Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Contain the agent through the identity and authorization controls that grant it access—not by changing its prompt, pausing its app, or restarting its model. First stop new authentication, then account for existing tokens and credentials, preserve evidence, trace what the agent did, and remove or rotate access before deciding whether to restore it. The exact disable and revocation behavior depends on the agent platform and the systems it can reach.
1. Identify the agent and the access it can use
Before changing anything, establish which identity and execution environment are involved and what authority they carry. An agent may use its own identity, a shared credential, or a delegated user session; each changes what must be blocked and how actions can be attributed.
As an Amazon Associate I earn from qualifying purchases.
- Record the agent identity, owner or sponsor, runtime or execution environment, and connected tools and applications.
- Map its effective access across assigned roles, tool permissions, data stores, and downstream services. Do not assume one role assignment represents the full access path.
- Determine whether it has credentials such as keys or secrets, persistent tokens, or permission to create credentials or trigger other agents and workflows.
- Record whether it acted as itself or on behalf of a user, and capture relevant timestamps and identifiers before changing access.
A dedicated, named identity makes access review, attribution, and containment more manageable than shared credentials. Microsoft recommends dedicated agent identities, least privilege, and an incident-response plan that specifies how an agent can be paused or revoked in its secure-agent guidance.
2. Stop additional access at the identity boundary
Use the administrative controls for the identity provider or agent platform to disable the affected identity or block its authentication. If the activity is ongoing and the individual identity cannot be identified quickly, a broader authentication block may be an option—but it can interrupt unrelated agents, so weigh scope and operational impact.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Microsoft Entra Agent ID
For an individual Microsoft Entra agent identity, administrators can disable that identity. Microsoft says disabling it prevents sign-ins across Entra ID and connected apps; consult Manage agent identities in your organization for the relevant administrative controls. This behavior is specific to Entra and should not be assumed for another identity provider.
Microsoft also documents Conditional Access policies as a broader way to block categories of agent authentication. Its guidance recommends evaluating policies in report-only mode before enforcement, and applying Conditional Access policies requires Entra ID P1. The tenant-wide disable options and their effects are described in Disable agent identities in your tenant. Consider a broad policy only when its scope is appropriate to the incident.
Check whether the block actually took effect
A disabled identity or blocked sign-in is not proof that every route to a resource is closed. Verify that connected applications and downstream services reject the agent, and determine how existing tokens, keys, and secrets are handled. Microsoft calls for testing revocation paths; persistent tokens, shared keys, or services that do not re-check authorization can delay containment. Do not infer that an app pause, prompt edit, or model restart revokes credentials already issued to downstream systems.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
- Check for outstanding sessions or tokens and use the provider’s documented invalidation procedure where applicable.
- Check connected applications and services directly, especially those with their own authorization state.
- Revoke or rotate credentials when compromise is confirmed or their exposure is plausible under your incident policy.
- Remove stale permissions and integrations that are not needed, rather than relying only on the immediate sign-in block.
3. Preserve evidence and establish what happened
Preserve useful records before making changes that could remove context. Review risk detections, sign-in records, audit events, and logs from the agent’s tools and connected applications. Keep an incident timeline, and distinguish confirmed actions from possible exposure.
Correlate the agent identity with the time, resource, action, effective role or scope, and any user on whose behalf it acted. Where available, capture correlation IDs and the identity of the acting user. Microsoft’s agent identity management guidance says risk detection details include agent identity information and are viewable for up to 90 days in the Entra Risky Agents report. That is an Entra-specific product window, not a general log-retention period; preserve records according to your organization’s incident procedures.
Establish whether the agent read data, changed state, exported information, created credentials, or propagated activity through other agents or workflows. Record what is verified and what remains uncertain. The available guidance supports end-to-end traceability but does not prescribe a universal forensic method or evidence-retention period.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
4. Investigate the access path and reduce exposure
Look for the conditions that enabled the activity, including untrusted content or prompt injection, without assuming a malicious prompt must have been involved. User-provided material, retrieved documents, tool results, and messages from other agents can all carry instructions or content that should not be trusted as authorization.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPrompts and system instructions are not security boundaries. Microsoft’s multitenant agent guidance cautions against relying on prompts, system instructions, or model behavior to enforce tenant isolation. Enforce access in identity, tools, and the resources themselves instead.
- Review effective permissions across identity roles, tools, integrations, and downstream systems; remove access the agent does not need.
- Use tenant-scoped identities, deterministic authorization checks, and resource partitioning where applicable.
- Deny unreviewed tools and cross-tenant paths by default, and require appropriate approval or controls for sensitive or irreversible actions.
- Assess whether the agent could have caused secondary actions through workflows, other agents, or credentials it could create.
Microsoft’s least-privilege guidance for AI agents emphasizes tracing access across the agent’s permissions and connected services. Its AI agent shared responsibility model is also relevant when determining which controls belong to the agent provider and which remain the organization’s responsibility.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
5. Choose a containment action that matches the scope
These controls are not interchangeable. Individual identity disablement is narrower than a policy affecting a category of authentication; pausing an application may stop execution but does not by itself establish that credentials or downstream access have been revoked.
| Action | Scope | Connected apps and existing access | Evidence and trade-off |
|---|---|---|---|
| Disable the affected identity | One identity in the Microsoft Entra procedure; behavior varies by provider. | Microsoft says Entra disablement prevents sign-ins across Entra ID and connected apps. Existing-token and downstream revocation still require verification. | More narrowly scoped than a tenant-wide policy. Preserve relevant records and confirm downstream rejection. Microsoft Entra identity management. |
| Apply a broader Conditional Access block | A broader class of agent authentication under the configured policy; exact scope depends on policy configuration. | Do not assume this alone invalidates every already-issued token or downstream credential; test applicable revocation paths. | Can disrupt unrelated agents. Microsoft advises report-only evaluation before enforcement; Entra ID P1 is required to apply Conditional Access policies. Microsoft disablement guidance. |
| Pause the application or agent runtime | Execution of that app or runtime, depending on its controls. | Whether it blocks connected apps, invalidates tokens, or revokes downstream credentials is not stated as a universal behavior; verify each path. | May stop further execution without containing the identity itself. Keep identity and authorization checks in scope. |
6. Restore the agent only after remediation
Do not re-enable the agent simply because activity has stopped. First address the access path, remove excess permissions, and verify that the containment and revocation controls work for the identity and downstream services involved.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Confirmed Microsoft Entra compromise
Microsoft’s guidance says to rotate credentials before re-enabling a compromised agent identity, or retire the identity. Use Manage agent identities in your organization for Entra-specific handling. If investigation establishes a false positive, Microsoft describes dismissing the risk and re-enabling the agent.
Other platforms or unresolved incidents
Recovery criteria depend on the platform, identity type, and affected resources. Confirm the relevant credentials and permissions have been addressed, downstream systems enforce the intended authorization, and monitoring can detect a recurrence. If the access path or extent of exposure remains uncertain, keep the identity contained while the incident owner decides whether to retire it or continue investigation.
For future readiness, define in advance who can disable or revoke an agent, how connected-system access is checked, what evidence is captured, and who approves restoration. Microsoft recommends pairing monitoring with an incident-response plan that names who is alerted, how an agent is paused or revoked, and how it is investigated.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Recommended Free Tools
