The Week at a Glance

  • 🔴 Windows Update certificates expire May 2027 - devices that miss this preparation window will lose access to security patches. Organizations with older or unmanaged devices must begin readiness assessments now; missing the window means those machines stop receiving security updates entirely, creating compliance gaps under HIPAA, CMMC, and cyber insurance patch-management requirements.
  • 🟡 AI agents can now take action, not just answer questions. Copilot and custom agents built in Copilot Studio can retrieve data, call external systems, and trigger workflows. New governance controls are available, but they must be deliberately configured - the default posture leaves meaningful risk exposure.
  • 🟡 Two new Purview DLP controls close concrete Copilot data-leakage gaps. Sensitive data in employee prompts can reach external web search, and untrusted external emails can shape AI responses. Both risks have fixes available today, and both are relevant to regulated industries.
  • 🟢 Productivity and collaboration improvements are rolling out across Teams and Exchange. Email alias sending, larger Teams Events, and side-by-side file and conversation views are coming with minimal administrative burden.

Sources: Windows IT Pro Blog - Certificate Rotation · Microsoft Security Community - Copilot DLP · Microsoft Security Community - AI Agent Governance

Why This Week Matters

The shift from AI assistants to AI agents - software that takes action on behalf of employees - fundamentally changes the risk surface. An assistant that gets an answer wrong is a nuisance; an agent that writes to a CRM, uploads a file, or triggers a workflow based on manipulated or sensitive data is an operational and compliance event. The governance tooling to manage this exists, but it requires deliberate decisions by leaders and compliance teams about what agents are permitted to access and act on. At the same time, the Windows certificate deadline is the kind of slow-moving infrastructure risk that tends to miss budget cycles until it becomes a crisis - the time to plan is now, not spring 2027.

Sources: Microsoft Security Community - Securing Intelligent Agents · Windows IT Pro Blog - Certificate Rotation

Risk & Compliance

  • 🔴 Windows Update Certificate Expiration - May/June 2027: Devices that are not updated before May 17, 2027 will lose the ability to receive Windows security patches; for organizations subject to HIPAA, CMMC, or cyber insurance patch-management mandates, unpatched devices represent direct compliance failures - IT must inventory affected devices this quarter and plan remediation before year-end budgets close.

  • 🟡 Copilot DLP: Sensitive Data Reaching External Web Search: When employees prompt Copilot with queries containing credit card numbers, Social Security numbers, or passport data, that information can flow to Bing’s external search service unless a new Purview DLP policy is explicitly enabled; this is a live data-exfiltration risk relevant to HIPAA, GDPR, PCI DSS, and SOC 2 - configure the policy now.

  • 🟡 Copilot DLP: External Email Manipulation of AI Responses: Copilot can ground its answers in untrusted external emails, creating a cross-prompt injection risk where a malicious sender crafts an email designed to manipulate AI outputs; a new Purview DLP policy limits Copilot grounding to trusted internal email only, and compliance teams should evaluate and enable it within 30 days.

  • 🟡 AI Agent Governance: Agents That Act Need Explicit Controls: Agents built in Copilot Studio can now retrieve sensitive data, call APIs, and modify records in connected systems including Salesforce; without deliberate governance policies, delegated agent permissions may exceed what any individual employee would be allowed - a least-privilege gap that strengthens the case for reviewing agent scopes as part of your Zero Trust posture before broad deployment.

  • 🟡 Purview Network DLP via Entra Global Secure Access - Preview November 2026: Upcoming capability will allow DLP policies to cover all internet-bound traffic, including cloud apps not yet cataloged in Defender - organizations planning network Zero Trust controls should track this for inclusion in Q1 2027 policy reviews.

  • 🟢 Auto-Labeling of Existing SharePoint Files - GA November 2026: SharePoint files that have never been manually labeled will automatically inherit the sensitivity label set on their document library, closing a common gap in information protection coverage; relevant to GDPR data-at-rest requirements and useful for organizations ahead of audit cycles.

  • 🟢 Multiple Chromium V8 Vulnerabilities Patched in Edge: Six browser engine vulnerabilities in Microsoft Edge’s underlying Chromium component have been disclosed and patched; confirm your endpoint management tooling is pushing the current Edge version to all devices.

Sources: Microsoft Security Response Center · Purview What’s New - SharePoint Auto-Labeling · Microsoft Security Community - DLP for Web Search

What Your Employees Will Notice

  • Email aliases now work for sending. Exchange Online users can now send outbound email from any of their configured alias addresses, not just their primary address. This is a frequently requested capability; expect questions to the help desk from users exploring it for the first time.
  • Teams files and conversations side by side (November preview). Opening a PDF, Markdown, or HTML file shared in Teams will show the chat conversation alongside the document, eliminating the need to toggle back and forth.
  • Teams Events can now support up to 20,000 registrations. Organizations running large all-hands, town halls, or external events should note the expanded capacity, available with valid Attendee packs.
  • Copilot’s Sales Development Agent now connects to Salesforce. Sales teams using Salesforce will find that the AI agent can read and update CRM records directly. Leaders should ensure employees understand what the agent is permitted to do and what confirmation steps are required before data is written.
  • The Meet app in Teams (GCC) is being renamed to Events app. Users in government cloud environments will see the name change with no functional disruption.
  • Viva Engage custom branding is rolling out. Employees may notice updated logos and theme colors in Engage reflecting your organization’s configured identity.

Sources: Exchange Online Blog - Sending from Aliases · M365 Roadmap - Teams Events · M365 Roadmap - Teams Files Side by Side

What Your Help Desk Should Expect

  • Email alias sending questions. Now that users can send from aliases, expect tickets asking how to configure this, why certain aliases do not appear as options, or why sent mail shows an unexpected address. Prepare a short FAQ or intranet post before broadly communicating the feature.
  • Copilot behavior changes. If your organization enables the new DLP policies for external email or web search, some Copilot responses will change or be blocked. Employees who notice different behavior may assume Copilot is broken rather than governed. Proactive communication will reduce ticket volume.
  • Remote PC access via Windows App. The general availability of remote PC connections in Windows App may prompt employees to self-configure remote access to work machines. Help desk should be ready to assist with authentication questions, especially for users without a work or school account on the connecting device.
  • Teams app rename in GCC. The Meet-to-Events app rename in GCC environments may generate confusion tickets from users who cannot locate the app by its former name.
  • Edge browser update prompts. The Chromium vulnerability patches require an Edge update. Users on managed devices should receive this automatically, but unmanaged or personal devices used for work access may generate help desk contact.

Sources: Exchange Online Blog - Sending from Aliases · Windows IT Pro Blog - Windows App GA · Microsoft Security Response Center - Chromium CVEs

Cost & Licensing

  • Teams Events at 20,000 registrations requires Attendee packs. The expanded capacity limit is not available on base Teams licenses. Organizations planning large-scale events should confirm whether Attendee pack licenses are in place before announcing high-registration events.
  • Copilot Studio agent actions carry consumption costs. As agents move from answering questions to executing workflows, message and action consumption will increase. Organizations deploying agents that write to Dataverse, Salesforce, or SharePoint should model usage costs before broad rollout. Unexpected agent activity can generate material overage charges.
  • Power Pages expansion to new regions. Organizations with data-residency requirements in Sweden or Italy can now host Power Pages workloads in those regions without additional workarounds, potentially simplifying GDPR compliance architecture.

Sources: M365 Roadmap - Teams Events Registrations · Power Platform Blog - Power Pages Regional Expansion · Copilot Studio Blog - Agent Design at Scale

Planning Horizon

  • Immediately - Copilot DLP: Block Sensitive Data in Web Search: Confirm with your compliance or security team whether the Purview DLP policy preventing sensitive data from reaching Bing web search is enabled; if Copilot has web search turned on in your tenant, this is an active risk that warrants immediate review.

  • Immediately - Copilot DLP: Restrict Grounding to Internal Email Only: Decide whether to enable the policy that limits Copilot from grounding its answers in external emails; regulated industries should treat this as a default-on control, not an optional setting.

  • Within 30 days - AI Agent Governance Policy Review: Establish or validate an internal policy governing what data agents can access, what systems they can write to, and what actions require human approval before deployment at scale.

  • Within 30 days - Windows Update Certificate Readiness Assessment: Direct IT to inventory all Windows devices - particularly older, unmanaged, or field devices - and confirm they can receive the certificate update before the May 2027 expiry; this belongs in the Q4 2026 work plan.

  • Within 30 days - Edge Browser Update Verification: Confirm that endpoint management policies are successfully delivering the latest Edge version to all managed devices; unmanaged devices used for business access should be flagged for policy review.

  • Before November 2026 - Purview Network DLP via Entra GSA - Preview: Identify a pilot group to evaluate this capability when preview launches; organizations already using Entra Global Secure Access for network-level Zero Trust controls will want to test scope before the December GA date.

  • Before November 2026 - SharePoint Auto-Labeling Preparation: Audit default sensitivity labels on SharePoint document libraries before the GA rollout so that automatic labeling applies the correct classifications; mislabeled libraries will propagate those labels to all existing files.

  • Before January 2027 - Work IQ Document Editing - Preview November 2026: Agents will be able to create and edit Office documents using organizational context; assess the data governance implications and decide which SharePoint locations and document types should be in or out of scope before this capability reaches your workforce.

Sources: Microsoft Security Community - Agent Governance · M365 Roadmap - Network DLP · Windows IT Pro Blog - Certificate Rotation

If You Take No Action

On the Windows Update certificate deadline: Devices that are not updated before May 17, 2027 will be unable to receive further Windows security patches. In regulated environments, unpatched devices represent direct violations of HIPAA technical safeguard requirements, CMMC patching controls, and common cyber insurance policy conditions. The remediation window is long, but the inventory and planning work must begin now to avoid emergency spend next spring - especially for organizations with large numbers of field, shared, or lightly managed devices.

On the Copilot DLP gaps: If neither the web search nor the external email DLP policies are enabled, employee prompts containing Social Security numbers, financial data, or health information are already at risk of flowing to external services. In a HIPAA or GDPR audit, the question will not be whether a breach occurred, but whether the organization knew the risk existed and chose not to act. Both controls are available today.

On AI agent governance: Agents deployed without explicit access scopes and human-approval checkpoints can write data, trigger workflows, and interact with external CRM systems using permissions inherited from the employees who authorized them. Without governance policy in place, a single misconfigured agent could exfiltrate sensitive records or corrupt CRM data at machine speed - a scenario that would constitute a reportable incident under most breach notification laws.

Sources: Microsoft Security Community - DLP for Web Search · Microsoft Security Community - Agent Governance · Windows IT Pro Blog - Certificate Rotation