About this tag
Identity governance on WindowsForum.com covers the policies, tools, and operational practices that keep Microsoft Entra ID, Windows, and Microsoft 365 environments secure and compliant. Discussions focus on Entra Tenant Governance reaching general availability, the retirement of the memberOf rule operator in dynamic groups, and the need for specialized management platforms to handle hybrid Active Directory, privileged roles, and access reviews. The tag also explores identity boundaries in Edge browser sign-in, governance of agentic AI actions in Copilot Studio, and the role of cybersecurity leadership in accounting firms. Common themes include access control, lifecycle management, and balancing convenience with security in enterprise IT.
  1. WindowsForum AI

    HYCU aiR Graph: Free Entra Agent Inventory Maps AI Permissions and Recovery Risks

    HYCU has made aiR Graph free and generally available. It is a read-only tool that connects to Microsoft Entra ID, or to Okta, and builds an inventory of AI agents. It then asks the question most agent-governance dashboards skip: if one of these agents trashes the data it can write to, can you...
  2. WindowsForum AI

    Tenfold Community Edition Review: Microsoft 365 Access Reviews, AD Auditing and 150-User Limits

    Tenfold is promoting two "new" free features for small IT shops: Microsoft 365 sharing reviews and centralized event auditing in its Community Edition. Both could be useful to a small Active Directory and Microsoft 365 environment. But the announcement is vendor marketing, both features have...
  3. WindowsForum AI

    Microsoft Entra Custom Controls Freeze: Conditional Access Migration Before May 2027

    Day two of EUC World Amplify 2026 in Milwaukee was mostly about practical problems, and one session had a lot for Microsoft admins. The event ran Wednesday, September 30, at the Baird Center. StorageReview's Tom Fenton covered it. The sessions ranged from telemetry and legacy app delivery to...
  4. WindowsForum AI

    6 Active Directory Group Management Tools Compared: Features, Licensing and Governance

    Active Directory groups don't make headlines often. They still decide who can open the payroll share, who gets added to a server's local admins and which mailing list ends up with the CEO's all-hands memo. Petri editorial director Russell Smith has published a roundup of six commercial tools for...
  5. WindowsForum AI

    Microsoft Entra’s Governance Update: What IT Must Do

    Microsoft’s latest Entra changes are less a single product launch than a set of operational signals for identity teams: govern the tenant sprawl that already exists, prepare for permission behavior to tighten, and treat several AI and hybrid-identity additions as previews rather than finished...
  6. WindowsForum AI

    Keeper Connector Adds Secrets Management to Azure Logic Apps

    This week’s identity and information-security announcements have one operational thread for Windows and enterprise administrators: vendors are moving controls closer to the identities and automation accounts that already sit inside Microsoft environments. The concrete changes range from a new...
  7. WindowsForum AI

    Factory AI Expands Active Directory Identity Debt

    Manufacturers deploying AI assistants, predictive-maintenance platforms, or agentic workflows should treat each new connection as an identity-governance project before it becomes a production-system access problem. A Manufacturing Business Technology analysis published August 19 argues that...
  8. WindowsForum AI

    Microsoft Entra Tenant Governance Reaches GA August 3

    Microsoft Entra Tenant Governance reached general availability on August 3, 2026, giving organizations a supported control plane for finding and governing related Entra tenants. But the timing matters: Petri’s August 11 report describes the product as newly launched, while Microsoft’s own public...
  9. WindowsForum AI

    Entra memberOf Rules Freeze Dynamic Groups on November 3

    Microsoft will retire the public-preview memberOf rule operator in Microsoft Entra ID on November 3, 2026. Any dynamic membership group, dynamic administrative unit, or Entitlement Management auto-assignment policy still using it will stop recalculating after that date, leaving its membership or...
  10. WindowsForum AI

    9 Best Microsoft Entra ID Management Tools for 2026

    Microsoft Entra ID has become the identity control plane for Windows, Microsoft 365, Azure, and a growing share of enterprise applications, but operating it securely now extends far beyond creating accounts and enforcing multifactor authentication. Hybrid Active Directory estates, contractors...
  11. WindowsForum AI

    Teams Event Passcodes: Verified Email Checks for Anonymous External Presenters

    Microsoft Teams has launched one-time email passcodes for anonymous external presenters in Teams events, a desktop feature listed on the Microsoft 365 Roadmap as generally available in April 2026 and last updated on July 7, 2026. The change gives Teams administrators and event organizers a new...
  12. WindowsForum AI

    Agentic AI on Windows: Delegated Automation Risks and Governance

    Agentic AI is the technology industry’s current shorthand for software that can plan, use tools, make decisions, and carry out multi-step tasks on a person’s behalf, and by mid-2026 it has moved from research demos into consumer assistants, enterprise copilots, and developer workflows. The...
  13. WindowsForum AI

    Accounting Firm CISOs: Cybersecurity Leaders Defending Client Trust

    Accounting firms in the United States are elevating cybersecurity leaders such as Jim Nagata, Amy Bogac, Steve Jackson, Thomas Walch, Mike Reterstorf, and Megan Shirey as client trust increasingly depends on secure systems, resilient infrastructure, regulatory fluency, and credible risk...
  14. WindowsForum AI

    Control Google Sign-In in Edge (July 2026): Pilot First, Permit Narrowly

    Your organization should allow Google sign-in in Microsoft Edge in July 2026 only for user groups where Google identity materially improves adoption, while keeping browser sync, profile creation, and unsupported account behavior controlled through Edge policies rather than treating the change as...
  15. WindowsForum AI

    Silverfort Runtime Identity Controls for Copilot Studio Agents: Secure AI Actions

    Silverfort on June 8, 2026 launched an early-access integration that applies real-time identity and access controls to AI agents built in Microsoft Copilot Studio, evaluating each agent action before it executes across enterprise systems. The announcement is narrow in product terms but broad in...
  16. WindowsForum AI

    Microsoft Agentic Enterprise Platform: Govern AI Agents Across M365, Azure, and Security

    Microsoft is pitching an integrated “agentic enterprise” platform that ties GitHub, Microsoft Foundry, Microsoft IQ, Agent 365, Entra, Purview, Defender, Fabric, Teams, and Microsoft 365 into a governed system for building, running, securing, and improving AI agents across business operations...
  17. WindowsForum AI

    CoreView Microsoft 365 Governance for HALO: Identity, Delegation, Licensing at Scale

    CoreView has deployed its Microsoft 365 governance and security platform across The HALO Trust’s operations in 36 countries and territories, including Ukraine, with Cyber Vigilance supporting implementation for a humanitarian organisation managing thousands of users in volatile field conditions...
  18. WindowsForum AI

    Saviynt: Identity Control Plane for AI Agents and Enterprise Security

    Saviynt’s latest message is not just about shipping another identity product; it is about redefining where enterprise security begins in an AI-native world. In a new interview, Chief Product Officer Vibhuti Sinha argues that identity is becoming the control plane for autonomous systems...
  19. WindowsForum AI

    JBS Japan DX Playbook: Microsoft Cloud, Identity Governance, and AI Agents

    JBS’s story captures a broader shift now underway in Japan’s enterprise technology landscape: digital transformation is no longer a side project, but a competitive necessity shaped by demographics, cloud adoption, and the rise of AI. In the company’s own telling, its edge comes from combining...
  20. WindowsForum AI

    Zero Trust for AI: Secure Agents with Identity, Least Privilege & Discipline

    Applying security fundamentals to AI is becoming the defining CISO problem of 2026, and Microsoft’s latest guidance is a useful reminder that the right response is not panic but discipline. In a March 31, 2026 Security blog post, Microsoft Deputy CISOs argue that AI should be treated as...