SharePoint 2013 workflows will be disabled for new tenants starting April 2, 2024, and fully retired for all tenants on April 2, 2026. Organizations must migrate to Power Automate or other solutions, notify users, and prepare support teams accordingly. No extensions will be offered beyond this date.
Microsoft has introduced the new "Access Review Agent," an AI-powered tool integrated into Microsoft Teams that revolutionizes access governance by streamlining and enhancing the review process. Designed to reduce manual effort and improve decision-making, the agent analyzes sign-in activity, peer group changes, and unusual access patterns to provide reviewers with focused, data-driven recommendations. It enables natural language interaction, simplifies compliance tasks, and reduces attestation fatigue. A walkthrough scenario with Contoso Financial illustrates how administrators and reviewers benefit from the agent’s intuitive interface and intelligent insights. Alongside this, Microsoft Entra is rolling out additional features for managers and approvers to revoke access, delegate tasks, and manage team permissions more effectively, all aimed at strengthening security and simplifying access management in dynamic environments.
Microsoft has added new logging capabilities and attribute enhancements aimed at improving transparency and security in identity management. Key updates include the introduction of the Microsoft Entra Agent ID, which unifies agent identities across platforms like Copilot Studio and Azure AI Foundry, and expanded support for agents from Microsoft 365 Copilot and third-party solutions. New features such as the "is Agent” filter, MicrosoftServicePrincipalSignInLogs, and enriched attributes like AppOwnerTenantId, SessionID, and ASN data provide deeper visibility into sign-in activities and cross-tenant access. These improvements empower IT teams with more actionable insights for monitoring, threat detection, and compliance, reinforcing Microsoft’s commitment to transparency and robust security.
Microsoft Defender for Cloud has announced the public preview release of Automated Remediation for Malware Detection in Defender for Storage, available in Commercial Cloud. This feature automatically soft-deletes any blob identified as malicious during on-upload or on-demand malware scans. When enabled at either the subscription or storage account level, it configures soft-delete settings for blobs and containers, allowing recovery within a default retention period of seven days. The post explains how to activate the feature via the Microsoft Defender for Cloud interface and notes that enabling malware scanning alone does not automatically turn on automated remediation. Additional enablement options, such as REST API, are also available.
The Outlook Lite app is retiring this month (October 6, 2025). This means that users who are currently using it, can continue to use it; new installs will not be possible. In a couple of months (timeline tbd), the app will be fully retired at which point users will not be able to use the app all together. In its place, admins should roll out Outlook Mobile app to replace the Outlook Lite app as soon as possible. Existing data will be available upon log in.
In September, Microsoft rolled out Channel Agents. The Channel Agent would be able to draw on all of the data in that channel and provide insight on Status of topics within the channel, as well as create reminders and answering questions. Agents can even be invited to Planner and Meetings. Limitations:
* Channel Agent may gather and share context that crosses information barriers.
* Channel Agent is best supported by English (US).
* Channel Agent is not supported in private channels.
* Channel Agent is not functional in channels that contain external or guest users.
* Channel Agent is not supported in tenants that use Customer Key.
* Processing data from previews can happen outside of the EU Data Boundaries
Public preview of Channel agents started to roll out in September, and should be available to all by mid-Oct. Users will need to have an eligible Microsoft 365 license, Teams license as well as a Copilot license. Channel Agents will be available to users, but admins can decide to limit it to specific groups of users. For security and compliance considerations when using Channel Agents, refer to https://learn.microsoft.com/en-us/purview/ai-teams-channel-agent.
Microsoft is introducing a new content explorer experience for Insider Risk Management cases in Microsoft Purview, now available in public preview. This update improves how investigators review and manage case information, adding advanced filtering, grouping options, document previews, customizable columns, and time zone selection for better context. The goal is to make case review faster and more efficient.
The rollout for this new experience will begin in early October 2025 and is expected to finish by early November 2025. It will apply automatically to all new cases created after the rollout, while existing cases will continue to use the classic content explorer. There are no changes to current policies or configurations, and the feature will be enabled by default.
This update affects admins and investigators who manage Insider Risk cases in Microsoft Purview. No action is required to prepare — the new experience will be rolled out automatically. Microsoft has not identified any compliance concerns, but organizations can review as needed to ensure alignment with internal policies.
Microsoft is continuing its commitment to improving user experience in SharePoint Online. Following last year’s overhaul of SharePoint Lists—which introduced a cleaner interface, better navigation, and more intuitive filtering—document libraries are next in line for a modernized look and feel.
This update is designed to make everyday tasks simpler and faster without disrupting existing customizations. If your organization relies heavily on document libraries, here’s what you can expect.
General Availability (Worldwide, GCC, GCC High, and DoD) begins early January 2026 and completes by late January 2026.
To simplify session timeout management and improve consistency across Microsoft 365 apps, we’re retiring the activity-based authentication timeout (ABT) setting for Outlook on the web. Admins should transition to the Microsoft 365 idle session timeout, which provides a unified experience across supported Microsoft 365 web applications.
The retirement will roll out in phases based on cloud environment:
Worldwide: Early January 2026 to late January 2026
GCC, GCCHigh, and DoD: Early February 2026 to late February 2026
How this affects your organization:
Who is affected: Users of Outlook on the web are affected by this change, as they will no longer be automatically signed out due to inactivity unless Microsoft 365 idle session timeout is enabled. Admins are responsible for configuring the replacement timeout setting.
What will happen:
The ABT setting for Outlook on the web will be retired.
If Microsoft 365 idle session timeout is not enabled, users will no longer be automatically signed out of Outlook on the web due to inactivity.
Microsoft 365 idle session timeout applies across supported Microsoft 365 web apps.
What you can do to prepare:
Review your current use of activity-based authentication timeout (ABT) for Outlook on the web.
Enable Microsoft 365 idle session timeout to maintain session control across Microsoft 365 apps.
Communicate this change to your helpdesk and security teams.
Update internal documentation to reflect the new session timeout policy.
Review the previous retirement announcement: Activity-based authentication timeout for Outlook on the web.
Microsoft is introducing a new capability in Microsoft Teams that allows users to start a chat with anyone who has an email address—even if they’re not currently using Teams. The recipient will receive an email invitation to join the chat session as a guest, enabling seamless communication and collaboration. This update simplifies external engagement and supports flexible work scenarios
This capability will be available to small and medium business customers with a Teams Essentials, Business Basic, Business Standard, or Business Premium license. This feature will be available across Android, Desktop, iOS, Linux, and Mac platforms.
When this will happen:
Who is affected:
What will happen:
What you can do to prepare: