Microsoft is retiring Exchange Web Services (EWS) in Exchange Online, with a phased shutdown beginning October 1, 2026, and complete retirement by April 1, 2027. You must migrate your applications to the Microsoft Graph API before the final deadline to maintain access to Exchange Online mailboxes. This retirement only affects Exchange Online in Microsoft 365 environments and does not impact on-premises Exchange Server installations. Organizations using EWS-dependent applications face service interruptions unless they transition to supported alternatives. The nearly 20-year-old protocol no longer meets modern security, scale, and reliability requirements.

Source

Un changement à venir sur Microsoft 365 : l'API Exchange Web Services (EWS) sera désactivée et supprimée des environnements Exchange Online dès avril 2027.

Le post Microsoft prévient : Exchange Online EWS sera désactivé en avril 2027 ! a été publié sur IT-Connect.

Microsoft Purview Data Security Investigations became generally available in January, providing data security teams with AI-powered tools to identify, investigate, and mitigate sensitive data risks across Microsoft 365 environments. The solution addresses the challenge of managing 220 zettabytes of organizational data while facing over 12,000 confirmed breaches annually by streamlining investigations that previously took weeks or months into hours.

Source

Microsoft announced significant changes to its Teams licensing structure, effective April 1, 2026. The updates move several advanced capabilities from Teams Premium into core Teams Enterprise licenses, expand access to Microsoft Places features, and introduce new attendee capacity options for large-scale events. These changes aim to simplify licensing and provide broader access to powerful collaboration tools across organizations.

Source

Microsoft has introduced trust-based enhancements to the Teams Admin Center (TAC), designed to simplify app security and compliance management for IT administrators. These updates, known as Trust Through Certification, enable you to quickly identify trusted applications, enforce organizational standards, and streamline governance workflows through features such as "apps to consider allowing," security compliance filters, and Microsoft-certified app collections. The enhancements build on existing foundational features while adding dedicated trust indicators that consolidate security signals in a centralized dashboard. You can now evaluate apps based on industry-standard certifications without leaving the Teams Admin Center, reducing the time spent on manual reviews and cross-checking vendor documentation.

Source

Microsoft just announced the Security Baseline for Microsoft 365 Apps for enterprise version 2512 ( (v2512, December 2025) as part of the Microsoft Security Compliance Toolkit. This security configuration package aligns with Administrative Templates released in version 5516 and introduces updated policies designed to strengthen protections in Excel, PowerPoint, and core Microsoft 365 Apps components. You can deploy these Microsoft-recommended security configurations through multiple methods including Office cloud policies, Microsoft Intune, or Group Policy to reduce configuration drift and ensure consistent protection across enterprise environments.

Source

Microsoft introduced a new PowerShell parameter, ExcludeFromAllHolds, that simplifies removing multiple retention holds from inactive mailboxes in Exchange Online. This capability enables you to remove various retention holds from inactive mailboxes while preserving essential compliance protections such as eDiscovery holds and litigation holds.

Source

Microsoft has launched a native migration orchestrator in public preview that enables you to move user data between Microsoft 365 tenants during mergers, acquisitions, divestitures, and organizational restructurings. This cloud-based solution consolidates Exchange mailboxes, OneDrive files, and Teams chats and meetings into a single migration workflow, eliminating the need for multiple third-party tools and reducing administrative complexity.

Source

Microsoft will enforce multi-factor authentication (MFA) for all users signing in to the Microsoft 365 admin center starting February 9, 2026. This critical security measure aims to prevent unauthorized access to administrative accounts that manage tenant configurations, user provisioning, and compliance settings.

Source

Microsoft integrates Teams with Defender for Office 365, enabling security admins to block external users directly from the Microsoft Defender portal using the Tenant Allow/Block List. This centralized security management feature rolls out in January 2026, supporting up to 4,000 domains and 200 email addresses with automatic blocking across chats, meetings, channels, and calls.

Source

Microsoft Copilot Studio is a low-code platform that lets you build, customize, and manage AI agents without extensive programming knowledge. The platform provides a graphical interface for creating intelligent agents in natural language that handle conversations and automate tasks across Microsoft Teams, Microsoft 365 Copilot, websites, mobile apps, and third-party platforms such as Facebook or Slack. To ground agents, you can integrate your organization's data sources. Recent updates have introduced enhanced AI models, improved authoring experiences, and new governance capabilities, making the platform more accessible and secure.

Source

Dès février 2026, l'authentification MFA sera obligatoire pour tous les utilisateurs qui veulent accéder au Centre d'administration Microsoft 365.

Le post Le MFA obligatoire dans le Centre d’administration Microsoft 365 dès février 2026 a été publié sur IT-Connect.

Microsoft has indefinitely canceled the planned limit on bulk email sending in Exchange Online following significant customer feedback about operational challenges. However, Microsoft advises using Azure Communication Services for Email for organizations that require sending large volumes of email to external recipients. 

Source

Microsoft offers organizations two on-premises options for email and collaboration: Microsoft 365 Local and Exchange Server Subscription Edition (Exchange SE). While both solutions deliver on-premises productivity capabilities, they differ fundamentally in architecture, scope, and target use cases.

Source

Microsoft announced that Exchange Online will block devices using Exchange ActiveSync protocol versions earlier than 16.1 from connecting to its services starting March 1, 2026. This change affects organizations using mobile devices with native email applications to access Exchange Online mailboxes and aims to strengthen security and reliability across the platform. Clients using basic authentication for an affected protocol will be unable to connect to Exchange Online and will receive an HTTP 401 error stating "bad username or password."

Source

Microsoft has clarified the key differences between its one-time purchase Office 2024 and the subscription-based Microsoft 365 suite in an official support document. The comparison helps users understand the trade-offs between a single upfront payment for static software and ongoing subscription fees for continuously updated services.

Source

Sur Exchange Online (Microsoft 365), le protocole Exchange ActiveSync (EAS) 16.1 va être imposé, ce qui pourrait bloquer la connexion de certains appareils.

Le post Microsoft va bloquer l’accès Exchange Online à certains appareils : auditez votre tenant Microsoft 365 a été publié sur IT-Connect.

Microsoft announced that advanced Intune Suite capabilities will be included in Microsoft 365 E3 and E5 subscriptions at no additional cost, expanding endpoint management and security features to more organizations. The changes take effect in 2026 and aim to help IT teams manage devices at scale while strengthening Zero Trust security.

Source

Microsoft announced Baseline Security Mode at Ignite 2025, a new security capability that provides an opt-in security baseline for Microsoft 365 tenants. The feature shifts critical protections from optional configurations to a secure-by-default model that administrators can choose to enable, helping organizations meet minimum security standards when they opt into the feature.

Source