Clear guidance for Microsoft 365, Entra identity, account protection, collaboration, endpoint policy, and lifecycle changes.
Clear guidance for Microsoft 365, Entra identity, account protection, collaboration, endpoint policy, and lifecycle changes.
Microsoft has fixed CVE-2026-70329, an Outlook integer-overflow vulnerability rated CVSS 8.8. Exploitation requires a user to open a malicious Office file. Review the exact affected editions, deploy the August 11 security release, and verify the installed build by servicing channel.
Read the briefing
Beginning September 1, 2026, Microsoft will start auto-enabling passkeys and registration nudges for SMS- and voice-enabled users in public-cloud Microsoft Entra ID tenants. On February 1, 2027, Microsoft-provided SMS and voice delivery ends; organizations must migrate affected users to a phishing-resistant method or configure a customer-managed telecom provider.
Read the briefing
A Universal Print connector is a live bridge between Microsoft 365 and existing printer queues. Give every connector a supported host, named owner, current software, controlled drivers, monitored capacity, and a tested replacement procedure.
Read the playbook
Identity proofing establishes which real-world person is being enrolled; authentication later proves control of an authenticator. Select the needed assurance, protect proofing data, offer workable paths, and build redress for mistakes and fraud.
Read the guide
Microsoft now plans to disable SMTP AUTH Basic authentication by default for existing Exchange Online tenants at the end of December 2026. Find every sender, choose a supported replacement, pilot it, and prove the legacy path is quiet.
Read the playbook
NTLM is deprecated and Microsoft is preparing Windows for stronger Kerberos-based authentication. A safe retirement starts with auditing real use, assigning every dependency, repairing its cause, and testing progressively tighter blocking.
Read the playbook
MFA cannot make an already-compromised workstation trustworthy. Dedicated privileged access workstations separate administration from email, general browsing, and everyday applications so high-impact credentials and sessions begin from a controlled device.
Read the guide
The Windows Server 2025 AD DS functional level permits only Windows Server 2025 domain controllers. Inventory every domain and DC, prove replication and recovery, remove incompatible controllers, and validate dependencies before raising either level.
Read the checklist
Microsoft 365 Apps channels are device settings with different feature and support cadences. Put preview users, representative production pilots, general users, and exception devices on deliberate paths—and monitor the build actually installed.
Read the guide
Teams Rooms has its own supported app, Windows, device, peripheral, license, and maintenance lifecycle. Inventory every room, respect Microsoft’s Windows validation delay, preserve nightly maintenance, and plan hardware replacement before a meeting fails.
Read the checklist