Microsoft Roadmap, messagecenter en blogs updates van 23-11-2024

Updated November 22, 2024: We have updated the content. Thank you for your feedback.

We’re introducing a new policy that gives IT admins enhanced flexibility with distinct settings for voice and face enrollment. This adjustment provides greater control over managing these features, allowing organizations to tailor to their needs. Voice and face biometric enrollment will be enabled by default, enabling voice isolation and speaker recognition in meeting rooms and enhancing intelligent meeting recaps and Microsoft Copilot for meetings.

This message is associated with Microsoft 365 Roadmap ID 413708.

[When this will happen:]

General Availability (Worldwide, GCC):

• We will begin rolling out the new policy in early October 2024 and expect complete by mid-October 2024.
• The policy will be enabled beginning in early January 2025 and expect to be complete by mid-January 2025.

[How this will affect your organization:]

These changes will provide your organization with increased flexibility in managing voice and face enrollments. By using separate settings, you can customize for your organization’s specific needs. The enrollment policy will be enabled by default. Once enabled, these enrollments will activate features like Voice Isolation and enhanced speaker recognition, leading to more efficient and productive meetings.

[What you need to do to prepare:]

To ensure you have enough time to prepare for this change, you have until mid-January 2025 to configure everything to best suit your needs. If your organization requires keeping face and voice enrollments off, be sure to review the new policy and adjust the settings during this time. This period provides an opportunity to optimize how you manage voice and face data, enhancing your team’s control over the process.

The new csTeamsAIPolicy will replace the current csTeamsMeetingPolicy, introducing two separate settings for face and voice enrollment: EnrollFace and EnrollVoice. Each can be set to Enabled or Disabled.

To help you get ready, review:

• Set-CsTeamsMeetingPolicy
• Get-CsTeamsAIPolicy 

For more information about voice and face enrollment, visit Overview of voice and face enrollment – Microsoft Teams | Microsoft Learn

Updated November 22, 2024: We have updated the rollout timeline below. Thank you for your patience.

Starting November 2024, Microsoft Outlook will roll out Themes by Copilot. Copilot users can create and apply a Copilot-generated theme inspired by a global place of interest from a curated list of locations. Users can also choose a style and configure a theme refresh cadence. If users have enabled location permissions, they will also be able to create a theme inspired by their current weather or surroundings. This feature will be available for Outlook for Mac desktops, Outlook for iOS/Android, Outlook on the web, and the new Outlook for Windows desktops. A Microsoft 365 Copilot license is required to use this feature.

This message is associated with Microsoft 365 Roadmap ID 394682.

[When this will happen:]

General Availability (Worldwide): We will begin rolling out early November 2024 and expect to complete by late January 2025 (previously late December).

[How this will affect your organization:]

This feature will be on by default and available for users to enable.

[What you need to do to prepare:]

This rollout will happen automatically starting on the specified date with no admin action required before the rollout. Review your current configuration to determine the impact for your organization. You may want to notify your users about this change and update any relevant documentation.

Learn more: Frequently asked questions about Copilot in Outlook – Microsoft Support (will be updated before rollout)

#newoutlookforwindows

Updated November 22, 2024: We have updated the rollout timeline below. Thank you for your patience.

With this rollout, we are delivering automatic location updates with building details on bookable desks and bring your own device (BYOD) rooms to make it easier for users to keep their workplace presence up to date and connect with others in the office.

This message is associated with Microsoft 365 Roadmap ID 422807.

[When this will happen:]

Targeted Release: We will begin rolling out early January 2025 (previously early December) and expect to complete by mid-January 2025 (previously mid-December).

General Availability (Worldwide): We will begin rolling out early mid-January 2025 (previously early January) and expect to complete by late January 2025 (previously mid-January).

[How this will affect your organization:]

Bookable desks refers to unassigned seats in the office that are equipped with devices such as monitors or other peripherals. To set up bookable desks, admins must associate these devices to a workspace account through the Teams Rooms Pro Management portal. Similarly, to set up BYOD rooms (rooms without Microsoft Teams Rooms that are equipped with devices such as a speaker puck or other peripherals), admins must associate these devices to a room account through the Teams Rooms Pro Management portal. Finally, in order for a user’s work location to be updated to a specific building, an admin must onboard their buildings and parent the workspace or room resource account to the buildings.

After these steps are complete, admins have the option to opt-in for automatic location updates. This can be enabled at a tenant level or for a specific user group. Once admins have enabled this feature, users will have the opportunity to opt-in. They can do so in Teams under Settings > Privacy. After users have opted-in, their work location will automatically update to a specific building when they connect to a bookable desk or BYOD room. Note that if a workspace or room resource account does not have a building, the user’s work location will automatically update to “In the office” upon plug-in rather than update to the specific building

To facilitate discovery of this feature, after tenant opt-in, the following banner will be shown the first time a user plugs into a bookable desk or BYOD room.

Once a user enables automatic location updates, the following banner will be displayed only once for the user’s convenience and confirmation that the location update was successful on their first subsequent plug-in to bookable desks or BYOD room.

[What you need to do to prepare:]

To prepare for this feature, we strongly recommend communicating this new feature to your users and admin team and sharing instructions if needed. Please note that if an admin or user had previously opted in when the automatic work location detection only updated to “In the office” (MC808158), there is no additional setting to enable for one’s work location be automatically updated with building information. The same setting will carry over.

For more information about sharing location, visit User experience with location details in Teams.

Updated November 21, 2024: We have updated the rollout timeline below. Thank you for your patience.

In mid-November, Microsoft Copilot will become available to users with an Entra account in Microsoft Teams and Outlook. If pinned, Entra users will be able to access the Microsoft Copilot app directly from the left rail in Outlook and Teams.

This message is associated with Microsoft 365 Roadmap ID 420330

[When this will happen:]

General Availability (Worldwide): The Microsoft Copilot app will be available to pin in Teams and Outlook starting early January 2025 (previously late November) and is expected to complete shortly after.

[How this will affect your organization:]

Starting mid-November, Microsoft Copilot admins and users will be able to pin the Copilot app in Teams and Outlook. Copilot will not be pinned by default. If pinned, users will be able to access the Microsoft Copilot app in Teams and Outlook.

[What you need to do to prepare:]

Admins can control if Copilot is pinned in Teams and Outlook using the same Copilot pinning control shared previously to pin Copilot in the Microsoft 365 app.

With the pinning control, you have the option to pin or not pin Copilot for your users. If you select to not pin Copilot, you also have the option to allow your users to be notified to make this choice. If no action is taken, Copilot will not be pinned but users will be notified to pin it themselves.

Currently, you can remove access to Copilot in the Microsoft 365 app and copilot.cloud.microsoft as documented in Removing access to Microsoft Copilot. These controls will continue to be respected as the Copilot app rolls out in Outlook and Teams. 

In addition, you will soon be able to block the Copilot app from appearing in Outlook, the Microsoft 365 app and copilot.cloud.microsoft through Microsoft 365 admin center (MAC) and in Microsoft Teams through Teams admin center (TAC) like you would block any other app.

Note: During the rollout, the Microsoft Copilot app will temporarily be available for Semi-Annual Channel users of classic Outlook for Windows. These clients will respect admin and user preferences, but we typically do not show Copilot features in Semi-Annual Channel of classic Outlook for Windows. After customers update to Version 2408 or newer, the Microsoft Copilot app will once again be hidden for Semi-Annual Channel users.

Updated November 22, 2024: We have updated the rollout timeline below. Thank you for your patience.

Coming soon: We’re adding support when sharing screens with Microsoft Mesh in Microsoft Teams immersive events. Presenters will now be able to choose whether they’d like to include system audio when starting a screen share in an immersive event. This feature is available for presenters in Mesh with a Teams Premium license. This message applies to Mesh on Windows desktops.

This message is associated with Microsoft 365 Roadmap ID 423475.

[When this will happen:]

Targeted Release: We will begin rolling out early January 2025 (previously early December) and expect to complete by early January 2025 (previously early December).

General Availability (Worldwide): We will begin rolling out early January 2025 (previously early December) and expect to complete by mid-January 2025 (previously mid-December)

[How this will affect your organization:]

The Share content screen in a Mesh event will have an Include sound option, which includes system audio when sharing content.

This change will be available by default for users to enable.

[What you need to do to prepare:]

No new admin work or action is required in order to use this new capability.

This rollout will happen automatically by the specified date with no admin action required before the rollout. You may want to notify your users about this change and update any relevant documentation.

Updated November 22, 2024: We have updated the Known Limitations with additional details.

The Facilitator is a new agent in Microsoft 365. This agent works within Teams meetings and chats for more effective collaboration. This new agent is available in public preview and customers are required to have a Microsoft 365 Copilot license to access the public preview.

• In meetings, the Facilitator generates real-time AI notes and suggested tasks during your meetings, allowing everyone to co-author and collaborate seamlessly.
• In chats, Facilitator maintains an up-to-date summary of important information as the conversation happens, including key decisions, actions items, and open questions to resolve.

[When this will happen:]

Targeted Release (Worldwide): We will begin rolling out in mid-November 2024 and expect to complete by late November 2024.

[How this will affect your organization:]

Facilitator will only be available to users that have app permission policy for Microsoft apps set to “Allow all apps”. The Facilitator App will become available soon for Admins to see and manage in Teams admin center. For more information about app permission policies, see Manage app permission policies in Microsoft Teams – Microsoft Teams | Microsoft Learn

Users with a Microsoft 365 Copilot license can enable the AI notes in meetings and group chats. Meetings scheduled through Teams will have an option to turn on ‘AI-generated notes’ in the meeting scheduling form. AI Notes are auto enabled for newly created group chats with the option to remove upon chat creation or any time thereafter.

For meetings where Facilitator is enabled, real time AI-generated notes and tasks will be added to the meeting notes page and show up in recap under the Notes tab. Participants with intelligent recap access will also see the post-meeting AI generated content in the AI Summary tab (previously labeled AI notes).

For chats, AI notes can be accessed via an entry point in the chat header.

Review the following documentation for the full meeting experience: Automate notetaking in Microsoft Teams meetings 

Users in the meeting can see and collaborate on shared notes:

After the meeting, the recap experience will show the AI-generated notes are in the Notes tab:

Review the following documentation for the full chat experience: Keep track of chats with AI notes in Microsoft Teams 

AI-generated notes will generate in the side panel:

[What you need to do to prepare:]

Facilitator app will be turned on by default unless all apps are blocked by your organization. However, as an admin, you control whether Facilitator will be available to your entire organization or to a certain group of users. For more information, refer to our admin documentation here: Set up Facilitator in Microsoft Teams for collaborative AI notes – Microsoft Teams | Microsoft Learn

Facilitator and Microsoft 365 are built on Microsoft’s comprehensive approach to security, compliance, and privacy.

As a part of the security promise, you can discover, protect, and govern AI interactions with Facilitator through Microsoft Purview. Microsoft Purview Data Security Posture Management (DSPM) for AI helps IT and security teams proactively discover and manage data risks. Use DSPM for AI in conjunction with other Microsoft Purview capabilities such as Audit, eDiscovery, and Data Lifecycle Management to ensure data security and compliance for your organization. Learn more about Microsoft Purview here: Microsoft Purview data security and compliance protections for generative AI apps.

For more information, see the following:

• If you’re using Microsoft 365 Copilot in your organization (with your work or school account), see Data, Privacy, and Security for Microsoft 365 Copilot.
• For Facilitator-specific updates: Set up Facilitator in Microsoft Teams for collaborative AI notes – Microsoft Teams | Microsoft Learn

Known Limitations:

• Generally available users in chats with public-preview participants may temporarily see system messages in the chat that include a Copilot icon. The icon on these chats will be resolved in mid-December.
• External users cannot access AI-generated notes
• Meetings
  • Mobile users cannot enable ‘AI-generated notes’ but can view and consume
  • Unlicensed users can turn off ‘AI-generated notes’ but cannot turn on
• Chats
  • Users that are not participating in Private preview cannot access the ‘AI notes’ pane in chats, but can remove Facilitator
  • If Facilitator is added to a chat, it cannot be removed on mobile clients; users should use desktop or web to remove Facilitator from chats

To provide IT admins the ability to take security updates without disruption through the hotpatch updates. Windows Autopatch is releasing, in public preview, a new feature set to meet customers where they are on in their update management journey.

[When will this happen:]

The public preview is available now.

[How will this affect your organization:]

Available now, Window Autopatch will give you the choice to leverage the new capability to opt-in your devices into hotpatch program.

Hotpatch updates are Monthly B release security updates that can be installed without requiring you to restart the device and is available for your Windows 11 24H2 devices. It’s designed to reduce downtime and disruptions. By minimizing the need to restart, these updates help ensure faster compliance, making it easier for organizations to maintain security while keeping workflows uninterrupted.

[What you need to do to prepare:]

Take action to ensure the following requirements are met or the necessary changes cannot be made to your tenant to prepare for the Windows Autopatch Groups’ functionality and benefits:

1. If you’re ready to start testing it out, you can choose to opt-in by enrolling devices into hotpatch policy:

• Go to the Microsoft Intune admin center.
• Select Devices from the left navigation menu.
• Under the Manage updates section, select Windows updates.
• Go to the Quality updates tab.
• Select Create, and select Windows quality update policy (preview).
• Under the Basics section, enter a name for your new policy and select Next.
• Under the Settings section, set “When available, apply without restarting the device (“hotpatch”) to Allow. Then, select Next.
• Select the appropriate Scope tags or leave as Default and select Next.
• Assign the devices to the policy and select Next.
• Review the policy you’ve created and select Create.

Additional information

If you have any questions or concerns, or need assistance, file a service request by visiting the Support section of the Microsoft Intune admin center.

With the export of data being one of the core fundamentals of Microsoft Purview eDiscovery, we are excited to announce significant changes coming to the Export feature.

This message is associated with Microsoft 365 Roadmap ID 469031 and with MC808165 (Updated) Microsoft Purview eDiscovery | Modernized eDiscovery in new Microsoft Purview portal (July 2024)

[When this will happen:]

Public Preview: Available now.

General Availability (Worldwide): We will begin rolling out mid-December 2024 and expect to complete by mid-December 2024.

[How this will affect your organization:]

You’ll experience these key changes related to the Export enhancements:

• Unified structure for exports: With eDiscovery’s new modern experience, the Export function between Standard and Premium cases has been streamlined. Customers have a consistent experience for downloads, reports, and error messages.
• No application needed for Standard customers: Standard users can download data directly through eDiscovery in the browser instead of installing an application to download.
• Faster exports: We enhanced the backend architecture and optimized partition for faster exports. Also, we removed the limit on the number of ZIPs created for exports. Customers can now have multiple ZIPs with optimized sizes for easier handling of data.
• Better reporting: The new Export feature has better reporting capabilities, with four reports generated for each export from Search or from Review set. These reports are available for all formats (report only, .pst, or .msg).
• More export options: Admins will be able to export files in .msg format, a key request from multiple customers. Also, we grouped the options for Microsoft SharePoint and Microsoft OneDrive separately from options for Microsoft Teams and Microsoft Viva Engage.
• Options removed: We retired the Microsoft Office 365 eDiscovery Export Tool (eDiscovery Standard) and the option to export to a customer-owned Azure Storage location (eDiscovery Premium) because of feedback from customers regarding potential exfiltration risks as well as Microsoft’s security protocols. We removed the .eml export format option, due to low usage.
• New columns for the Export item report: For more efficiency, we added new columns for Classification types, Documentation parts, and Meeting names.

[What you need to do to prepare:]

This rollout will happen automatically by the specified date with no admin action required before the rollout. Review your current configuration to determine the impact for your organization. You may want to notify your users about this change and update any relevant documentation.

Learn more

• Export search results in eDiscovery (preview) | Microsoft Learn
• Export items from a review set in eDiscovery (preview) | Microsoft Learn
• Export reference for eDiscovery (preview) | Microsoft Learn

As communicated in MC807798 Microsoft Purview: The new Microsoft Purview Portal enters GA (July 2024), the classic Microsoft Purview compliance portal is retiring starting November 14, 2024, and ending December 14, 2024. Instead, please use the new Microsoft Purview portal that provides all capabilities in the classic portal, and more.

[How this will affect your organization:]

The new Purview portal has a streamlined design and unified experience that helps you discover and access data security, risk and compliance solutions for all your data. You will be able to access all Purview solutions in one portal, as well as experiences such as settings, global search, recommendations, roles and permissions management. The Purview portal is where we will continue to invest our development resources.

[What you need to do to prepare:]

All the existing configurations and data will be carried over at parity in the new Microsoft Purview portal. This change will happen automatically before mid-December 2024.

If your organization is secured with a firewall or proxy server, you must add the new Purview portal’s internet protocol (IP) addresses and domain uniform resource locators (URLs) to the allowlist. You may want to notify your admins about this change and update any relevant documentation.

• Worldwide endpoint: https://go.microsoft.com/fwlink/?linkid=2297901

Learn more about new Microsoft Purview portal: Learn about the Microsoft Purview portal | Microsoft Learn

Your Microsoft Intune account has been updated to the latest service build.

[How does this affect my organization:]

You will see the service release number updated in the Tenant Status blade of the Intune console soon. We have introduced some changes that we are excited for you to try out.

[What to do to prepare for this change:]

Click additional information below to learn more about what’s new in this service release. We will continue to update the What’s new page with any features that are released between now and the next monthly service update. Learn more by reviewing features highlighted in the latest Intune What’s new 2411 (November) blog and how the Intune service updates each month is described in the Microsoft Intune Service Updates blog. 

Additional Information:

Intune What’s new

Intune What’s new 2411 (November) blog

Staying up to date on Intune new features, service changes, and service health

Your Microsoft 365 subscription is being updated with a new service in your Outlook: Org Explorer. This organization chart helps your visualize your company’s internal structure and discover connections, roles, and responsibilities among you and other people across teams. 

This message is associated with Microsoft 365 Roadmap ID 421191.

[When this will happen:]

General Availability (Worldwide) for new Outlook for Windows, Outlook for Web, and Outlook for Mac: We will begin rolling out mid-January 2025 and expect to complete by late February 2025.

General Availability (Worldwide) for classic Outlook: We will begin rolling out mid-January 2025 and expect to complete by early April 2025.

Note: The access to Org Explorer will depend on which Outlook service platform the user is using. Therefore, we recommend you switch to the new Outlook for Windows or Outlook for web to have early access to this new feature. EDU tenants are not included in this rollout until further notice.

[How this will affect your organization]

Once the new service is available for your organization, you can access the Org Explorer app via Outlook as below:

If you’d like to disable Org Explorer, follow the instructions here: Introducing Org Explorer | Microsoft Learn.

[What you need to do to prepare]

There is no action required now. For additional information regarding Org Explorer, please visit Introducing Org Explorer. 

Microsoft SharePoint Embedded is an API-only solution empowering app developers to leverage Microsoft 365’s file and document storage to create line-of-business or multitenant applications. Microsoft Loop is an example of SharePoint Embedded application.

Organizations who are using these SharePoint Embedded applications in their Microsoft 365 tenants are the consuming tenants. The consuming tenant admins have the ability to manage SharePoint Embedded applications registered in their tenant in the SharePoint admin center. With this rollout, we will enhance the functionality so admins can manage the containers more effectively in the SharePoint admin center.

This message is associated with Microsoft 365 Roadmap ID 468886.

[When this will happen:]

General Availability (Worldwide): We began rolling out mid-November 2024 and expect to complete by late December 2024.

[How this will affect your organization:]

To summarize the enhancements in the SharePoint admin center:

Container management features

• Sorting containers
• Filtering containers
• Setting sensitivity labels on containers

User management features

• Add user to a role in container
• Reassign a user from an existing role in a container
• Remove a user from an existing role in a container

Note: Unlike SharePoint sites, in SharePoint Embedded containers, the available roles are:

• Owners, who have full control over the container and the contents of the container
• Managers, who can add, update, and delete contents of a container and also maintain permissions of the container but cannot delete a container
• Writers, who can add, update, and delete content in the container
• Readers, who can only view content in the container

Every user can be assigned to only one role at any given time. To access this functionality, admins must be assigned the SharePoint Embedded admin role in the Microsoft 365 admin center and log in to the SharePoint admin center.

Before this rollout, admins are able to perform these tasks:

On the Active containers page, the consuming tenant admin can:

• View all containers present in your tenant and their corresponding metadata
• Have a detailed view of a singular container
• Delete a container
• Export the list of active containers

On the Deleted containers page, the consuming tenant admin can:

• View all deleted containers in your tenant and their corresponding metadata
• Restore a deleted container
• Permanently delete a deleted container

After the rollout, admins will be to perform these additional tasks:

On the Active containers page, the consuming tenant admin can:

1. Sort containers on the basis of criteria applied on selected columns
2. Filter containers on basis of criteria applied on selected columns (including multi-filtering)
3. Add a sensitivity label to a container in the Settings tab of the container’s detail panel
4. Manage user roles of a container in the Membership tab of the container’s detail panel

Container management through filters and sort functionality by application:

User role management through addition, removal and reassigning of users:

[What you need to do to prepare:]

Assign the SharePoint Embedded admin role to the admins.

This rollout will happen automatically by the specified date with no admin action required before the rollout. Review your current configuration to determine the impact for your organization. You may want to notify your admins about this change and update any relevant documentation.

Learn more: Manage Containers in SharePoint Admin Center | Microsoft Learn (will be updated before rollout)

Microsoft Copilot in SharePoint’s page creation feature leverages large language models (LLMs), data in Microsoft Graph, and best practices to help users create engaging web pages. This feature is available to users with a Microsoft 365 Copilot license.

This message is associated with Microsoft 365 Roadmap ID 418126.

[When this will happen:]

Targeted Release: We will begin rolling out mid-January 2025 and expect to complete by late January 2025.

General Availability (Worldwide): We will begin rolling out mid-February 2025 and expect to complete by late February 2025.

[How this will affect your organization:]

Before rollout: The Page with Copilot menu option does not appear in SharePoint’s +New menu.

After rollout: Users with Microsoft 365 Copilot licenses will see the Page with Copilot menu option in SharePoint’s +New menu, allowing them to create page content.

With Copilot in SharePoint’s page creation, users can leverage LLMs, Microsoft Graph data, and templates, as well as existing documents, to generate high-quality page content. Users can also use prompts with integrated design ideas. This feature upholds enterprise data security and privacy commitments.

Feature highlights

Template-based page creation with grounding data: Users can use a prompt box to create pages based on templates (and specify their own data sources):

Prompt for design ideas integration: Users can enter a prompt to create pages with integrated design ideas:

Licensing and control

This feature is part of the Microsoft 365 Copilot suite and is enabled by default for licensed users. Admins can disable the feature by deselecting the Microsoft 365 Copilot for SharePoint service plan in the Microsoft 365 admin center.

[What you need to do to prepare:]

This rollout will happen automatically by the specified date with no admin action required before the rollout. You may want to inform users and update any internal documentation as needed.

Before rollout, we will update this post with revised documentation.

Note: If your organization is not using the Workday and Microsoft Viva Learning integration, you can safely ignore this message.

Coming soon for Microsoft Viva: We will update the structure of the setup support documentation for Workday and Microsoft Viva Learning. The documentation will be divided into modules for better readability. We are not changing the content.

[When this will happen:]

General Availability (Worldwide): We will begin rolling out early December 2024 and expect to complete by early December 2024.

[How this will affect your organization:]

If you are using the Workday and Viva Learning integration, your experience of the support documentation will change.

This change will be on by default.

[What you need to do to prepare:]

This rollout will happen automatically by the specified date with no admin action required before the rollout. You may want to notify your users about this change and update any relevant documentation.

Coming soon to Microsoft Teams: Links to Microsoft Lists, Lists items, and Lists forms will display richer details such as title and path when shared in Teams chats and channels. This new feature will enhance collaboration by making it easier for users to recognize specific List link types, in addition to viewing the title and path. This message applies to Teams for Windows and Mac desktops.

This message is associated with Microsoft 365 Roadmap ID 419812.

[When this will happen:]

Targeted Release: We will begin rolling out early January 2025 and expect to complete by mid-January 2025.

General Availability (Worldwide): We will begin rolling out mid-January 2025 and expect to complete by early February 2025.

[How this will affect your organization:]

With this update, new details will display in a Teams chat or channel for these links:

• For Lists links, a List icon and the name and path of the list will be displayed.
• For Lists item links, a List item icon, the title of a specific list item, and the path of the list will be displayed.
• For Lists form links, a List form icon, the title of the form, and directions for a user to fill out the form will be displayed.

A sender will be able to opt to provide permissions to view or edit the List, List item, or List form.

This feature will improve the efficiency of collaboration by reducing the need to switch between Teams and other applications to view or interact with list data.

This feature will be on by default.

A Lists link, a Lists item link, and a Lists form link in a Teams chat:

[What you need to do to prepare:]

This rollout will happen automatically by the specified date with no admin action required before the rollout.

You may want to:

• Inform your users about this upcoming feature and how it can enhance their workflow.
• Ensure your Teams environment is updated to the latest version to take advantage of this new functionality.
• Review your organization’s policies and permissions related to sharing and accessing List data in Teams.

Before rollout, we will update this post with revised documentation.

Coming soon to Microsoft Purview | Data Loss Prevention (DLP): To provide greater flexibility to manage your organization’s DLP policy workflows, we are integrating DLP with Microsoft Power Automate. With this capability you will be able to trigger custom Power Automate workflows as a DLP policy action.

This message is associated with Microsoft 365 Roadmap ID 380722.

[When this will happen:]

Public Preview: We will begin rolling out late November 2024 and expect to complete by early December 2024.

General Availability (Worldwide): We will begin rolling out late January 2025 and expect to complete by early February 2025.

[How this will affect your organization:]

With this feature, DLP admins will have the ability to execute custom workflows they have created in Power Automate when a DLP policy is violated.

1. Create a workflow in Power Automate using the DLP rule trigger:

2. Add Run a Power Automate workflow as an action in a DLP rule:

This change will be available by default.

[What you need to do to prepare:]

There is no action needed to receive this feature. You may consider updating any training or reference material for your Data Loss Prevention administrators and evaluate if you would like to use this new capability.

Learn more: Get started with Power Automate integration | Microsoft Learn

Data Loss Prevention (DLP) investigators have the option to preview and download the full file that resulted in a DLP policy match as evidence on Windows devices using Microsoft Managed storage.

This message is associated with Microsoft 365 Roadmap ID 420333.

[When this will happen:]

Public Preview: We will begin rolling out mid-November 2024 and expect to complete by early December 2024.

General Availability (Worldwide) We will begin rolling out late January 2025 and expect to complete by late February 2025.

[How this will affect your organization:]

There is no impact on your organization if you choose not to use this feature.

If your organization requires you to keep a copy of the original file that matches a DLP rule, you will be able to preview and download the original file for further workflow from Activity explorer and DLP Alert tabs. Currently this feature will only be supported for endpoint Windows devices.

[What you need to do to prepare:]

In endpoint DLP settings, enable evidence collection and select Microsoft Managed storage, followed by creating a policy for endpoint and selecting the activities you wish to collect from the original file as evidence.

For more details about this feature refer to the following links:

Learn about collecting files that match DLP policies from devices (preview) | Microsoft Learn

Get started with collecting files that match data loss prevention policies from devices (preview) | Microsoft Learn

As part of the convergence of both Microsoft Defender for Identity and Microsoft Defender for Cloud Apps into Microsoft Defender XDR services, we are continuing to move away from legacy experiences and enhancing the unified experiences.

Therefore, we will gradually retire Defender for Identity’s Active Directory and alerts data from Defender for Cloud Apps dedicated experiences. All data, as well as all functionality of the affected experiences, remain available through Microsoft Defender XDR unified experiences, where we will continue to invest our development resources.

[When this will happen:] 

General Availability (Worldwide, GCC, GCC High, DoD): This retirement will begin rolling out in late January 2025 and is expected to complete in early March 2025. 

[How this will affect your organization:]

You are receiving this message because the following changes may affect your organization:

Active directory activities coming from Defender for Identity will no longer be available in Defender for Cloud Apps activity logs. Consequently, Defender for Cloud Apps activity policies will cease from triggering based on Active Directory data.

All Active Directory activities data remains available through Advanced Hunting, in the following tables:

• IdentityLogonEvents
• IdentityDirectoryEvents
• IdentityQueryEvents

To learn more about Advanced Hunting and the Data Schema, visit Proactively hunt for threats with advanced hunting in Microsoft Defender and Understand the advanced hunting schema.

New Active Directory activities, as well as Defender for Identity’s alerts data, will no longer be available through Defender for Cloud Apps Activities API, Alerts API, or dedicated SIEM agents.

All activities and alerts data remains available through Defender XDR Streaming API and Event Hubs.

Learn more about Streaming API.

For more information about how to integrate your SIEM tools with Microsoft Defender XDR, visit Ingesting streaming event data via Event Hubs.

The Identities page under ‘Assets’ in the XDR portal will be updated to better support the new experiences. The page will be divided into two distinct tabs: First-party identities and Third-party accounts. To learn more about Defender for Identity’s experiences in the XDR portal, visit Microsoft Defender for Identity in the Microsoft Defender portal.

[What you need to do to prepare:]

To ensure a seamless experience, create new custom detections for any activity policies based on active directory data in Advanced Hunting. To learn more about how to create custom detections, visit Create and manage custom detections rules. Suggested queries related to Active Directory activities are available through the portal under Advanced Hunting > Community Queries. For more information, see Use shared queries in Advanced Hunting.

If you are still using Defender for Cloud Apps dedicated API and SIEM agents to consume Defender for Identity activities or alerts, make sure to update your resources according to the above information.