M365 Roundup, June 2026: Copilot Cowork Goes GA, and the Meter Starts Running
TL;DR
- Copilot Cowork reached general availability worldwide on June 16, 2026, and usage-based Copilot Credits billing became mandatory on every workflow starting July 1, 2026.
- Microsoft Scout debuts as the first 'Autopilot' agent: an always-on identity that works across Teams, Outlook, OneDrive, and SharePoint under the permissions and governance policies an admin sets.
- Conditional Access policies now apply to Windows Hello for Business and macOS Platform SSO registration, closing a gap where MFA was enforced but conditions like trusted locations were not.
- Microsoft Entra self-service password reset stops accepting directory-sourced contact information for verification starting September 7, 2026, requiring explicitly registered authentication methods instead.
- SharePoint Online moves to a pay-as-you-go storage overage model starting in September 2026, so tenants pay only for the extra capacity they actually use instead of pre-purchasing it.
June was the month Microsoft's AI agent strategy stopped being a preview and started showing up on invoices. Copilot Cowork and Work IQ both reached general availability, a new always-on agent called Scout debuted, and usage-based billing went from optional to enforced. Identity got tighter too, with Conditional Access and self-service password reset both closing gaps that had quietly stood open. Here is everything that matters, organized by what we would act on first.
Copilot's agent buildout dominates the month
Copilot Cowork reaches GA, and the billing meter turns on
Copilot Cowork moved to general availability worldwide (Tier 1 languages) starting June 16, 2026, while Frontier remains the early access channel for new capabilities. Usage-based Copilot Credits billing became mandatory across all workflows on July 1, 2026. Full detail in Microsoft's Copilot Cowork is now generally available (opens in new tab) post.
Rollout: GA June 16, 2026. Usage-based billing enforced July 1, 2026.
Work IQ API reaches GA
The Work IQ API, the layer that gives Cowork and other agents production-ready context from across Microsoft 365, also reached general availability on June 16. It supplies the data, context, and tools agentic workloads need to operate with more awareness across apps and workflows. Full detail in Work IQ: production-ready intelligence for every agent (opens in new tab).
Rollout: June 16, 2026.
Microsoft Scout debuts as the first "Autopilot" agent
Microsoft introduced a new agent category called Autopilots: always-on agents with their own identity that act on a user's behalf within the permissions and policies an admin sets. Scout is the first one, integrated across Teams, Outlook, OneDrive, and SharePoint and powered by Work IQ. It is built on OpenClaw open-source technology and is available today through Frontier as an early desktop experience on Windows and macOS. Full guide at Get started with Microsoft Scout (opens in new tab).
Rollout: Preview now. No GA date set.
Org-published prompts land in Copilot Chat
Organizations can now centrally create and publish curated prompts for Microsoft 365 Copilot Chat, so admins can shape usage around approved terminology and workflows instead of leaving every employee to discover effective prompts on their own.
Rollout: early July 2026, expected to complete by late July 2026.
Copilot Notebooks expand to Basic users
Copilot Notebooks becomes available to users on Copilot Chat (Basic) and M365 Copilot (Basic), extending the feature beyond users with a full Microsoft 365 Copilot add-on license. Details in How Copilot Chat works with and without a Microsoft 365 Copilot license (opens in new tab) and Requirements for Copilot Pages and Copilot Notebooks (opens in new tab).
Rollout: begins mid-June 2026.
Copilot in Word handles complex edits natively
Copilot in Word gains capabilities that work with tracked changes, comments, document structure, and page elements while respecting existing formatting and collaboration history, instead of treating the document as flat text. Detail in Copilot in Word: new capabilities for document workflows (opens in new tab).
Rollout: early June 2026, expected to complete by early July 2026.
Screen sharing comes to Copilot voice sessions
Microsoft 365 Copilot licensed users will be able to share a desktop screen or mobile camera and ask Copilot questions about what it sees, with Copilot analyzing the visual content in real time alongside the user's work data.
Rollout: late June 2026, generally available by late July 2026.
Copilot in PowerPoint can build on-brand presentations
Users can select a brand kit during content generation, so Copilot in PowerPoint produces on-brand output directly instead of requiring a manual reformat afterward.
Rollout: mid-June 2026, expected to complete by late June 2026.
Outlook emails become Copilot Notebooks references
Outlook emails can now be added as references inside Microsoft 365 Copilot Notebooks, so Copilot can reason over email content alongside files for more relevant output.
Rollout: early July 2026 through late July 2026.
Excel Agent adds explicit grounding
Excel Agent gains explicit grounding integration, letting users upload and process files directly to ground AI responses in their own data, which improves accuracy across large datasets and multiple files.
Rollout: late April 2026 through late June 2026.
Identity and access tightens
Conditional Access now covers WHfB and macOS Platform SSO registration
If Conditional Access is scoped to "Register security information," those policies now apply when a user sets up Windows Hello for Business or registers macOS Platform SSO credentials. Previously, those registration flows enforced MFA but skipped registration-targeting Conditional Access conditions like authentication strength or trusted locations. This closes that gap.
Rollout: complete for all tenants by July 13, 2026.
SSPR will require registered authentication methods
Self-service password reset currently allows identity verification using directory attributes like mobile phone, business phone, or alternate email, even when a user never explicitly registered those as authentication methods. As part of Microsoft's Secure Future Initiative, SSPR will require explicitly registered methods instead. A registration campaign starts prompting users July 6, 2026, and enforcement begins September 7, 2026, after which directory-sourced contact information no longer works for verification.
Rollout: campaign begins July 6, 2026. Enforcement begins September 7, 2026.
Device Soft Delete adds a recovery window for removed devices
Device Soft Delete moves deleted device objects into a suspended state instead of removing them permanently. Azure Device Registration Service de-registers the device and moves it into a separate soft-deleted container, where it stays recoverable for up to 30 days. Detail in Device soft delete (opens in new tab).
Rollout: in preview.
Teams: phone lines, invites, scheduling, and recording
Multiple phone lines come to Teams mobile
Users can now manage and use multiple assigned phone numbers directly within the Teams mobile Calls app, choosing the right number when placing or returning calls instead of switching devices for different roles or regions.
Rollout: mid-June 2026, expected to complete by late June 2026.
Guest invitations now come from the inviter's address
Teams guest invitation emails will be sent from the inviter's actual email address instead of a no-reply address, improving clarity and letting invitees reply directly.
Rollout: late June 2026, expected to complete by late July 2026.
Shared and delegate mailboxes can schedule events
Executive assistants and delegates can now organize events on behalf of leaders using shared or delegated mailboxes, so invitations and updates come from the recognized organizational mailbox instead of a personal one.
Rollout: early July 2026, expected to complete by late July 2026.
Teams meetings can link to an existing Planner plan
Teams meetings previously created a separate Planner plan automatically for meeting-related tasks, scattering related work across multiple plans. Meetings can now link to an existing plan instead, keeping tasks for one initiative in a single location.
Rollout: late July 2026, expected to complete by late August 2026.
Call Queues get automatic recording and transcription
Teams Call Queues can now automatically record and transcribe calls handled by queue representatives without manual action, supporting quality assurance and training. A Teams Premium license is required to access the recordings.
Rollout: early August 2026, expected to complete by mid-August 2026.
Outlook, OneDrive, and SharePoint
Outlook groups rapid-fire notifications
Outlook will automatically group email notifications that arrive within a few seconds into a single alert, cutting down on notification fatigue.
Rollout: late June 2026, expected to complete by late July 2026.
OneDrive gets a dedicated Shortcuts folder
Users can save new shortcuts to a dedicated Shortcuts folder instead of the OneDrive root, reducing clutter and making frequently used content easier to find.
Rollout: mid-July 2026, expected to complete by late July 2026.
OneDrive transitions to the cloud.microsoft domain
OneDrive is moving to the cloud.microsoft domain, and users will start seeing new URLs in their OneDrive experiences. Existing links keep working, since both domains operate side by side indefinitely.
Rollout: early July 2026, expected to complete by late June 2027.
SharePoint storage overages move to pay-as-you-go
Microsoft is introducing a pay-as-you-go, consumption-based billing model for SharePoint storage overages, so tenants pay only for the additional storage they actually use instead of pre-purchasing extra capacity. Full detail in Add storage space (opens in new tab).
Rollout: September 2026, rolling completion by end of October 2026.
File-level archiving reaches GA in Microsoft 365 Archive
File-level archiving in Microsoft 365 Archive is now generally available, letting organizations archive individual SharePoint files into a cold storage tier while keeping them discoverable.
Rollout: early July 2026, expected to complete by late July 2026.
Edge and the admin console
Edge management service adds extension monitoring
Admins get more visibility and control over browser extensions used across the organization through new extension monitoring in the Edge management service. Detail in Microsoft Edge extension monitoring (opens in new tab).
Rollout: mid-June 2026, expected to complete by mid-June 2026.
App governance in Defender for Cloud Apps expands to every service principal
App governance now covers all Microsoft Entra service principals, not just those with API permissions, improving visibility into non-human identities. Microsoft is also surfacing Entra roles assigned to service principals and factoring those role assignments into privilege classification, giving admins a more accurate view of application risk.
Rollout: late June 2026, expected to complete by early July 2026.
Defender for Endpoint updates move to Microsoft Update
Defender EDR updates will now be delivered through Microsoft Update instead of bundled with the monthly Windows security update, letting EDR improvements ship independently of the OS update cycle.
Rollout: expected complete for Windows 10 and 11 by fall 2026.
Advanced Intune capabilities extend to E3 and E5
Advanced capabilities from the Microsoft Intune Suite, announced back in December, become part of Microsoft 365 E3 and E5 packaging effective July 1, 2026, with eligible existing customers expected to see the capabilities in their tenants by August. Detail in IT experts weigh in: advanced Intune capabilities coming to Microsoft 365 E3 and E5 (opens in new tab).
Rollout: effective July 1, 2026.
New Business-with-Copilot SKUs become permanent
Microsoft 365 Business Standard with Copilot and Business Premium with Copilot move from promotional offers to permanent SKUs starting July 1, 2026, with updated list pricing of $23.50 and $32 per user per month respectively.
Rollout: effective July 1, 2026.
Agent 365 adds an E5 licensing prerequisite
Microsoft 365 E5 becomes a new license prerequisite for new Microsoft Agent 365 purchases, intended to ensure the foundational identity, compliance, and management capabilities Agent 365 depends on are already in place.
Rollout: effective June 1, 2026.
Keeping up is the easy part. Staying configured is the hard part.
Every month brings changes like these, and every month the gap widens between what a tenant could be enforcing and what it actually is. CloudCapsule closes that gap for MSPs: scans average 60 seconds per tenant, collect over 200 data points, and include remediation and policy management so fixes deploy right from the portal.
Frequently asked questions
What changed in Copilot Cowork's pricing this month?
Cowork reached general availability worldwide on June 16, 2026, and Microsoft began enforcing usage-based Copilot Credits billing on every workflow starting July 1, 2026. The credits meter separately from the Microsoft 365 Copilot seat license.
Does the new Conditional Access enforcement affect existing users?
It applies when users register or set up Windows Hello for Business or macOS Platform SSO credentials. Registration already enforced MFA, but Conditional Access conditions like authentication strength and trusted locations were not evaluated during that flow until this change.
When does Entra SSPR stop accepting directory-sourced verification?
A registration campaign starts prompting users on July 6, 2026, and enforcement begins September 7, 2026. After that date, self-service password reset requires explicitly registered authentication methods rather than mobile phone, business phone, or alternate email attributes pulled from the directory.
Every roundup means another month of drift to track
CloudCapsule scans every tenant you manage against 250+ controls in about 60 seconds, so this month's changes do not become next quarter's finding.
Run a free scan
Written by
Nick Ross
CEO · Microsoft MVP · Founder, T-Minus 365
Nick is not just a CEO, he's a respected thought leader and influencer in the MSP space. Tens of thousands of MSPs learn through his YouTube channel, T-Minus365. Nick has been honored as a three-time Microsoft MVP for his educational content; his expertise and influence are the backbone of our mission, ensuring that you are in the best hands when it comes to security.
Nick joined Pax8 in 2017, where he would ultimately oversee product management for PSA and Microsoft integrations. Following his tenure at Pax8, Nick has continued to demonstrate his leadership prowess as an executive at various MSPs, culminating in his most recent role at Sourcepass.
Nick holds a Bachelor's Degree in Business Management from Florida State University, as well as a Minor Degree in Entrepreneurship. In his free time, Nick is an avid hiker, reader, and fitness-junkie.
