Microsoft Roadmap, messagecenter en blogs updates van 18-07-2024

Updated July 17, 2024: We have updated the rollout timing below.  Thank you for your patience.

We are adding support for DNS-based Authentication of Named Entities (or DANE) for SMTP and Domain Name System Security Extensions (DNSSEC) for inbound mail to Exchange Online. DANE for SMTP is a security protocol that uses DNS to verify the authenticity of the certificates used for securing email communication with TLS and protecting against TLS downgrade attacks. DNSSEC is a set of extensions to DNS that provides cryptographic verification of DNS records, preventing DNS-spoofing and adversary-in-the-middle attacks to DNS.

This message is associated with Microsoft 365 Roadmap ID 63213.

[When this will happen:]

Public Preview: We will begin rolling out in July 2024.

General Availability: We begin rolling out early September 2024 (previously late August) and expect to complete by late October 2024 (previously late September).

[How this will affect your organization:]

Inbound SMTP DANE with DNSSEC will be off by default. If you do not want to enable the feature, you do not need to do anything.

If you want to enable the feature, please follow the documentation using Exchange PowerShell. When the feature is released, the documentation will be in the How can Exchange Online customers use SMTP DANE inbound section of How SMTP DNS-based Authentication of Named Entities (DANE) secures email communications | Microsoft Learn. By the end of 2024, we will release a new experience for enabling DNSSEC and SMTP DANE without using PowerShell.

[What you need to do to prepare:]

Review your domain configuration internally to ensure you won’t be impacted by any of the limitations below, and visit Implementing Inbound SMTP DANE with DNSSEC for Exchange Online Mail Flow – Microsoft Community Hub for more detailed information on limitations:

• Not supported: Fully delegated domain, onmicrosoft.com domains, and domains purchased from Microsoft known as “viral” or self-service sign-up domains
• Supported with risk: 3rd-party gateways, connectors, and integration with hybrid mail flow (ex. if you are using a connector to smarthost to a domain that you want to enable with DNSSEC, you need to update the smarthost name for that connector [ex. contoso-com.mail.protection.outlook.com] to match the new MX record that will be provided during DNSSEC enablement or, preferably, to match the tenant’s onmicrosoft.com domain [ex. tenant-name.onmicrosoft.com] before enabling the feature.)

• This security update includes improvements that were a part of update KB5039302 (released June 25, 2024). 
• We are advancing the Copilot experience on Windows. The Copilot app is now pinned to the taskbar and behaves like an app. This gives you the benefits of a typical app experience. For example, you can resize, move, and snap the window. For existing Windows 11 PCs, the timing of availability and delivery method will vary. This might not be available to all users because it will roll out gradually. 
• This update addresses an issue that affects Remote Desktop MultiPoint Server. A race condition causes the service to stop responding.

• Windows 11, version 23H2 and 22H2: KB5040442
• Windows 11, version 21H2: KB5040431
• Windows 10, version 22H2 and 21H2: KB5040427
• Windows 10 Enterprise LTSC 2019 and Windows Server 2019: KB5040430
• Windows 10 LTSB 2016 and Windows Server 2016: KB5040434
• Windows 10 LTSB 2015: KB5040448
• Windows Server 2022: KB5040437
• Windows Server 2012 R2: Monthly Rollup: KB5040456
• Windows Server 2012: Monthly Rollup: KB5040485
• Windows Server 2008 R2 Service Pack 1: Monthly Rollup: KB5040497 / Security Only: KB5040498
• Windows Server 2008 SP2: Monthly Rollup: KB5040499 / Security Only: KB5040490

Coming soon for Microsoft Defender XDR | Microsoft Defender for Identity: We’re adding to Microsoft Secure Score improvement actions to ensure a more accurate representation of security posture. We will update your score automatically.

[When this will happen:]

General Availability (Worldwide, GCC, GCC High, DoD): We will begin rolling out mid-August 2024 and expected to complete by mid-September 2024.

[How this will affect your organization:]

In the Defender for Identity portal, we will add these new Microsoft Defender for Identity recommendations as Microsoft Secure Score improvement actions:

• Azure SSO account configuration: Password last set more than 90 days ago
• Azure SSO account configuration: Resource Based Constrained Delegation configured
• Remove unnecessary replication permissions for Microsoft Entra Connect accounts
• Rotate password for Entra Connect connector users

These new identity recommendations are new security posture reports related to group policy objects and hybrid identities.

These new identity recommendations are new security posture reports related to hybrid identities and will be available by default only to customers who have installed an MDI sensor on Entra Connect server.

[What you need to do to prepare:]

We recommend reviewing the improvement actions listed in Microsoft Secure Score. We will continue to add suggested security improvement actions on an ongoing basis.

This rollout will happen automatically by the specified date with no admin action required before the rollout. You may want to notify your admins about this change and update any relevant documentation.

With bidirectional support in Teams Live Interpretation, interpreters can now switch the translation direction between two languages by clicking on the button of the language they want to interpret into at the bottom of the screen. The highlighted language button will be the language the interpreter is translating into and attendees hear.

This message is associated with Microsoft 365 Roadmap ID 403103.

[When this will happen:]

Targeted Release: We will begin rolling out early August 2024 and expect to complete by mid-August 2024.

General Availability (Worldwide, GCC): We will begin rolling out mid-August 2024 and expect to complete by late August 2024.

General Availability (GCC High, DoD): We will begin rolling out late September 2024 and expect to complete by early October 2024.

[How this will affect your organization:]

The new bidirectional capability allows tenants to hire fewer interpreters to do live translation in Teams meetings, reducing the operation costs for tenants.

[What you need to do to prepare:]

This rollout will happen automatically with no admin action required. You may want to notify your users about this change and update any relevant documentation as appropriate.

Before this rollout, Microsoft Viva Pulse admins can configure the Minimum number of responses required to see feedback in the Viva Pulse app under the Manage tab. This control is used to determine the minimum number of recipients a Pulse author needs to send their request to and how many responses must be received for a report to be created and provided to the author.

Coming soon: A new Minimum number of recipients control will allow admins to separately manage the minimum number of recipients and minimum number of responses required, for more granular control. Both are required, and the minimum number of recipients must always be equal to or greater than the minimum number of responses required.

[When this will happen:]

General Availability: We will begin rolling out mid-August 2024 and expect to complete by late August 2024.

[How this will affect your organization:]

When we add the new Minimum number of recipients control, the Minimum number of responses required to see feedback category under the Privacy section in the Manage tab will become the Minimum number of recipients and responses section, which contains two controls. Your organization’s Minimum recipients and Minimum responses settings will both be set to your Minimum number of responses required to see feedback value at the time of the rollout.

This will make the change invisible to users in your organization, until or unless you adjust the controls.

Before the rollout, the Viva Pulse Administrator can manage the number of responses required for an author to see the feedback they receive:

After the rollout, the Viva Pulse Administrator will also be able to manage the number of recipients required for an author to send a survey.

[What you need to do to prepare:]

You can prepare for this change by doing the following:

1. Decide if you would like to change the minimum recipients and/or minimum responses settings for users within your organization.
2. If you want to adjust one or both controls, you can do so after the updated controls have been released.

Learn more: Set up the in-app Viva Pulse experience | Microsoft Learn (will be updated before rollout)

This rollout will happen automatically by the specified date with no admin action required before the rollout. You may want to notify your admins and users about this change and update any relevant documentation.

To learn more about Microsoft’s own review of this product with its works councils, please consider reading: https://aka.ms/VivaPulse/MSWorksCouncilsArticle 

Microsoft Forms offers surveys and quizzes to collect information from your audience. We have added a new feature that lets you quickly and easily sync the responses to a Microsoft Excel file so you will always have the latest responses, updated automatically. This message applies to Excel for the web. Learn more: Forms data sync to Excel is now fully available with more functionality – Microsoft Community Hub

This message is associated with Microsoft 365 Roadmap ID 374909.

[When this will happen:]

General Availability (Worldwide): We began rolling out in late June 2024 and expect to complete by late July 2024.

[How this will affect your organization:]

New features for this rollout

• Create an Excel workbook in your Microsoft OneDrive on the form/quiz responses page.
• Form responses will automatically sync to a table in the Excel workbook where you can start manipulating the data.
• New responses will automatically sync while the workbook is open in Excel for the web.
• Excel coauthors will also get automatically synced responses in Excel for the web.

This feature was released with the Preview label in March 2024. We are removing the preview label in July 2024. 

After we remove preview label, the new data sync solution will also support two types of forms:

• Group forms created in your Microsoft 365 group. Learn more: Create a group form or quiz – Microsoft Support
• Forms created in workbooks in Excel for the web

Note: The data sync will be triggered while the workbook is open in Excel for the web. Over time, we will gradually enable data sync for Excel for Desktop.

This feature will be automatically enabled for all users who are able to use Microsoft Forms and Microsoft Excel in your organization. They can find the entry point for this feature from the Forms website and Excel for the web.

[What you need to do to prepare:]

This rollout will happen automatically by the specified date with no admin action required before the rollout. You may want to notify your users about this change and update any relevant documentation.

Coming soon for Microsoft Copilot for Microsoft 365: A new Scheduled prompts feature that allows users to automate Copilot prompts to run at set times and frequencies in Copilot in Microsoft Teams, Office.com/chat, and Microsoft Outlook for the web and Desktop. A Microsoft Copilot for Microsoft 365 license and a Standard Microsoft Power Automate license are required to use this feature.

This message is associated with Microsoft 365 Roadmap ID 401124.

[When this will happen:]

General Availability (Worldwide): We will begin rolling out early October 2024 and expect to complete by late October 2024.

[How this will affect your organization:]

Before this rollout: Users are unable to schedule Copilot for Microsoft 365 prompts to run at a specific time and frequency.

After the rollout: Users can find the Scheduled prompts feature by hovering over a prompt they have submitted to Copilot. When a user selects the Save and activate button to confirm the scheduled prompt, a user’s prompt information will be sent to the Power Automate and Power Platform system, and the Power Automate terms of service and privacy policy apply:

[What you need to do to prepare:]

Managing the Scheduled prompts feature as an admin: To continue having the Scheduled prompts feature available in your organization, no action is required. The feature is automatically included as part of the Optional Connected Experiences admin setting, which is on by default.

Admins can access the Optional connected experiences setting at config.office.com or in the Copilot > Settings in the Microsoft 365 admin center, starting in mid-September 2024:

If you prefer not to have this feature available to your organization, you can turn off the feature at config.office.com or go to Copilot > Settings in the Microsoft 365 admin center. For more information: Admin controls for optional connected experiences. If you turn off the Optional connected experiences setting, this action will prevent anyone in your organization from seeing the Scheduled prompts feature in Copilot.

To prevent exposing organizational data, you should also create a data policy in the Power Platform admin center. Creating a data policy in the center allows administrators to control access to these connectors in various ways to help reduce risk in your organization. Learn more here: Data policies – Power Platform | Microsoft Learn

If you disable this feature after someone in your organization has already used the feature:

• Users will no longer be able to manage previously scheduled prompts.
• Sessions for previously run scheduled prompts will continue to exist.
• Users will no longer see the Scheduled prompts feature or the prompt management pane.

Relevant articles

• Data, Privacy, and Security for Microsoft Copilot for Microsoft 365 | Microsoft Learn
• Security in Microsoft Power Platform – Power Platform | Microsoft Learn
• Admin controls for optional connected experiences in Overview of optional connected experiences in Office – Deploy Office | Microsoft Learn

Before rollout, we will update this post with revised documentation.

To learn more about Microsoft’s own review of this product with its works councils, please consider reading: https://aka.ms/Copilot/MSWorksCouncilsArticle