THE ENDPOINT NEWSROOM
The updates that matter. The context you need. Explore Microsoft endpoint news, security fixes and practical guidance in one place.
IN FOCUS / Windows
05.11.2026
CVE-2026-83844 is a Microsoft Paint remote code execution vulnerability with CVSS 8.1. Microsoft currently lists Store app build 11.2609.401.0 as the fix.
Read the update →THE LATEST
2026-11-05
Microsoft announced the updated Education portfolio, including A7 with Copilot, Agent 365 and Entra Suite, and a staged transition for legacy education benefits.
2026-11-04
Microsoft Entra Conditional Access policy plans are available in public preview for customers with Entra ID P1 or P2.
2026-11-04
Microsoft is extending fair-use limits to additional Copilot Chat capabilities for users without a Microsoft 365 Copilot license in commercial tenants.
2026-11-03
Microsoft moved default-on usage-based billing for new CSP purchases of Microsoft 365 Copilot Business to January–March 2027.
2026-11-03 · KB40345593
KB40345593 fixes management-point token verification for non-Entra-joined devices connecting through a CMG after ConfigMgr 2603 rollup KB39169655.
2026-11-02
Microsoft Entra Private Access and Internet Access can be purchased together as one Global Secure Access offering from November 2, 2026.
2026-10-28
By: Iris Yuning Ye, Product Manager | Microsoft Intune Organizations that manage Mac devices need a reliable way to evaluate their security posture against a recognized baseline.
2026-10-28
This issue affects non-admin users connecting through Remote Desktop with Administrator protection enabled.
2026-10-26
Microsoft Intune now supports AOSP referenced app type that lets you identify an app by package name instead of uploading an APK on AOSP devices.
2026-10-26
Microsoft Intune is removing legacy Apple MDM software update workloads after Apple retired the underlying commands and payloads in OS 27.
2026-10-26
Microsoft Intune now includes two Administrator protection settings in endpoint security Account protection policies.
2026-10-26
We've improved connectivity for scenarios that rely on push notifications including Device actions , Win32 apps , PowerShell scripts and Remediations .
2026-10-26
Microsoft Intune now adds Apple OS 27 declarative device management status data to device inventory.
2026-10-26
Microsoft Intune now supports two Administrator protection settings in the settings catalog on Windows 11 versions 24H2 and 25H2.
2026-10-26
Microsoft Intune's endpoint security template for Microsoft Defender for Endpoint agent runtime protection settings is now generally available.
2026-10-26
The Certificate Connector for Microsoft Intune now surfaces health and status signals in the Microsoft Intune admin center, so you can spot certificate-issuance problems early.
2026-10-26
Microsoft Intune scoped permissions for role-based access control are now generally available.
2026-10-26
Microsoft Intune now uses push notifications for admin-initiated and service-side changes to Windows scripts.
2026-10-26
Microsoft Intune now supports Apple's Enforce Routes capability in iOS/iPadOS and macOS VPN profiles.
2026-10-26
Intune has ended support for Setup Assistant (legacy) authentication for iOS/iPadOS and macOS automated device enrollment (ADE) with user affinity to align with modern authentication standards.
2026-10-26
Use a bulk device action to activate eSIMs on up to 100 supported devices with the same carrier activation server URL.
2026-10-26
Use a bulk device action to wipe up to 100 corporate-owned fully managed (COBO), corporate-owned dedicated (COSU), or corporate-owned work profile (COPE) devices.
20.10.2026
Microsoft clarified on 19 October that monthly restart consolidation currently applies only to devices not managed by IT. Rollout remains gradual.
2026-10-19
Intune now supports requiring managed Google Account authentication on supported Android Enterprise devices after upgrading the Managed Google Play enterprise to a managed Google domain enterprise.
19.10.2026
Microsoft announced Quick Machine Recovery support for Windows Server 2025 with the October 2026 security update. Cloud remediation is disabled by default.
2026-10-19
Intune can now assign Apple VPP apps marked with unlimited licenses on iOS/iPadOS and macOS.
2026-10-16
October Windows Server updates can interrupt on-premises Exchange OWA, mail flow and mailbox replication.
2026-10-16
Today, some organizations use an EnterpriseEnrollment DNS CNAME record to automatically direct devices to the Microsoft enrollment service during Windows MDM-only enrollment.
2026-10-15
We're introducing an updated Photos experience on Windows 11 that makes it easier to browse, organize, and find photos and videos across a user's PC and OneDrive.
2026-10-15
Microsoft marks the missing Copilot entry points in classic Outlook as fixed; the documented symptom starts at build 20026.20182.
2026-10-14
Microsoft now documents that KB5127648 changes NTLMv1-derived SSO defaults and can affect MS-CHAPv2 Wi-Fi, Ethernet and VPN authentication.
2026-10-13
This issue is more likely to occur in legacy applications, and unlikely for many modern applications.
2026-10-13
Some USB Audio Class 1.0 devices display Code 10 or fail in multichannel audio modes after installing the Sept. 8 update
2026-10-13
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
2026-10-13 · KB5127648
Fixes AVD/FSLogix black screens, AC-3 playback and RAW printing. Microsoft withdrew the Always On VPN fix claim on 20 October; a VPN fix is still pending.
2026-10-13 · KB5127648
Fixes AVD/FSLogix black screens, AC-3 playback and RAW printing. Microsoft withdrew the Always On VPN fix claim on 20 October; a VPN fix is still pending.
2026-10-13 · KB5127648
Fixes AVD/FSLogix black screens, AC-3 playback and RAW printing. Microsoft withdrew the Always On VPN fix claim on 20 October; a VPN fix is still pending.
2026-10-13 · KB5127648
Microsoft confirms that KB5127648 can leave the Smart App Control switch greyed out on Windows 11 24H2, 25H2 and 26H2 when the feature was previously off. Devices with Smart App Control already enabled remain protected.
2026-10-13 · KB5126646
Adds opt-in Quick machine recovery and TLS 1.3 ML-KEM, improves Netlogon and Hyper-V TDX, and hardens AD FS DKM ACLs. WSUS sync error details remain unavailable.
2026-10-13 · KB5126655
Adds enhanced NTLM auditing, fixes offline tiered Storage Spaces Direct and USB Audio Class 1.0, and automatically hardens AD FS DKM ACLs. WSUS error-detail suppression remains.
2026-10-13 · KB5126651
Adds enhanced NTLM auditing, fixes BitLocker To Go compatibility with older systems, and automatically remediates AD FS DKM ACLs. Some USB audio symptoms remain unresolved.
2026-10-13 · KB5126868
Introduces ReFS removable-media auditing and default AD FS DKM ACL hardening, plus Secure Boot and time-zone updates. USB Audio Class 1.0 remains partially unresolved.
2026-10-13 · KB5126653
October security update fixes File History backup and restore failures and tiered Storage Spaces Direct disks remaining offline. Microsoft corrected the OS build to 22631.7652 on 16 October.
2026-10-13
Current Channel: Version 2609 (Build 20430.20182) Monthly Enterprise Channel: Version 2609 (Build 20430.20180) Monthly Enterprise Channel: Version 2608 (Build 20326.20232) Monthly Enterprise Channel: Version 2607 (Build 20228.20276) Semi-Annual Enterprise Channel (receives Monthly Enterprise Channel builds): Version 2609 (Build 20430.20178) Semi-Annual Enterprise Channel (receives Monthly Enterprise Channel builds): Version 2608 (Build 20326.20230) Semi-Annual Enterprise Channel (receives Monthly Enterprise Channel builds): Version 2607 (Build 20228.20274) Office 2024 Retail: Version 2609 (Build 20430.20182) Office 2021 Retail: Version 2608 (Build 20326.20232) Office LTSC 2024 Volume Licensed: Version 2408 (Build 17932.21056) Office LTSC 2021 Volume Licensed: Version 2108 (Build 14334.20974) Office 2019 Volume Licensed: Version 1808 (Build 10417.20228) Access CVE-2026-94506 CVE-2026-1028
2026-10-13
Microsoft refreshed Azure client images on 13 October. 24H2 and 25H2 use KB5127648; the image table does not list a 26H2 image.
2026-10-13
Microsoft refreshed Server images and containers on 13 October. Marketplace image builds must not be confused with installed OS cumulative-update builds.
2026-10-12
Microsoft's October Entra roundup adds device-aware Universal CAE, mTLS-bound workload tokens, guided Cloud Sync migration and Microsoft-managed TLS-inspection certificates among the month's identity and network-access releases.
2026-10-08
Windows Update trust certificates expire on May 17 and June 19, 2027; older or insufficiently patched Windows devices need an update or operating-system upgrade before the applicable deadline.
2026-10-08
Credential Guard-protected machine accounts might lose their secure channel to an on-premises Active Directory domain after Windows 11 version 26H2 begins honoring Machine Identity Isolation enforcement settings.
07.10.2026
Microsoft outlined hybrid intelligence for Windows 11: local models and context, cloud routing when useful, and security boundaries for AI agents. Copilot features for Copilot+ PCs are planned to roll out over the coming months.
2026-10-06
Today, we’re excited to share that remote PC connections in Windows App on Windows is now generally available!
06.10.2026
The Windows 11 26H2 security baseline is available in Intune. Existing profiles do not update automatically. Review customizations and overlapping policies before piloting the new version.
2026-10-05
Remote Help is now available in US Government Community Cloud High (GCCH) environments.
2026-10-01
Windows 365 has turned five and we continue to focus on helping you get more from your Cloud PCs.
2026-09-30
Microsoft Defender Antivirus remains active and functioning correctly despite notifications following the latest update. Microsoft status: Resolved.
2026-09-30
Windows 11, version 26H2 is now available, and Microsoft Intune provides day zero support for validated Windows policy settings in the Settings Catalog.
2026-09-30
Microsoft Intune will add Apple OS 27 declarative device management (DDM) status data to device inventory.
2026-09-30
Intune will remove legacy Apple MDM software update workloads after Apple retires the underlying MDM update commands and payloads.
2026-09-30
We’re adding two settings to Intune's Endpoint security Account Protection profile .
2026-09-29
Microsoft's September Intune roundup combines phased Windows app and policy deployments, the consolidated device view, GCC High and DoD capability expansion, and Android lifecycle improvements.
2026-09-29
Windows 11, version 26H2 is now generally available, delivering the next annual feature update for Windows 11.
2026-09-29
Organizations that use an external identity provider to authenticate Microsoft 365 users can now extend browser-based passkeys, security keys, and eligible single sign-on sessions to supported Microsoft app sign-ins—including Outlook, Teams, OneDrive, Word, Excel, PowerPoint, and Microsoft To Do—on Android, iOS, and managed macOS.
29.09.2026
Windows 11 26H2 is available. Eligible 24H2 and 25H2 devices can use a small enablement package with one restart instead of a traditional full upgrade. Here is what endpoint teams should validate before deployment.
2026-09-24
With Apple's release of OS 27, we’ve been working hard to ensure that Microsoft Intune provides support for Apple’s latest operating systems (OS) so that existing features work as expected, and adding support for new features that were introduced at WWDC.
2026-09-24
Microsoft confirms black-screen and desktop-loading failures after sign-in, primarily on Azure Virtual Desktop hosts using FSLogix. Microsoft status: Mitigated.
2026-09-24
Microsoft Cloud PKI is now available for Microsoft Intune tenants in the Microsoft Government Community Cloud High (GCC High) environment.
2026-09-24
Microsoft Intune now uses push notifications for admin-initiated and service-side changes to Win32 apps.
2026-09-24
Microsoft Dragon Copilot by Microsoft Corporation is now available as a protected app for Microsoft Intune.
2026-09-24
Microsoft Intune now helps prevent users from bypassing Managed Home Screen (MHS) authentication when they access protected activities in MAM-integrated apps.
2026-09-24
Microsoft Intune Management Extension now checks for Windows app assignments immediately after the Enrollment Status Page (ESP) completes.
2026-09-24
Microsoft Intune now includes new Apple Settings Catalog options for supported iOS/iPadOS and macOS devices.
2026-09-24
Microsoft Intune now supports assignment filters for Android Enterprise and Android Open Source Project (AOSP) Settings Catalog policies.
2026-09-24
Microsoft Intune now supports automatically opening Microsoft Defender for Endpoint during out-of-box setup for supported corporate-owned Android Enterprise devices.
2026-09-24
Microsoft Intune now includes the Device features tour Apple OS 27 Setup Assistant skip key in Automated Device Enrollment profiles.
2026-09-24
Microsoft Intune now supports an optional upgrade for tenants that connected Android Enterprise with a Gmail account.
2026-09-24
Microsoft Intune now supports bulk eSIM actions for corporate-owned Android Enterprise devices.
2026-09-24
Microsoft Intune now requires iOS/iPadOS 18 or later for standard device-management, Company Portal, and app-protection scenarios.
2026-09-24
Microsoft Intune now uses the new single device page as the default experience for all admins, and the previous device page is no longer available.
2026-09-24
Microsoft Intune now includes Microsoft Defender for Endpoint AI agent runtime protection settings in the new endpoint security template for Windows.
2026-09-24
Microsoft Intune now supports bring-your-own connector functionality for MDM compliance partners.
2026-09-23
Windows Insiders in the Experimental channel can now decide which desktop apps access their camera, microphone, and location.
2026-09-21
Microsoft Intune now supports deployment plans for staged application and policy rollouts.
2026-09-18 · KB2377842
Configuration Manager current branch 2609 (KB2377842) adds security improvements and fixes across CMPivot, SQLCLR trust, CMG, content distribution, clients, Endpoint Protection, BitLocker and site systems.
2026-09-18
Microsoft Intune now supports client-driven compliance evaluation for Windows devices.
2026-09-17
Previously, publishing a new application to Microsoft Entra App Gallery could require multiple review cycles.
2026-09-17
Windows 365 Reserve helps organizations stay productive by providing employees with short-term access to a Cloud PC when their primary work device becomes unavailable.
2026-09-17
Some Windows devices with Remote Desktop enabled might experience Remote Desktop Services (RDS) instability.
2026-09-16
By: Maggie Dakeva, Senior Product Manager - Microsoft Intune Organizations have spent years refining Windows Autopilot deployments.
2026-09-16
Microsoft describes replacing broad VPN access with identity- and application-specific access through Microsoft Entra Private Access.
2026-09-14
HiBob's native Microsoft Entra integration is generally available for governed joiner, mover and leaver identity automation.
2026-09-14
Microsoft resolved unavailable Plan9 host-folder shares in HCS-managed Linux VMs with KB5129194 and later updates.
2026-09-11
Microsoft resolved September update RDS instability with the September 14, 2026 out-of-band update and later cumulative updates.
2026-09-11
You can now customize the classic ribbon by right-clicking the ribbon and choosing which commands and groups appear on the Home and View tabs.
2026-09-11
Session and Response Sharing let Microsoft 365 Copilot users share Copilot chat content through a link.
2026-09-11
Deeper insights into Cowork adoption and impact accessible from the new AI Cost dashboard and Copilot dashboard.
2026-09-11
Copilot Notebooks in OneNote now suggests artifacts to create, such as Word documents, Excel workbooks, and PowerPoint presentations, based on Microsoft 365 knowledge and the content in your notebook.
2026-09-11
We're replacing the existing More places experience in OneDrive Web with a refreshed Libraries view.
2026-09-11
Users can now work with SharePoint document library views directly from OneDrive.
2026-09-11
Users can now collaborate with Copilot to make improvements to email drafts.
2026-09-11
Access combo and list boxes now support LinkMasterFields and LinkChildFields, enabling cascading dropdowns such as Country filtering City without VBA.
2026-09-11
Microsoft Purview Endpoint data loss prevention is expanding coverage to Copilot + PCs initially to support Recall snapshots and determining whether policies exist to prevent capture of windows containing restricted sensitivity labels and Sensitive information types (SITs).
2026-09-11
Microsoft resolved unavailable Plan9 host-folder shares in HCS-managed Linux VMs with KB5129194 and later updates.
2026-09-08
Microsoft resolved the ARM-based Teams and new Outlook launch failure with the 8 September 2026 security updates KB5124008 and KB5124012.
2026-09-08
Microsoft resolved the Windows 11 desktop-background reset issue with KB5124008 on 8 September 2026.
2026-09-08
Microsoft resolved the mouse-customization reset on non-English Windows 11 devices with KB5124008 on 8 September 2026.
2026-09-08
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
2026-09-08
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.
2026-09-08 · KB5124008
KB5124008 updates Windows 11 25H2 to OS build 26200.9445 in Microsoft's 8 September 2026 security release.
2026-09-08 · KB5124008
KB5124008 updates Windows 11 24H2 to OS build 26100.9445 in Microsoft's 8 September 2026 security release.
2026-09-08 · KB5122880
KB5122880 updates Windows 11 23H2 to OS build 22631.7582 in Microsoft's 8 September 2026 security release.
2026-09-08 · KB5122871
KB5122871 updates Windows Server 2025 to OS build 26100.33438 in Microsoft's 8 September 2026 security release.
2026-09-08 · KB5122882
KB5122882 updates Windows Server 2022 to OS build 20348.5622 in Microsoft's 8 September 2026 security release.
2026-09-08 · KB5122876
KB5122876 updates Windows Server 2019 to OS build 17763.9245 in Microsoft's 8 September 2026 security release.
2026-09-08 · KB5123099
KB5123099 updates Windows Server 2016 to OS build 14393.9512 in Microsoft's 8 September 2026 security release.
2026-09-08
Current Channel: Version 2608 (Build 20326.20144) Monthly Enterprise Channel: Version 2608 (Build 20326.20142) Monthly Enterprise Channel: Version 2607 (Build 20228.20226) Monthly Enterprise Channel: Version 2606 (Build 20131.20260) Semi-Annual Enterprise Channel (receives Monthly Enterprise Channel builds): Version 2608 (Build 20326.20140) Semi-Annual Enterprise Channel (receives Monthly Enterprise Channel builds): Version 2607 (Build 20228.20226) Semi-Annual Enterprise Channel (receives Monthly Enterprise Channel builds): Version 2606 (Build 20131.20258) Office 2024 Retail: Version 2608 (Build 20326.20144) Office 2021 Retail: Version 2608 (Build 20326.20144) Office LTSC 2024 Volume Licensed: Version 2408 (Build 17932.20976) Office LTSC 2021 Volume Licensed: Version 2108 (Build 14334.20906) Office 2019 Volume Licensed: Version 1808 (Build 10417.20207) Access CVE-2026-69477 CVE-2026-6952
2026-09-07
Configuration Manager 2603 rollup KB39169655 updates CMG infrastructure and fixes CMPivot AllSigned execution, interrupted BITS downloads and Windows Server 2025 performance-counter registration.
2026-09-01
Microsoft announces new generally available and preview capabilities for tenant governance, access reviews, lifecycle workflows, passwordless Teams device identities, Cloud Sync, Domain Services and secure AI access.
2026-09-01
You'll be able to configure Microsoft Defender for Endpoint to open automatically during out-of-box setup for supported corporate-owned Android Enterprise devices.
2026-09-01
Windows Autopatch currently offers limited control over the deployment of quality updates.
2026-09-01
For Android Enterprise dedicated devices using Managed Home Screen (MHS) with Microsoft Entra shared device mode, Intune will allow admins to requiring users to complete MHS authentication state before allowing protected activities in MAM-integrated apps.
2026-09-01
The iOS/iPadOS Company Portal will support Declarative Volume-Purchased Program (VPP) app downloads from the Apps tab.
2026-09-01
Microsoft Intune will add new Apple settings for supported iOS/iPadOS and macOS devices.
2026-09-01
Microsoft Intune will update its minimum supported macOS version after Apple releases macOS 27.
2026-09-01
Microsoft Intune will update its minimum supported operating-system version after Apple releases iOS and iPadOS 27.
2026-09-01
Starting with Intune's September (2609) release, the new single device page in the Intune admin center will become the default experience for all admins, and the previous device page will no longer be available.
2026-09-01
Deployments and Deployments plans will give you a new way to roll out apps and configuration policies in Intune.
2026-09-01
You'll be able to use Microsoft Intune bulk device actions to activate eSIMs on up to 100 supported corporate-owned Android Enterprise devices running Android 15 or later by using a carrier activation server URL.
2026-09-01
You'll be able to use Remote Help in US Government Community Cloud High (GCCH) environments.
2026-08-31
By: Per Larsen - Senior Product Manager | Microsoft Intune For many organizations, Group Policy Objects (GPOs) remain an important part of Windows configuration.
2026-08-27
By: Maggie Dakeva, Senior Product Manager - Microsoft Intune We’ve heard organizations want Windows deployment to be simple for employees and predictable for IT admins.
2026-08-27
KB39398030 is a Configuration Manager security update for script handling, the SMS Provider, the Message Processing Engine and Discovery Data Record processing.
2026-08-27
Microsoft released the optional Windows 11 25H2 and 24H2 preview update KB5120998 with new management, File Explorer, Windows Share and interface improvements.
2026-08-26
This issue is related to peripherals with RGB features Microsoft status: Resolved.
2026-08-26
Defender Vulnerability Management reports vulnerabilities detected in applications installed through the Microsoft Store.
2026-08-25
Microsoft documents how Continuous Access Evaluation can invalidate service-principal bearer tokens within minutes instead of waiting for their normal token lifetime to expire.
25.08.2026
Microsoft Intune service release 2608 adds unattended Remote Help for physical Windows devices and new Apple, Android, Windows, Linux and Windows 365 management capabilities.
2026-08-24
Microsoft Intune now includes new Windows settings catalog options across several administrative template refreshes.
2026-08-24
The Microsoft Defender Antivirus template for Linux, which is part of Intune's Endpoint Security Antivirus policy, now includes a new Audit value for the Enforcement level setting.
2026-08-24
Microsoft Intune now includes a security baseline for Windows 365 for Agents Cloud PCs.
2026-08-24
Microsoft Intune now supports a memory scan setting in the Microsoft Defender Antivirus template for Linux endpoint security antivirus policies.
2026-08-24
Microsoft Intune now supports unattended Remote Help sessions on physical Windows devices.
2026-08-24
Microsoft Intune now supports Apple Declarative Device Management (DDM) for required volume purchase program (VPP) apps on devices running iOS/iPadOS 17.
2026-08-24
Microsoft Intune now supports a Screen timeout setting in the Android Enterprise settings catalog, letting you specify how many seconds pass before the screen turns off.
2026-08-24
Microsoft Intune now supports the Block one lock for device and work profile setting in the Android Enterprise settings catalog, letting you require separate locks for the device and work profile instead of a shared one.
2026-08-24
Microsoft Intune now supports the Number of days work profile is allowed to be switched off setting in the Android Enterprise settings catalog, so you can limit how long a work profile stays turned off.
2026-08-24
Microsoft Intune now supports the Remove all eSIMs during a device wipe setting in the Android Enterprise settings catalog.
2026-08-24
Microsoft Intune now supports new Settings Catalog options for testing on the OS 27 betas, covering Declarative Device Management areas such as App Settings , Web Content Filter , and Siri Settings for iOS/iPadOS and macOS.
2026-08-24
Microsoft Intune now includes a settings catalog option for keeping fully managed and dedicated Android device screens on while charging.
2026-08-24
Microsoft Intune now includes Apple OS 27 Setup Assistant skip keys for Liquid Glass and Accessibility Appearance in Automated Device Enrollment profiles.
2026-08-24
The operatingSystemVersion property in assignment filters is now generally available for managed devices and managed apps.
2026-08-24
Microsoft Intune now supports Apple's Enhanced Logging device action on supported supervised devices running a compatible OS release.
2026-08-24
Microsoft Intune now surfaces expanded SIM inventory for corporate-owned Android Enterprise devices, including EIDs, multiple ICCIDs, and activation state.
2026-08-24
Microsoft Intune now supports single-device eSIM activation for corporate-owned Android Enterprise devices running Android 15 and later.
2026-08-24
Microsoft Intune now lets you remove a single eSIM from a corporate-owned Android Enterprise device without wiping it.
2026-08-24
Microsoft Intune now lets you choose whether to preserve or remove eSIMs when wiping one corporate-owned Android Enterprise device.
2026-08-24
Microsoft Intune now supports device inventory for personally owned Android Enterprise devices with a work profile managed by Android Management API.
2026-08-21
Microsoft resolved IT1450132, which could remove an existing Managed Home Screen exit PIN when older Android Enterprise device configuration policies were updated.
2026-08-20
Deserialization of untrusted data in Microsoft Entra ID could allow an unauthenticated attacker to execute code over the network.
2026-08-20
Microsoft added a known issue for Windows 11 24H2 and 25H2 systems that use certain RGB-lighting components or low-level drivers such as inpoutx64.
2026-08-19
Task Manager can show per-process NPU and GPU neural-engine activity on supported newer Windows 11 devices.
2026-08-18
Microsoft published a PowerShell Gallery troubleshooter for Delivery Optimization and Microsoft Connected Cache diagnostics.
2026-08-17
Microsoft KB38982839 fixes security issues in the SMS Provider and the Configuration Manager administration service. The administration service fix is a defense-in-depth measure related to the Windows SMB Server issue CVE-2026-26128.
12.08.2026
Microsoft released Current Channel Preview Version 2608, Build 20326.20072 on August 12, 2026.
2026-08-11
This issue occurs because the previous GIF provider (Tenor) retired its service on June 30, 2026.
11.08.2026
KB5121003 is the August cumulative security update for Windows 11 24H2 and 25H2. It carries the prior preview improvements forward and sets the new targets to build 26100.9168 and 26200.9168.
11.08.2026
The August 11 Server releases set a new security baseline for Windows Server 2025, 2022, 2019 and 2016.
11.08.2026
Microsoft 365 Apps Current Channel Version 2607, Build 20228.20190 resolves a MailTips issue in Outlook.
11.08.2026
Office LTSC 2024 Version 2408 was updated to Build 17932.20910 on August 11, 2026.
11.08.2026
Microsoft released Office for Mac Version 16.112, Build 26081010 with Excel Copilot capabilities and Outlook improvements.
11.08.2026 · KB5120240
KB5120240 aktualisiert Windows 11 23H2 auf Build 22631.7517.
11.08.2026 · KB5121003
KB5121003 aktualisiert Windows 11 24H2 auf Build 26100.9168.
11.08.2026 · KB5121003
KB5121003 aktualisiert Windows 11 25H2 auf Build 26200.9168.
11.08.2026 · KB5120249
KB5120249 aktualisiert Windows 10 ESU and LTSC 2021 auf Build 19045.7663 / 19044.7663.
11.08.2026 · KB5120233
KB5120233 aktualisiert Windows Server 2025 auf Build 26100.33296.
11.08.2026 · KB5120242
KB5120242 aktualisiert Windows Server 2022 auf Build 20348.5499.
11.08.2026 · KB5120238
KB5120238 aktualisiert Windows Server 2019 auf Build 17763.9121.
11.08.2026 · KB5120418
KB5120418 aktualisiert Windows Server 2016 auf Build 14393.9418.
2026-08-11
A use-after-free in the Windows Ancillary Function Driver for WinSock can let a locally authenticated attacker win a race condition and gain SYSTEM privileges without user interaction.
10.08.2026
Microsoft bündelt neue Entra-Funktionen für Windows-SSO, Cloud Sync und Lifecycle Workflows sowie mehrere öffentliche Vorschauen für hybride Geräte, Gastkonten und Domain Services.
2026-08-11
Current Channel: Version 2607 (Build 20228.20190) Monthly Enterprise Channel: Version 2607 (Build 20228.20188) Monthly Enterprise Channel: Version 2606 (Build 20131.20206) Monthly Enterprise Channel: Version 2605 (Build 20026.20266) Semi-Annual Enterprise Channel (receives Monthly Enterprise Channel builds): Version 2607 (Build 20228.20186) Semi-Annual Enterprise Channel (receives Monthly Enterprise Channel builds): Version 2606 (Build 20131.20206) Semi-Annual Enterprise Channel: Version 2508 (Build 19127.20730) Office 2024 Retail: Version 2607 (Build 20228.20190) Office 2021 Retail: Version 2607 (Build 20228.20190) Office LTSC 2024 Volume Licensed: Version 2408 (Build 17932.20910) Office LTSC 2021 Volume Licensed: Version 2108 (Build 14334.20848) Office 2019 Volume Licensed: Version 1808 (Build 10417.20197) Access CVE-2026-64906 CVE-2026-64908 CVE-2026-64912 CVE-2026-64914 CVE-2026-6491
2026-08-03
The next annual update for Windows 11 is coming soon and is already available to Windows Insiders!
03.08.2026
Eligible Windows 11 version 26H2 devices will back up user settings and the Microsoft Store app list by default, making replacement and recovery scenarios more consistent.
03.08.2026
Windows 365 and Azure Virtual Desktop now support RDP Multipath with redundant TCP connections to reduce disconnects when a network path degrades or changes.
03.08.2026
Microsoft Entra ID is changing its authentication experience to make passkeys the default phishing-resistant method and reduce dependence on SMS and voice authentication.
03.08.2026
Azure Arc-enabled hotpatch updates for Windows Server 2025 can apply most security updates without a restart and are now available without an additional hotpatch charge.
03.08.2026
The July update for Windows 11 versions 25H2 and 24H2 begins a gradual rollout of the redesigned Start menu, accessibility improvements, quieter Widgets, better File Explorer size units and expanded Windows Hello ESS support.
03.08.2026
Windows 11 version 24H2 Home and Pro reach end of updates on 13 October 2026; Enterprise and Education editions remain supported until 12 October 2027.
03.08.2026
Windows 10 Enterprise LTSB 2016 reaches end of updates on 13 October 2026. Microsoft recommends Windows 11 Enterprise LTSC 2024, with ESU available when migration needs more time.
31 July 2026 · Microsoft feed time
Microsoft published Security Intelligence package 1.455.436.0 with a matching detection changelog. Engine 1.1.26060.3008 and Platform 4.18.26060.3008 are unchanged.
28.07.2026
Intune kann ausgewählte Windows Registry-Schlüssel über Device inventory erfassen und damit die tatsächlich vorhandene Gerätekonfiguration anzeigen.
28.07.2026
Der offizielle Microsoft Intune Blog bündelt die Juli-Änderungen mit Agent Security Baselines, benutzerdefinierter macOS-Compliance und Samsung-Firmwaresteuerung.
27.07.2026
Nach einem manuellen Sync zeigt Intune den Status einzelner Workloads für Windows-Geräte statt nur die Sync-Aktion selbst.
27.07.2026
Microsoft Intune service release 2607 adds Samsung Knox E-FOTA management, new Windows settings, improved Windows device sync, custom macOS compliance and regional Microsoft Store app support.
2026-07-27
Intune on-demand Sync now initiates a comprehensive synchronization of configuration policies, apps and scripts on Windows and iOS/iPadOS devices.
2026-07-22
For years, organizations have relied on Microsoft’s Key Management Service (KMS) to activate Windows devices at scale.
2026-07-21
IT administrators can now automatically accept SSO permissions on managed Windows devices using a supported registry setting.
2026-07-21
Reliable connectivity is essential for delivering a productive Cloud PC and virtual desktop experience.
20.07.2026
Microsoft führt 2603, 2509 und 2503 als unterstützte Current-Branch-Versionen; 2409 hat sein Supportende erreicht.
20.07.2026
ConfigMgr 2603 ist für alle Kunden verfügbar und kann auf Sites ab Version 2409 als In-console Update installiert werden.
20.07.2026 · 00:31:32
Der offizielle Paketfeed und der Detection Changelog weisen Security Intelligence 1.455.229.0 aus. Engine 1.1.26060.3008 und Platform 4.18.26060.3008 bleiben unverändert.
20.07.2026 · 12:54 PT · KB5121986
Microsoft hat die WSUS-Service-Degradation als gelöst markiert und veröffentlicht mit KB5121986 die verbindliche Bereinigung für bereits betroffene WSUS- und ConfigMgr-SUP-Umgebungen.
18.07.2026 · KB5121767
KB5121767 aktualisiert Windows 11 24H2 auf Build 26100.8894 und behebt die Intel-IPF-Inkompatibilität auf einer begrenzten Zahl betroffener Geräte.
18.07.2026 · KB5121767
KB5121767 aktualisiert Windows 11 25H2 auf Build 26200.8894 und behebt die Intel-IPF-Inkompatibilität auf einer begrenzten Zahl betroffener Geräte.
16.07.2026
AutoAcceptSsoPermission steht nach KB5101650 für verwaltete Windows 11 24H2- und 25H2-Geräte bereit.
16.07.2026
Microsoft bestätigt das Ende des Mainstream Supports für Windows Server 2022 am 13.10.2026. Extended Support mit monatlichen Security Updates läuft bis 14.10.2031 weiter.
15.07.2026
Die Preview behebt fehlende Outlook DLP Policy Tips nach dem Anhängen sensibler Dateien.
14.07.2026
Die Juli Updates erweitern die gezielte Auslieferung neuer Secure-Boot-Zertifikate an geeignete Geräte.
14.07.2026
Juli Security Updates blockieren Socket-Nutzung über nicht registrierte Drittanbieter-TDI-Transporte.
14.07.2026
Windows unterstützt SHA-2-Zertifikatthumbprints für vertrauenswürdige RDP Publisher; SHA-1 bleibt nur vorübergehend kompatibel.
14.07.2026
KB5099536 ergänzt Hybrid Post-Quantum Cryptography Key Exchange und Composite Cryptographic Formats.
14.07.2026
Windows Server 2025 erkennt unsichere Distributed-Key-Manager-Container-ACLs und bietet eine Opt-in-Remediation.
14.07.2026
KB5099536 verbessert den Start von Hyper-V-isolierten Windows Server Containern.
14.07.2026
Nach KB5070881 oder neuer entfernt WSUS vorübergehend detaillierte Synchronisationsfehler aus der UI.
14.07.2026
Bei Dynamic Updates für bestehende Installationsmedien muss die passende boot.stl enthalten sein, sonst kann der Start mit 0xc0430001 fehlschlagen.
14.07.2026
Der aktuelle produktive Build behebt Outlook-Abstürze bei Kalendern und fehlende DLP Policy Tips für sensible Anhänge.
14.07.2026
Der neue Monthly-Enterprise-Build enthält Security Updates sowie Funktions- und Performancefixes.
14.07.2026
Der unterstützte 2605-Branch erhält Juli Security Updates und Quality Fixes.
14.07.2026
Auch der 2604-Branch erhält einen separaten Juli Security Build.
14.07.2026
Mit Version 2606 vereinheitlicht Microsoft den Semi-Annual Enterprise Channel und den Monthly Enterprise Channel zu einem Enterprise-orientierten Servicing-Modell.
14.07.2026
Aktueller Zielstand: Version 2606, Build 20131.20154; veröffentlicht am 14. Juli 2026.
14.07.2026
Aktueller Monthly-Enterprise-Zielstand ist Version 2606, Build 20131.20152.
14.07.2026
Unterstützter Parallelstand: Version 2605, Build 20026.20236.
14.07.2026
Unterstützter Parallelstand: Version 2604, Build 19929.20264.
14.07.2026
Der vereinheitlichte SAEC-Zweig erhält Version 2606, Build 20131.20150.
14.07.2026
Der klassische SAEC-Zweig bleibt mit Version 2508, Build 19127.20730 unterstützt.
14.07.2026
Microsoft listet für den Juli-Release 78 CVE-Einträge über Word, Excel, PowerPoint, OneNote und die Office Suite.
14.07.2026
Microsoft dokumentiert in diesem Build zwei konkrete Outlook-Fixes; neue Features werden für diesen Release nicht aufgeführt.
14.07.2026 · KB5099414
KB5099414 aktualisiert Windows 11 23H2 auf Build 22631.7376.
14.07.2026 · KB5101650
KB5101650 aktualisiert Windows 11 24H2 auf Build 26100.8875.
14.07.2026 · KB5101650
KB5101650 aktualisiert Windows 11 25H2 auf Build 26200.8875.
14.07.2026 · KB5099536
KB5099536 aktualisiert Windows Server 2025 auf Build 26100.33158.
14.07.2026 · KB5099540
KB5099540 aktualisiert Windows Server 2022 auf Build 20348.5386.
14.07.2026 · KB5099538
KB5099538 aktualisiert Windows Server 2019 auf Build 17763.9020.
14.07.2026 · KB5099535
KB5099535 aktualisiert Windows Server 2016 auf Build 14393.9339.
14.07.2026
Deserialization of untrusted data can allow remote code execution over the network on an affected SharePoint Server.
14.07.2026
Missing authentication for a critical function can allow an unauthenticated attacker to modify SharePoint data over the network.
14.07.2026
Ein lokal authentifizierter Angreifer kann wegen zu grober AD-FS-Zugriffsrechte Administratorrechte erlangen.
13.07.2026
Intune app protection now supports multiple managed accounts in Microsoft Outlook for iOS and iPadOS version 5.2626.0 or later.
2026-07-08
AI agents are rapidly evolving from answering questions to performing tasks across enterprise systems.
07.07.2026
Der Build behebt einen Outlook-Absturz bei Copilot Compose Chat und die Sichtbarkeit von Help me write im High-Contrast-Modus.
02.07.2026
Microsoft kündigt an, die unterstützte Mindestversion später 2026 auf iOS/iPadOS 18 anzuheben.
02.07.2026
Intune bereitet Warnungen für iOS-Apps vor, die mit einem nicht unterstützten Intune App SDK gebaut wurden.
02.07.2026
Microsoft bereitet eine kontrollierte Konfigurationssicht für Defender-Antivirus-Einstellungen über Intune, ConfigMgr und Gruppenrichtlinien vor.
02.07.2026
Microsoft bereitet eine Health-Sicht für Intune Certificate Connectors mit Betriebs- und Konnektivitätssignalen vor.
2026-07-02
For supported Windows devices, Intune supports client-driven compliance evaluation.
30.06.2026
Microsoft dokumentiert allgemeine Funktions- und Performancefixes für diesen 2606-Build.
30.06.2026 · KB33247081
Der Hotfix gilt für ConfigMgr 2409, 2503, 2509 und 2603 und korrigiert MCC-Installationen hinter Proxys, die absolute URLs verlangen.
29.06.2026
Nach dem Upload einer neueren Version derselben PKG-App verteilt Intune das Update automatisch an Geräte, auf denen Benutzer die Available App bereits installiert haben.
29.06.2026
Microsoft führt ChatGPT neu in der offiziellen Liste der Apps, die Microsoft Intune App Protection Policies unterstützen.
29.06.2026
Enterprise App Management wird auf GCC High und DoD erweitert; Government-Tenants können den Enterprise Catalog für vorpaketierte Microsoft- und Drittanbieter-Apps verwenden.
29.06.2026
Required EAM Apps erkennen neue Versionen im Enterprise Catalog und können diese automatisch auf Zielgeräte verteilen.
29.06.2026
Commercial Microsoft 365 E3 erhält Remote Help, Advanced Analytics und Intune Plan 2; E5 zusätzlich EPM, EAM und Microsoft Cloud PKI.
29.06.2026
Intune stellt eine neue Microsoft-365-Apps-Baseline bereit; bestehende Profile wechseln nicht automatisch auf v2512.
29.06.2026
Die bestehende 25H2 Baseline enthält jetzt Disable Internet Explorer 11 Launch Via COM Automation mit dem Default Enabled.
29.06.2026
Intune ergänzt neue Android-Enterprise-Kontrollen für App Functions, Widgets, Mobilfunk, VPN, Wi-Fi Security, eSIM, SMS, Printing und weitere Gerätefunktionen.
29.06.2026
WPA3-Personal steht als Security Type für verwaltete iOS- und iPadOS-Wi-Fi-Profile zur Verfügung.
29.06.2026
Intune unterstützt Trustd Mobile als Mobile-Threat-Defense-Partner für enrollte Android- und iOS/iPadOS-Geräte.
29.06.2026
Helpdesk-Mitarbeiter können Anwendungen in Azure Virtual Desktop RemoteApp Sessions über Remote Help sicher anzeigen und steuern.
29.06.2026
Microsoft Tunnel Gateway unterstützt Red Hat Enterprise Linux 9.7 mit Podman 5.8.2.
29.06.2026
Das bestehende Intune Antivirus-Profil für Linux erhält Offline Security Intelligence Update und Scheduled Scan Settings.
25.06.2026
Der Release behebt deutliche Access-Performanceprobleme bei Formularen, Subforms und Record Navigation.
2026-06-23
Deploying Secure Boot certificate updates across the Windows ecosystem has required coordination across operating systems, device manufacturers, and firmware vendors.
2026-06-23
When a Windows PC experiences an unexpected issue, every minute of downtime matters.
22.06.2026
MAA-geschützte Änderungen durch Service Principals, Skripte und Drittanbieter-Apps durchlaufen jetzt denselben Approval Workflow wie interaktive Aktionen.
16.06.2026 · KB38232642
Microsoft verbessert die Sicherheit beim Import von Configuration-Manager-Console-Extensions für 2603 sowie unterstützte 2509- und 2503-Installationen.
15.06.2026
Intune liefert verwaltete Win32-App-Inhalte nur noch per HTTPS; nicht konforme Connected-Cache-Nodes werden umgangen.
15.06.2026
Neue Apple-ADE-Enrollment-Policies können während der Registrierung die Entra Security Group eines Geräts ermitteln.
12.06.2026
ConfigMgr 2603 beschränkt NAA-Informationen auf unterstützte OSD-Media-Task-Sequence-Szenarien und entfernt Legacy-Zugriffspfade.
12.06.2026
CMG akzeptiert nur noch TLS 1.3 AES-GCM und TLS 1.2 ECDHE. EnableCertPaddingCheck wird standardmäßig gesetzt.
12.06.2026
SQL Server 2025 RTM ist für CAS, Primary und Secondary Sites unterstützt; SQL Express 2025 zusätzlich für Secondary Sites.
12.06.2026
ConfigMgr Komponenten und Site Roles benötigen das deprecated sqlncli.msi nicht mehr.
12.06.2026
2603 verbessert die Unterstützung und Tests für PKI-Zertifikate zwischen Site Systems und SQL Server.
12.06.2026
Import-CMDriver erkennt ARM64 korrekt; CcmSetup Upgrades von 2409 oder 2503 auf Windows 11 ARM64 scheitern nicht mehr mit 0x80070643.
12.06.2026
New-CMCloudManagementGateway unterstützt bestehende Resource Groups zusammen mit ServerAppClientId und zeigt blockierende Azure-ABAC-Antworten detaillierter.
12.06.2026
Outbound Alert und Total Outbound Data funktionieren wieder für VMSS-basierte CMGv2 Deployments.
12.06.2026
Entra Token Validation nutzt ab 2603 Microsoft Identity Service Essentials und benötigt im System Context Zugriff auf login.microsoftonline.com und sts.windows.net.
12.06.2026
ConfigMgr 2603 blendet das Software Update Health Troubleshooting Dashboard wegen Performanceproblemen in großen Umgebungen aus.
08.06.2026
Benutzer können mehrere verwaltete Konten in derselben App verwenden; App Protection Policies gelten getrennt je Konto.
08.06.2026
Das Exit-Lock-Task-Mode-Passwort kann nicht mehr per App Configuration Policy verwaltet werden.
08.06.2026
Apple 26.4 deprecates mehrere Intelligence-Settings im klassischen MDM Restrictions Payload; Intune verweist auf DDM Configurations.
02.06.2026 · KB37942646
Der Hotfix wechselt CMG-VMSS-Instanzen vom auslaufenden Azure Marketplace Offer windowsserver auf windowsserver2022 ohne deprecated .NET-6-Pakete.
2026-05-27 · KB37864969
The second Configuration Manager 2509 rollup supersedes KB36949461 and adds co-management scan-source, offline-feedback, CMG image and console-extension security fixes.
26.05.2026
Intune Administratoren erben Owner-Zugriff und andere Intune RBAC Rollen Contributor-Zugriff auf Copilot in Intune, wenn Intune als Security-Copilot-Datenquelle aktiv ist.
2026-05-20 · KB36949461
This Configuration Manager 2509 rollup fixes Windows 11 image deployment, ARM64 client upgrades, Software Center compliance and Intune Endpoint Protection transitions; KB37864969 replaces it.
19.05.2026
Microsoft bestätigt aktive Ausnutzung einer lokalen Elevation-of-Privilege-Schwachstelle in der Malware Protection Engine (CVSS 7.8, Important).
19.05.2026
Microsoft bestätigt aktive Ausnutzung einer Denial-of-Service-Schwachstelle in der Defender Antimalware Platform (CVSS 4.0, Low).
11.05.2026
macOS-Geräte können Platform SSO bereits während Automated Device Enrollment und Setup Assistant registrieren.
04.05.2026
Die erweiterte App Inventory liefert frischere Daten, mehr App-Metadaten und eine gezielte Auswahl der einzubeziehenden Geräte.
29.04.2026 · KB37447175
Das Security Update verbessert die Zugriffskontrollen für das Network Access Account in ConfigMgr 2409 und 2503.
29.04.2026 · KB37172183
Der Client-Fix verhindert, dass Software-Center-Compliance-Checks in co-managed Umgebungen nach der geplanten Service-Abschaltung im Oktober 2026 fehlschlagen.
27.04.2026
Endpoint Privilege Management unterstützt genehmigungspflichtige Elevation Requests jetzt von allen Benutzern eines Geräts.
27.04.2026
Intune kann festlegen, welche Apps auf verwalteten Android-Enterprise-Geräten als systemweite Credential Provider dienen.
27.04.2026
Apple Vision Pro und Apple TV können ohne User Affinity über Automated Device Enrollment verwaltet werden.
27.04.2026
Intune unterstützt Ubuntu 26.04 LTS; Support für Ubuntu 22.04 LTS endet im August 2026.
14.04.2026
Ein präparierter Link oder eine Datei kann Windows-Shell-Schutzmechanismen umgehen und Spoofing ermöglichen.
30.03.2026
Microsoft Intune service release 2603 adds Apple declarative device management for line-of-business apps, macOS Recovery Lock controls, a supported Android Enterprise OEMConfig app and expanded Remote Help inventory details.
10.02.2026
Type Confusion im Desktop Window Manager kann einem lokalen authentifizierten Angreifer SYSTEM-Rechte geben.
10.02.2026
Fehlerhafte Rechteverwaltung in RDS kann einem lokalen authentifizierten Angreifer SYSTEM-Rechte geben.
10.02.2026
MSHTML kann Sicherheitsmechanismen umgehen; ein Benutzer muss mit präpariertem Inhalt interagieren.
10.02.2026
Fehlerhafte Shell-Verarbeitung kann SmartScreen und Sicherheitswarnungen für bösartige Links oder Shortcuts umgehen.
10.02.2026
Eine Null-Pointer-Dereferenzierung in RasMan kann lokal einen Denial of Service auslösen.
13.01.2026
Desktop Window Manager kann einem lokalen authentifizierten Angreifer Speicheradressinformationen offenlegen.
08.12.2025
ConfigMgr 2509 unterstützt Windows 11 25H2 als Client-Plattform, für Operating System Deployment und In-place Upgrade Task Sequences.
08.12.2025
Beim Aktualisieren von Boot Images kann ConfigMgr den neuesten Windows Bootloader mit Windows UEFI CA 2023 auswählen.
08.12.2025
WinPE bezieht Task-Sequence-Policy nur noch von einem Management Point, der der aktuellen Boundary Group zugeordnet ist.
08.12.2025
Microsoft erweitert den Offline-Service-Connection-Workflow und verbessert Status- und Fehlerausgaben beim Austausch von Usage Data und Update Packages.
08.12.2025
Der ConfigMgr AdminService akzeptiert keine NTLM-Authentifizierung mehr.
08.12.2025
Setup und Prerequisite Check verlangen Microsoft ODBC Driver for SQL Server 18.4.1.1 auf Site-Systemen.
23.04.2025
ConfigMgr 2503 führt den ODBC Driver 18.4.1.1 als Voraussetzung ein; Microsoft dokumentiert fehlende Treiberstände als Known Issue im Upgrade-Pfad.
16.12.2024
ConfigMgr 2409 unterstützt SQL Server Extended Protection for Authentication für Site-Datenbankverbindungen.
16.12.2024
ConfigMgr 2409 ergänzt Windows 11 24H2 und Windows Server 2025 als unterstützte Betriebssysteme.
16.12.2024
Ab ConfigMgr 2409 blockiert der Prerequisite Check Sites mit SQL Server 2012 oder 2014.
16.12.2024
ConfigMgr kann die Nutzung von Windows Desktop Apps mit EXE-Dateinamen jetzt auch auf ARM64-Geräten erfassen.
16.12.2024
ConfigMgr erweitert ARM64-Geräte um BitLocker Task-Sequence-Schritte sowie unterstützte OS- und Fixed-Drive-Policies.
16.12.2024
ConfigMgr 2409 verbessert die Erneuerung des Entra Application Secret für Cloud Management Gateway Integrationen.
16.12.2024
Neue CMG-Bereitstellungen verwenden Managed Identities und eine Third-party Server App statt Storage Account Keys.
16.12.2024
ConfigMgr 2409 optimiert Policy Processing und Collection Evaluation für große Umgebungen.
16.12.2024
Microsoft markiert die Microsoft Deployment Toolkit Integration mit ConfigMgr als deprecated.
06.2026
Entitlement Management kann externe Benutzer per E-Mail direkt einem Access Package zuweisen, auch wenn sie noch nicht im Verzeichnis existieren.
06.2026
Bei Incoming-Trust-Referral-Flows versucht Entra Kerberos nun die Entschlüsselung mit primären und sekundären Keys.
06.2026
Private Application Traffic Profiles können Benutzern auf Entra-registrierten Windows-Geräten zugewiesen werden.
06.2026
Microsoft Authenticator verhindert auf gerooteten oder jailbroken Geräten das Hinzufügen und Verwenden von Arbeits- oder Schulkonten.
06.2026
CA kann Agent-Benutzerkonten gezielt adressieren, Agent Risk auswerten und compliant Devices für Agent Workloads fordern.
06.2026
Externe Benutzer können sich mit IdP-Credentials anmelden, ohne dass ihre E-Mail-Domain mit einer vorkonfigurierten IdP-Domain übereinstimmt.
06.2026
Der Dienst sichert kritische Directory Objects wie Benutzer, Gruppen, Apps, Service Principals, CA Policies und Named Locations.
06.2026
Die neue Built-in Role erlaubt Defender-initiierte Identity-Containment-Aktionen mit weniger Directory-Rechten.
06.2026
Für ausgewählte nach AD provisionierte Gruppen können Änderungen außerhalb des Entra Provisioning Service blockiert werden.
07.2026
Die Preview unterstützt Agent-native Events ohne Beta-Updatekanal sowie Codex CLI, GitHub Copilot App und Netzwerkinspektion für weitere Node.js-Agenten.
06.2026
Das neue Windows Deployment Tool bündelt das Onboarding Package, verlangt einen generierten Key und erlaubt ein Ablaufdatum.
06.2026
High-Impact Response Actions lassen sich auf Tier-0-Systemen und anderen kritischen Assets gezielter steuern.
06.2026
Defender Vulnerability Management berücksichtigt EPSS, Internet-Exposition und Asset Criticality stärker.
07.2026
Microsoft unterstützt jetzt die Migration von Defender-for-Identity-Sensoren auf Windows Server 2025 Domain Controllern von v2.x auf v3.x.
07.2026
Sensor v3.x kann Windows Event Auditing auf Identity Role Servern für AD FS, AD CS und Entra Connect automatisch konfigurieren.
07.2026
Die Seite bündelt Domain Properties, Deployment Health, Service Accounts, Sensitive Entities, Empfehlungen, GPOs und Trusts.
07.2026
Microsoft erwartet im Juli keine neuen MEC-Clientfeatures; Security- und Quality-Updates werden weiterhin veröffentlicht.
Live
Breite Azure Incidents. Tenant-Details stehen in Azure Service Health.
Live
Exchange, SharePoint, OneDrive und Microsoft 365 Apps.
Live
Messaging, Meetings, Calling und Teams Admin Center.
Live
Enrollment, Check-in, Policy, Apps, Reporting und Autopilot.
Live
Authentication, MFA, Conditional Access und Provisioning.
Live
Portal, Alerts, Advanced Hunting und Sensor Services.
Live
Power Apps, Automate, Dataverse und Power BI.
Live
Known Issues, Safeguard Holds und Resolved Issues.