
M365 Roundup, April 2026: Copilot Goes Agent Mode
April 2026 in Microsoft 365: Calendar Agent and Legal Agent arrive in Copilot, Intune gets a Copilot removal policy, Windows 365 Business drops 20%, and Teams ships eleven updates.
Archive

April 2026 in Microsoft 365: Calendar Agent and Legal Agent arrive in Copilot, Intune gets a Copilot removal policy, Windows 365 Business drops 20%, and Teams ships eleven updates.

Entra Backup and Recovery, in public preview since March 2026, gives Entra ID a five-day, tamper-proof rollback for groups, Conditional Access policies, and apps. The steps and the limits.

CloudCapsule's new Manage tier adds Quick Fixes, 100+ policy deployments, a reusable Policy Library, outcome-based Capsules, and Explorer, so multi-tenant M365 remediation happens in one place.

Blue Team Labs is a free training platform where MSP techs investigate realistic Microsoft 365 incidents using simulated sign-in logs, audit logs, and email headers. No videos, no quizzes.

Copilot Notebooks grounds AI answers in only the documents you choose. We tested it on a six-document trade secret case file: timeline, contract mapping, and deposition prep in 15 minutes.

March 2026 in Microsoft 365: the new E7 suite and Agent 365 go GA May 1, Entra Backup and Recovery enters preview, external MFA hits GA, and SPO one-time passcodes get a retirement date.

As of May 4, 2026, expired CSP subscriptions no longer get a free 30-day grace period. They renew, cancel hard, or roll into paid Extended Service Terms with a 3% to 23% uplift. Here is what to do.

Exact Data Match checks content against a hashed copy of your real sensitive data instead of regex patterns, so DLP blocks actual employee records and ignores lookalike strings. Full setup guide.

Guest accounts enter Microsoft 365 through deliberate Entra invitations and through everyday file shares that mint identities automatically. The SharePoint B2B integration setting decides which.

February 2026 in Microsoft 365: EWS retirement begins October 2026, the free CSP grace period dies May 4, Purview Posture Reports hit GA, and Entra guest governance now needs an Azure subscription.

Locked-down HR sites stop protecting data the moment someone downloads, copies, or emails a file. Custom sensitive info types plus DLP teach Microsoft 365 to protect HR data wherever it moves.

Microsoft 365 commercial and government SKUs increase on July 1, 2026. Business Premium and Office 365 E1 do not. Here is the renewal math MSPs should run before then.

Microsoft 365 Copilot reads everything a user can technically access, including sites overshared years ago. SharePoint Advanced Management is the included governance layer that contains it.

Entra passkey profiles auto-enable in March 2026, Teams gains four security features, and standalone SharePoint and OneDrive plans head for retirement. The January 2026 changes, sorted by what to do.

Cyber Essentials v3.3 maps cleanly onto Microsoft 365 Business Premium. Entra, Intune, and Defender for Business cover all five technical controls without buying a single new tool.

Risk-based Conditional Access can block or remediate a compromised sign-in before the attacker touches a file. Here is how Entra scores risk and how to deploy the new Require risk remediation option.

Business Standard saved one firm $200 a month until a token-theft phish cost them $18,000. The MSP playbook for the Standard to Premium renewal conversation: outcomes, pillars, and objection answers.

When a vendor gets breached, their compromised guest account walks straight into your tenant. The layered Microsoft 365 model that stops it: sharing defaults, guest MFA, download limits, labels, and access reviews.