M365 Message Center

Geändert

16.04.2026

Services

Microsoft 365 apps · Microsoft Copilot (Microsoft 365) · Microsoft 365 Copilot Chat

[Introduction] We’re updating how users access Copilot in Excel to provide a clearer, more consistent, and more intuitive experience across Microsoft 365 apps. These changes consolidate multiple Copilot entry points into a single, predictable location and establish Excel Edit Mode in the right-side chat pane as the primary Copilot interface. This update improves discoverability, simplifies user workflows, and aligns the Excel Copilot experience with other Microsoft 365 applications. [When this will happen:] General Availability (Worldwide): Rollout begins in late April 2026 and is expected to complete by early June 2026. General Availability (GCC, GCC High, and DoD): Rollout begins in early October 2026 and is expected to complete by late October 2026. [How this affects your organization:] Who is affected: All users of Microsoft 365 apps for Excel on Windows, macOS, and the web with Copi

Geändert

16.04.2026

Services

Microsoft Entra

Introduction Beginning January 30, 2026, Microsoft Entra ID Governance will require all tenants to have a linked Azure subscription to continue using Identity Governance features for guest users. This change ensures accurate billing for governance actions performed by guests and supports continued access to advanced governance capabilities. When this will happen: General availability and enforcement begin on January 30, 2026. How this will affect your organization: Who is affected: Organizations using Microsoft Entra ID Governance features for guest users (userType = Guest). Admins managing lifecycle workflows or Entra ID Governance features in entitlement management for external or guest identities. Access reviews will be included by March 31, 2026. What will happen: If your tenant does not have a linked Azure subscription, creation or updates of policies scoped to guest users using pre

Geändert

14.04.2026

Services

Windows

IMPORTANT: This notice only affects environments where Scan Cab is used to check for update compliance.The April 2026 Scan Cab was made available at 4:30 PM PT today, April 14, 2026. The Scan Cab can help determine whether a Windows device needs to install necessary security updates released by Microsoft without first connecting to the Windows Update service. How this affects your organization:The Wsusscn2.cab file is a cabinet file that is signed by Microsoft and contains information about Microsoft security-related updates. Devices that aren't connected to the Internet can be scanned to see whether these security-related updates are present or required. The Wsusscn2.cab file doesn't contain the security updates themselves so you must obtain and install any needed security-related updates through other means. What you need to do to prepare:You can download and deploy the April 2026 Scan

Geändert

14.04.2026

Services

Windows

Starting with the April 2026 Windows security update, Remote Desktop adds new safeguards to help reduce phishing attacks that misuse Remote Desktop (.rdp) files. These attacks attempt to trick devices into connecting to attacker‑controlled systems and sharing local resources without clear visibility. To address this, a new security dialog appears before any connection is made, showing the remote computer address, publisher information (when available), and any requested access to local resources. All requested settings are disabled by default and must be explicitly enabled. A one‑time security warning also appears the first time an RDP file is opened.When will this happen:This change takes effect with the April 2026 Windows security update.How this will affect your organization:Devices that open Remote Desktop (.rdp) files will see a new security dialog before a connection is established

Geändert

14.04.2026

Services

Windows

Note: This notice only affects environments where Scan Cab is used to check for Microsoft update compliance. The Scan Cab for the April 2026 Microsoft security updates is currently delayed and has not yet been released. We will communicate an update on Scan Cab availability as more information becomes available. Thank you for your patience. How this affects your organization: IT administrators who rely on Scan Cab to check for update compliance can track our communications. Progress on the availability of this month's Scan Cab will be communicated when new information is available. Additional information: Learn more about the Scan Cab process: Announcing a smaller WSUS Scan Cab Use Windows Update Agent (WUA) to scan computers for security updates without connecting to Windows Update: Using WUA to Scan for Updates Offline - Win32 apps Documentation on the Catalog Site used to import updat

Geändert

14.04.2026

Services

Windows

Windows updates released April 2026 and later begin the second deployment phase of protections for a Kerberos information disclosure vulnerability (CVE‑2026‑20833). In this phase, domain controllers change default Kerberos ticket behavior for accounts that do not have an explicit Kerberos encryption configuration, shifting to AES‑SHA1-only by default. Environments with remaining RC4 dependencies may experience authentication issues unless those dependencies are remediated or explicitly configured.When this will happen:April 2026 - Enforcement Phase with manual rollback: With installation of the April 2026 Windows security update, default Kerberos behavior changes so domain controllers use AES‑SHA1-only encryption for accounts without explicit encryption type settings, and Enforcement mode is enabled by default on Windows domain controllers. Audit mode remains available as a manual rollba