M365 Message Center

Geändert

14.04.2026

Services

Windows

Starting with the April 2026 Windows security update, Remote Desktop adds new safeguards to help reduce phishing attacks that misuse Remote Desktop (.rdp) files. These attacks attempt to trick devices into connecting to attacker‑controlled systems and sharing local resources without clear visibility. To address this, a new security dialog appears before any connection is made, showing the remote computer address, publisher information (when available), and any requested access to local resources. All requested settings are disabled by default and must be explicitly enabled. A one‑time security warning also appears the first time an RDP file is opened.When will this happen:This change takes effect with the April 2026 Windows security update.How this will affect your organization:Devices that open Remote Desktop (.rdp) files will see a new security dialog before a connection is established

Geändert

14.04.2026

Services

Windows

Note: This notice only affects environments where Scan Cab is used to check for Microsoft update compliance. The Scan Cab for the April 2026 Microsoft security updates is currently delayed and has not yet been released. We will communicate an update on Scan Cab availability as more information becomes available. Thank you for your patience. How this affects your organization: IT administrators who rely on Scan Cab to check for update compliance can track our communications. Progress on the availability of this month's Scan Cab will be communicated when new information is available. Additional information: Learn more about the Scan Cab process: Announcing a smaller WSUS Scan Cab Use Windows Update Agent (WUA) to scan computers for security updates without connecting to Windows Update: Using WUA to Scan for Updates Offline - Win32 apps Documentation on the Catalog Site used to import updat

Geändert

14.04.2026

Services

Windows

Windows updates released April 2026 and later begin the second deployment phase of protections for a Kerberos information disclosure vulnerability (CVE‑2026‑20833). In this phase, domain controllers change default Kerberos ticket behavior for accounts that do not have an explicit Kerberos encryption configuration, shifting to AES‑SHA1-only by default. Environments with remaining RC4 dependencies may experience authentication issues unless those dependencies are remediated or explicitly configured.When this will happen:April 2026 - Enforcement Phase with manual rollback: With installation of the April 2026 Windows security update, default Kerberos behavior changes so domain controllers use AES‑SHA1-only encryption for accounts without explicit encryption type settings, and Enforcement mode is enabled by default on Windows domain controllers. Audit mode remains available as a manual rollba

Geändert

14.04.2026

Services

Windows

The April 2026 security update is now available for all supported versions of Windows. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 update history page. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. Highlights for the Windows 11, version 25H2 update: This security update includes fixes and quality improvements from KB5079391 (released March 26, 2026 - no longer offered) and KB5086672 (released March 31, 2026).This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.This update expands high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. Devices receive the

Geändert

13.04.2026

Services

Windows

Next month, Windows Autopatch will become more broadly available in Government Community Cloud (GCC). Previously, Windows Autopatch was not automatically available for Microsoft 365 G3 and G5 SKUs in GCC. It required the $0 Windows Enterprise (OLS) activation SKU. Now, the OLS SKU is no longer needed. Windows Autopatch is included automatically with:Microsoft 365 G3 GCCMicrosoft 365 GCC G5Microsoft 365 GCC G5 without WDATP/CAS Unified When will this happen:Expected date of launch: May 13, 2026 How this will affect your organization:If you don't use the $0 Windows Enterprise (OLS) activation SKU, you’ll see new Windows Autopatch features in Microsoft Intune next month. These features include update policies for feature, quality, and driver updates, plus enhanced reporting. What you need to do to prepare:No action is needed. New capabilities will be available automatically in Microsoft Int

Geändert

13.04.2026

Services

Microsoft 365 suite

As previously communicated, support for Office LTSC 2021 will end on October 13, 2026. After that date, no further updates, security fixes, or technical support will be available for this version of Office. While the applications may continue to function, using unsupported software could lead to potential security risks, compliance risks, system incompatibilities, and other issues.Support for Visio LTSC 2021 and Microsoft Project LTSC 2021 and several other products will also end on October 13, 2026. Organizations using these products should upgrade as soon as possible to maintain security, compliance, and performance.[How this will affect your organization:]After end of support, Office LTSC 2021 suites and standalones will no longer receive security updates or other fixes, and no technical assistance will be available for devices still running them. Continuing to use unsupported softwar