M365 Roundup, April 2023: AI Meeting Recaps Arrive and Teams DLP Gets a License Check
TL;DR
- As of May 30, 2023, Teams DLP requires a premium compliance license such as Office 365 E5 or Microsoft 365 E5, so tenants relying on it under lower SKUs need a licensing review.
- Intelligent Meeting Recap, an AI-powered recap with suggested notes, tasks, and speaker-based playback, rolls out to Teams Premium licensees between mid-May and late May 2023.
- Intune Endpoint Privilege Management reached general availability in April 2023 and now requires either a standalone add-on license or the Microsoft Intune Suite.
- Defender for Office 365 began honoring DMARC p=reject and p=quarantine policies in late April 2023, with admin controls over how policy-based rejects are applied.
- Exchange Online now supports assigning more than one Exchange Online license per user, with automatic upgrades and downgrades based on the most capable license assigned.
Two changes in April 2023 deserve a calendar entry, not just a skim. Teams DLP becomes a premium-license feature on May 30, 2023, which means any tenant using it on a lower SKU loses coverage unless someone acts. And Intune's Endpoint Privilege Management graduated from preview to general availability, picking up a price tag on the way. Around those two sit a wave of Teams meeting features, an Apple SSO milestone, and a meaningful shift in how Defender for Office 365 treats DMARC. Grouped by product, here is the full list.
Teams: AI recap for Premium licensees, plus a DLP licensing deadline
Intelligent Meeting Recap reaches Teams Premium
For users with a Teams Premium license, Intelligent Meeting Recap is an AI-powered meeting recap experience that helps users catch up, recall, and follow up on hour-long meetings in minutes through recording and transcription playback with AI assistance. It lives on the new Recap tab in the Teams calendar and Chat app, where users can browse the recording by speaker and topic and access AI-generated suggested notes, suggested tasks, and @mentions.
Rollout: mid-May 2023, expected complete by late May 2023.
Teams DLP requires premium licensing starting May 30, 2023
Starting May 30, 2023, Teams DLP is only available to tenants with premium licenses for Microsoft Security and Compliance. The qualifying licenses:
- Office 365 E5/A5/G5
- Microsoft 365 E5/A5/G5
- Microsoft 365 E5/A5/G5 Information Protection and Governance
- Microsoft 365 E5/A5/G5/F5 Compliance and F5 Security & Compliance
If a client depends on Teams DLP today, confirm their licensing before the enforcement date rather than after.
Collaborative Meeting Notes
Users will see a Notes button during meetings that opens collaborative notes in the right pane of the meeting window, with the option to open them in the browser for more room or on a second monitor. Participants can collaborate in real time, create an agenda, take notes, and add tasks. When a participant is assigned a task in the meeting, they receive an email notification and the task syncs with the Planner and To Do apps.
Rollout: late May 2023, expected complete by late June 2023.
Mark All As Read for the activity feed
Users can triage their activity feed more efficiently with the new Mark all as read option, clearing all unread activities in one click.
Rollout: early June 2023, expected complete by late June 2023.
Blocked-app requests can redirect to your own ticketing system
Some organizations block Teams apps until IT has reviewed and approved them, and the earlier app discovery update (MC350372) let users flag which blocked apps they want. April 2023 adds optional organizational settings so Teams admins can route those requests through existing processes instead:
- A customizable instructional message shown when a user finds a blocked app. The default reads "This app requires approval from your IT admin to make it available for you to add."
- An IT-provided URL that opens when users click the Request approval button, pointing to a ticketing system, user education page, or corporate policy page.
In the Teams app store, users who discover blocked apps see the custom message on the app details page and are redirected to the URL when they click Request approval. IT keeps full control over which apps are usable.
Rollout: April 2023.
Deleted and expiring teams manageable from the Teams admin center
Teams administrators can now view deleted and expiring teams, restore deleted teams, and renew expiring teams directly from the Teams admin center.
Rollout: late April 2023, expected complete by mid-May 2023.
Spatial audio in Teams meetings
Spatial audio places attendees' voices across the visual meeting stage in Gallery view when using a wired stereo headset or built-in stereo speakers. The goal is more natural conversation and easier tracking when multiple people speak at once.
Rollout: late May 2023, expected complete by mid-June 2023.
Intune: two GA milestones, one with a new price tag
The Microsoft Enterprise SSO plug-in for Apple devices is generally available
Intune's Microsoft Enterprise SSO plug-in, which provides single sign-on to iOS/iPadOS and macOS apps and websites that authenticate against Azure AD, is now generally available. Configuration details: Microsoft Enterprise SSO plug-in in Microsoft Intune (opens in new tab).
Endpoint Privilege Management goes GA, and now requires a license
With Endpoint Privilege Management, admins set policies that let standard users perform tasks normally reserved for an administrator. You configure automatic or user-confirmed workflows that elevate run-time permissions for the apps or processes you select, then assign those policies to users or devices running without administrator privileges. Once a device receives policy, EPM brokers the elevation on the user's behalf, so approved applications elevate without full admin rights. Built-in insights and reporting are included.
The catch: now that EPM is out of preview, it requires an additional license. You can buy it standalone or as part of the Microsoft Intune Suite. Details: Use Intune Suite add-on capabilities (opens in new tab).
Worth your time on this one: a video walkthrough of Endpoint Privilege Management (opens in new tab) and a helpful blog post from Joost Gelijsteen (opens in new tab).
Exchange and Defender: license stacking, DMARC enforcement, and simpler phish simulations
Concurrent Exchange Online license assignments
Tenant admins can now assign more than one Exchange Online license per Azure AD user. This brings license stacking support plus automatic feature upgrades and downgrades based on the most capable Exchange Online license pack assigned to the user. Full write-up: Introducing Support for Concurrent Exchange Online License Assignments (opens in new tab).
The previous behavior, for contrast:
Status: generally available.
Defender for Office 365 changes DMARC p=reject and p=quarantine handling
To better protect against exact-domain spoofing and improve deliverability, Microsoft is changing how DMARC p=reject and p=quarantine are handled. For enterprise customers, security administrators get a choice in how DMARC policy-based reject and quarantine apply within their organization. For the consumer service, mail that fails DMARC validation is dropped and never reaches the recipient's inbox.
If you publish DMARC records for clients, this is the month the policy you chose starts meaning what it says.
Rollout: late April 2023, expected complete by mid-May 2023.
Third-party phish simulation URLs allowed automatically
URLs in the email message body of third-party phishing simulation campaigns are now allowed automatically, based on the sending domain and sending IP configured in the advanced delivery policy. Security admins no longer need to populate the "Simulation URLs to allow" field to keep simulation links from being blocked at time of click.
Rollout: late May 2023, expected complete by late June 2023.
Video messaging arrives in Outlook Mobile
Video Unfurl and Playback turns video links into a thumbnail when reading an email that contains a video; tapping it plays the video full screen. This is coming to both iOS and Android. Android also gets Video Capture and Upload, letting users record a video inside the Outlook Mobile app and attach it to the email being composed, with OneDrive for Business handling the upload so large, long videos can be shared.
Rollout: late May 2023 (previously mid-May 2023).
Frequently asked questions
Who gets Intelligent Meeting Recap in Teams?
Only users with a Teams Premium license. The recap lives on the Recap tab in the Teams calendar and Chat app and includes recording playback by speaker and topic, AI-generated suggested notes, suggested tasks, and @mentions.
What licenses keep Teams DLP working after May 30, 2023?
Office 365 E5/A5/G5, Microsoft 365 E5/A5/G5, Microsoft 365 E5/A5/G5 Information Protection and Governance, or Microsoft 365 E5/A5/G5/F5 Compliance and F5 Security & Compliance.
Does Endpoint Privilege Management cost extra now that it is GA?
Yes. As of April 2023, EPM requires either a standalone add-on license or the Microsoft Intune Suite. During preview it was available without an additional license.
April's changes, checked against your baseline
Every month Microsoft moves a setting you already signed off on. CloudCapsule rechecks 250+ controls per tenant in about 60 seconds, so a licensing change like Teams DLP never turns into silent coverage loss.
Run a free scan
Written by
Nick Ross
CEO · Microsoft MVP · Founder, T-Minus 365
Nick is not just a CEO, he's a respected thought leader and influencer in the MSP space. Tens of thousands of MSPs learn through his YouTube channel, T-Minus365. Nick has been honored as a three-time Microsoft MVP for his educational content; his expertise and influence are the backbone of our mission, ensuring that you are in the best hands when it comes to security.
Nick joined Pax8 in 2017, where he would ultimately oversee product management for PSA and Microsoft integrations. Following his tenure at Pax8, Nick has continued to demonstrate his leadership prowess as an executive at various MSPs, culminating in his most recent role at Sourcepass.
Nick holds a Bachelor's Degree in Business Management from Florida State University, as well as a Minor Degree in Entrepreneurship. In his free time, Nick is an avid hiker, reader, and fitness-junkie.
