Long-form writing on AI, infrastructure, cloud strategy, security and enterprise modernisation.
My new research paper gives the MSIX Package Support Framework a defensive security review: a threat model, benign local validation, and an enterprise mitigation framework.
Read article
MSIX deployment is request-driven: Windows turns package actions into deployment operations, queues them, and applies concurrency rules to protect package state.
Read article
Windows 365 Frontline becomes Flex, Business gets a 20 percent price cut, and AVD Hybrid extends the Azure control plane to on-premises session hosts. A look at the new shape of cloud endpoint strategy.
Read article
Package identity changes how Windows treats a process. Detecting it early prevents bad assumptions in packaged and unpackaged app flows.
Read article
A cloud exit strategy is not a retreat plan. It is the architecture discipline that preserves leverage, resilience, and infrastructure sovereignty.
Read article
AVD and Windows 365 solve different operating-model problems, so licensing should never be the first decision criterion.
Read article
AI becomes valuable in EUC when it reduces discovery, packaging, triage, and cost-governance friction under controlled operational boundaries.
Read article
Azure Virtual Desktop Hybrid brings Azure-managed brokering to on-premises session hosts, but the current preview has important boundaries.
Read article
Windows 365 Reserve is designed for short-term disruption scenarios, not as a general-purpose replacement for Enterprise or Frontline.
Read article
Flexible virtualization in MSIX is a selective interoperability feature, not a blanket compatibility switch.
Read article
MSIX matters because it separates app identity and app state from traditional installer sprawl.
Read article
With App-V support ending in April 2026, the move to MSIX needs application-by-application planning rather than blind conversion.
Read article