Microsoft Teams introduces app-centric management, allowing admins to control who can install Teams apps by setting default values and permissions for new and existing apps.
What you should do
Review and configure app permissions in the Teams Admin Center to ensure compliance with organizational policies. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
App centric management introduces new admin settings to control who in the tenant can install Teams apps. First, admins can set a default value for new apps that are published to Teams app store. Second, admins can edit the availability of an app to “All users can install,” “Specific users and groups can install,” or “No user can install.” This feature evolves the existing app permission policies and provides admins with the ability to manage access to the app individually. The app permission policies for existing customers are migrated to maintain existing app availability in the tenant. GA d…
Type
M365 Roadmap
Services
Teams
Tags
Rolling out, General Availability, GCC High, Microsoft Teams, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office, Teams · verify against the original
Microsoft Teams introduces app-centric management, allowing admins to control who can install specific apps, with a default setting for new apps and options to restrict or allow app access for users and groups.
What you should do
Review and configure app permissions in the Teams Admin Center to align with your organization's policies. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
App centric management introduces new admin settings to control who in the tenant can install Teams apps. First, admins can set a default value for new apps that are published to Teams app store. Second, admins can edit the availability of an app to “All users can install,” “Specific users and groups can install,” or “No user can install.” This feature evolves the existing app permission policies and provides admins with the ability to manage access to the app individually. The app permission policies for existing customers are migrated to maintain existing app availability in the tenant. GA d…
Type
M365 Roadmap
Services
Teams
Tags
Rolling out, General Availability, DoD, Microsoft Teams, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office, Teams · verify against the original
Administrators can configure retention for Microsoft 365 Copilot memory to preserve historical versions, aiding in security, compliance, and investigations.
What you should do
Review and configure retention policies for Copilot memory to ensure compliance and data integrity. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Configure retention for Microsoft 365 Copilot memory to help preserve historical versions of memory items for security, compliance, and investigation scenarios. Copilot memory includes saved memories and details inferred from chat history that enable more personalized and context-aware Copilot experiences. Copilot memory items are stored in a hidden folder in the user’s Exchange mailbox. This capability will enable retention and versioning support for inactive memory items so that administrators can maintain visibility into memory changes while active memory continues to be managed by the Copi…
Type
M365 Roadmap
Tags
Launched, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Purview, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Administrators can now customize the blocked file extensions for Weaponizable File Protection in Microsoft Teams, allowing for more tailored security policies.
What you should do
Review and configure the blocked file extensions to match your organization's security policies. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Microsoft Teams is expanding admin controls for Weaponizable File Protection. Administrators will be able to customize which file types are blocked in Teams to align with their organization's security requirements or continue using the Microsoft-recommended default list. This added flexibility helps organizations tailor file protection policies while maintaining a secure collaboration environment. GA date: December CY2026
Type
M365 Roadmap
Services
Teams
Tags
In development, General Availability, Targeted Release, Worldwide (Standard Multi-Tenant), Microsoft Teams, Android, Desktop, iOS, Mac, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Teams · verify against the original
Review and respond to access requests inside the Share dialog. When people request access to a file, folder, or library, anyone who can share it will see pending requests right in the Share dialog for that item. From there, they can choose the level of access to grant, approve or decline requests individually or in bulk, and message the requester before deciding. Requests for more access, such as edit rights for someone who can already view, appear alongside new requests, making it faster to grant the right access and keep work moving. GA date: January CY2027
Type
M365 Roadmap
Services
OneDrive, SharePoint
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), GCC, GCC High, DoD, OneDrive, SharePoint, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office, OneDrive · verify against the original
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and remediate it. The post Inside a malicious Claude Code-branded extension and its persistent SSH backdoor appeared first on Microsoft Security Blog.
Type
Announcements
Tags
Microsoft Security Blog, Frontier AI models, Supply chain attack
AI analysis
High priority · generated by qwen2.5:7b · possibly affects Security · verify against the original
Microsoft Edge will introduce an opt-in experience that allows users on managed devices to choose whether Edge launches automatically when Windows starts. Administrators can also manage this behavior through the LaunchEdgeOnWindowsStartupEnabled policy with opt-in, opt-out, and user-choice configurations. GA date: November CY2026
Type
M365 Roadmap
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Edge, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Windows, Edge · verify against the original
Microsoft Copilot will now support write, update, and delete actions in third-party services, allowing users to perform these actions directly from Copilot Chat. Admins can manage and disable connectors in the Microsoft 365 admin center.
What you should do
Review and configure Copilot connectors in the Microsoft 365 admin center to ensure compliance with organizational policies. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Federated Copilot connectors (MCP type) currently let Microsoft 365 Copilot read data from third-party services in real time. With this update, the connector tools that create, update, and delete content in those services are unblocked in Copilot Chat, so users can complete work without leaving Copilot. Copilot acts with the user's own account and permissions at the third-party service, and every create, update, or delete action requires the user's explicit confirmation before it runs. Admins can view each connector's read and write/delete tools in the Microsoft 365 admin center and disable co…
Type
M365 Roadmap
Tags
Launched, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Copilot (Microsoft 365), Desktop, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Microsoft identifies security vulnerabilities in Teams that allow for remote access and malicious execution, as well as abuse of Certificate Services through authentication relay and Kerberos.
What you should do
Review and update security configurations for Teams and related services to mitigate potential risks. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through authentication relay and Kerberos. The post From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths appeared first on Microsoft Security Blog.
Type
Announcements
Tags
Microsoft Security Blog
AI analysis
High priority · generated by qwen2.5:7b · possibly affects Teams · verify against the original
Ask Copilot about an image in Edge enables users to instantly analyze images from the web by sending them directly to Copilot from the Edge context menu, making it easy to ask questions, gain insights, and understand visual content without leaving their browsing experience. Admins can control availability to this feature using the EdgeEntraCopilotPageContext and Microsoft365CopilotChatIconEnabled policies. GA date: January CY2027
Type
M365 Roadmap
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Edge, Microsoft Copilot (Microsoft 365), Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Microsoft Teams Pro Management portal now includes utilization analytics for bookable desks, similar to meeting rooms. Admins need to associate devices and license desks with Shared Space licenses to enable analytics.
What you should do
Ensure bookable desks are associated with peripheral devices and licensed with appropriate Teams Shared Space licenses. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Teams admins can access utilization analytics for Teams bookable desks on Teams Pro Management portal, similar to analytics provided for meeting rooms on the portal today. For utilization analytics to be enabled, a desk needs to have one or more peripheral device associated, and the desk needs to be licensed with Teams Shared Space license or Teams Shared Space - Single Space license. GA date: December CY2026
Type
M365 Roadmap
Services
Teams
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Teams, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Teams · verify against the original
Legacy Teams retention policies that currently apply to Copilot interactions will be converted to Teams-only policies, no longer governing Copilot workloads.
What you should do
Review and adjust existing retention policies to ensure they align with the new Teams-only scope. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Some existing retention policies scoped to Microsoft Teams may currently also apply to Microsoft 365 Copilot interactions. As part of an upcoming change, these legacy Teams retention policies will be converted to—and treated as—Teams-only policies. They will no longer implicitly govern Copilot workloads. GA date: January CY2027
Type
M365 Roadmap
Services
Teams
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Purview, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Dynamics 365 Field Service allows administrators to control whether booking completion automatically updates the booking End Time, helping maintain accurate duration records.
What you should do
Review and configure the organization-level Set End Time on booked resource completion setting in Field Service settings to ensure accurate booking duration records. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Business value Technicians do not always record booking completion at the moment work ends. They may update the booking later because of connectivity, customer-facing responsibilities, or end-of-day administration. When the later administrative action replaces the booking End Time, the recorded duration can extend beyond the work that was actually performed and affect downstream journals, time entries, labor costs, actuals, and work-order completion reporting. Field Service administrators can choose whether completion by the booked resource automatically changes the booking End Time. Organizat…
Type
M365 Roadmap
Tags
In development, General Availability, Preview, Worldwide (Standard Multi-Tenant), Dynamics 365 Field Service, Android, Desktop, iOS, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
OneDrive is adding administrative controls for the Photos experience on Windows. Organizations can manage whether users sign in with personal Microsoft accounts. These controls help IT teams align OneDrive Photos with their access, data governance, and device-management requirements. GA date: August CY2026
Type
M365 Roadmap
Services
OneDrive
Tags
Rolling out, General Availability, Worldwide (Standard Multi-Tenant), OneDrive, Desktop
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Windows, OneDrive · verify against the original
Outlook mobile apps for iOS and Android will support Microsoft Purview DLP wait-on-send policies, allowing administrators to control when emails are sent after DLP evaluation.
What you should do
Review and configure DLP policies for mobile users to ensure compliance and manage user experience. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Outlook for iOS and Android will support Microsoft Purview Data Loss Prevention (DLP) wait-on-send policies. Organizations can require a DLP evaluation before an email is sent and configure how long users must wait for policy evaluation to complete. This helps ensure sensitive information is inspected against organizational policies before messages leave the organization while providing administrators with flexible control over the user experience. GA date: November CY2026
Type
M365 Roadmap
Services
Microsoft 365 Apps
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), GCC, GCC High, DoD, Outlook, Android, iOS
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Outlook for Mac will support Microsoft Purview DLP wait-on-send policies, allowing administrators to control the user experience and ensure sensitive information is inspected before emails are sent.
What you should do
Review and configure DLP policies for Outlook for Mac to ensure compliance and user experience. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Outlook for Mac will support Microsoft Purview Data Loss Prevention (DLP) wait-on-send policies. Organizations can require a DLP evaluation before an email is sent and configure how long users must wait for policy evaluation to complete. This helps ensure sensitive information is inspected against organizational policies before messages leave the organization while providing administrators with flexible control over the user experience. GA date: November CY2026
Type
M365 Roadmap
Services
Microsoft 365 Apps
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), GCC, GCC High, DoD, Outlook, Mac
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Microsoft Edge will allow users to translate PDF documents into their preferred language, with admin control via the TranslateEnabled policy. Generally available in January 2027.
What you should do
Review and configure the TranslateEnabled policy as needed. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Users will be able to translate full PDF documents directly within the native PDF viewer in Microsoft Edge. The translated document opens in a new tab, making it easier to access content in their preferred language. Admins can control availability to this feature using the TranslateEnabled policy. GA date: January CY2027
Type
M365 Roadmap
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Edge, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
This enables users to export Identifiable row-level Copilot metrics from the Copilot Dashboard for reporting and deeper analysis. This capability can be tuned On by Admins in a tenant. GA date: November CY2026
Type
M365 Roadmap
Tags
In development, General Availability, Targeted Release, Worldwide (Standard Multi-Tenant), Microsoft Viva, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Admins can now choose whether the organizer name will show up in the Calendar View on Teams panels. Admins can toggle the "Show organizer name" setting ON or OFF in the Pro Management portal or on the panel device. Based on the selection, the organizer name will or will not be shown in the calendar view on the panel device. Available with Teams Rooms Pro and Teams Shared Space licenses. GA date: October CY2026
Type
M365 Roadmap
Services
Teams, Teams Rooms
Tags
Rolling out, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Teams, Android, Teams and Surface Devices
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Teams, Teams Rooms · verify against the original
Azure DevOps Services and Server are not affected by the PHP vulnerabilities, but pipelines, containers, and deployed applications may require separate patching.
What you should do
Review and update the security settings for pipelines, containers, and deployed applications to ensure they are patched against the PHP vulnerabilities. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
On October 21, 2026, PHP disclosed two critical vulnerabilities that can allow remote code execution. Neither Azure DevOps Services, our cloud-hosted offering, nor Azure DevOps Server, our on-premises product, uses PHP to handle customer requests. PHP runtimes used by pipelines, containers, and deployed applications have their own patching requirements. Deployment scope: cloud and on-premises Azure […] The post PHP2Shell and Azure DevOps: what to check appeared first on Azure DevOps Blog.
Out-of-band security updates for .NET address the Brotli decoder vulnerability and tarball ownership vulnerability. The post .NET October 2026 Out-of-Band Security Updates appeared first on .NET Blog.
Row summaries are now available in US Government clouds, allowing users to access AI-generated insights in model-driven apps. Admins and makers need to enable and configure this feature for users.
What you should do
Admins and makers should enable and configure row summaries for users in model-driven apps. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Row summaries are expanding to supported US Government clouds, giving users in regulated environments access to AI-generated insights that help them understand model-driven app records at a glance. This release brings the row summary experience available to commercial customers to supported government environments while meeting their applicable compliance and data-boundary requirements. Admins and makers enable and configure row summaries for users in their model-driven apps. Availability Field Value Release Channel Weekly Version 2611.1 Applies to Model-driven apps Feature Scope Users (enable…
Type
M365 Roadmap
Tags
In development, General Availability, GCC, GCC High, Power Apps, Web
AI analysis
Low priority · generated by qwen2.5:7b · verify against the original
Overflow for direct inward dialing leverages conversation orchestration to detect key direct inward dialing-related events—such as the representative being busy, offline, rejecting the call, or failing to answer—and apply administrator-defined fallback actions. Administrators configure natural language playbooks using conversation orchestration at the global or inbound profile level to specify the action to run when a direct inward dialed call can't be attended to or completed. The actions include offering a direct callback to the caller, sending them to voicemail, transferring the call to ano…
Type
M365 Roadmap
Tags
In development, General Availability, Preview, Worldwide (Standard Multi-Tenant), Microsoft Copilot (Microsoft 365), Dynamics 365 Contact Center, Web
AI analysis
Low priority · generated by qwen2.5:7b · verify against the original
Admins can now configure the strictness level of governance policies in Dynamics 365 Customer Service, allowing more lenient or rigorous enforcement of email compliance rules.
What you should do
Review and adjust the strictness levels of governance policies as needed to align with compliance requirements and risk tolerance. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
This feature introduces policy strictness control, enabling organizations to define how rigorously each governance policy evaluates and flags potential violations in outgoing emails. Governance policies serve as real-time guardrails, ensuring communications adhere to business, legal, and compliance standards before they are sent to customers. With this enhancement, supervisors can configure the strictness level for each policy. Lower strictness settings apply more lenient enforcement, reducing false positives and allowing borderline scenarios to pass, while higher settings perform more rigorou…
Type
M365 Roadmap
Tags
Launched, General Availability, Worldwide (Standard Multi-Tenant), Dynamics 365 Customer Service, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
As of today, whenever the user wants to enable email notifications the policy tips also need to be enabled and vice versa, but with this decoupling the admin can configure the following: 1) None of policy tips or email notification 2) Only policy tips 3) Only Email Notifications 4) Both Email Notifications and Policy tips GA date: August CY2026
Type
M365 Roadmap
Services
SharePoint
Tags
Launched, General Availability, GCC, GCC High, DoD, Microsoft Purview, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects SharePoint · verify against the original