You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
agent registry
About this tag
The agent registry tag on WindowsForum covers Microsoft's guidance for managing and securing AI agents in enterprise environments. Discussions focus on the risks of unregistered or "shadow" agents, which can perform legitimate tasks while following malicious instructions or leaking data. Microsoft recommends registering every agent, applying least privilege, and extending data loss prevention to agent interactions. The tag also explores identity-first governance using Entra Agent ID and the Model Context Protocol (MCP) to enforce access, data, and runtime controls. These threads provide practical playbooks for IT and security teams to prevent memory poisoning, prompt-based exfiltration, and other novel threats introduced by autonomous agents.
Microsoft’s warning is blunt: the AI assistants and low‑code agents built to speed work can, if left unmanaged, become literal “double agents” inside an enterprise—performing legitimate tasks while quietly following malicious instructions or leaking sensitive data. Microsoft’s February security...
Microsoft’s deputy CISO for Identity lays out a clear warning: autonomous agents are moving from experiments to production, and without new identity, access, data, and runtime controls they will create risks that are fundamentally different from those posed by traditional users and service...