28-October-2025 Below you will find a collection of news published yesterday. This news consists of Microsoft’s Roadmap when it is updated it will be below with items. Then there will be a section with the message center, if there is anything new there, this will be automatically included. And it contains a piece from blogs that I follow myself and would like to share with you. If I miss something in the blogs that do have an RSS feed, please let me know.
This entire post was automated via Microsoft Flow
have fun reading!
The blogs of this day are:
Office 365 Roadmap Updated: 2025-10-28
Additions : 4
Updates : 7
More Details At: www.roadmapwatch.com
Items from the MessageCenter in Microsoft 365
| (Update)Microsoft Purview compliance center: Insider Risk Management – Enhancements to user scoping features in PoliciesCategory:Microsoft PurviewNummer:MC1047928Status:stayInformed | Updated: We have updated the timeline for gov clouds. Thank you for your patience. Microsoft Purview Insider Risk Management will be rolling out enhancements to user scoping features in Policies. This message is associated with Microsoft 365 Roadmap ID 484081. [When this will happen:] Public Preview: We will begin rolling out on mid-April 2025 and expect to complete by late April 2025. General Availability (Worldwide): We will begin rolling out in late June 2025 and expect to complete by early July 2025. General Availability (GCC, GCC High, DoD): We will begin rolling out in early October 2025 and expect to complete by late January 2026 (previously early November 2025). [How this will affect your organization:] With this new feature, Insider Risk Management administrators
can include or exclude specific users, groups, and adaptive scopes within
Policies. We are also adding support for non-email enabled Security Groups
within Insider Risk Management policies. [What you need to do to prepare:] Insider Risk Management admins with appropriate permissions can select
combinations of users, groups, and adaptive scopes to include or exclude from
Insider Risk Management policies in the Microsoft
Purview portal. Insider Risk Management admins can also choose non-email enabled
Security Groups in the Users & Groups step of Insider Risk Management policies. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. | ||||||||||
| (Updated) Microsoft Purview | Insider Risk Management: Updated user scoping features in policiesCategory:Microsoft PurviewNummer:MC1075907Status:stayInformed | Updated: We have updated the timeline for gov clouds. Thank you for your patience. Microsoft Purview | Insider Risk Management will roll out enhancements to user scoping features in policies, This message is associated with Microsoft 365 Roadmap ID 412942. [When this will happen:] General Availability (Worldwide): We will begin rolling out late June 2025 and expect to complete by early July 2025. General Availability (GCC, GCC High, DoD): We will begin rolling out early October 2025 and expect to complete by late January 2026 (previously early November 2025). [How this will affect your organization:] After this rollout, Insider Risk Management admins with appropriate permissions can select combinations of users, groups, and adaptive scopes to include or exclude from Insider Risk Management policies in the Microsoft Purview portal at New insider risk policy > Users and groups > Exclusions (optional):
This change will be available by default. [What you need to do to prepare:] This rollout will happen automatically by the specified dates with no admin action required before the rollout. Review your current configuration to assess the impact on your organization. You may want to notify your users about this change and update any relevant documentation. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. Learn more about creating policies in Microsoft Purview Insider Risk Management | ||||||||||
| Microsoft Copilot Studio – Automate approvals decisions with Intelligent ApprovalsCategory:Power PlatformNummer:MC1162218Status:stayInformed | Update: Release of this feature has been postponed; we will announce a new date in the future. We are announcing the ability to automate approvals decisions with Intelligent Approvals in Microsoft Copilot Studio. This feature will reach general availability on October 28, 2025. How does this affect me? With this feature, makers will not need to route every approval to a human. Instead, they configure an AI stage where a large language model evaluates the request using natural language prompts and contextual variables, such as text, documents, and images. The AI uses the defined logic to decide whether to approve or reject the request. Makers keep full control and decide if approvals are automatic or if humans can veto them. What action do I need to take? This message is for awareness, and no action is required. If you would like more information on this feature, please visit Automate approvals decisions with Intelligent Approvals. | ||||||||||
| Microsoft Copilot Studio – Strengthen security of Copilot Studio agents with additional threat protectionCategory:Power PlatformNummer:MC1180712Status:stayInformed | We are announcing the ability to strengthen security of Copilot Studio agents with additional threat protection in Microsoft Copilot Studio. This feature will reach general availability on November 28, 2025. How does this affect me? This feature allows you to configure external threat detection systems for enhanced oversight. These tools operate during the agent’s run-time, continuously evaluating agent activity. If the system detects any tools or actions it deems suspicious, it can intervene to approve or block their execution, providing an extra layer of real-time protection and compliance enforcement. With the flexibility provided by this feature, users can select Microsoft Defender, integrate with other trusted security partners, or develop and connect your own custom monitoring solutions. Admins can enable this feature using the following steps:
Organizations are responsible for ensuring their chosen provider’s data handling and compliance standards meet internal and regulatory requirements. What action do I need to take? This message is for awareness, and no action is required. If you would like more information on this feature, please visit the Enable external threat detection and protection for Copilot Studio custom agents (preview). | ||||||||||
| An updated version of the October 2025 Scan Cab is availableCategory:WindowsNummer:MC1180840Status:stayInformed | IMPORTANT: This notice is only relevant for environments where:
An updated version of the October 2025 Scan Cab was made available at 8:54 am PT on October 24, 2025. This Scan Cab includes new metadata corresponding to new updates for the following versions of Windows Server: • Windows Server, version 23H2 (KB5070879) • Windows Server 2022 (KB5070884) • Azure Automanage for Windows Server 2022 with Hotpatch (KB5070892) • Windows Server 2019 (KB5070883) • Windows Server 2016 (KB5070882) • Windows Server 2012 R2 (KB5070886) • Windows Server 2012 (KB5070887) The new Microsoft updates for these Windows Server versions, released October 24, 2025, included additional protections to address CVE-2025-59287. See the additional information section of this message for details. How this affects your organization: IT administrators who downloaded the Scan Cab before 8:54 PM PT on October 24, 2025, should re-acquire and re-deploy it if the Scan Cab is used to assess updates for environments where WSUS is used to deploy Windows security updates to Windows Server devices. No action is required on environments where Scan Cab is not employed and does not use WSUS to Windows Server devices. However, please note that there might be non-Microsoft applications which utilize Scan Cab. Review the documentation for any software and update deployment tools which might be in use for your organization, to understand if this is applicable in your environment. What you need to do to prepare: Administrators can re-deploy the updated Scan Cab via their usual processes. For detailed guidance, see the Additional Information section below. Additional information:
| ||||||||||
| Power Platform admin center – Updates for security roles in child business unitsCategory:Power PlatformNummer:MC1180845Status:stayInformed | We have scheduled an update for the Power Platform admin center that changes how Dataverse security role fields are populated in child business units. The ModifiedOn and ModifiedBy Dataverse security role fields in child business units will now inherit the value set in the parent business unit. This change will be deployed on October 31, 2025. How does this affect me? Previously, when security roles were inherited from the parent business unit into the child business units, the ModifiedOn and ModifiedBy fields of the child business units were not populated. What action do I need to take? Review your process or report if you are reporting on these fields and make the necessary changes. For more information, please review the Security roles and privileges documentation. | ||||||||||
| Microsoft Copilot Studio – Add and configure tool groups to agentsCategory:Power PlatformNummer:MC1180873Status:stayInformed | We are announcing the ability to add and configure tool groups to agents in Microsoft Copilot Studio. This feature will reach general availability on November 20, 2025. How does this affect me? This feature introduces a streamlined workflow for adding Outlook and SharePoint actions to agents by curating action groups. Instead of manually selecting individual operations, makers can now add pre-curated sets of actions optimized for common scenarios in Outlook and SharePoint. These action groups ensure agents use the most reliable and relevant tools, improving orchestration quality and minimizing errors. What action do I need to take? This message is for awareness, and no action is required. | ||||||||||
| Microsoft Purview | Insider Risk Management – Data security alert triage agent generally availableCategory:Microsoft PurviewNummer:MC1180884Status:planForChange | Microsoft Purview Insider Risk Management (IRM) has reached General Availability for the Security Copilot alert triage agent. The agent helps analysts focus on the most urgent alerts by analyzing and prioritizing Insider Risk Management alerts. It also provides a summary of findings to help users quickly understand the risky activities that make an alert critical to review. With this release, users can report miscategorized alerts and provide feedback on prioritization. Feedback is sent directly to Microsoft but is not used for agent memory. Additionally, the file risk section of the agent summary has been deprecated.
This message is associated with Microsoft 365 Roadmap ID 503764. [When this will happen:] General Availability (Worldwide): Rollout begins in late November 2025 and is expected to complete by mid-December 2025. [How this affects your organization:]
[What you can do to prepare:]
[Compliance considerations:] No compliance considerations identified, review as appropriate for your organization. | ||||||||||
| Microsoft Viva Insights: Retirement of Export via Microsoft Graph Data Connect (MGDC)Category:Microsoft Viva Microsoft Copilot (Microsoft 365)Nummer:MC1180889Status:planForChange | To streamline data export processes and improve security, Microsoft is retiring the Viva Insights export capability via Microsoft Graph Data Connect (MGDC). This change does not impact other export alternatives via Viva Insights. When this will happen
Who is affected: Organizations using Viva Insights export via Microsoft Graph Data Connect. What will happen:
Note: Customers who prefer a flat file export can use the CSV export feature. Learn more: Download and import results in Excel. What you can do to prepare
For additional questions, raise a support ticket. Learn more:
Compliance considerations
| ||||||||||
| Workplace Patterns Report in Viva Glint with Viva Insights integrationCategory:Microsoft VivaNummer:MC1180891Status:planForChange | [Introduction] We’re introducing the Workplace Patterns Report in Viva Glint—an integrated analytics report that combines Viva Insights workplace behavior data with employee sentiment from Viva Glint surveys. This feature enables HR analysts and administrators to uncover actionable relationships between how people work and how they feel, without needing custom analysis. It accelerates decision-making and supports meaningful actions across the organization. This message is associated with Roadmap ID 489229. [When this will happen:] General Availability (Worldwide): Rollout will begin in late November 2025 and is expected to complete by mid-December 2025. [How this affects your organization:]
[What you can do to prepare:]
[Compliance considerations:]
|