Starting with the May 2026 Windows security update, Windows Autopatch is enabling hotpatch security updates by default because they are the quickest way to get secure. This change in default behavior will impact all eligible Microsoft Intune devices. Additional IT controls are coming in April. When will this happen: Devices will start receiving hotpatch updates by default with the May 2026 Windows security update. The tenant setting to opt out of hotpatch updates is scheduled to go live on April 1, 2026. How this will affect your organization: Devices that meet hotpatch prerequisites will get secure faster because full Windows security updates are applied without waiting for a restart. Devices are secured as soon as the update is installed. You don’t need to wait for devices to restart, saving on average three to five days. Devices will restart during baseline months, which are January,
Do you need to update Secure Boot certificates across your organization before they start expiring in June 2026? Two events next week can help you with best practices and answers to your questions in real time. When will this happen:On March 9 at 7:30 AM PT (2:30 PM UTC) is Secure Boot certificate updates explained. This will be a fast-paced walkthrough of essential guidance - including how to test firmware, monitor device readiness, deploy updated certificates, and diagnose issues. Then, on March 12 at 8:00 AM PT (3:00 PM UTC), you can ask any questions you might have at the Secure Boot AMA. Members of the engineering team will be on camera and in the comments working to help with answers. What you need to do to prepare:Both events will take place on the Tech Community. Registration is not required, but you will need to sign in to the Tech Community with a Microsoft account in order to
Catch up on important changes across Windows update management, Windows 365, security, and productivity with Windows news you can use for February 2026. Key announcements include general availability of the first sign‑in restore experience in Windows Backup for Organizations, new Start menu customization policies, expanded Windows 365 capabilities and regional availability, and guidance around Windows 11, version 26H1. On the security front, you’ll find a helpful list of new tools and resources to help you manage upcoming Secure Boot certificate expirations plus details on strengthened protections such as DPAPI key rotation and native Sysmon functionality in Windows. When will this happen:Some improvements summarized in this monthly recap are already available, while others are rolling out gradually. What you need to do to prepare:Read February's recap, which includes links to resources
Introduction We are introducing license-based management updates for Microsoft Teams Rooms on Android (MTRA) and other Android-based Teams devices that are synced to the Teams Rooms Pro Management Portal through Device Management (DM) services. This update aligns management portal capabilities with existing Teams Rooms license entitlements (Basic, Standard, and Pro). By enforcing license boundaries in the portal, this change provides clearer expectations for inventory visibility versus advanced monitoring and management features, while maintaining the current in-room meeting experience. These changes apply only to Android devices currently synced from DM services. Internet of Things (IoT)–based Android management convergence is still in progress and is not yet Generally Available. When this will happen General Availability (Worldwide, GCC, GCC High, DoD): Rollout will begin in early Marc
Enhance your organization’s Windows update reliability with Windows Autopatch update readiness. Designed to help IT teams proactively prepare devices for upcoming Windows updates, update readiness surfaces risks and blockers before updates are deployed, reducing failures, downtime, and reactive troubleshooting. Built into Windows Autopatch, it provides actionable insights that help ensure that devices are in a healthy, update-ready state across your fleet. With update readiness insights, you gain early visibility into configuration gaps, policy conflicts, and device conditions that commonly prevent updates from successful installation. This shifts update management from a reactive model to a proactive, insight-driven approach helping keep devices secure, compliant, and productive. When will this happen: Windows Autopatch update readiness is available to those using Windows Autopatch and
New documentation is now available to help IT administrators prepare for Secure Boot certificate updates and manage update readiness across virtual and cloud‑managed Windows environments. The documentation covers Secure Boot certificate updates for Azure Virtual Desktop and Windows 365 Cloud PCs, as well as monitoring Secure Boot certificate status using Microsoft Intune remediations to provide visibility into readiness across managed devices. Together, these resources help ensure virtual and cloud‑managed Windows environments remain secure and continue to receive updates after June 2026. When will this happen:This documentation is available now. Secure Boot certificates begin expiring in June 2026. How this will affect your organization:Organizations managing virtual or cloud‑managed Windows environments may need to review Secure Boot certificate update planning and readiness. The docum
Windows first sign-in restore experience is now generally available as part of Windows Backup for Organizations. Users signing in for the first time on an eligible device will see a restore experience at first sign-in, even if it was missed the first time the device was turned on (Windows out of box experience). This allows users to restore Windows settings, restore their Microsoft Store app list, or choose to configure the device as new. This update extends restore capabilities beyond Microsoft Entra-joined devices to support hybrid-managed environments, improving readiness for new or reimaged Windows 11 devices. For more information, see Windows first sign-in restore experience now available When this will happen:General availability begins with devices that have installed Windows updates released February 24, 2026, and later. How this affects your organization:This feature is availabl
The February 2026 non-security preview update is now available for Windows 11, versions 26H1, 25H2, and 24H2. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. Looking to explore upcoming features and improvements in Windows 11? Check out the Windows roadmap. It includes what’s coming to the Windows Insider Program, what’s gradually rolling out, and what’s generally available. Highlights for the Windows 11, version 25H2 update: The Emoji 16.0 release introduces a small, thoughtfully curated set of new emojis, one from each major category. Each emoji carries timeless symbolism and practical versatility. These new emojis now appear in the emoji panel. A built‑in network speed test is now ava
Learn about tools and options available to organizations to update Secure Boot certificates on Windows Server. Certificates begin expiring in June 2026. You must update them before that date to help keep your security posture. Many recent platforms already include the supported 2023 certificates in firmware. However, for the ones that need to be updated, you need to manage this process manually. When will this happen: The tools are already available to help you to proactively inventory, monitor, and apply updated certificates to your Windows Server devices. June 2026: The 2011 Secure Boot certificate authorities (CAs) begin expiring. How this will affect your organization: Systems on the 2011 CAs after June 2026 are at risk of running on degraded security posture. To update these systems, please be proactive and follow our recommended approach. What you need to do to prepare: Read comple
Three Windows products first released in 2016 are close to reaching end of support. If your organization has devices running Windows 10 Enterprise LTSB 2016, Windows 10 IoT Enterprise 2016 LTSB, and Windows Server 2016, plan to migrate devices to a newer, supported version. If you cannot move to a newer, supported version in time, the Extended Security Updates (ESU) program offers a temporary solution to help keep devices protected in the meantime. When will this happen:Here are the upcoming end-of-support dates to note:Windows 10 Enterprise LTSB 2016: October 13, 2026 Windows 10 IoT Enterprise 2016 LTSB: October 13, 2026 Windows Server 2016: January 12, 2027 On these dates, devices running these versions will receive a final monthly security update. After that, devices will no longer receive Windows security updates, non-security updates, bug fixes, technical support, or online technica
Updated February 20, 2026: We have updated the timeline. Thank you for your patience. Disclaimer: The original message center post was published on August 1, 2025. We previously stated that this is a new feature when it is an expanded capability of the existing feature memory in Copilot. This expanded capability requires new processing of users' data, which is outlined below. We have edited the content below for accuracy and clarity. Thank you to the customers who provided feedback over the past few weeks. We have adjusted our roadmap to address your needs and concerns. Starting September 1, 2025, Microsoft 365 Copilot will start remembering key highlights from your person-to-person communications in chats, emails, and meetings. Initially these memories will be used to improve the quality of Copilot responses to people-related questions. These memories are private to the user. This featu
The Microsoft 365 admin center Message center includes personalization features that help you focus on Windows-related updates and reduce information overload. By configuring service preferences, filters, and columns, you can prioritize Windows feature updates, security updates, hardening changes, and lifecycle announcements that are most relevant to your environments. Additional tools such as Planner syncing, search, and email notifications can help track actionable messages and support effective change management across Windows devices and environments. When will this happen:This capability is already available in the Microsoft 365 admin center. How will this affect your organization:By tailoring the Message center to focus on Windows content, you can more easily identify feature updates, security and out‑of‑band updates, hardening changes, and lifecycle announcements that require awar