Reminder: Microsoft‑managed CA policy will be enforced soon — Require risk remediation for high‑risk users
Risk remediation policy activates automatically
CA-Policy für Risikobekämpfung wird automatisch aktiv
Microsoft 365 — Microsoft 365 changes
146 Microsoft 365 Message Center announcements and curated “What’s new” posts for Microsoft 365, newest first. Services covered include Microsoft 365 suite, Microsoft Entra, Microsoft Defender XDR, Microsoft Intune, Microsoft Purview, Microsoft Copilot (Microsoft 365), SharePoint Online, Microsoft Teams. Each entry links to the change page with an AI summary (English/German), the rollout dates and the full Microsoft text.
Microsoft Purview | Information Protection: Sensitivity labels for Microsoft Entra security groups
Security groups now support Purview labels
Sensitivitätslabels jetzt auch für Entra Sicherheitsgruppen
Microsoft Defender for Identity: Automatic activation and Windows auditing for eligible licensed organizations
Automated Defender for Identity deployment for qualified organizations
Automatische Aktivierung von Defender for Identity für berechtigte Kunden
Reminder: Microsoft‑managed CA policy will be enforced soon — Require risk remediation for high‑risk users
Conditional access policy for risk mitigation now enforced
Microsoft-gemanagte CA-Policy für Risikobekämpfung aktiviert
Reminder: Microsoft‑managed CA policy will be enforced soon — Require risk remediation for high‑risk users
CA policy enforces user self-remediation for high-risk accounts
CA-Politik erzwingt Selbstremediation für hochrisikobenutzer
Reminder: Microsoft‑managed CA policy will be enforced soon — Require risk remediation for high‑risk users
Conditional access policy for risk remediation activated
CA-Policy für Risikoremediierung aktiviert
Reminder: Microsoft‑managed CA policy will be enforced soon — Require risk remediation for high‑risk users
Conditional access policy for risk remediation activated
CA-Policy für Risikoremediierung aktiviert
Reminder: Microsoft‑managed CA policy will be enforced soon — Require risk remediation for high‑risk users
Microsoft-managed CA policy for high-risk users is activating
Microsoft-gemanagte CA-Policy fuer Hochrisikobenutzer wird aktiviert
Action may be required: Review who can create agents in Microsoft Entra
Default users can create agent blueprints unless explicitly prevented by admin.
Standardbenutzer können Agenten-Blueprints erstellen, es sei denn, ein Admin deaktiviert dies.
Microsoft Entra: Changes to AgentIdentity.CreateAsManager permission for agent identities
Automatic AgentIdentity.CreateAsManager permission removed for blueprints.
Automatische CreateAsManager-Berechtigung für Agenten-Blueprints entfällt.
Microsoft Agent 365: Expanded access to Microsoft agent usage and activity insights in Microsoft 365 admin center
Observability licensing lifted for Microsoft agent platforms
Agent 365-Lizenz für Observability-Daten entfällt bei Microsoft-Agenten
Microsoft Intune: Week of October 12, 2026
Intune suite rename and remote help update
Intune-Suite-Umbenennung und Remote Help-Update
Microsoft Defender Vulnerability Management: Private preview for selected developer package vulnerability coverage
Expanded developer package vulnerability scanning now available for Windows devices.
Schwachstellenabdeckung für Entwicklungspakete auf Windows-Geräten erweitert.
Microsoft 365: Targeted Release retirement
Targeted Release replaced by three release models and phased out in 2027.
Targeted Release wird durch drei neue Freigabemodelle ersetzt und 2027 deaktiviert.
Microsoft 365 Backup: Activity Logs
Activity logging added to Microsoft 365 Backup operations
Aktivitätsprotokolle für Backup-Vorgänge in Microsoft 365 Backup
Microsoft Entra ID: Support for existing MemberOf rule operator configurations extended through March 31, 2027
MemberOf support extended through 2027 (Governance only)
MemberOf-Support bis 2027 verlängert (Governance-Kunden)
Microsoft Entra ID: Final reminder to replace MemberOf rule operator configurations by November 3, 2026
MemberOf rule operator retirement affects Microsoft Entra ID
MemberOf-Regeloperator wird in Microsoft Entra ID eingestellt
Action required: Update Microsoft Intune assignments targeting memberOf dynamic groups before November 2026
Intune memberOf dynamic groups deprecated November 2026
Microsoft Intune memberOf-Dynamik wird November 2026 veraltet
Microsoft Intune: Week of October 5, 2026
Intune security baseline for Windows 11, 26H2 available
Intune-Sicherheitsbaseline f黵 Windows 11, 26H2 verf黦bar
Action required: Update Teams devices to a minimum app version ahead of the retirement of Exchange Web Services (EWS)
Teams devices below 2026 min version lose calendar features
Teams-Geräte unter Mindestversion verlieren ab 2026 Kalenderfunktionen
Prepare for specific Azure VM series and Azure Storage service price updates in seven Azure regions globally
Azure VM and storage pricing updates apply to 7 regions with 8-17% increases
Azure-VMs und Storage-Dienste in 7 Regionen erhalten Preissteigerungen von 8-17%
Microsoft Entra App Gallery: Self-service onboarding for new applications
Self-service application validation added for App Gallery
Selbstbedienungsvalidierung für App-Gallery-Einreichungen hinzugefügt
Microsoft Defender for Identity auto-activation and auto-auditing automatic enablement
Automatic security configuration for Defender for Identity Sensor v3.x
Automatische Sicherheitskonfiguration für Defender for Identity Sensor v3.x
Microsoft Defender for Cloud Apps: Support for enabling disabled File policies is ending
Cloud Apps file policy management capabilities restricted
File-Policy-Verwaltung in Defender for Cloud Apps wird eingeschränkt
Microsoft Defender XDR: Detection source support in alert tuning rules
Alert tuning rules now filter by individual detection sources
Alert-Tuning-Rules filtern nun nach individuellen Detection-Sources
Microsoft Intune: Week of September 28, 2026 (Service release 2609)
Intune update: Cloud PKI and accelerated apps for GCC High
Intune: Cloud PKI und beschleunigte Apps für GCC High
Microsoft Defender for Cloud Apps: Permission changes for select App Governance Entra roles
App Governance permissions revised for Entra role configurations
App-Governance-Berechtigungen für Entra-Rollen werden aktualisiert
Deprecation of Citrix mVPN Support in Microsoft Edge for Android
Citrix mVPN Android Edge integration being deprecated
Citrix mVPN-Integration in Android Edge wird eingestellt
Security Copilot is now included as part of your Microsoft 365 E5/E7 plan
Security Copilot now included in E5/E7 by default
Security Copilot ist jetzt Standard in E5/E7-Plänen
Microsoft Defender for Office 365: Teams user reporting enabled by default
Teams user reporting now enabled by default in Defender
Teams-Benutzerberichte werden standardmäßig in Defender aktiviert
New “Include all apps” toggle for apps in Intune Company Portal
Apps visibility control limits default view
Neuer Apps-Schalter begrenzt Standard-Ansicht
Retirement of Viva Insights (personal insights) and Viva Learning usage reports
Two reports retired, analytics remains
Zwei Berichte entfernt, Daten bleiben in Apps
Case Management in Microsoft Defender
Unified case platform replaces incident-based workflows in Defender
Native Case Management-Plattform ersetzt Incident-basierte Workflows in Defender
Microsoft Agent 365: Simplified Agent 365 CLI setup experience
Agent 365 CLI: Enterprise app now Microsoft-managed
Agent 365 CLI: Enterprise-Anwendung nun von Microsoft verwaltet
Microsoft Defender for Cloud Apps: Retirement of EWS detections in App Governance
EWS-dependent security detections in App Governance deprecated
EWS-basierte Sicherheitserkennungen in App Governance werden entfernt
Plan for Change: Web based device enrollment will become default method for iOS/iPadOS device enrollment
iOS/iPadOS device enrollment defaults to web-based method
Default-Geräteeinrichtung für iOS/iPadOS wechselt auf webbasierte Methode
Microsoft Intune: Week of September 21, 2026
Phased deployment planning now available for Intune
Deployment-Pläne ermöglichen gestufte App-Publikationen in Intune
Microsoft Entra ID: Follow-up on SMS first-factor sign-in retirement and upcoming changes
Entra ID workforce tenants lose SMS first-factor authentication support
SMS-Erstfaktor-Authentifizierung in Entra ID wird für Arbeitskräfte-Tenants deaktiviert
Intune: Windows Health Attestation Migration to Microsoft Azure Attestation
Health attestation migrating to Azure
Gesundheitsattestation migriert zu Azure Attestation
Plan for Change: Intune migration for Windows Health Attestation to Microsoft Azure Attestation for Windows 11 devices
Intune migrates Windows health attestation to Azure attestation
Intune migriert von DHA auf Azure Attestation fr Windows-Gesundheitsattestation
Microsoft 365 Usage Reporting Updates (Microsoft Browser and Visio)
Usage reporting accuracy enhanced for browser and Visio
Nutzungsberichte mit präziseren Metriken aktualisiert
Microsoft Intune: Week of September 14, 2026
Intune: Client-driven Windows device compliance checks
Intune: Clientgesteuerte Compliance-Prüfung für Windows-Geräte
(Updated) Action may be required: New setting controls where your Microsoft 365 data is stored
Data storage location setting manages EU Data Boundary placement
Neue Einstellung steuert Daten-Speicherort innerhalb EU Data Boundary
New Microsoft 365 data residency control
Default-enabled data residency policy with EU boundary enforcement
Standardaktiver Datenresidenz-Parameter mit EU-Boundary-Garantie
Microsoft Graph: User.ReadBasic.All will no longer allow reading user app role assignments and license details
User.ReadBasic.All scope reduced
User.ReadBasic.All verliert spezifische Datenzugriffe
Plan for Change: Removal of legacy Apple MDM software updates
Apple MDM updates replaced by DDM implementation
Legacy MDM-Updatefunktionen durch DDM ersetzt
Data Privacy: Microsoft Online Services Subprocessor Disclosure
Subprocessor transparency requires admin-verified access
Subprocessor-Disclosure erfordert spezifischen Admin-Zugriff
Microsoft Entra: Optimized passkey registration campaign experience
Dynamic passkey profiles trigger automated registration prompts
Passkey-Registrierung wird durch dynamische Profilkriterien gesteuert
Microsoft Intune: Week of September 7, 2026
Intune rebranded, Remote Help updated with license changes
Intunename geändert, neue RemoteHelp-Version mit Lizenzaktualisierung
Deprecation for Manifest V2 (MV2) browser extensions support in Microsoft Edge
MV2 browser extensions deprecated; mandatory migration to stricter MV3 security model
MV2-Browsererweiterungen veraltet; zwingende Migration auf strengere MV3-Sicherheitsregeln