Who Is Actually Good?

Cartoon of a small business owner sitting with a practitioner who is showing papers and a whiteboard of abstract shapes.

I get asked this a lot. An MSP owner, or a small-business leader, wants a coach, an advisor, or a specialist, and they cannot tell who is any good. There is no certificate that settles it. It is easy to look competent on Instagram. A tidy grid and a confident caption will get you a meeting. They will not get the business where you want it.

The test I use is plainer than the marketing. Has this person solved the problem you actually have? Did they get the result you want? Have they helped a fair number of people like you get there, rather than telling a polished story about one lucky result?

Write the problem down before you shop

Most owners start with a feeling. The week is full. Margin is thin. The team is tired of the same snag. A feeling is not a brief, and a vague brief attracts someone who is good at a problem you do not have.

Before I talk to anyone, I sit in Microsoft 365 and ask Copilot to draft the problem from what is already in the tenant. Recent Teams threads where the same argument keeps returning. SharePoint documents that were meant to be the process and clearly are not. Planner boards crowded with tasks that never quite close. Copilot earns its place because it can pull those threads onto one page: what keeps breaking, who it lands on, and what better would look like in the numbers you already track.

I read that page and I edit it. If Copilot has smoothed over a sore point, I put the sore point back in. I hand it to a candidate and say, this is the job. If they have not done that job, you hear it quickly. They talk about their method. They do not talk about your board, your clients, or the result.

Ask for the work, not the pose

A person worth hiring will show you work. Not a slide of logos. How they read a business that looked like yours. What they changed. What moved, and what did not. Papers on the table. A whiteboard. A walk through a real engagement. If the only evidence is a photo and a promise, I keep looking.

I want someone who has done it more than once. One success can be luck, or a very patient client. A run of similar businesses, under similar constraints, reaching similar results, is a pattern. That pattern is what you are paying for.

Watch what they do with your brief. Do they push back where it is wrong? Do they ask what you have already tried? Or do they skip straight to a package with their name on it? The person who stays with the problem is usually the one who has been in the room when it was hard.

What changes when they are on the team

Get this choice right and the business feels different. The work is more enjoyable, because you are not grinding the same stuck point every week. You help more of the people you set out to help. And you make more money, because time stops leaking into work that does not pay.

None of that shows up because someone posted well. It shows up because a person who has already walked the path is now walking it with you, against the problem you wrote down, not the problem they prefer to sell.

I still do not know a certificate that replaces that test. I do know that if you write the real problem first, and you only sit down with people who have solved it for others like you, the choice gets a lot less foggy.

Your Clients Aren’t Asking for More. They’re Asking Where To.

Cartoon of a small group of people hiking a trail, one slightly ahead pointing the way

I keep hearing the same two complaints from MSP owners. Clients feel restless. Prospects who used to answer have gone quiet. The reflex is to add a service, cut the price, or send a longer newsletter. That rarely fixes it. You are asking the market to follow you, and the market is still asking where to.

More product does not create loyalty. A destination does.

Name the ridge, then start up it

Most MSPs I speak with have a catalogue, not a heading. Security, backup, licensing, a Copilot chat if someone asks. None of that is wrong. None of it answers the question an owner actually has: where are you taking my organisation over the next eighteen months?

Pick one serious goal. Not a homepage slogan. Something you can point at on a Tuesday. Every client we look after will have a written path from the tenant they have today to a Microsoft 365 setup their staff actually use, with Copilot where it earns its keep and nowhere else. That is a ridge worth climbing. You can say, out loud, that you have started.

I am not talking about a vision deck. I mean a SharePoint page the client can open without calling you, and a Planner board with the next three moves, names and dates included. The goal is the ridge. The agreed work is the track. If you cannot show both, you do not have a direction. You have a brochure.

Report where you are, not only what you sold

A quiet pipeline is often just confusion. They liked the first meeting. Months later the only message was a renewal or a ticket number. Nobody said whether the journey had moved.

This is ordinary Microsoft 365 work, done on purpose. Keep the roadmap on a SharePoint site they already use. Break the quarter into Planner tasks, not a slide that dies in an inbox. Once a month, post a short note in the shared Teams channel. What moved. What stalled. What is next. Ask them to reply. That is an invitation onto the track, not a speech.

Copilot earns a place here as a drafter, not a mascot. I open the month’s tickets and the Planner board, then ask Copilot in Word, or in Teams, to draft the client note in plain language. I still edit it. I still own the judgement. What I stop doing is staring at a blank page until the update never leaves the building. The owner who ignores Teams should get the same story in Outlook. Same heading, two doors.

Power Automate can nudge you when a Planner date slips, so the note is not an act of memory. This is not a product tour. It is how an MSP shows it has a heading and is still on the track.

Point, then let them choose

People follow someone who names the destination and reports the distance covered. They do not follow a vendor stuffing the pack. There is a plain gap between “we also do Copilot readiness” and “here is the ridge, here is where we stood this month, and you are welcome to walk it with us.”

If clients are fidgeting and prospects have gone quiet, do not add another offer. Stand a little ahead. Point. Say where you are going and where you intend to take them. Keep saying it, inside their tenant, in language they can read before the first coffee.

The ones who want a leader will come. The ones who only wanted a cheaper licence will not. That silence, once you can tell the difference, is useful.

Scout, Now Autopilot: How Microsoft’s Always-On Agent Really Works

Cartoon of a woman standing on a stack of documents looking through binoculars and guiding her colleagues forward

Most workplace AI I use still sits there politely, waiting for me to type something. Microsoft Scout is different, and that’s exactly why I think MSPs and SMBs need to understand how it works before someone in the business goes looking for the download link.

Quick housekeeping first. Microsoft introduced Scout at Build in June 2026 as its first “Autopilot” agent. On 25 September it renamed the product itself to Autopilot, describing it as “previously called Scout”. Yes, same name as Windows Autopilot, the device provisioning service, which is entirely unrelated. The docs still say Scout, so I will too.

So what is it, really?

Scout is an agent that works on your behalf without being prompted every time. The current Frontier release is a desktop app for Windows 11 and macOS. You describe a task in a chat, Scout picks the tools it needs, works through the steps visibly, pauses for your approval on sensitive actions, then hands back the result or saves files to your workspace.

The tools are the interesting bit. Scout can read and write files in an approved workspace folder, run shell commands, drive a browser to fill in forms, and connect to Microsoft 365. That covers Outlook mail and calendar, Teams chats, meetings and transcripts, SharePoint Lists, and files in OneDrive, SharePoint and Teams. It creates Word, Excel and PowerPoint files, remembers your preferences and can spin up parallel sub-agents.

What makes it “always-on” are two background modes. Heartbeat runs check-in prompts every 15 to 120 minutes while you’re away, and Automations run on schedules or triggers you define. The September announcement goes further: Autopilot becomes cloud-hosted, with its own identity, memory and workspace inside your tenant, and you @mention it in Teams, Outlook and documents like a colleague.

Under the hood it’s built on open-source OpenClaw, with Microsoft adding Entra identity and access controls on top.

The permissions story is where you need to pay attention

Scout operates with the user’s existing Microsoft 365 permissions. It can’t see anything the user can’t. That sounds reassuring until you remember how many SMB tenants I see with broad sharing links scattered across SharePoint. An agent that tirelessly works through everything a user can reach will find your oversharing faster than any auditor.

There’s a finer detail buried in Microsoft’s own Responsible AI FAQ. In the Frontier desktop app, model interactions are processed through GitHub Copilot, under separate terms. When that happens, some Microsoft 365 protections, such as data residency, retention, sensitivity label enforcement and eDiscovery, don’t apply to that processing. That’s why admins must complete an attestation before anyone can use it. Read that page before you tick the box.

Getting access is deliberately fiddly. You need Frontier turned on in the Microsoft 365 admin centre, an Intune policy on devices, the attestation form, and a GitHub Copilot Business or Enterprise seat for each user. Miss any one of those and sign-in fails without a clear message, which will make for entertaining helpdesk tickets.

How I’d approach it

Treat this as a pilot for a handful of technically capable people, not a rollout. Clean up permissions and sharing first. Keep the approval prompts on and resist the temptation to click “Always allow”. Lock down heartbeat and automation permissions tightly, because those run when nobody is watching. And budget carefully: Microsoft says Autopilot runs on usage-based billing, not the fixed Copilot licence.

I genuinely think agents that follow through are where this is heading. But an assistant that acts is a very different beast from one that answers. The organisations that do well here will be the ones that realised their governance needed to be ready before the agent arrived, not after.

Sources: Microsoft Scout overview (Microsoft Learn), Responsible AI FAQ, Admin access overview, Introducing the new Copilot with Home, Code and Autopilot

Personal AI Speed Isn’t Company Freedom

Cartoon of a founder stepping back while a small team calmly handles office work

Most business owners I speak with already use AI every day. They write faster, research faster, publish more content, and stitch together a few small automations. That is genuinely useful. It is also where a lot of people quietly stop — and that is the problem.

Personal speed feels like progress because your inbox clears and your notes look sharper. The business, though, still waits on the same bottlenecks it waited on last month. The opportunity is not another trick for your own desk. It is building AI into the company so the organisation gains capacity and you get room to breathe.

Look at the whole organisation

I ask leaders to walk the company with a colder eye: Operations, Sales, Marketing, Hiring, Finance, and Leadership. Not “what tool is trendy?” but “where does work repeatedly snag?” Microsoft 365 Copilot only matters when it sits inside those snags — Word, Outlook, Teams, SharePoint, Excel, Power Automate — the surfaces people already live in.

In Operations, that might be the status update that always needs a founder rewrite. Copilot in Teams can turn a noisy channel into a clean summary so the ops lead can act without waiting for your evening catch-up. In Sales, the proposal that sits in draft for a week can start as a Word document grounded in a SharePoint brief, then get shaped in Outlook as a reply that sounds like your firm, not a blank template. Marketing can pull approved language from SharePoint instead of reinventing the story in every campaign. Hiring can turn interview notes from Teams into a structured scorecard in Word before the panel forgets what they heard. Finance can ask Copilot in Excel to surface the variance you used to hunt for on Sunday night. Leadership can stop treating every decision as a meeting when the context already lives with the work.

Where AI should earn its keep

I look for four signals. Where can AI remove a recurring bottleneck — the same chase, the same rewrite, the same “can you just…” every week? Where can it save another hire because one strong person suddenly produces far more without burning out? Where does output still wait on the founder’s typing speed rather than the team’s judgement? And which decisions still depend on you that should not — approvals, prioritisation, a first-cut plan — only because nobody else has a workable draft?

That is where Copilot and Power Automate earn their place. A Power Automate flow can move an approved Word pack into the right SharePoint library and ping the owner in Teams without another follow-up email from you. Outlook Copilot can turn a tangled thread into clear next steps so sales does not need you CC’d on everything. Excel Copilot can draft the commentary Finance would otherwise rewrite after every board pack. None of that is about looking modern. It is about taking load off people who already know the work.

The test I use is simple: if you disappeared for two days, would the company stall for vanity reasons or for structural ones? Personal AI helps you type through the vanity. Company AI attacks the structure.

Freedom is what happens when you are not the bottleneck

Freedom shows up when Operations can close the loop, Sales can send a solid first cut, and Finance can answer a straight question without your calendar. Not because you worked faster at eleven at night, but because the organisation no longer routes every sticky decision through one person.

I am not anti personal AI. Use it. Just do not confuse a faster founder with a freer company. Build AI into the workflows, the libraries, and the routines — then step back far enough to lead.

Need to Know podcast – Episode 372

This episode covers the latest Microsoft 365, Copilot, security, OneDrive and Intune updates, along with some thoughts on what we can expect from Microsoft Ignite. I also look at recent MSP security concerns around ConnectWise and SkyKick and why better logging, auditing and monitoring should be a priority.

The bigger topic, however, is where AI is taking the MSP industry. AI will increasingly automate traditional Tier 1 work, while customers will expect IT providers to deliver faster, more consistent services at a lower cost. But putting AI into individual PSA, RMM and security products only creates more intelligent silos. The real opportunity is orchestration: an AI layer across the entire technology stack that can bring these systems together and act more like a digital employee. I share what I’ve been doing with Grokbot and why I think this orchestration model is where MSPs need to be heading.

Brought to you by www.ciaopspatron.com

you can listen directly to this episode at:

https://ciaops.podbean.com/e/episode-372-orchestration/

Subscribe via iTunes at:

https://itunes.apple.com/au/podcast/ciaops-need-to-know-podcasts/id406891445?mt=2

or Spotify:

https://open.spotify.com/show/7ejj00cOuw8977GnnE2lPb

Don’t forget to give the show a rating as well as send me any feedback or suggestions you may have for the show

Resources

CIAOPS Need to Know podcast – CIAOPS – Need to Know podcasts | CIAOPS

X – https://www.twitter.com/directorcia

director@ciaops.com

CIAOPS Blog

Join my Teams Shared Channel – CIAOPS

CIAOPS Merch store – CIAOPS

Become a CIAOPS Patron

CIAOPS AI Dojo

CIAOPS weekly news update – CIA Brief – CIAOPS

CIAOPS Labs – The Special Activities Division of the CIAOPS

Support CIAOPS

Get your M365 questions answered via email

Join my email list

A special thanks to the CIAOPS Patron community for making this podcast possible. You can find the benefits of a subscription to the community and become a member at https://www.ciaopspatron.com

Updates

News and links mentioned in this episode

Copilot & AI

Security

Partners/MSP

Admin

CIAOPS Need to Know October webinar – AI M365 Administration automation

Prefer Grease Over Gloss

Cartoon of a coach leaving a cluttered workshop with stained sleeves and a sticky-note prototype, colleagues leaning in

I scroll past another perfect feed and feel that familiar sour taste. Neat theories. Spotless creators. Slide decks that look like they have never met a real tenant. I do not learn much from people who only polish. I learn from people who still have grease under their sleeves.

I want the residue of making. Campaigns that actually shipped. Workshops that ran long because someone asked a hard question. Odd little experiments with clients where half the room shrugged and the other half leaned forward. What worked. What failed in spectacular fashion. The soot, not the lab coat. If the work left a mark on your day, I want to hear about that mark.

What I actually look for

In Microsoft 365 land the polished story is endless. Another AI deck. Another thread about how Copilot will change everything if you just adopt the mindset. Fine. I still want the artefacts. Screenshots with the edges showing. Notes scribbled beside a failed run. The version of the story you tell after the meeting, not the one you rehearsed before it.

Show me the Copilot prompt you tried in Word that spat out a policy draft with three confident wrong facts, and how you fixed the grounding. Show me the Outlook draft that saved you twenty minutes on a reply chain until it politely invented a deadline that never existed. Show me the Teams meeting summary that missed the one decision that mattered, so you had to go back into the recording like a detective with a coffee that had gone cold.

I care about the imperfect Power Automate flow that emailed the wrong SharePoint library for a week before someone noticed the condition was upside down. I care about the SharePoint build with three views too many and a permissions model you had to redraw on a whiteboard while the client watched. I care about the workshop demo that half-worked on the day — Copilot Chat answering beautifully until someone asked about their own retention labels and the room went quiet while we dug through the admin centre together.

That quiet is useful. That stumble is useful. The residue of a real session is useful. Perfect creators rarely leave residue. Practitioners leave trails you can follow.

Content theatre versus leftover evidence

Plenty of content is theatre. Lights up. Script tidy. No fingerprints. I am not interested in performing usefulness. I am interested in doing useful work and then talking about it. The difference sounds small until you have sat through both kinds of session and realised which one changed how you configure a tenant the next morning.

The best posts I have written for CIAOPS were not born as content calendars. They came from a messy Tuesday: a Copilot experiment in Word that surprised me, a flow that broke overnight, a Teams rollout where the chat etiquette mattered more than the licence SKU. I made something. Then I showed the leftovers. Colleagues remembered the leftovers longer than the slides.

When I stagger out of a workshop still holding a sticky-note laptop and a prototype that looks like it lost a fight with a highlighter, that is the signal. Not a victory lap. Just: we figured something out, and here is the board if you want to try it yourself. Bring your own stains. Ask awkward questions. Prefer the workshop mess over the feed glow.

In a world of perfect creators and AI slide decks, I would rather be the practitioner with dirty hands. Coach the work. Share the stains. Prefer makers over gloss.

Do something useful and talk about it. Make something and show it. That is enough.

CIA Brief 20261024

Security

Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
Attackers got hold of the ConnectWise Cloud Backup (formerly SkyKick) application identities and signed straight into customer tenants as the app, so MFA never came into play. Some service principals then gave themselves Exchange Administrator or even Global Administrator and added credentials to other apps. If you’ve ever used SkyKick or ConnectWise Cloud Backup, search every tenant for the listed application IDs, check app secrets and certificates added since 13 October, and remember that disabling the app doesn’t kill tokens that were already issued.
https://www.bleepingcomputer.com/news/security/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack/

AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise
Microsoft attributes the ConnectWise compromise to Storm-0940, a China-aligned actor using the open-source agentic pen-testing framework ARTEX to try signing in to more than 2,250 tenants, sometimes reaching privileged cloud access in under three hours. Worth a look for the investigation guidance, including the advice not to delete the apps before you’ve reviewed their sign-ins. The bigger lesson is that attacks now run at machine speed through apps you’ve already trusted, so least privilege on multi-tenant apps and alerting on app credential and role changes matter more than ever.
https://www.microsoft.com/en-us/security/blog/2026/10/21/storm-0940-uses-artex-agentic-ai-connectwise-supply-chain-compromise/

M365 Token Spray and Replay Campaign Compromises Business Email Accounts
Huntress tracked attackers replaying stolen post-MFA tokens from the 193.26.115.0/24 range against 79 organisations, then registering rogue Entra devices, swapping out MFA methods and hiding inbox rules ahead of payroll fraud. Good reminder that a password reset alone won’t clean this up: revoke sessions, remove rogue devices and MFA methods, and lock down device-code flow with Conditional Access. Then audit every mailbox for hidden inbox rules.
https://www.huntress.com/blog/token-replay-spray

Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks
A poisoned LiteLLM release on PyPI and in official container images dropped Python startup files that steal AI, cloud, browser and SSH credentials whenever Python starts, even if LiteLLM is never imported. If you or your clients run AI gateways or dev boxes with Python, check for this version, rebuild the environment rather than just uninstalling, and rotate every reachable secret from a clean machine. It’s another sign that AI tooling is now a prime supply-chain target.
https://www.microsoft.com/en-us/security/blog/2026/10/23/inside-the-litellm-1-107-0-supply-chain-compromise-credential-theft-through-python-startup-hooks/

Agents are your newest insiders. Security must move at their speed.
Microsoft’s identity team lays out how it wants agents secured: each gets its own Entra Agent ID, starts with no standing access, and receives task-scoped, time-limited Dynamic Permissions, with Dynamic Conditional Access tightening things as an agent’s risk rises. Discovery is also expanding to 60 local agent types, including Claude Code, Codex and GitHub Copilot. Still early, but this is the model to plan around, and the clear message is that agents should never simply inherit everything their user can reach.
https://www.microsoft.com/en-us/security/blog/2026/10/19/agents-are-your-newest-insiders-security-must-move-at-their-speed/

Securing the agentic insider
This is the executive framing of the same story: Microsoft says frontier models can’t be trusted by default and pitches “Guardian Agents” in Project Perception to supervise every agent action in real time. Nothing groundbreaking, but it’s a useful piece to put in front of SMB owners who assume the agents they switch on are automatically safe. Expect agent governance to become a standing line item in security conversations.
https://blogs.microsoft.com/blog/2026/10/19/securing-the-agentic-insider/

Microsoft 365 & Windows

Cloud Update allows more rollout waves with custom gaps
Now launched: you can set up more than three update waves using Entra ID groups and choose the delay between each one. That makes proper pilot groups for Office updates much easier to run. Worth a look if you’ve been stuck with a one-size-fits-all update ring for clients.
https://www.microsoft.com/microsoft-365/roadmap?id=558251

Archive mailboxes can now grow past 1.5TB
Rolling out now. Until now an archive stopped working once it hit 1.5TB, so this helps the clients with huge, long-retained archives. Check which licences qualify before you promise it to anyone.
https://www.microsoft.com/microsoft-365/roadmap?id=560820

Troubleshooting playbook for Auto labelling in SharePoint and OneDrive
A practical symptom-to-fix guide for Purview auto-labelling policies that run without labelling anything, covering missing prerequisites, simulation quirks, label priority and failure codes. It also confirms limits are rising tenant by tenant to 500,000 auto-labelled files a day and 20 million simulation matches. Worth bookmarking, but note it needs E5-tier licensing, so it applies to fewer SMB tenants than you’d hope.
https://techcommunity.microsoft.com/blog/microsoft-purview-blog/troubleshooting-playbook-for-auto-labelling-in-sharepoint-and-onedrive/4564103

Create guidelines for a workbook with Copilot in Excel rules
You can now add a visible “.Rules” worksheet that tells Copilot in Excel how to format, lay out and calculate in that workbook, and the rules travel with the file when it’s shared. Good reminder that a bit of structure beats re-prompting every time. It’s an easy win for clients with standard reporting templates, though it’s only fully supported in English.
https://support.microsoft.com/en-us/excel/copilot/copilot-in-excel-rules

MC1515927 – Microsoft 365 Copilot: Critique and Council preview experiences will retire
The Critique and Council previews in Researcher will be retired between late October and mid-November 2026, while Researcher and Analyst themselves stay. This only affects Frontier program users who had access to those previews, so most SMB tenants won’t notice. If you’ve trained anyone on them, update your guidance and give the help desk a heads-up.
https://mc.merill.net/message/MC1515927

Copilot Code: Make the power of coding accessible to everyone
Copilot Code is a new tab in the Copilot app where users describe a tracker, dashboard or app in plain English and Copilot builds it, grounded in their work data, then publishes it to the Microsoft-managed Copilot Managed Runtime. It’s rolling out through the Frontier program and needs a Microsoft 365 Copilot licence plus a usage-based spending policy, with local coding on PCs turned off by default. Still early, but expect a wave of citizen-built apps, so decide now who gets a spending policy.
https://techcommunity.microsoft.com/blog/microsoft-copilot-blog/copilot-code-make-the-power-of-coding-accessible-to-everyone/4562358

What’s New in Cowork: Expanded plugins and role-based skills
Cowork now has ready-made role plugins for Sales, Service, Education and Legal, plus federated MCP connectors for live data from outside systems, with Power Platform connectors rolling out over the coming weeks. It can also kick off tasks automatically when a connected system changes, and admins control which plugins are available. Worth a look as a faster route to real Copilot value than building agents from scratch, but review those connectors before you turn them on.
https://techcommunity.microsoft.com/blog/microsoft-copilot-blog/what%E2%80%99s-new-in-cowork-expanded-plugins-and-role-based-skills/4566221

Cloud & AI

Advancing digital sovereignty with greater control and choice
Microsoft is extending its Sovereign Cloud range: a Sovereign Control Panel goes into preview at Ignite, external key management with Azure Managed HSM is now generally available, and Azure Local adds multitenancy, Foundry Local and GitHub Enterprise Local. Nothing groundbreaking for most SMBs, but it’s useful ammunition when a client in a regulated sector worries about who controls their data. Azure Local multitenancy also opens up hosted sovereign services for larger MSPs.
https://blogs.microsoft.com/blog/2026/10/20/advancing-digital-sovereignty-with-greater-control-and-choice/

Copilot Studio agents will be able to browse the web on their own
Copilot Studio agents will be able to use Computer Use to browse the web on their own, visiting sites, pulling out data and downloading files, and it’s in development for January 2027. It’s powerful, so put guardrails in place before clients start using it. Given this week’s security news, think hard about what those agents can reach.
https://www.microsoft.com/en-us/microsoft-365/roadmap?id=576272

Microsoft empowers more than 330,000 Volkswagen Group employees with Copilot
Volkswagen has rolled Copilot out to more than 330,000 staff after a phased start with Copilot Chat, and it now has more than 26,000 agents active across the group in the past month alone. Nothing groundbreaking, but it’s a handy reference for SMB owners who want to see that Copilot works at scale. The phased approach of starting with free Chat and then moving to licensed Copilot is the same one I’d recommend for smaller clients.
https://news.microsoft.com/source/2026/10/21/microsoft-empowers-more-than-330000-volkswagen-group-employees-with-copilot

An AI-cloned free tool is being dubbed ‘the end of software’
The ABC looks at developers using AI to build near-identical free clones of Microsoft Office and Adobe Creative Suite, and at Reverse Engineer Anything, a trending GitHub tool that helps AI agents take apart and replicate existing software. Still early, and the legal ground is shaky, but expect clients to ask whether they can ditch paid licences for these clones. The real answer for business is support, security and compliance, not just features.
https://www.abc.net.au/news/science/2026-10-22/reverse-engineer-anything-ai-software-cloning/107271480

After hours

The Sixty-Year Mission Trailer – https://www.youtube.com/watch?v=HWQTlYjJf1c

Editorial

If you found this valuable, the I’d appreciate a ‘like’ or perhaps a donation at https://ko-fi.com/ciaops. This helps me know that people enjoy what I have created and provides resources to allow me to create more content. If you have any feedback or suggestions around this, I’m all ears. You can also find me via email director@ciaops.com and on X (Twitter) at https://www.twitter.com/directorcia.

If you want to be part of a dedicated Microsoft Cloud community with information and interactions daily, then consider becoming a CIAOPS Patron – www.ciaopspatron.com.

Watch out for the next CIA Brief next week

Clear the Runway. Then Cross the Gap.

Warm cartoon office scene with a person at a desk facing a blank document and a colleague cheerfully narrowing a messy whiteboard of sticky notes into three simple cards

I have a habit when someone tells me they are stuck. A client, a mate, a team member staring at a half-finished brief. My first instinct is almost always the same: strip friction out of the process. Make the first step smaller. Hand them a simple framework. Cut a few steps so starting feels less heavy.

That instinct is usually right. Most creative stuckness is external. Too many options. No clear place to put the work. A blank page that asks for a masterpiece before it will accept a rough sentence. In Microsoft 365 we spend a lot of time removing exactly that kind of friction, and we should.

Tools that clear the runway

Copilot in Word is a clean example. The blank document used to be the whole problem. Now you can point Copilot at a previous proposal, a Teams thread, or a SharePoint folder and ask for a first pass. The page is no longer empty. Outlook is similar — a reply draft appears before you have argued with the empty compose window for ten minutes.

Teams and Planner do the framework job. Instead of “we should write something,” you get a channel, a few checklist cards, and an owner. Power Automate cuts the busywork between systems so the human only shows up for the judgement call. SharePoint stops the scavenger hunt for last quarter’s file. External friction falls away. People move.

I have watched this pattern work again and again. Clear the runway and most people take off.

When the gap is inside

Sometimes they don’t. They know exactly what to write. They want to write it. The brief is sitting in SharePoint, the Word outline is already there, Copilot even offered a draft — and still nothing happens. The gap is not between them and the tool. It is between wanting and starting.

That is internal friction, and no amount of Microsoft 365 polish removes it on its own. You can have Copilot ready in Outlook, a Planner board tidy enough to make a project manager smile, and a Power Automate flow that files the finished piece. The document still stays closed.

People invent odd personal tricks for this. A side quest before the real work. A particular playlist. Opening the file and typing one deliberately bad sentence so the page is no longer sacred. Rewriting the same bullet three times in Teams before pasting it into Word. From the outside it looks inefficient. From the inside it is charm and coping mechanism mixed together — a private on-ramp the process diagram never shows.

Make it worth wanting

Here is the part I used to resist. If it is not fun, or at least interesting, it often will not get done. Sometimes the answer is not to make the work easier. Sometimes you make a small part harder on purpose, because that hardness makes you want to engage.

I will pick a fancier Word template than I need. I will draft the hard paragraph by hand first and only then ask Copilot in Word to tidy the rest. I will turn a dull status update into a short story for the Teams channel, even though a bullet list would have been faster. The extra friction is the point. It pulls me over the start line.

So when someone is stuck, I still reach for the external fixes first. Copilot, Planner, Power Automate, a cleaner SharePoint path — clear the runway. Then I ask a quieter question: are they blocked by the process, or by the private gap between wanting and starting? Tools handle the first. The second needs a personal tactic, and occasionally a little deliberate difficulty, so the work feels worth beginning.