
M365 Roundup, September 2025: Security Suites Come to Business Premium
New Defender and Purview add-on SKUs for Business Premium, Anthropic models in Copilot, an auto-installing Copilot app, and a browser policy that needs action now.
Microsoft product

New Defender and Purview add-on SKUs for Business Premium, Anthropic models in Copilot, an auto-installing Copilot app, and a browser policy that needs action now.

AI readiness is the rare conversation the C-suite starts. Here is the engagement model, the four-level ladder, and a real fintech story MSPs can copy.

GPT-5 rolls into Copilot Chat, Intune adds two-admin approval for destructive actions, Autopilot patches during setup, and Windows 10 ESU hits the CSP price list.

Microsoft kills the nonprofit Business Premium and E1 grants, raises the bar for CSP indirect resellers, and ships Copilot Tuning. May 2025's M365 changes, sorted by who has to act.

Teams Premium flags sensitive content during screen sharing, Purview meters GenAI data security as pay-as-you-go, and Copilot lands across PowerPoint, Forms, and calls.

A Power Automate flow that takes vendor requests from a Microsoft Form, routes approvals through Teams, logs the software inventory, and opens the IT ticket.

Microsoft-managed Conditional Access policies start auto-enforcing after 45 days, Skype interop in Teams dies May 1, and Hotpatch hits preview. The February 2025 changes, sorted by deadline.

Copilot Chat arrives free for Entra users, Teams flips transcription on by default for new tenants, and small businesses get live chat. The January 2025 M365 changes, sorted by what to check first.

Starting January 27, 2025, unlicensed OneDrive accounts get archived behind reactivation and storage fees, or deleted outright. Here is the math and the four ways to respond.

Ignite 2024 buried real news under Copilot branding. The 20 announcements that matter, grouped: agents, Copilot+ PCs, Windows 365, Windows resiliency and security, Edge, and Lighthouse.

External collaborators do not need download rights to do their job. Two settings force guests into authenticated, browser-only access and block local downloads in SharePoint and OneDrive.

When customers demand BYOD access to Microsoft 365, contain it: web-only access, download blocks, session limits, TAP-gated enrollment, and MAM, with a dynamic group to segment personal devices.