Security on Wingate365

AI context is king - BC MCP for MCS Agents - London D365PPUG - Feb 2026

Wed, 18 Feb 2026 19:31:00 +0000

What if your AI tool understood your business data, would you get a better output from it? In short yes - context is king when dealing with AI.

AI Context is King - D365PPUG London, February 2026

I had a great evening presenting at D365PPUG London last night - thanks to the organisers for having me, brilliant crowd as always.

The session was about Business Central's built-in MCP (Model Context Protocol) server, and why I think it's one of the more exciting developments in the BC ecosystem right now.

The core problem: generic AI doesn't know your business. Ask it about your customers, your open orders, your stock levels - it can't help. MCP fixes that. It's the standard that lets AI tools connect to external systems, and Microsoft have built an MCP server directly into Business Central. No custom development, no third-party tooling - it's there today.

The demo gods were mostly kind 😅 and the audience questions were fantastic - lots of interest in security, licensing, and whether you can build custom MCP tools (yes, you can - that's a whole other session).

Here is a copy of the slides shared.

Mastering Dynamics 365 BC Security - Admin Center

Sat, 08 Feb 2025 11:48:00 +0000

This short video covers two important security settings in the Business Central Admin Center. Learn how to configure these settings to enhance security and protect your system!

Essential Security Settings in the Business Central Admin Center

Securing a Business Central environment is crucial to protecting company data and ensuring only authorised users have access.

This guide outlines two key security settings in the Business Central Admin Center that help enhance system security.

Improve your Dynamics 365 Business Central security: Just-in-Time access for partners

Tue, 19 Nov 2024 19:33:00 +0000

Microsoft have an ongoing mission around security, check out the Secure Future Initiative | Microsoft & the recent newsletter SFI_November_2024_update.pdf

But here I wanted to share a very simple tip around an effective just-in-time access control for clients to allow / prevent partners from accessing their BC environments.

I see this coming into play post go-live. Better to leave the door locked and provide access only when required, so long as you (the client organisation) have suitable coverage with you internal IT resource/team to let the partners in when necessary.

Connect to Windows 2016 HyperV Core with delegated credentials / CredSSP

Sun, 18 Feb 2018 12:24:00 +0000

CredSSP authentication is currently disabled on the local client. You must be running with administrator privileges in order to enable CredSSP

On Win2016 desktop CLIENT

Powershell:

PS C:\Users\Administrator>start-service winrm
PS C:\Users\Administrator>Enable-WSManCredSSP -Role client -DelegateComputer *
PS C:\Users\Administrator>stop-service winrm

GPEDIT (as administrator)

Local Computer Policy > Computer Configuration > Administrative Templates > System > Credentials Delegation:

Allow delegating fresh credentials with NTLM-only server authentication

Set: "Enabled" and "Add servers to the list"

Show: enter "WSMAN/*" as Value

Fire up Hyper-V Manager and connect to server only with IP-address and enter as user "[IP Address]\[username]” and set the password.

Source

TLS/SSL for Web Services

Sun, 19 Apr 2015 21:40:00 +0000

TLS protection should be a standard security policy these days. It’s common place for servers hosting web pages and web services.

Certificates are inexpensive and relatively simple to setup and use. The basic outline is that you generate a private key on your server, pass this to the CA. They will use this to generate the Certificate and public key. They send you back the certificate and publish the public key on their servers. The certificate, private key and the CA’s authority chain certificates are installed on your server and bound/configures to be utilised within the the webservice in question.

A 3rd party browser pointed to your https URL will request the certificate, which it uses to lookup the host servers details with the CA and obtain the public key. The public key is then used by the browser to lock the session key that it generates. Only the specific private key can unlock and obtain the session key that was locked by the related public key. Which is what the host server does and then both machines have identical keys to use for all further communication in that session.

Here are the main elements and terms you may come across when setting up SSL protection using a Certificate Authority (CA)

Machines:

IP PBX / 3CX / VoIP Phone System

Thu, 31 Oct 2013 08:34:00 +0000

Just finished a few days training on 3CX systems, and a very interesting two days it was. The trainer William has a distinctive style and great dry sense of humour that kept everyone engaged.

3CX is a windows base IP phone system. In the simplest terms for a small office you install 3CX on a desktop PC, sign up to a VoIP provider (e.g. VoIP Unlimited or Spitfire) plug in a few IP phones to your Ethernet, configure, provision and away you go. As it’s all IP based you can get a phone number in any region of the UK or any country for that matter. So office based in Scotland, but clients all in London, or France - get a local number to your clients and you are only paying for ’local’ calls. 3CX can go all the way up to a multi-location offices / call centres with thousand of agents. If you want to get fancy there are APIs and custom programmable elements to build your own digital receptionist, the kind that ask for your account numbers, report information from your account after you authenticate etc etc.

You can also get an app on your iPhone/Android to be able to make calls over 3G data or wifi via your 3CX PBX. Although if you want total flexibility on remote mobile access you do face the difficult decision on how to deal with security threat of opening a port for SIP traffic on your firewall to the public internet which is not a great idea.