EWS deprecation is live in Exchange Online and the ExchangeOnlineManagement module needs an upgrade - alongside Windows 11 26H2 GA, a Critical KDC RCE, and Purview's unified classifiers preview, this is a week for config changes and baseline reviews.
Agent 365 MCP governance tools land alongside a major Intune feature wave and Microsoft's disruption of the EvilTokens device code phishing platform - a week where AI control and endpoint capability both moved meaningfully forward.
Agent 365 lands with cross-vendor AI governance controls, a Critical Windows Secure Kernel EoP vulnerability needs patching, and September Exchange Server security updates are out.
Autopilot device association reaches GA with hardware-backed pre-enrollment trust, Remote Help gets unattended Windows access, and two Critical-severity CVEs land alongside a heads-up from Exchange Online that legacy identifier properties may be on their way out.
Official Microsoft deployment and setup guides for Intune, Defender, Entra, Copilot, Purview, and Viva, organized by Modern Work practice area, plus what actually changes across Commercial, GCC, GCC High, and DoD.
Exchange Server SE gets its August security updates while CU1 slips further, and a wave of CVE acknowledgment updates signals an active patch cycle. Engineers also get new Defender for Identity tooling, granular Purview audit logs on the horizon, and a useful roundup of Windows device recovery options.
Entra Tenant Governance hits GA for multi-tenant control at scale, Defender for Identity expands sensor v3.x coverage to AD FS, AD CS, and Entra Connect, and the Copilot Domain Exclusion feature gets quietly rolled back - a lot moved this week.