We are announcing the end of support for selected AI models on the Standard and GitHub Copilot harnesses in Copilot Studio. Beginning on each models' applicable migration date, the selected models will no longer be available in Copilot Studio, and agents will automatically migrate to a replacement model. How does this affect me? Agents configured with retiring models will be automatically migrated to a supported replacement model. The planned replacement model and migration date depends on both...
Type
Message Center
Tags
MC1506318, Microsoft Copilot (Power Platform)
AI analysis
Low priority · generated by qwen2.5:7b · verify against the original
Microsoft is replacing Anthropic and Grok models with newer OpenAI GPT models in Copilot Studio, Power Automate, and Power Apps, with no change to tier pricing.
What you should do
Review existing prompts to ensure they continue to function as expected after the model update. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
We are updating the models available in prompts in Copilot Studio, Power Automate and Power Apps to bring newer OpenAI GPT models to the Basic, Standard, and Premium tiers, with no change to tier pricing. As part of this update, we’re retiring the Anthropic and Grok models and earlier GPT models listed below. Existing prompts using these models will automatically move to the replacement for their current tier, providing access to newer models while preserving your tier selection. This update wil...
Type
Message Center
Tags
MC1536101, Power Platform
AI analysis
Low priority · generated by qwen2.5:7b · verify against the original
Microsoft Teams introduces app-centric management, allowing admins to control who can install Teams apps by setting default values and permissions for new and existing apps.
What you should do
Review and configure app permissions in the Teams Admin Center to ensure compliance with organizational policies. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
App centric management introduces new admin settings to control who in the tenant can install Teams apps. First, admins can set a default value for new apps that are published to Teams app store. Second, admins can edit the availability of an app to “All users can install,” “Specific users and groups can install,” or “No user can install.” This feature evolves the existing app permission policies and provides admins with the ability to manage access to the app individually. The app permission policies for existing customers are migrated to maintain existing app availability in the tenant. GA d…
Type
M365 Roadmap
Services
Teams
Tags
Rolling out, General Availability, GCC High, Microsoft Teams, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office, Teams · verify against the original
Microsoft Teams introduces app-centric management, allowing admins to control who can install specific apps, with a default setting for new apps and options to restrict or allow app access for users and groups.
What you should do
Review and configure app permissions in the Teams Admin Center to align with your organization's policies. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
App centric management introduces new admin settings to control who in the tenant can install Teams apps. First, admins can set a default value for new apps that are published to Teams app store. Second, admins can edit the availability of an app to “All users can install,” “Specific users and groups can install,” or “No user can install.” This feature evolves the existing app permission policies and provides admins with the ability to manage access to the app individually. The app permission policies for existing customers are migrated to maintain existing app availability in the tenant. GA d…
Type
M365 Roadmap
Services
Teams
Tags
Rolling out, General Availability, DoD, Microsoft Teams, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office, Teams · verify against the original
Administrators can now customize the blocked file extensions for Weaponizable File Protection in Microsoft Teams, allowing for more tailored security policies.
What you should do
Review and configure the blocked file extensions to match your organization's security policies. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Microsoft Teams is expanding admin controls for Weaponizable File Protection. Administrators will be able to customize which file types are blocked in Teams to align with their organization's security requirements or continue using the Microsoft-recommended default list. This added flexibility helps organizations tailor file protection policies while maintaining a secure collaboration environment. GA date: December CY2026
Type
M365 Roadmap
Services
Teams
Tags
In development, General Availability, Targeted Release, Worldwide (Standard Multi-Tenant), Microsoft Teams, Android, Desktop, iOS, Mac, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Teams · verify against the original
Review and respond to access requests inside the Share dialog. When people request access to a file, folder, or library, anyone who can share it will see pending requests right in the Share dialog for that item. From there, they can choose the level of access to grant, approve or decline requests individually or in bulk, and message the requester before deciding. Requests for more access, such as edit rights for someone who can already view, appear alongside new requests, making it faster to grant the right access and keep work moving. GA date: January CY2027
Type
M365 Roadmap
Services
OneDrive, SharePoint
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), GCC, GCC High, DoD, OneDrive, SharePoint, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office, OneDrive · verify against the original
Microsoft 365 Copilot adds new routing and overflow capabilities to Dynamics 365 Contact Center, requiring new users to enable and configure playbooks.
What you should do
New users should enable and configure natural-language playbooks for Microsoft 365 Copilot in Dynamics 365 Contact Center. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Microsoft 365 Copilot enhances Dynamics 365 Contact Center with conversation orchestration, enabling dynamic priority escalation, overflow handling, preferred representative assignment, and bullseye routing. Administrators configure natural-language playbooks. Rollout begins late October 2026. Existing users need no action; new users must enable and configure playbooks.
Type
Message Center
Tags
MC1536059, Dynamics 365 Apps
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
Microsoft Teams is adding a new section in the Activity feed to highlight relevant posts from leaders and communities, requiring admins to enable Communities and Storylines.
What you should do
Enable Communities and Storylines in Microsoft Teams to ensure users can join relevant communities and follow colleagues from notifications. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Microsoft Teams is adding a "What's happening across your organization" section in the Activity feed to highlight relevant posts from leaders and communities. Rolling out worldwide from November to December 2026, it allows users to join communities and follow colleagues directly from notifications. Admins should enable Communities and Storylines.
Type
Message Center
Services
Teams
Tags
MC1536058, Microsoft Viva
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Teams · verify against the original
The user exception limit for Standard-Deferred release preferences is increasing from 100 to 10,000 users per tenant to support larger pilot groups. This change rolls out worldwide from late October to mid-November 2026, allowing more flexible audience management using Microsoft Entra ID groups. No action is required unless expanding exceptions.
Type
Message Center
Services
Entra ID
Tags
MC1536057, Microsoft 365 suite
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Entra ID · verify against the original
Microsoft Entra ID will retire SMS and voice authentication for self-service password reset (SSPR) starting February 2027, requiring organizations to prepare alternative recovery methods.
What you should do
Microsoft states: “Organizations must prepare alternative recovery methods, as SMS/voice will no longer be available for SSPR after the transition.”
Implement alternative methods for self-service password reset by February 2027. AI-suggested, not a Microsoft requirement
Why: Microsoft states this administrator action is mandatory.
Microsoft Entra ID will retire Microsoft-provided SMS and voice authentication for self-service password reset (SSPR) starting February 2027, with a 50-day transition per user group. Organizations must prepare alternative recovery methods, as SMS/voice will no longer be available for SSPR after the transition.
Type
Message Center
Services
Entra ID
Tags
MC1536049, Microsoft Entra
AI analysis
High priority · generated by qwen2.5:7b · possibly affects Entra ID · verify against the original
Microsoft Purview integrates with Palo Alto Prisma Access to extend DLP to unmanaged cloud apps, with a preview starting in mid-April 2026 and general availability in June 2027.
What you should do
Admins should activate the feature when it becomes available to protect sensitive data in unmanaged cloud apps. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Microsoft Purview now integrates with Palo Alto Prisma Access to extend data loss prevention to network traffic, enabling discovery and protection of sensitive data in unmanaged cloud apps. The feature rolls out from mid-April 2026 (preview) to June 2027 (general availability) and requires admin activation.
Type
Message Center
Tags
MC1257999, Microsoft Purview
AI analysis
Low priority · generated by qwen2.5:7b · verify against the original
What and why:Microsoft recommends adopting a risk-based approach to Windows Server patching. It helps organizations respond faster to critical vulnerabilities while minimizing operational disruption. Rather than relying on fixed patching schedules, prioritize updates based on exploit activity, system exposure, workload criticality, and business impact. Rollout schedule:This guidance is available now. Impact on your organization:Organizations managing Windows Server workloads across on-premises,...
Type
Message Center
Tags
MC1535667, Windows
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Windows · verify against the original
The Proactive control rename feature for canvas apps in Power Apps will be retired on December 11, 2026, removing Copilot suggestions for renaming controls.
What you should do
Review existing canvas apps to ensure that control names are consistent and do not rely on Copilot suggestions after December 11, 2026. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
On December 11, 2026, the Proactive control rename feature for canvas apps in Power Apps will be no longer available. How does this affect me? After December 11, 2026, makers and tenant administrators will no longer have access to Copilot (AI-powered assistant) suggestions for renaming similar controls or applying multiple suggested renames in canvas apps. Existing app control names and formulas will remain unchanged. Once this feature is retired:Copilot (AI-powered assistant) will no longer sug...
Type
Message Center
Tags
MC1532426, Power Apps
AI analysis
Low priority · generated by qwen2.5:7b · verify against the original
Deadline source
“On December 11, 2026, the Proactive control rename feature for canvas apps in Power Apps will be no longer available.”
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and remediate it. The post Inside a malicious Claude Code-branded extension and its persistent SSH backdoor appeared first on Microsoft Security Blog.
Type
Announcements
Tags
Microsoft Security Blog, Frontier AI models, Supply chain attack
AI analysis
High priority · generated by qwen2.5:7b · possibly affects Security · verify against the original
Starting March 2026, Microsoft Entra ID will generally available passkey profiles and will auto-migrate existing Passkeys (FIDO2) tenants to a default profile.
What you should do
Review and configure passkeyType settings in Entra ID to match organizational requirements. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Starting March 2026, Microsoft Entra ID will GA passkey profiles and synced passkeys for tenants with Passkeys (FIDO2) enabled. Existing tenants will be auto-migrated to a default passkey profile with configurable passkeyType. Registration campaign settings and rollout timelines vary by cloud region.
Type
Message Center
Services
Entra ID
Tags
MC1221452, Microsoft Entra
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Entra ID · verify against the original
Microsoft Teams introduces granular Conditional Access for Teams meetings, allowing admins to enforce multifactor authentication for specific meetings. This feature will be available in preview from November 2026 and will be generally available by January 2027.
What you should do
Configure authentication contexts, Conditional Access policies, and Teams meeting policies to enable granular Conditional Access for specific meetings. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Granular Conditional Access for Teams meetings lets admins enforce targeted security controls like multifactor authentication for specific meetings. Rolling out from November 2026 (preview) to January 2027 (general availability), admins must configure authentication contexts, Conditional Access policies, and Teams meeting policies to enable this feature.
Type
Message Center
Services
Entra ID, Teams
Tags
MC1532256, Microsoft Teams
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Teams · verify against the original
Microsoft Edge will introduce an opt-in experience that allows users on managed devices to choose whether Edge launches automatically when Windows starts. Administrators can also manage this behavior through the LaunchEdgeOnWindowsStartupEnabled policy with opt-in, opt-out, and user-choice configurations. GA date: November CY2026
Type
M365 Roadmap
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Edge, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Windows, Edge · verify against the original
Microsoft Copilot will now support write, update, and delete actions in third-party services, allowing users to perform these actions directly from Copilot Chat. Admins can manage and disable connectors in the Microsoft 365 admin center.
What you should do
Review and configure Copilot connectors in the Microsoft 365 admin center to ensure compliance with organizational policies. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Federated Copilot connectors (MCP type) currently let Microsoft 365 Copilot read data from third-party services in real time. With this update, the connector tools that create, update, and delete content in those services are unblocked in Copilot Chat, so users can complete work without leaving Copilot. Copilot acts with the user's own account and permissions at the third-party service, and every create, update, or delete action requires the user's explicit confirmation before it runs. Admins can view each connector's read and write/delete tools in the Microsoft 365 admin center and disable co…
Type
M365 Roadmap
Tags
Launched, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Copilot (Microsoft 365), Desktop, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Microsoft Teams is introducing new policies for AI and transcription in meetings, replacing the existing Copilot policy. Automatic migration will occur, but admins may need to adjust automation settings.
What you should do
Review and adjust any automated policies related to AI and transcription in Teams meetings. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Microsoft Teams is replacing the Copilot meeting policy with two new policies—MeetingAI and TranscriptionWithMeetingAI—for clearer control over AI features and transcription in meetings. Organizers gain granular AI management options. Rollout begins mid-November 2026, with automatic migration of existing settings; no admin action required unless using automation.
Type
Message Center
Services
Teams
Tags
MC1532253, Microsoft Teams
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Teams · verify against the original
Microsoft Purview will support DLP and auto-labeling for non-Microsoft apps like Google Workspace, Box, and Salesforce starting late December 2026, requiring Enterprise tier licensing.
What you should do
Review and create policies for non-Microsoft apps starting late December 2026. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Microsoft Purview will support Data Loss Prevention and auto-labeling for non-Microsoft apps like Google Workspace, Box, and Salesforce via Microsoft Defender for Cloud Apps connectors. Administrators can create and manage policies starting late December 2026, expanding compliance controls and requiring Enterprise tier licensing.
Type
Message Center
Services
Defender
Tags
MC1449180, Microsoft Purview
AI analysis
Medium priority · generated by qwen2.5:7b · verify against the original
On November 30, 2026, record-level copresence in model-driven apps will have reached end of support. How does this affect me? Users will no longer see who else is working on the record or have access to a presence card. This change does not affect record sharing, user pictures, or status in grids and lookups. The underlying behavior when multiple users edit the same record hasn't changed: if two users save changes to the same record, the most recent save still overwrites any previous changes. Wh...
Type
Message Center
Tags
MC1532182, Power Apps
AI analysis
Low priority · generated by qwen2.5:7b · verify against the original
Deadline source
“On November 30, 2026, record-level copresence in model-driven apps will have reached end of support.”
Microsoft Entra ID now supports using external telephony providers for SMS and voice authentication, with Microsoft-provided services ending on February 1, 2027.
What you should do
Microsoft states: “Organizations must select a provider, set up CYOT, and transition before that date.”
Choose and set up an external telephony provider by February 1, 2027. AI-suggested, not a Microsoft requirement
Why: Microsoft states this administrator action is mandatory.
Microsoft Entra ID now generally supports Choose Your Own Telephony Provider (CYOT) for SMS and voice authentication, retiring Microsoft-provided services by February 1, 2027. Organizations must select a provider, set up CYOT, and transition before that date, while Microsoft recommends phishing-resistant methods like passkeys.
Type
Message Center
Services
Entra ID
Tags
MC1519855, Microsoft Entra
AI analysis
High priority · generated by qwen2.5:7b · possibly affects Entra ID · verify against the original
Deadline source
“retiring Microsoft-provided services by February 1, 2027.”
Microsoft will retire the classic Data Security Posture Management (DSPM) and DSPM for AI experiences by late March 2027, requiring organizations using the classic versions to transition to the current DSPM.
What you should do
Review and update documentation and workflows to transition to the current DSPM if using the classic versions. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Microsoft will retire Microsoft Purview DSPM classic and DSPM for AI classic experiences by late March 2027, unifying capabilities into a single current DSPM experience. Organizations using the classic versions must transition workflows and update documentation accordingly; no action is needed if already using the current DSPM.
Type
Message Center
Tags
MC1481315, Microsoft Purview
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Security · verify against the original
Exchange Web Services (EWS) deprecation starts October 1, 2026, affecting cross-tenant Free/Busy, MailTips, and Calendar Sharing. Microsoft 365 Cross-Tenant Access Policy will replace EWS by November 2026. Organizations must migrate to avoid service disruption; migration guidance and updates are provided.
Type
Message Center
Services
Exchange Online
Tags
MC1446796, Exchange Online
AI analysis
High priority · generated by qwen2.5:7b · possibly affects Exchange Online · verify against the original
Microsoft identifies security vulnerabilities in Teams that allow for remote access and malicious execution, as well as abuse of Certificate Services through authentication relay and Kerberos.
What you should do
Review and update security configurations for Teams and related services to mitigate potential risks. AI-suggested
Why: This change may need administrator attention depending on how your environment is configured.
Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through authentication relay and Kerberos. The post From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths appeared first on Microsoft Security Blog.
Type
Announcements
Tags
Microsoft Security Blog
AI analysis
High priority · generated by qwen2.5:7b · possibly affects Teams · verify against the original