Microsoft has restored Domain Exclusion for Microsoft 365 Copilot after removing it during an August rollout. The feature lets IT administrators block up to 1,000 domains from Copilot’s public web grounding, limiting which external sites can influence generated answers.

Source

Microsoft’s September 2026.NET servicing release updates supported.NET runtimes to 10.0.12, 9.0.20, and 8.0.31 while addressing eight security vulnerabilities. The same cycle also patches.NET Framework on Windows 11, including a remote code execution flaw shared with modern.NET versions.

Source

.NET 11 Release Candidate 1 is now available with a go-live support license, making it suitable for production workloads before the final release. The first RC also works with Visual Studio 2026 Insiders and Visual Studio Code with the C# Dev Kit, giving teams a supported path to test upgrades and deployment pipelines.

Source

Microsoft released cumulative updates KB5124008 and KB5122880 on September 8, 2026, as part of the September Patch Tuesday cycle. KB5124008 targets Windows 11 versions 24H2 and 25H2 and raises the OS build to 26200.9445 or 26100.9445. KB5122880 targets version 23H2 and raises the build to 22621.7582. Both packages deliver mandatory security fixes, but KB5124008 also rolls in the non-security changes from the August preview update KB5120998, including several user interface and platform features worth planning for.

Source

ToolHive gives administrators a self-hosted way to run Model Context Protocol (MCP) servers without placing third-party connectors directly on their machines. The Apache 2.0 platform isolates each server in a container, while its registry, gateway, identity controls, and audit features provide a management layer for AI tools such as Cursor and Claude Code.

Source

Windows 11 is rolling out a long-requested fix that lets users shut down or restart immediately, even when an update has already downloaded. Microsoft now keeps standard power actions separate from update actions, while also testing broader controls to skip updates during setup and pause them repeatedly.

Source

Microsoft has started rolling out expanded Windows Autopatch controls that let administrators approve, defer, or pause both Windows updates and Quick machine recovery fixes. The changes arrive as Windows 11 26H2 approaches, following plans to enable 26H2’s Point-in-Time Restore by default on eligible systems.

Source

Windows Update failures may originate in firewall, proxy, or VPN configuration rather than a damaged Windows installation. Microsoft is advising administrators to let update traffic pass without TLS inspection and to use Windows Update logs to distinguish DNS, connectivity, and certificate-validation problems.

Source

Microsoft is rolling out a redesigned Microsoft 365 Setup experience that gives IT admins a single dashboard for deployment progress, licensing, guidance, recommendations, and AI-powered insights. The unified view is designed to surface the next useful action instead of making admins search across separate resources and portals.

Source

Microsoft is rolling out a Windows 11 update change that combines driver,.NET, and firmware installations into the monthly security update, reducing routine interruptions to one restart per month. However, administrators should still expect a required reboot in September on systems preparing to resume normal hotpatching in October.

Source

Microsoft has released KB38982839, a security hotfix for System Center Configuration Manager (SCCM) that addresses issues in the SMS Provider and administration service. It applies to Configuration Manager 2603, 2509, and 2503 systems that have the required prerequisite rollups, but administrators should plan for a site reset and manually update existing secondary sites.

Source

Debian 11 “Bullseye” reached the end of its Long-Term Support period on August 31, 2026. Debian will stop providing security updates in September, leaving administrators with a clear choice: migrate to Debian 12 “Bookworm,” reinstall with Debian 13, or arrange external Extended LTS coverage.

Source

Windows Autopilot Device Preparation is gaining a device-association workflow that can identify a physical Windows 11 device through TPM-based attestation before enrollment, removing the need to import hardware hashes or enter a corporate identifier during OOBE. The change strengthens the case for making Device Preparation the default in cloud-native Intune environments, while original Autopilot remains necessary for pre-provisioning, self-deploying devices, and hybrid join.

Source

Microsoft is rolling out an “Opt out of backup” button in Windows 11’s OneDrive prompts, replacing the recurring reminders that previously offered no permanent refusal. The change gives users a clear way to reject OneDrive backup instead of enabling sync or postponing the decision for a few days.

Source

Microsoft will remove the lightweight Admin app from Teams, Outlook, and Microsoft365.com by October 2026, ending an easy way for very small businesses to handle basic Microsoft 365 tasks without changing apps. The transition has already begun: new customers will no longer receive the app pre-installed or pinned, while existing users can continue accessing it temporarily.

Source

Microsoft will temporarily interrupt the restart-free Windows Hotpatch experience: enrolled Windows 11 and Windows Server devices must restart for both the September and October 2026 updates. The September restart is required by new security components, while October’s restart is part of the quarterly baseline update; normal hotpatching resumes in November.

Source

Microsoft Edge 152 begins a faster major-release schedule that will deliver browser updates every two weeks instead of every four. The change also affects WebView2, while organizations that need more time to test releases can remain on Edge’s eight-week Extended Stable channel.

Source

Microsoft is updating how Windows signs its own software and warns that some third-party applications may stop working even when Windows still trusts the signature. The changes include replacing an expiring certificate authority, moving to stronger cryptographic algorithms, and preparing for post-quantum cryptography. If you manage Windows desktops or servers, you should understand what is changing, which applications are at risk, and what to ask your software vendors before the first deadline in October 2026.

Source

Microsoft is adding hardware-backed device trust to Windows Autopilot as Windows 11 26H2 enters its final testing phase. The update follows Windows 11 26H2’s move into Release Preview as a small enablement-package upgrade, but its device-association feature gives administrators a new way to identify corporate PCs before a user enrolls them.

Source