Admins can now use filtered views for secure record-level access based on field values in Power Platform governance, supporting scenarios without ownership. Public preview starts October 2, 2026.
Store Commerce operations in Dynamics 365 may fail due to date formatting issues triggered by recent browser/runtime updates and historical time-zone-offset changes.
Policy-based app removal now works in multi-session environments on Windows 11 Enterprise/Education 24H2+, letting admins manage in-box app removal for a more tailored desktop.
Entra ID adds risk-based anti-bot CAPTCHAs to reduce telephony-based authentication abuse; some users may see extra verification before SMS/voice codes are sent.
An updated October 2026 Scan Cab was released to address security vulnerabilities in .NET, Visual Studio, and PowerShell. Admins must reacquire and redeploy if downloaded before 7:00 PM PDT on Oct 25, 2026.
The Cowork settings panel in Copilot Settings is being renamed to Browser use in Microsoft Copilot for easier discovery. No change to functionality or existing configuration.
Services: Microsoft 365 suite, Microsoft Copilot (Microsoft 365)
Microsoft extends App-V server support until October 9, 2029, giving organizations more time before migrating to Azure Virtual Desktop App Attach and MSIX app packaging.
Word Online (Business) connector will require authenticated access for file retrieval, removing dependency on unauthenticated download URLs as of October 14, 2026, improving SharePoint and OneDrive security.
Windows Server 2022 has moved to extended support; October 2026 marks the last mainstream security update. Extended security updates continue monthly through October 14, 2031.
Administrator protection will be enabled by default in Windows 11 security baselines with the October 2026 security update for versions 26H2, 25H2, and 24H2.
Microsoft is improving Windows security by hardening ReFS, adding visibility and controls to block unsupported external ReFS configurations; phased rollout allows audit review and dependency assessment.
Automatic remediation of insecure AD FS Distributed Key Manager container ACLs starts with October 2026 Windows security update to address CVE-2026-56155.
Devices must have replacement certificates (delivered via Windows updates) to maintain access to Windows Update after certificates expire on May 17 and June 19, 2027.