Skip to main content

Blog

Notes

Short pieces on Human-Led AI, security and Microsoft 365, written the way I talk to clients. Most of them are things you can do yourself in twenty minutes.


  • 12 October 2026

    Can someone send email pretending to be your business? SPF, DKIM and DMARC for Australian SMBs

    Most Australian SMBs I talk to assume that if an email says it’s from their domain, it must have come from them. It doesn’t work that way. Email was built on trust, and anyone can type your domain into the From line of a message. Three DNS records, SPF, DKIM and DMARC, are how the receiving mail server tells your real mail from the fakes, and what it should do with the fakes.

    Read →
  • 5 October 2026

    Microsoft 365 Business Standard vs Business Premium: what Australian SMBs actually get for the upgrade

    Most Australian SMBs I talk to think Business Premium is "Standard with better apps". It isn't. The apps are the same. Word, Excel, Outlook, Teams, SharePoint, OneDrive and the mailbox you use every day don't change when you upgrade. What changes is how much control you have over who signs in, which devices touch company data, and what happens when something goes wrong.

    Read →
  • 28 September 2026

    Microsoft Copilot can read more than your staff think — five SharePoint permission checks for Australian SMBs

    Most Australian SMBs I talk to assume Microsoft 365 Copilot somehow “unlocks” SharePoint. It doesn’t. Graph-grounded Copilot surfaces content the signed-in user already has permission to see — so old oversharing (Anyone links, org-wide links, Everyone except external users, public Teams sites, broken inheritance) stops being buried and starts answering in plain English.

    Read →
  • 21 September 2026

    Which tasks should you hand to AI? A task-by-task guide for Australian SMBs

    Most Australian SMBs I talk to have the same list in their heads: the invoice reminders nobody enjoys, the same customer questions every week, the CRM that's always behind. They know AI could take some of it. What they don't know is which tasks to hand over first, and how much to let go of each one.

    Read →
  • Security · 14 September 2026

    Your last contractor still has guest access — how Australian SMBs find leftover Microsoft 365 guests in 15 minutes

    Most Australian SMBs I talk to think offboarding finished when they disabled the contractor’s email. Then we open Users → Guest users and find the same person still sitting in the directory — #EXT# UPN, still in a Team, still able to open the SharePoint site they were invited to last year.

    Read →
  • Microsoft 365 · 8 September 2026

    You’re paying for Microsoft 365 seats nobody uses — how Australian SMBs find the waste in 20 minutes

    Most Australian SMBs I talk to are convinced their Microsoft bill is “just what it costs.” Then we open Billing → Licenses and find seats for people who left last year, Premium on accounts that never open Excel, and a pile of purchased-but-unassigned licences earning nothing.

    Read →
  • Human-Led AI · 7 September 2026

    Before you launch a Copilot Studio agent — five security checks for Australian SMBs

    You’re about to hit Publish on your first Copilot Studio agent. It answers FAQs, pulls from SharePoint, maybe chats on your website. Useful — and easy to leave wide open if you skip the boring bits.

    Read →