We are announcing the end of support for selected AI models on the Standard and GitHub Copilot harnesses in Copilot Studio. Beginning on each models' applicable migration date, the selected models will no longer be available in Copilot Studio, and agents will automatically migrate to a replacement model. How does this affect me? Agents configured with retiring models will be automatically migrated to a supported replacement model. The planned replacement model and migration date depends on both...
Type
Message Center
Tags
MC1506318, Microsoft Copilot (Power Platform)
AI analysis
Low priority · generated by qwen2.5:7b · verify against the original
Microsoft is replacing Anthropic and Grok models with newer OpenAI GPT models in Copilot Studio, Power Automate, and Power Apps, with no change to tier pricing.
What you should do
Review existing prompts to ensure they continue to function as expected after the model update. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
We are updating the models available in prompts in Copilot Studio, Power Automate and Power Apps to bring newer OpenAI GPT models to the Basic, Standard, and Premium tiers, with no change to tier pricing. As part of this update, we’re retiring the Anthropic and Grok models and earlier GPT models listed below. Existing prompts using these models will automatically move to the replacement for their current tier, providing access to newer models while preserving your tier selection. This update wil...
Type
Message Center
Tags
MC1536101, Power Platform
AI analysis
Low priority · generated by qwen2.5:7b · verify against the original
Microsoft Teams introduces app-centric management, allowing admins to control who can install Teams apps by setting default values and permissions for new and existing apps.
What you should do
Review and configure app permissions in the Teams Admin Center to ensure compliance with organizational policies. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
App centric management introduces new admin settings to control who in the tenant can install Teams apps. First, admins can set a default value for new apps that are published to Teams app store. Second, admins can edit the availability of an app to “All users can install,” “Specific users and groups can install,” or “No user can install.” This feature evolves the existing app permission policies and provides admins with the ability to manage access to the app individually. The app permission policies for existing customers are migrated to maintain existing app availability in the tenant. GA d…
Type
M365 Roadmap
Services
Teams
Tags
Rolling out, General Availability, GCC High, Microsoft Teams, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office, Teams · verify against the original
Microsoft Teams introduces app-centric management, allowing admins to control who can install specific apps, with a default setting for new apps and options to restrict or allow app access for users and groups.
What you should do
Review and configure app permissions in the Teams Admin Center to align with your organization's policies. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
App centric management introduces new admin settings to control who in the tenant can install Teams apps. First, admins can set a default value for new apps that are published to Teams app store. Second, admins can edit the availability of an app to “All users can install,” “Specific users and groups can install,” or “No user can install.” This feature evolves the existing app permission policies and provides admins with the ability to manage access to the app individually. The app permission policies for existing customers are migrated to maintain existing app availability in the tenant. GA d…
Type
M365 Roadmap
Services
Teams
Tags
Rolling out, General Availability, DoD, Microsoft Teams, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office, Teams · verify against the original
Administrators can now customize the blocked file extensions for Weaponizable File Protection in Microsoft Teams, allowing for more tailored security policies.
What you should do
Review and configure the blocked file extensions to match your organization's security policies. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Microsoft Teams is expanding admin controls for Weaponizable File Protection. Administrators will be able to customize which file types are blocked in Teams to align with their organization's security requirements or continue using the Microsoft-recommended default list. This added flexibility helps organizations tailor file protection policies while maintaining a secure collaboration environment. GA date: December CY2026
Type
M365 Roadmap
Services
Teams
Tags
In development, General Availability, Targeted Release, Worldwide (Standard Multi-Tenant), Microsoft Teams, Android, Desktop, iOS, Mac, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Teams · verify against the original
Review and respond to access requests inside the Share dialog. When people request access to a file, folder, or library, anyone who can share it will see pending requests right in the Share dialog for that item. From there, they can choose the level of access to grant, approve or decline requests individually or in bulk, and message the requester before deciding. Requests for more access, such as edit rights for someone who can already view, appear alongside new requests, making it faster to grant the right access and keep work moving. GA date: January CY2027
Type
M365 Roadmap
Services
OneDrive, SharePoint
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), GCC, GCC High, DoD, OneDrive, SharePoint, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office, OneDrive · verify against the original
Microsoft 365 Copilot adds new routing and overflow capabilities to Dynamics 365 Contact Center, requiring new users to enable and configure playbooks.
What you should do
New users should enable and configure natural-language playbooks for Microsoft 365 Copilot in Dynamics 365 Contact Center. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Microsoft 365 Copilot enhances Dynamics 365 Contact Center with conversation orchestration, enabling dynamic priority escalation, overflow handling, preferred representative assignment, and bullseye routing. Administrators configure natural-language playbooks. Rollout begins late October 2026. Existing users need no action; new users must enable and configure playbooks.
Type
Message Center
Tags
MC1536059, Dynamics 365 Apps
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
Microsoft Teams is adding a new section in the Activity feed to highlight relevant posts from leaders and communities, requiring admins to enable Communities and Storylines.
What you should do
Enable Communities and Storylines in Microsoft Teams to ensure users can join relevant communities and follow colleagues from notifications. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Microsoft Teams is adding a "What's happening across your organization" section in the Activity feed to highlight relevant posts from leaders and communities. Rolling out worldwide from November to December 2026, it allows users to join communities and follow colleagues directly from notifications. Admins should enable Communities and Storylines.
Type
Message Center
Services
Teams
Tags
MC1536058, Microsoft Viva
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Teams · verify against the original
The user exception limit for Standard-Deferred release preferences is increasing from 100 to 10,000 users per tenant to support larger pilot groups. This change rolls out worldwide from late October to mid-November 2026, allowing more flexible audience management using Microsoft Entra ID groups. No action is required unless expanding exceptions.
Type
Message Center
Services
Entra ID
Tags
MC1536057, Microsoft 365 suite
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Entra ID · verify against the original
Microsoft Entra ID will retire SMS and voice authentication for self-service password reset (SSPR) starting February 2027, requiring organizations to prepare alternative recovery methods.
What you should do
Microsoft states: “Organizations must prepare alternative recovery methods, as SMS/voice will no longer be available for SSPR after the transition.”
Implement alternative methods for self-service password reset by February 2027. AI-suggested, not a Microsoft requirement
Why: Microsoft states this administrator action is mandatory.
Microsoft Entra ID will retire Microsoft-provided SMS and voice authentication for self-service password reset (SSPR) starting February 2027, with a 50-day transition per user group. Organizations must prepare alternative recovery methods, as SMS/voice will no longer be available for SSPR after the transition.
Type
Message Center
Services
Entra ID
Tags
MC1536049, Microsoft Entra
AI analysis
High priority · generated by qwen2.5:7b · possibly affects Entra ID · verify against the original
Microsoft Purview integrates with Palo Alto Prisma Access to extend DLP to unmanaged cloud apps, with a preview starting in mid-April 2026 and general availability in June 2027.
What you should do
Admins should activate the feature when it becomes available to protect sensitive data in unmanaged cloud apps. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Microsoft Purview now integrates with Palo Alto Prisma Access to extend data loss prevention to network traffic, enabling discovery and protection of sensitive data in unmanaged cloud apps. The feature rolls out from mid-April 2026 (preview) to June 2027 (general availability) and requires admin activation.
Type
Message Center
Tags
MC1257999, Microsoft Purview
AI analysis
Low priority · generated by qwen2.5:7b · verify against the original
What and why:Microsoft recommends adopting a risk-based approach to Windows Server patching. It helps organizations respond faster to critical vulnerabilities while minimizing operational disruption. Rather than relying on fixed patching schedules, prioritize updates based on exploit activity, system exposure, workload criticality, and business impact. Rollout schedule:This guidance is available now. Impact on your organization:Organizations managing Windows Server workloads across on-premises,...
Type
Message Center
Tags
MC1535667, Windows
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Windows · verify against the original
The Proactive control rename feature for canvas apps in Power Apps will be retired on December 11, 2026, removing Copilot suggestions for renaming controls.
What you should do
Review existing canvas apps to ensure that control names are consistent and do not rely on Copilot suggestions after December 11, 2026. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
On December 11, 2026, the Proactive control rename feature for canvas apps in Power Apps will be no longer available. How does this affect me? After December 11, 2026, makers and tenant administrators will no longer have access to Copilot (AI-powered assistant) suggestions for renaming similar controls or applying multiple suggested renames in canvas apps. Existing app control names and formulas will remain unchanged. Once this feature is retired:Copilot (AI-powered assistant) will no longer sug...
Type
Message Center
Tags
MC1532426, Power Apps
AI analysis
Low priority · generated by qwen2.5:7b · verify against the original
Deadline source
“On December 11, 2026, the Proactive control rename feature for canvas apps in Power Apps will be no longer available.”
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and remediate it. The post Inside a malicious Claude Code-branded extension and its persistent SSH backdoor appeared first on Microsoft Security Blog.
Type
Announcements
Tags
Microsoft Security Blog, Frontier AI models, Supply chain attack
AI analysis
High priority · generated by qwen2.5:7b · possibly affects Security · verify against the original
Starting March 2026, Microsoft Entra ID will generally available passkey profiles and will auto-migrate existing Passkeys (FIDO2) tenants to a default profile.
What you should do
Review and configure passkeyType settings in Entra ID to match organizational requirements. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Starting March 2026, Microsoft Entra ID will GA passkey profiles and synced passkeys for tenants with Passkeys (FIDO2) enabled. Existing tenants will be auto-migrated to a default passkey profile with configurable passkeyType. Registration campaign settings and rollout timelines vary by cloud region.
Type
Message Center
Services
Entra ID
Tags
MC1221452, Microsoft Entra
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Entra ID · verify against the original
Microsoft Teams introduces granular Conditional Access for Teams meetings, allowing admins to enforce multifactor authentication for specific meetings. This feature will be available in preview from November 2026 and will be generally available by January 2027.
What you should do
Configure authentication contexts, Conditional Access policies, and Teams meeting policies to enable granular Conditional Access for specific meetings. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Granular Conditional Access for Teams meetings lets admins enforce targeted security controls like multifactor authentication for specific meetings. Rolling out from November 2026 (preview) to January 2027 (general availability), admins must configure authentication contexts, Conditional Access policies, and Teams meeting policies to enable this feature.
Type
Message Center
Services
Entra ID, Teams
Tags
MC1532256, Microsoft Teams
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Teams · verify against the original
Microsoft Edge will introduce an opt-in experience that allows users on managed devices to choose whether Edge launches automatically when Windows starts. Administrators can also manage this behavior through the LaunchEdgeOnWindowsStartupEnabled policy with opt-in, opt-out, and user-choice configurations. GA date: November CY2026
Type
M365 Roadmap
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Edge, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Windows, Edge · verify against the original
Microsoft Copilot will now support write, update, and delete actions in third-party services, allowing users to perform these actions directly from Copilot Chat. Admins can manage and disable connectors in the Microsoft 365 admin center.
What you should do
Review and configure Copilot connectors in the Microsoft 365 admin center to ensure compliance with organizational policies. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Federated Copilot connectors (MCP type) currently let Microsoft 365 Copilot read data from third-party services in real time. With this update, the connector tools that create, update, and delete content in those services are unblocked in Copilot Chat, so users can complete work without leaving Copilot. Copilot acts with the user's own account and permissions at the third-party service, and every create, update, or delete action requires the user's explicit confirmation before it runs. Admins can view each connector's read and write/delete tools in the Microsoft 365 admin center and disable co…
Type
M365 Roadmap
Tags
Launched, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Copilot (Microsoft 365), Desktop, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Microsoft identifies security vulnerabilities in Teams that allow for remote access and malicious execution, as well as abuse of Certificate Services through authentication relay and Kerberos.
What you should do
Review and update security configurations for Teams and related services to mitigate potential risks. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through authentication relay and Kerberos. The post From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths appeared first on Microsoft Security Blog.
Type
Announcements
Tags
Microsoft Security Blog
AI analysis
High priority · generated by qwen2.5:7b · possibly affects Teams · verify against the original
Ask Copilot about an image in Edge enables users to instantly analyze images from the web by sending them directly to Copilot from the Edge context menu, making it easy to ask questions, gain insights, and understand visual content without leaving their browsing experience. Admins can control availability to this feature using the EdgeEntraCopilotPageContext and Microsoft365CopilotChatIconEnabled policies. GA date: January CY2027
Type
M365 Roadmap
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Edge, Microsoft Copilot (Microsoft 365), Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Microsoft Teams Pro Management portal now includes utilization analytics for bookable desks, similar to meeting rooms. Admins need to associate devices and license desks with Shared Space licenses to enable analytics.
What you should do
Ensure bookable desks are associated with peripheral devices and licensed with appropriate Teams Shared Space licenses. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Teams admins can access utilization analytics for Teams bookable desks on Teams Pro Management portal, similar to analytics provided for meeting rooms on the portal today. For utilization analytics to be enabled, a desk needs to have one or more peripheral device associated, and the desk needs to be licensed with Teams Shared Space license or Teams Shared Space - Single Space license. GA date: December CY2026
Type
M365 Roadmap
Services
Teams
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Teams, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Teams · verify against the original
Legacy Teams retention policies that currently apply to Copilot interactions will be converted to Teams-only policies, no longer governing Copilot workloads.
What you should do
Review and adjust existing retention policies to ensure they align with the new Teams-only scope. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Some existing retention policies scoped to Microsoft Teams may currently also apply to Microsoft 365 Copilot interactions. As part of an upcoming change, these legacy Teams retention policies will be converted to—and treated as—Teams-only policies. They will no longer implicitly govern Copilot workloads. GA date: January CY2027
Type
M365 Roadmap
Services
Teams
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Purview, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Dynamics 365 Field Service allows administrators to control whether booking completion automatically updates the booking End Time, helping maintain accurate duration records.
What you should do
Review and configure the organization-level Set End Time on booked resource completion setting in Field Service settings to ensure accurate booking duration records. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Business value Technicians do not always record booking completion at the moment work ends. They may update the booking later because of connectivity, customer-facing responsibilities, or end-of-day administration. When the later administrative action replaces the booking End Time, the recorded duration can extend beyond the work that was actually performed and affect downstream journals, time entries, labor costs, actuals, and work-order completion reporting. Field Service administrators can choose whether completion by the booked resource automatically changes the booking End Time. Organizat…
Type
M365 Roadmap
Tags
In development, General Availability, Preview, Worldwide (Standard Multi-Tenant), Dynamics 365 Field Service, Android, Desktop, iOS, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
OneDrive is adding administrative controls for the Photos experience on Windows. Organizations can manage whether users sign in with personal Microsoft accounts. These controls help IT teams align OneDrive Photos with their access, data governance, and device-management requirements. GA date: August CY2026
Type
M365 Roadmap
Services
OneDrive
Tags
Rolling out, General Availability, Worldwide (Standard Multi-Tenant), OneDrive, Desktop
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Windows, OneDrive · verify against the original
Outlook mobile apps for iOS and Android will support Microsoft Purview DLP wait-on-send policies, allowing administrators to control when emails are sent after DLP evaluation.
What you should do
Review and configure DLP policies for mobile users to ensure compliance and manage user experience. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Outlook for iOS and Android will support Microsoft Purview Data Loss Prevention (DLP) wait-on-send policies. Organizations can require a DLP evaluation before an email is sent and configure how long users must wait for policy evaluation to complete. This helps ensure sensitive information is inspected against organizational policies before messages leave the organization while providing administrators with flexible control over the user experience. GA date: November CY2026
Type
M365 Roadmap
Services
Microsoft 365 Apps
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), GCC, GCC High, DoD, Outlook, Android, iOS
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original