Wednesday, 30 September 2026

Pin the Copilot app to the Windows taskbar for selected user groups

A new Microsoft 365 admin center option under Copilot > Settings pins the Microsoft Copilot app to the Windows taskbar for chosen user groups instead of all devices. It only pins on eligible Intune-managed Windows devices where the app is already installed, and rolled out worldwide in late September 2026.

Why it matters: A rollout can start with a champions group and widen from there, so taskbar placement follows the adoption plan instead of landing on every device at once.

m365admin.handsontek.net

Teams recommends apps and agents for software the tenant already uses

Teams admin center will surface Teams apps and agents matching third-party applications already in use, such as ServiceNow, Workday and Jira, ranked by usage signals. Admins activate the feature and choose whether to enable each app for the users already using it, specific groups, or the whole organization; nothing changes automatically. Targeted Release and general availability (Worldwide, GCC) both run early to mid November 2026.

Why it matters: Turns app-catalog decisions into a usage-driven shortlist, which makes a Teams agent rollout easier to justify to a customer.

m365admin.handsontek.net

Claude Fable 5.1 replaces Fable 5 in the Cowork model selector

Fable 5.1 is now listed in the Cowork model selector as the most advanced model for ambitious work, taking over from Fable 5.

Why it matters: The top-end model slot changed, so guidance or training that names Fable 5 needs updating.

learn.microsoft.com

Plugins are discoverable and configurable on the Cowork mobile app

Plugins can be found and configured from the Microsoft 365 Copilot mobile app through the attach menu (+) > Skills.

Why it matters: Plugin setup no longer needs the desktop or web client, removing a blocker for mobile-first users.

learn.microsoft.com

Cowork edits existing Word, Excel and PowerPoint files in place

Cowork can edit Office files already stored in OneDrive and SharePoint, preserving the shared file and its existing version history rather than producing a copy.

Why it matters: Keeps Cowork output inside existing document workflows and audit trails instead of spawning parallel files.

learn.microsoft.com

SharePoint Page Agent (Frontier) retires

The Frontier early-access agent that turned Microsoft 365 Copilot conversations into draft SharePoint pages and news posts retires from mid-October 2026, completing mid-November 2026. Page and news authoring moves to Copilot in SharePoint inside the SharePoint authoring experience; pages already created stay accessible and need no migration.

Why it matters: Users who start page drafts from a Copilot chat lose that entry point and must author from SharePoint, so runbooks and training need reworking before mid-November.

m365admin.handsontek.net

Agent 365 observability extends to third-party agents

Connected platforms in Agent 365 now pulls activity from Amazon Bedrock Classic and AgentCore, Google Vertex AI and Anthropic Claude Managed Agents (preview) into the same observability surface as Microsoft agents, showing runs, sessions, tool calls and exceptions on each agent's Activity tab. Targeted Release ran in late September 2026; general availability begins late October 2026 and is expected to complete by Ignite 2026.

Why it matters: One console covers agents across clouds, so a multi-vendor agent estate can be monitored without a separate tool per platform.

m365admin.handsontek.net

Teams app 1449 auto-updates paused on Common Area Phones

Microsoft paused automatic updates to Teams app version 1449/1.0.94.2026220406 on Teams phones after finding the build disables Advanced Calling on Common Area Phone devices. The pause is active globally; devices already on that version stay affected until a corrected build ships, and admins can still push the version manually from the Teams admin center.

Why it matters: Devices already updated have lost Advanced Calling, so check Common Area Phone versions before running any manual update.

m365admin.handsontek.net

New Engage communities get Microsoft 365 group email and calendar on by default

Newly created Viva Engage communities now have the Microsoft 365 group settings for member email and calendar subscriptions enabled by default, so members receive community emails and calendar invitations without opting in. Community owners can change this in the My Account portal. Rollout completes by mid-October 2026; existing communities follow later this autumn.

Why it matters: New communities generate mailbox and calendar traffic from day one, which changes what to expect during an Engage launch.

m365admin.handsontek.net

Passkeys from external identity providers work for Microsoft app sign-ins

Organizations that authenticate Microsoft 365 users through an external identity provider can now extend browser-based passkeys, security keys and eligible single sign-on sessions to Outlook, Teams, OneDrive, Word, Excel, PowerPoint and Microsoft To Do on Android, iOS and managed macOS. The external provider's sign-in step opens in the system browser instead of an embedded web view, then returns to the Microsoft identity broker. Applies to tenants federated through WS-Fed or SAML 2.0.

Why it matters: Removes the embedded web view limitation that blocked sign-in where an identity provider required passkeys, so a phishing-resistant rollout can cover the M365 mobile apps.

techcommunity.microsoft.com

Purview Insider Risk Management retires Data Risk Graph

The visual investigation view linking impacted data, users and alert activity is being removed: configuration was already withdrawn in early September 2026, new onboarding ended September 24, and retirement runs from early December to full removal on December 8, 2026. Investigators move to Activity explorer, Content explorer and User activity. Applies to Worldwide, GCC, GCC High and DoD.

Why it matters: Insider-risk investigation playbooks that screenshot or reference the graph need rewriting against the explorer views before December 8.

m365admin.handsontek.net

Purview retires DSPM classic and DSPM for AI classic

Retirement of both classic Data Security Posture Management experiences starts November 30, 2026 and completes by December 31, 2026, with capabilities folded into a single current DSPM experience covering traditional data sources plus AI applications and agents. Applies to Worldwide, GCC, GCC High and DoD.

Why it matters: Any DSPM for AI reporting built on the classic portal view stops working at the end of the year, so Copilot data-risk reporting has to be rebuilt on the unified experience.

m365admin.handsontek.net

Entra ID sign-in pages block externally injected scripts

A Content Security Policy on login.microsoftonline.com will allow only trusted Microsoft-hosted scripts during authentication, blocking externally injected code as part of the Secure Future Initiative. General availability runs worldwide from mid-October to late October 2026. Entra External ID tenants are not affected. Restated from MC1191924.

Why it matters: Browser extensions, monitoring or branding tools that inject script into the sign-in page will break, so inventory them before mid-October.

m365admin.handsontek.net

TomTom brings location intelligence to Microsoft Fabric

TomTom is publishing its location and geospatial data into Microsoft Fabric and Microsoft Foundry through the IQ Sharing preview, so agents can combine it with enterprise data in OneLake.

globenewswire.com