Microsoft identifies security vulnerabilities in Teams that allow for remote access and malicious execution, as well as abuse of Certificate Services through authentication relay and Kerberos.
What you should do
Review and update security configurations for Teams and related services to mitigate potential risks. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through authentication relay and Kerberos. The post From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths appeared first on Microsoft Security Blog.
Type
Announcements
Tags
Microsoft Security Blog
AI analysis
High priority · generated by qwen2.5:7b · possibly affects Teams · verify against the original
Ask Copilot about an image in Edge enables users to instantly analyze images from the web by sending them directly to Copilot from the Edge context menu, making it easy to ask questions, gain insights, and understand visual content without leaving their browsing experience. Admins can control availability to this feature using the EdgeEntraCopilotPageContext and Microsoft365CopilotChatIconEnabled policies. GA date: January CY2027
Type
M365 Roadmap
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Edge, Microsoft Copilot (Microsoft 365), Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Microsoft Teams Pro Management portal now includes utilization analytics for bookable desks, similar to meeting rooms. Admins need to associate devices and license desks with Shared Space licenses to enable analytics.
What you should do
Ensure bookable desks are associated with peripheral devices and licensed with appropriate Teams Shared Space licenses. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Teams admins can access utilization analytics for Teams bookable desks on Teams Pro Management portal, similar to analytics provided for meeting rooms on the portal today. For utilization analytics to be enabled, a desk needs to have one or more peripheral device associated, and the desk needs to be licensed with Teams Shared Space license or Teams Shared Space - Single Space license. GA date: December CY2026
Type
M365 Roadmap
Services
Teams
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Teams, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Teams · verify against the original
Legacy Teams retention policies that currently apply to Copilot interactions will be converted to Teams-only policies, no longer governing Copilot workloads.
What you should do
Review and adjust existing retention policies to ensure they align with the new Teams-only scope. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Some existing retention policies scoped to Microsoft Teams may currently also apply to Microsoft 365 Copilot interactions. As part of an upcoming change, these legacy Teams retention policies will be converted to—and treated as—Teams-only policies. They will no longer implicitly govern Copilot workloads. GA date: January CY2027
Type
M365 Roadmap
Services
Teams
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Purview, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Dynamics 365 Field Service allows administrators to control whether booking completion automatically updates the booking End Time, helping maintain accurate duration records.
What you should do
Review and configure the organization-level Set End Time on booked resource completion setting in Field Service settings to ensure accurate booking duration records. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Business value Technicians do not always record booking completion at the moment work ends. They may update the booking later because of connectivity, customer-facing responsibilities, or end-of-day administration. When the later administrative action replaces the booking End Time, the recorded duration can extend beyond the work that was actually performed and affect downstream journals, time entries, labor costs, actuals, and work-order completion reporting. Field Service administrators can choose whether completion by the booked resource automatically changes the booking End Time. Organizat…
Type
M365 Roadmap
Tags
In development, General Availability, Preview, Worldwide (Standard Multi-Tenant), Dynamics 365 Field Service, Android, Desktop, iOS, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
OneDrive is adding administrative controls for the Photos experience on Windows. Organizations can manage whether users sign in with personal Microsoft accounts. These controls help IT teams align OneDrive Photos with their access, data governance, and device-management requirements. GA date: August CY2026
Type
M365 Roadmap
Services
OneDrive
Tags
Rolling out, General Availability, Worldwide (Standard Multi-Tenant), OneDrive, Desktop
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Windows, OneDrive · verify against the original
Outlook mobile apps for iOS and Android will support Microsoft Purview DLP wait-on-send policies, allowing administrators to control when emails are sent after DLP evaluation.
What you should do
Review and configure DLP policies for mobile users to ensure compliance and manage user experience. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Outlook for iOS and Android will support Microsoft Purview Data Loss Prevention (DLP) wait-on-send policies. Organizations can require a DLP evaluation before an email is sent and configure how long users must wait for policy evaluation to complete. This helps ensure sensitive information is inspected against organizational policies before messages leave the organization while providing administrators with flexible control over the user experience. GA date: November CY2026
Type
M365 Roadmap
Services
Microsoft 365 Apps
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), GCC, GCC High, DoD, Outlook, Android, iOS
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Outlook for Mac will support Microsoft Purview DLP wait-on-send policies, allowing administrators to control the user experience and ensure sensitive information is inspected before emails are sent.
What you should do
Review and configure DLP policies for Outlook for Mac to ensure compliance and user experience. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Outlook for Mac will support Microsoft Purview Data Loss Prevention (DLP) wait-on-send policies. Organizations can require a DLP evaluation before an email is sent and configure how long users must wait for policy evaluation to complete. This helps ensure sensitive information is inspected against organizational policies before messages leave the organization while providing administrators with flexible control over the user experience. GA date: November CY2026
Type
M365 Roadmap
Services
Microsoft 365 Apps
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), GCC, GCC High, DoD, Outlook, Mac
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Microsoft Edge will allow users to translate PDF documents into their preferred language, with admin control via the TranslateEnabled policy. Generally available in January 2027.
What you should do
Review and configure the TranslateEnabled policy as needed. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Users will be able to translate full PDF documents directly within the native PDF viewer in Microsoft Edge. The translated document opens in a new tab, making it easier to access content in their preferred language. Admins can control availability to this feature using the TranslateEnabled policy. GA date: January CY2027
Type
M365 Roadmap
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Edge, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
This enables users to export Identifiable row-level Copilot metrics from the Copilot Dashboard for reporting and deeper analysis. This capability can be tuned On by Admins in a tenant. GA date: November CY2026
Type
M365 Roadmap
Tags
In development, General Availability, Targeted Release, Worldwide (Standard Multi-Tenant), Microsoft Viva, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Admins can now choose whether the organizer name will show up in the Calendar View on Teams panels. Admins can toggle the "Show organizer name" setting ON or OFF in the Pro Management portal or on the panel device. Based on the selection, the organizer name will or will not be shown in the calendar view on the panel device. Available with Teams Rooms Pro and Teams Shared Space licenses. GA date: October CY2026
Type
M365 Roadmap
Services
Teams, Teams Rooms
Tags
Rolling out, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Teams, Android, Teams and Surface Devices
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Teams, Teams Rooms · verify against the original
Azure DevOps Services and Server are not affected by the PHP vulnerabilities, but pipelines, containers, and deployed applications may require separate patching.
What you should do
Review and update the security settings for pipelines, containers, and deployed applications to ensure they are patched against the PHP vulnerabilities. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
On October 21, 2026, PHP disclosed two critical vulnerabilities that can allow remote code execution. Neither Azure DevOps Services, our cloud-hosted offering, nor Azure DevOps Server, our on-premises product, uses PHP to handle customer requests. PHP runtimes used by pipelines, containers, and deployed applications have their own patching requirements. Deployment scope: cloud and on-premises Azure […] The post PHP2Shell and Azure DevOps: what to check appeared first on Azure DevOps Blog.
Out-of-band security updates for .NET address the Brotli decoder vulnerability and tarball ownership vulnerability. The post .NET October 2026 Out-of-Band Security Updates appeared first on .NET Blog.
Row summaries are now available in US Government clouds, allowing users to access AI-generated insights in model-driven apps. Admins and makers need to enable and configure this feature for users.
What you should do
Admins and makers should enable and configure row summaries for users in model-driven apps. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Row summaries are expanding to supported US Government clouds, giving users in regulated environments access to AI-generated insights that help them understand model-driven app records at a glance. This release brings the row summary experience available to commercial customers to supported government environments while meeting their applicable compliance and data-boundary requirements. Admins and makers enable and configure row summaries for users in their model-driven apps. Availability Field Value Release Channel Weekly Version 2611.1 Applies to Model-driven apps Feature Scope Users (enable…
Type
M365 Roadmap
Tags
In development, General Availability, GCC, GCC High, Power Apps, Web
AI analysis
Low priority · generated by qwen2.5:7b · verify against the original
Overflow for direct inward dialing leverages conversation orchestration to detect key direct inward dialing-related events—such as the representative being busy, offline, rejecting the call, or failing to answer—and apply administrator-defined fallback actions. Administrators configure natural language playbooks using conversation orchestration at the global or inbound profile level to specify the action to run when a direct inward dialed call can't be attended to or completed. The actions include offering a direct callback to the caller, sending them to voicemail, transferring the call to ano…
Type
M365 Roadmap
Tags
In development, General Availability, Preview, Worldwide (Standard Multi-Tenant), Microsoft Copilot (Microsoft 365), Dynamics 365 Contact Center, Web
AI analysis
Low priority · generated by qwen2.5:7b · verify against the original
Admins can now configure the strictness level of governance policies in Dynamics 365 Customer Service, allowing more lenient or rigorous enforcement of email compliance rules.
What you should do
Review and adjust the strictness levels of governance policies as needed to align with compliance requirements and risk tolerance. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
This feature introduces policy strictness control, enabling organizations to define how rigorously each governance policy evaluates and flags potential violations in outgoing emails. Governance policies serve as real-time guardrails, ensuring communications adhere to business, legal, and compliance standards before they are sent to customers. With this enhancement, supervisors can configure the strictness level for each policy. Lower strictness settings apply more lenient enforcement, reducing false positives and allowing borderline scenarios to pass, while higher settings perform more rigorou…
Type
M365 Roadmap
Tags
Launched, General Availability, Worldwide (Standard Multi-Tenant), Dynamics 365 Customer Service, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
As of today, whenever the user wants to enable email notifications the policy tips also need to be enabled and vice versa, but with this decoupling the admin can configure the following: 1) None of policy tips or email notification 2) Only policy tips 3) Only Email Notifications 4) Both Email Notifications and Policy tips GA date: August CY2026
Type
M365 Roadmap
Services
SharePoint
Tags
Launched, General Availability, GCC, GCC High, DoD, Microsoft Purview, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects SharePoint · verify against the original
The Teams Rooms Pro Management portal now enforces Standard and Basic licenses for Teams Rooms on Windows devices, providing unified management through the portal.
What you should do
Review and ensure that all Teams Rooms on Windows devices have appropriate licenses assigned through the Pro Management portal. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
The Teams Rooms Pro Management portal now supports and enforces licenses for devices in Teams Rooms on Windows with a Standard or Basic license. IT admins get a unified device management experience through the Pro Management portal where they can manage those devices with the same functionality found in Teams admin center for that license type. GA date: May CY2025
Type
M365 Roadmap
Services
Teams, Teams Rooms
Tags
Launched, General Availability, Worldwide (Standard Multi-Tenant), GCC, GCC High, Microsoft Teams, Teams and Surface Devices
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Teams, Teams Rooms · verify against the original
Microsoft Copilot in Dynamics 365 Sales Agent enables admins to configure a semantic model that helps interpret CRM data, improving question answering capabilities. Admins can enable and configure this in Power Apps Maker Portal.
What you should do
Review and configure the semantic model in Power Apps Maker Portal to enhance Sales Agent's CRM data interpretation capabilities. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Semantic model helps Sales Agent understand the structure and meaning of an organization’s CRM data. It creates a connected representation of CRM metadata, including tables or objects, fields, descriptions, data types, relationships, views, pick-list values, and glossary terms. Sales Agent can retrieve this context when responding to questions, improving its ability to interpret business language and answer complex questions that span related CRM records. Dynamics 365 admins can enable and turn on semantic model in Power Apps Maker Portal and configure the data coverage and signals that Sales …
Type
M365 Roadmap
Services
Teams
Tags
In development, General Availability, Preview, Worldwide (Standard Multi-Tenant), Microsoft Copilot (Microsoft 365), Desktop, Mobile, Teams and Surface Devices, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
Dynamics 365 Commerce introduces a new skill in Copilot Cowork that allows users to create, update, translate, and check receipt formats using natural language. This feature is available to authorized users and requires a Commerce administrator to ensure proper setup.
What you should do
Ensure that authorized users have access to the new skill and that the Commerce administrator configures the necessary settings in Dynamics 365 Commerce headquarters. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Use natural language in Copilot Cowork to create, update, translate, and check Commerce receipt layouts using existing formats in headquarters. The Commerce receipt format designer skill lets authorized users work with receipt layouts through natural-language requests in Copilot Cowork, using receipt configuration in Dynamics 365 Commerce headquarters. It applies to receipt formats used by Store Commerce point of sale (POS). Users can: Create and adapt formats: Start from an existing format in the modern Receipt designer representation, create a new format, or request changes to an existing ta…
Type
M365 Roadmap
Tags
In development, General Availability, Preview, Worldwide (Standard Multi-Tenant), Dynamics 365 Commerce, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
A new Pricing tab appears on the contract and quote forms, replacing the Project Price List tab, and displays a consolidated view of prices. Admins should review customizations or automation built against the existing tab before adoption.
What you should do
Review and update any customizations or automation built against the Project Price List tab before the feature is enabled. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
A new Pricing tab appears on the contract (and later the quote) and becomes the default pricing surface, replacing the Project Price List tab. Instead of listing only the price lists apply, it displays a consolidated grid of the prices that actually default for each pricing-dimension combination and date. You switch between price types, labor/role, category, and material, with a view picker, and role-price markups appear within the role view. A Date filter defaults to today and updates the grid to reflect date-effective overrides, and a Date effectivity column shows the date range each price i…
Type
M365 Roadmap
Services
Microsoft 365 Apps
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Dynamics 365 Project Operations, Web
AI analysis
Low priority · generated by qwen2.5:7b · verify against the original
Dynamics 365 Project Operations will notify users when approval sets finish processing, showing success or failure details in-app. Admins can enable this feature by adding approvals to the existing notification settings list.
What you should do
Review and update the 'Select jobs for notification' list to include the necessary approvals for in-app notifications. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
When an approval set finishes processing, the person who started it receives an in-app notification built on the existing long-running-process (No More Wait) framework, and they see only notifications for the operations they triggered. On success, a brief pop-up reports that the approval set completed, shows the approval set name, and provides a deep link to the record, and the notification stays in the notifications pane until you clear it. When one or more approvals in the set fail, the notification reports that the set completed with failures, shows the failure reason, and links directly to…
Type
M365 Roadmap
Services
Microsoft 365 Apps
Tags
Launched, General Availability, Worldwide (Standard Multi-Tenant), Dynamics 365 Project Operations, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
Dynamics 365 Project Operations will extend date-effective price overrides to expense category and material prices, allowing administrators to manage all three price types in one place. This feature is expected to be generally available in March 2027.
What you should do
Review any plug-ins or default pricing logic for category and material before adopting the new feature. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Project Operations price lists support three price types — role, expense category, and product/material — but only role prices currently support date-effective overrides. This feature extends date-effective price overrides to expense category and material prices, so you can schedule a future or time-bound price change for a category or material the same way you do for a role, without creating a separate, context-specific price list. The system honors the override when it prices a transaction, so the effective price reflects the override in force on the transaction date. The feature also aligns…
Type
M365 Roadmap
Services
Microsoft 365 Apps
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Dynamics 365 Project Operations, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
Microsoft Edge will simplify its energy saver feature, enabling it by default on low battery and when unplugged. Administrators can manage this via the BatterySaverModeAvailability policy.
What you should do
Review and configure the BatterySaverModeAvailability policy to align with your organization's energy-saving requirements. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Energy saver, formerly known as efficiency mode, will have new defaults and different setting options. Edge will now support and recommend users to use the BatterySaverModeAvailability policy to manage the energy saver feature. The energy saver feature has been simplified to become enabled under two conditions: on low battery or when unplugged. The default will be for energy saver to be enabled on low battery. Energy saver will now have one mode. Users set to Balanced savings will be mapped to have energy saver enabled on low battery. Users set to Maximum savings will be mapped to have energy …
Type
M365 Roadmap
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Edge, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
This feature strengthens assignment governance by limiting the resources displayed in the Assigned to column to members of the current project team. Project managers can assign tasks only to resources who have already been added to the project, instead of selecting from the organization’s complete resource list. If a resource isn’t part of the project team, the resource must first be added to the team before being assigned a task. This controlled workflow keeps task assignments aligned with the project’s defined staffing model and prevents resources from being assigned outside the established …
Type
M365 Roadmap
Services
Microsoft 365 Apps
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), GCC, Dynamics 365 Project Operations, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original