
M365 Roundup, May 2026: Teams Gets Its Own Threat Reports
May 2026 in Microsoft 365: Teams adds external user reporting and a Security Detection Report, SharePoint starts enforcing storage quotas, and Entra locks new app instances by default.
Microsoft product

May 2026 in Microsoft 365: Teams adds external user reporting and a Security Detection Report, SharePoint starts enforcing storage quotas, and Entra locks new app instances by default.

Teams disables file attachments in chats with external users by default. One Files Policy setting, changeable only through PowerShell as of May 2026, turns it back on.

April 2026 in Microsoft 365: Calendar Agent and Legal Agent arrive in Copilot, Intune gets a Copilot removal policy, Windows 365 Business drops 20%, and Teams ships eleven updates.

March 2026 in Microsoft 365: the new E7 suite and Agent 365 go GA May 1, Entra Backup and Recovery enters preview, external MFA hits GA, and SPO one-time passcodes get a retirement date.

Guest accounts enter Microsoft 365 through deliberate Entra invitations and through everyday file shares that mint identities automatically. The SharePoint B2B integration setting decides which.

Locked-down HR sites stop protecting data the moment someone downloads, copies, or emails a file. Custom sensitive info types plus DLP teach Microsoft 365 to protect HR data wherever it moves.

Microsoft 365 Copilot reads everything a user can technically access, including sites overshared years ago. SharePoint Advanced Management is the included governance layer that contains it.

Entra passkey profiles auto-enable in March 2026, Teams gains four security features, and standalone SharePoint and OneDrive plans head for retirement. The January 2026 changes, sorted by what to do.

When a vendor gets breached, their compromised guest account walks straight into your tenant. The layered Microsoft 365 model that stops it: sharing defaults, guest MFA, download limits, labels, and access reviews.

Windows 10 reached end of support in October 2025. Plus GPT-5 becomes Copilot's default model, Authenticator gets jailbreak detection, and Teams adds audio-only recording.

Windows Autopilot turns 2 to 5 hours of manual device setup into a 30 to 60 minute out-of-box experience nobody in IT touches. Here is the full configuration.

New Defender and Purview add-on SKUs for Business Premium, Anthropic models in Copilot, an auto-installing Copilot app, and a browser policy that needs action now.