The November 2025 security update is now available for all supported versions of Windows. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 update history page. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. Highlights for the Windows 11, version 25H2 update: This security update includes improvements that were a part of update KB5067036 (released October 28, 2025). This update addresses security issues for your Windows operating system. This update addresses an issue that affects gaming handheld devices. These devices were unable to stay in low-power states, which caused faster battery drain. This update addresses an issue on some handheld gaming devices where after signing in using the built
Windows 10 devices accessing Windows 365 Enterprise Cloud PCs and Windows 365 Frontline (Dedicated) Cloud PCs are automatically entitled to Windows 10 Extended Security Updates (ESU) under certain conditions. IT administrators must use Microsoft Intune or another MDM provider to deploy a custom policy that helps verify whether a device is enrolled in the Windows 10 ESU subscription program. Action is required in order for these devices to install the upcoming November 2025 Windows security update, which will be available on November 11, 2025. Learn more about this change at Enable Windows 10 Extended Security Updates (ESU) for clients accessing cloud and virtual machines. When will this happen:The upcoming November 2025 Windows security update will be available on November 11, 2025. It's necessary to take action prior to this date, in order for devices to be eligible for this update. Ent
A new resource is available to help you understand Known Issue Rollback (KIR). This well-established process automatically rolls back problematic code for a known issue in Windows non-security updates. This rollback applies automatically through Windows Update on non-IT-managed devices. IT-managed devices require a specific Group Policy configuration. When will this happen: KIR came together as a functionally complete system beginning in Windows 10, version 2004. Since then, most of the code changes in Windows monthly updates support KIR capability. The new resource is now available to learn more about KIR. How this will affect your organization: KIR is a robust mitigation technology built into Windows non-security updates to help you safeguard and troubleshoot individual parts of the update. Windows offers KIR capability on all supported versions of Windows Server and client platforms,
Now that support for Windows 10 has officially ended, it is important that organizations with Windows 10 devices stay as protected as possible through the Windows 10 Extended Security Updates (ESU) program. A new guide for Windows 10 ESU customers is now available, offering details on how to find, activate, and verify licenses on devices and endpoints. When will this happen:Windows 10 reached end of support on October 14, 2025. To continue receiving monthly security updates, Windows 10 devices need to be activated with Windows 10 Extended Security Updates (ESU) licenses before the November 2025 Windows security update. What you need to do to prepare:Follow the steps in the new guide to locate MAK keys, activate ESU licenses on each applicable device, prepare devices used by people with Windows 365 Cloud PC and Azure Virtual Desktop licenses, and verify enrollment. Additional information:
Microsoft Defender Application Guard for Office was retired in April 2024 and is now being removed from Office. This change aligns with the end of support for Windows 11 version 23H2 and helps streamline the security experience for users. Documents that previously opened in Application Guard will now open in Protected View, maintaining strong protection against threats. When this will happen: Phase 1: Removal begins with Office version 2602 Current Channel: early February 2026 Monthly Enterprise Channel: April 2026 Semi-Annual Enterprise Channel: July 2026 Phase 2: Full removal with Office version 2612 Current Channel: early December 2026 Monthly Enterprise Channel: February 2027 Semi-Annual Enterprise Channel: July 2027 How this affects your organization:Who is affected: All Win32 users who previously used Microsoft Defender Application Guard for Office. What will happen: Files that pre
Start using the newest Windows 11 capabilities with helpful tips and actionable steps summarized in one place. Discover news about Microsoft Ignite 2025, update and driver management, Windows 11 productivity features, Microsoft Intune, AI capabilities, lifecycle milestones, security, and more. When will this happen: Improvements summarized in this monthly recap are already available. Note that some of them are rolling out gradually. How this will affect your organization: You can start seeing improvements across various workflows in your organization with: Hotpatch updates that help you achieve security and compliance more quickly A new policy to remove select provisioned in-box apps without custom imaging and complex scripts New settings for Windows 11, version 25H2 in the Microsoft Intune Settings Catalog 10 key Microsoft Intune capabilities that will help simplify the upgrade to Windo
SharePoint Online · Microsoft Copilot (Microsoft 365)
Updated October 22, 2025: We have updated the content below. Thank you for your patience. [Introduction] We’re introducing Knowledge Agent, a built-in SharePoint capability that helps organizations prepare content for AI at scale. It unifies fragmented AI features into a single, context-aware interface that adapts to user roles and surfaces intelligent actions directly in the flow of work. This enhancement supports high-quality, trustworthy responses from Microsoft 365 Copilot and custom agents. [When this will happen:] Public Preview (Worldwide): Begins mid-September 2025; completes by late February 2026. [How this affects your organization:] Who is affected: Users with a Microsoft 365 Copilot license on tenants opted into Knowledge Agent preview. Admins managing SharePoint content and agents. What will happen: A floating button will appear in the lower-right corner of SharePoint surfac
Organizations undergoing rebranding, mergers, acquisitions, divestitures, or tenant consolidations often need their SharePoint domain name in URLs to reflect their new identity. The SharePoint Online Tenant Rename feature enables this change. We are announcing general availability of advanced tenant rename with no site count limitation. With this update, the feature is now accessible to all customers, regardless of the total number of sites in the tenant. When this will happen: General availability begins worldwide on October 16, 2025. Rollout started in early October and is expected to complete by mid-October 2025. How this affects your organization: Who is affected: Admins managing SharePoint Online and OneDrive for Business tenants globally. What will happen: Rename support is now available for all Microsoft 365 tenants, regardless of site count. High reliability is maintained across