efficiency. 

Join Mary David Pasch, Microsoft 365 Copilot’s Principal Product Manager, as she shares tips to optimize your Microsoft Copilot results.

► QUICK LINKS:

00:00 - Microsoft Copilot for Microsoft 365
00:33 - Overview for personal and work use
01:56 - Retrieval Augmented Generation
03:06 - What an ungrounded experience looks like
03:41 - Ground the LLM with data
05:26 - Copilot Pro experience
06:34 - Microsoft Copilot with commercial data protection
07:51 - Copilot for Microsoft 365
09:58 - Wrap Up

► Link References:

Access these Microsoft Copilot experiences at https://copilot.microsoft.com

Watch our show on how to get ready for Copilot at https://aka.ms/GetReadyforCopilot

For tips and sample prompts, check out https://support.microsoft.com/copilot

Get the full playlist of Copilot deep dives at https://aka.ms/m365copilotmechanics

► Unfamiliar with Microsoft Mechanics? 

As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft.

• Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries

• Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog

• Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast

► Keep getting this insider knowledge, join us on social:

• Follow us on Twitter: https://twitter.com/MSFTMechanics 

• Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/

• Enjoy us on Instagram: https://www.instagram.com/msftmechanics/

• Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics

Protect against identity-based attacks with Identity Threat Detection and Response capabilities. Ensure your organization is equipped to protect identities wherever they are—on-premises, in the cloud or hybrid. As an integral component of the XDR experience, identity alerts are contextualized within broader security incidents, enhancing your ability to manage threats effectively. The integrated Copilot experience and advanced hunting capabilities allow for in-depth investigation of alerts and activity logs. Security analysts and identity admins can collaborate seamlessly with bidirectional integration between Defender XDR and Microsoft Entra. 

Daniel Lynch, Microsoft Defender for Identity’s Senior Product Manager, shares how Identity Threat Detection and Response can be utilized in daily operations and coordinated actions throughout every phase of an identity-related security incident, strengthening your organization's defense posture.

► QUICK LINKS: 

00:00 - Stop identity-based attacks
01:13 - How to use Identity Threat Detection and Response
02:37 - See an active multi-stage incident
03:57 - Use Copilot for Security
05:08 - Advanced Hunting in Microsoft Defender XDR
05:38 - Block a compromised user account in Active Directory
06:44 - Improve security posture in Microsoft Defender XDR with Secure Score
08:04 - Wrap Up

► Link References:

For more information, check out https://aka.ms/ITDR

► Unfamiliar with Microsoft Mechanics? 

As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft.

• Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries

• Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog

• Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast

► Keep getting this insider knowledge, join us on social:

• Follow us on Twitter: https://twitter.com/MSFTMechanics 

• Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/

• Enjoy us on Instagram: https://www.instagram.com/msftmechanics/

• Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics

Simplify endpoint management and security with a single, connected experience with the Microsoft Intune Suite. It brings you a broad collection of advanced cross-platform capabilities, with new improvements across application security, secure access to on-prem and private cloud resources, and device operations and support.

Enhance application security with Enterprise App Management to streamline deployment, updates, and protection against vulnerabilities. Run approved privileged apps with tailored elevation rules using Endpoint Privilege Management. Ensure secure access to on-prem and private cloud resources using Cloud PKI for streamlined certificate management and Microsoft Tunnel for MAM's Micro-VPN service for unenrolled devices. Gain insights and real-time device querying through advanced analytics. View and control your PCs and Macs, as well as specialized mobile devices, right from the Intune admin center with Remote Help.

Dilip Radhakrishnan, Partner, GPM for Microsoft Intune, give an overview of the Microsoft Intune Suite and its recent updates.

► QUICK LINKS:

00:00 - Simplify endpoint management and security
01:38 - Enterprise App Management
02:21 - Updating apps
02:43 - Endpoint Privilege Management
03:45 - Securing access to on-prem resources with Cloud PKI
04:29 - Securing mobile access to on-prem and private cloud resources
05:05 - Advanced Analytics- Device query
06:48 - Remote Help
07:49 - Wrap Up

► Link References:

Check out https://aka.ms/IntuneSuite

► Unfamiliar with Microsoft Mechanics? 

As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft.

• Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries

• Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog

• Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast

► Keep getting this insider knowledge, join us on social:

• Follow us on Twitter: https://twitter.com/MSFTMechanics 

• Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/

• Enjoy us on Instagram: https://www.instagram.com/msftmechanics/

• Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics

Deliver desktop and app virtualization experiences to almost any device, with VMs running where you need them with Azure Virtual Desktop on Azure Stack HCI. This hybrid solution integrates local data centers with Azure cloud workloads through Azure Arc, enabling flexible, secure, and regionally compliant virtualization experiences.

Take advantage of exclusive features like Windows 11 multi-session, previously limited to Windows Server. Maintain precise control over VM hosts' locations, ensuring compliance and optimizing for ultra-low latency. Benefit from unified security with Microsoft Entra ID and streamlined administration through Azure Arc, for increased flexibility and control. Azure expert, Matt McSpirit shows the steps to get it up and running.

► QUICK LINKS:

00:00 - Azure Virtual Desktop for Azure Stack HCI
01:21 - Security and management benefits
01:56 - Get it up and running
03:27 - Connect to session hosts using the new Windows App
04:15 - Configure an Azure Stack HCL 23H2 cluster to run Azure Virtual Desktop
06:28 - Deploy session hosts
08:29 - Configure additional options
09:57 - Wrap Up

► Link References:

Check out https://aka.ms/AVDonHCI

Steps for setup at https://aka.ms/StackHCISetup 

► Unfamiliar with Microsoft Mechanics? 

As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft.

• Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries

• Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog

• Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast

► Keep getting this insider knowledge, join us on social:

• Follow us on Twitter: https://twitter.com/MSFTMechanics 

• Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/

• Enjoy us on Instagram: https://www.instagram.com/msftmechanics/

• Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics

Prevent over-permissioning of your data and resources using a Zero Trust “Just enough access” approach with proactive role-based Conditional Access controls with Microsoft Entra. Privileged identities, like admins, are your highest value targets. Use identity governance controls to scope their access to just what they need to perform their specific job roles within specified time limits. For everyday users, ensure “just enough access” so users can only access what they need to get their jobs done. This is done using Entitlement Management to select the right resources and apps to prevent over-permissioning. With Conditional Access adaptive controls, you can ensure users and devices meet predefined conditions prior to granting access to any resource.

Jeremy Chapman, Microsoft 365 Director, shares the controls you can put in place to help ensure access to your resources is protected.

► QUICK LINKS:

00:00 - Microsoft Entra Conditional Access and ID Governance
01:35 - Privileged Identities
02:51 - How to activate Just-in-Time access
04:32 - Just Enough Access and entitlement management
06:08 - Create access packages
07:47 - Conditional Access
09:16 - Pre-built templates
10:20 - Wrap up

► Link References:

Get started, go to https://entra.microsoft.com 

For more information, check out https://learn.microsoft.com/entra 

Watch our show and demo on lifecycle workflow automation at https://aka.ms/ILMMechanics

► Unfamiliar with Microsoft Mechanics? 

As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft.

• Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries

• Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog

• Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast

► Keep getting this insider knowledge, join us on social:

• Follow us on Twitter: https://twitter.com/MSFTMechanics 

• Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/

• Enjoy us on Instagram: https://www.instagram.com/msftmechanics/

• Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics

Microsoft Copilot for Microsoft 365 is now available for organizations of all sizes with Microsoft 365 and Office 365 - without a minimum license count. In this video, Jeremy Chapman from the Microsoft 365 team demonstrates new security, compliance, and privacy updates in the experience. You'll also see what's possible to achieve the right level of file permissions for Zero Trust, just enough access search across Microsoft 365 and with Copilot information retrieval. Beyond data security, we explain prerequisites, administrative controls in the Microsoft 365 admin center, the wizard-based Copilot for Microsoft 365 setup guide, tools to drive adoption, and the new Copilot for Microsoft 365 Dashboard Power BI app to see how people are using Microsoft Copilot in your organization.

► QUICK LINKS:

00:00 What is Copilot for Microsoft 365 and how does it work? 
01:09 What are the data security controls for Microsoft Copilot?
03:06 How to set up data protections for Microsoft Copilot 
05:47 Are Microsoft Copilot activities logged and auditable?
06:27 Microsoft Copilot data residency and where it's processed
07:11 Admin configurations for Copilot in the Microsoft 365 admin center
08:10 Microsoft Copilot prerequisites, setup, and licensing
09:16 How to drive Microsoft Copilot readiness and adoption with end users 

► Link References:

Find the full Microsoft Copilot playlist at https://aka.ms/M365CopilotMechanics

For more information about Copilot adoption, check out https://adoption.microsoft.com/copilot

Use the Microsoft 365 Apps admin center configure a monthly update channel for Copilot features to light up, go to https://config.office.com

► Unfamiliar with Microsoft Mechanics? 

As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft.

• Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries

• Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog

• Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast

► Keep getting this insider knowledge, join us on social:

• Follow us on Twitter: https://twitter.com/MSFTMechanics 

• Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/

• Enjoy us on Instagram: https://www.instagram.com/msftmechanics/

• Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics

Build and deploy copilot style apps that leverage the power of both GPT-4 Turbo with Vision and Azure AI Vision and Search in Microsoft’s Azure AI Studio. Enable direct lookups from image inputs over your organizational data to ground generative AI responses. This marks a significant improvement in the accuracy of natural language processing and image recognition tasks to enable new generative AI scenarios. Video inputs are also uniquely supported when you combine GPT-4 Turbo with Vision and Azure AI Vision.

Seth Juarez, Principal Program Manager for Azure AI, shares how it’s easy to build and orchestrate powerful copilot style apps.

► QUICK LINKS:

00:00 - GPT-4 Turbo with Vision + Azure AI Vision
00:42 - Baseline capabilities of GPT-4 Turbo with Vision
02:43 - Direct lookups of image and video data
04:53 - See the two combined: Demo
05:52 - How to build it
07:17 - See the code behind your app
08:07 - Wrap up

► Link References

Start using Azure AI Studio today at https://ai.azure.com

Watch a detailed overview at https://aka.ms/AzureAIStudioMechanics

Check out our QuickStart guides at https://aka.ms/LearnAIStudio  

► Unfamiliar with Microsoft Mechanics? 

As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft.

• Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries

• Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog

• Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast

► Keep getting this insider knowledge, join us on social:

• Follow us on Twitter: https://twitter.com/MSFTMechanics 

• Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/

• Enjoy us on Instagram: https://www.instagram.com/msftmechanics/

• Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics

Build, test, deploy, and monitor your generative AI apps at scale from one place with Azure AI Studio. Access models in the Azure OpenAI service from Meta, NVIDIA and Microsoft Research, as well hundreds of open-source models. Integrate your own data across multiple data sets to ground your model, which is made easier through direct integration with OneLake in Microsoft Fabric. It uses shortcuts to let you bring in virtualized data sets across your data estate without having to move them.

Use Azure AI Studio for full lifecycle development from a unified playground for prompt engineering, to pre-built Azure AI skills to build multi-modal applications, using language, vision, and speech, as well as Search, which includes hybrid with semantic ranking for more precise information retrieval. Test your AI applications for quality and safety with built-in evaluation, and use a prompt flow tool for custom orchestration, as well as overarching controls with Responsible AI content filters for safety. Seth Juarez, Principal Program Manager for Azure AI, gives you an overview of Azure AI Studio.

► QUICK LINKS:

00:00 - Build your own copilots in Azure AI Studio
01:52 - Copilot app running as a chatbot|
03:53 - Retrieval augmented generation grounded on your data
04:54 - Experiment with prompts: Multi-modality
06:47 - Advanced capabilities: Prompt flow
08:58 - Ensure quality and safety of responses
10:09 - Wrap up

► Link References
Start using Azure AI Studio today at https://ai.azure.com 

Check out our QuickStart guides at https://aka.ms/LearnAIStudio  

► Unfamiliar with Microsoft Mechanics? 

As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. 

• Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries

• Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog

• Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast

► Keep getting this insider knowledge, join us on social:

• Follow us on Twitter: https://twitter.com/MSFTMechanics 

• Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/

• Enjoy us on Instagram: https://www.instagram.com/msftmechanics/

• Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics