
M365 Roundup, April 2026: Copilot Goes Agent Mode
April 2026 in Microsoft 365: Calendar Agent and Legal Agent arrive in Copilot, Intune gets a Copilot removal policy, Windows 365 Business drops 20%, and Teams ships eleven updates.
Microsoft product

April 2026 in Microsoft 365: Calendar Agent and Legal Agent arrive in Copilot, Intune gets a Copilot removal policy, Windows 365 Business drops 20%, and Teams ships eleven updates.

March 2026 in Microsoft 365: the new E7 suite and Agent 365 go GA May 1, Entra Backup and Recovery enters preview, external MFA hits GA, and SPO one-time passcodes get a retirement date.

Exact Data Match checks content against a hashed copy of your real sensitive data instead of regex patterns, so DLP blocks actual employee records and ignores lookalike strings. Full setup guide.

February 2026 in Microsoft 365: EWS retirement begins October 2026, the free CSP grace period dies May 4, Purview Posture Reports hit GA, and Entra guest governance now needs an Azure subscription.

Locked-down HR sites stop protecting data the moment someone downloads, copies, or emails a file. Custom sensitive info types plus DLP teach Microsoft 365 to protect HR data wherever it moves.

When a vendor gets breached, their compromised guest account walks straight into your tenant. The layered Microsoft 365 model that stops it: sharing defaults, guest MFA, download limits, labels, and access reviews.

Intune Suite capabilities fold into E3 and E5 ahead of July 2026 pricing, Outlook gets DLP Wait on Send, and cross-tenant migration goes first-party. December 2025's M365 changes, sorted by impact.

Ignite 2025 delivered Agent 365, Security Copilot free for E5, and Baseline Security Mode. Plus synced passkeys, Teams impersonation protection, and a full month of M365 changes.

New Defender and Purview add-on SKUs for Business Premium, Anthropic models in Copilot, an auto-installing Copilot app, and a browser policy that needs action now.

A stolen session token becomes a BEC campaign fast. This runbook walks the full cleanup, confirm, scope, evict, recover, with the exact portals, KQL queries, and PowerShell for each step.

Teams Premium flags sensitive content during screen sharing, Purview meters GenAI data security as pay-as-you-go, and Copilot lands across PowerPoint, Forms, and calls.

Microsoft-managed Conditional Access policies start auto-enforcing after 45 days, Skype interop in Teams dies May 1, and Hotpatch hits preview. The February 2025 changes, sorted by deadline.