Defender for Identity unified sensors (V3.x) will offer an opt-in feature from mid-Nov 2025 to automatically configure Windows event-auditing settings, simplifying deployment and ensuring consistent policies. Admins must enable this feature manually; it applies to all sensors and addresses specif...

Two new Microsoft-designed dark themes (Dark Teal, Dark Blue) will be available for SharePoint sites starting mid-December 2025. They enhance visual experience, support accessibility, and can be applied via site settings without affecting existing themes or functionality. No admin action is neede...

The HideFromAddressListEnabled attribute will now sync across tenants via Entra Cross Tenant Sync, ensuring consistent Global Address List visibility. The update rolls out late November to mid-December 2025 automatically, requiring no admin action and not affecting mail flow or sign-in.

Threat actor attribution will be removed from Microsoft Defender for Endpoint alert pages on January 12, 2026, and moved to the Incident page and Threat Intelligence section. This change improves alert clarity without affecting detection or security. No admin action is needed, but update workflow...

Starting January 1, 2026, Microsoft Learning Zone will be enabled by default for all Education tenants, allowing educators with Copilot+ PC devices to create AI-powered interactive lessons. IT admins can opt out anytime. The app supports lesson creation, preview, assignment, and sharing.

Microsoft 365 Copilot users will see a new "Prepare" button on the Up Next card up to 5 minutes before meetings, replacing the "Join" button. This enables quick access to Copilot’s meeting prep tools. Rollout starts December 2025, requires no admin action, and is enabled by default for eligible u...

Microsoft Purview Data Security Investigations will gain AI analysis enhancements, including improved investigative context, vector search, content categorization, and a new natural language AI-powered search (preview). Public preview starts December 2025; general availability by March 2026. No a...

Microsoft Defender for Identity introduces a new RPC Configuration Health Alert for v3.x sensors, rolling out December 2025. It monitors RPC settings, improves detection accuracy, and enables the Unified Sensor RPC Audit tag for enhanced security visibility and auditing via Device Inventory and A...

The Publish reports feature in Microsoft Viva Insights is generally available from December 2025, allowing analysts to share embedded Power BI reports or custom links with their organization. Insight admins control publishing permissions, and recipients get email notifications and see reports in ...

New features for Copilot Notebooks in M365 Copilot apps and OneNote will enhance navigation, personalization, and AI capabilities for Frontier Public users with licenses. Rollout starts mid-November 2025, with features on by default. No admin action needed; prepare helpdesk and update documentati...

Microsoft Defender for Identity classic alerts will transition to the XDR detection platform starting mid-December 2025, improving detection accuracy. Admins must update workflows, use new Detector IDs, and reconfigure alert exclusions with XDR Alert Tuning rules. The rollout completes by early J...

We are announcing the ability to enable fully autonomous, real-time, multichannel customer