Microsoft product
February 2026 in Microsoft 365: EWS retirement begins October 2026, the free CSP grace period dies May 4, Purview Posture Reports hit GA, and Entra guest governance now needs an Azure subscription.
Locked-down HR sites stop protecting data the moment someone downloads, copies, or emails a file. Custom sensitive info types plus DLP teach Microsoft 365 to protect HR data wherever it moves.
Intune Suite capabilities fold into E3 and E5 ahead of July 2026 pricing, Outlook gets DLP Wait on Send, and cross-tenant migration goes first-party. December 2025's M365 changes, sorted by impact.
GPT-5 rolls into Copilot Chat, Intune adds two-admin approval for destructive actions, Autopilot patches during setup, and Windows 10 ESU hits the CSP price list.
Microsoft blocks legacy browser auth and requires admin consent by default, Safe Attachments loses Monitor mode, passkey profiles go per-group, and Teams channels learn to thread.
A stolen session token becomes a BEC campaign fast. This runbook walks the full cleanup, confirm, scope, evict, recover, with the exact portals, KQL queries, and PowerShell for each step.
Exchange Online enforces tenant-wide outbound email limits, E5 Security arrives as a Business Premium add-on, and the Report Message add-in enters maintenance mode.
New Outlook migration turns opt-out for SMBs in January 2025, monthly billing on annual terms gets a 5% markup, Viva Goals gets a retirement date, and Teams ships ten quality-of-life features.
Microsoft 365 email is not phishing-resistant by default. SPF/DKIM/DMARC, a tuned anti-phishing policy, Safe Links and Attachments, external sender tags, and keyword mail flow rules close the gap.
Turn Microsoft 365 offboarding into a workflow HR triggers from a form: sessions revoked, sign-in blocked, mailbox converted and shared, license reclaimed, groups cleaned, ticket filed.
Microsoft Forms plus Power Automate can create the user, license them, set their manager, mirror group access, and send the welcome email. No third-party tools, one tenant at a time.
Copilot picks up enterprise data protection and usage APIs, Autopatch and WUfB-DS merge into one service, Entra ships AiTM detection and FIDO2 provisioning, and Teams adds CAPTCHA for anonymous joins.
