M365 Message Center

Geändert

18.11.2025

Services

Windows

Secure Boot helps ensure that only trusted software runs during the boot sequence. It uses cryptographic keys, known as certificate authorities (CAs), to validate that firmware modules come from a trusted source. After 15 years, the Secure Boot certificates that are part of many Windows systems will start expiring in June 2026. These certificates were originally issued in 2011. Many Windows PCs manufactured since 2024 already have updated (2023) certificates. For the remaining devices, we recommend that you start monitoring the progress of certificate updates today as well as prepare for and install new certificates on devices that aren’t automatically getting them through Windows updates. An initial set of tools and guidance is now available to support you in this effort. When will this happen:While Microsoft will deliver the new 2023 Secure Boot certificates through Windows monthly upd

Geändert

17.11.2025

Services

Windows

If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live chat-based event on the Tech Community called Windows Office Hours. Members of the Windows, Microsoft Intune, Windows Autopilot, Windows Autopatch, and Windows 365 engineering teams will be standing by to answer your questions. We also have experts from FastTrack, the Customer Acceleration Team, and Microsoft public sector teams. Want to attend the November 20 session of Office Hours? Add it to your calendar and select Attend on the event page to let us know you’re coming. There is no video or live meeting component. Simply visit the event page, log in to the Tech Community, and leave your questions in the Comments section. You can also bookmark https://aka.ms/Windows/OfficeHours for upcoming dates (and the ability to add this event to your calenda

Geändert

15.11.2025

Handlung bis

13.01.2026

Services

SharePoint Online

To strengthen security and reduce the risk of ungoverned scripting, Microsoft is expanding the custom scripting governance in the App Catalog site. This change helps ensure a more secure and manageable environment in SharePoint Online. What will happen:Custom scripting will be disabled (setting DenyAddAndCustomizePages to 1 or $true) for the tenant-wide App Catalog site using the APPCATALOG#0 template.When this will happen: Default custom scripting governance on the App Catalog site will take effect starting in mid-January 2026.Who is affected: Admins managing the SharePoint tenant-wide App Catalog site and content inside.How this affects your organization:App operations remain unaffected: Uploading, updating, and deploying SharePoint and Office apps will continue to work.Custom script-based changes will be blocked: New changes related to custom scripting in the App Catalog Site will be

Geändert

12.11.2025

Services

Windows

The power of automated Windows update management is coming to government SKUs. This cloud-based service has now been approved to be added to the Azure FedRAMP High Provisional Authorization to Operate. If you manage Government Community Cloud (GCC) devices, this service became part of Microsoft 365 Government this month. When will this happen: Windows Autopatch is available to US government organizations starting November 2025. How this will affect your organization: This is what Windows Autopatch allows you to accomplish for your GCC devices: Control over which content is approved for deployment to which devices Automation of a safe rollout process Faster security with hotpatching Pausing or expediting monthly quality updates or drivers Simplified update compliance reporting Policy management and reporting through the Microsoft Intune admin center What you need to do to prepare: Review

Geändert

11.11.2025

Services

Windows

Today, November 11, 2025, Windows 11, version 23H2 (Home and Pro editions) has reached end of servicing. The November 2025 monthly security update is the last update available for these editions. Devices running these editions will no longer receive monthly security and preview updates containing protections from the latest security threats.As always, we recommend that you update your devices to the latest version of Windows 11. For detailed information, see the Windows 11, version 23H2 reaching end of updates (Home, Pro) lifecycle page. For information about servicing timelines and lifecycle, see Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

Geändert

11.11.2025

Services

Windows

Microsoft has identified an issue in the Windows 10 Consumer Extended Security Update (ESU) enrollment process where the enrollment wizard may fail during enrollment. If you have a personal device running Windows 10 and have not yet enrolled your device in the Consumer ESU program, here are the steps you need to take to ensure you continue receiving security updates:Navigate to the Windows Update settings page and select “Check for updates.”Install the out-of-band (OOB) update (KB5071959) and reboot your device to complete installation.Run the Windows 10 Consumer ESU enrollment wizard to enroll your device in the ESU program.After you have successfully enrolled your device, navigate once more to the Windows Update settings page and select “Check for updates.”Your device will now be offered the latest monthly security update. Install the update and reboot your device to complete installat