M365 Message Center

Geändert

13.03.2026

Services

Windows

Microsoft has identified a security issue in the Windows Routing and Remote Access Service (RRAS) management tool that could allow remote code execution when connecting to a malicious server. This issue only applies to a limited set of scenarios involving Enterprise client devices running hotpatch updates and being used for remote server management.An out-of-band (OOB) hotpatch update (KB5084597) was released today, March 13, 2026, to address this issue. This cumulative update includes all protections and improvements from the March 2026 Windows security update released March 10, 2026. No action is required if:Your devices receive standard Windows updates.If you are not using the RRAS management tool on Windows devices running versions 25H2 or 24H2.This OOB hotpatch update is available for Windows 11, versions 25H2 and 24H2 devices enrolled in hotpatch updates and managed by Windows Auto

Geändert

13.03.2026

Services

Windows

As announced in January 2026, the unattend.xml file used in hands‑free deployment poses a vulnerability when transmitted over an unauthenticated RPC channel. Beginning with the April 2026 security update, IT admins should prepare for the second phase of hardening for CVE-2026-0386. These changes will make hands‑free deployment disabled by default to enforce secure behavior. After this update, hands‑free deployment will no longer work unless explicitly overridden with registry settings.When will this happen:Starting with the April 2026 security update, Windows Deployment Services (WDS) will enforce secure‑by‑default behavior by automatically disabling hands‑free deployment.How this will affect your organization:After installing the April 2026 security update, hands‑free deployment will be blocked to prevent unauthenticated access to unattend.xml, enforcing the hardening requirements for C

Geändert

13.03.2026

Services

Microsoft Dataverse · Power Platform

We are announcing our CAE rollout for user sign-in flows to Dataverse as part of ongoing security improvements for Power Platform. This change affects interactive user access to Dataverse and relies on Microsoft Entra Conditional Access (CAE) policies for near real-time session evaluation. This feature is being gradually rolled out across Dataverse environments, which is anticipated to be complete by September 2026. Users are advised to review their user-focused CAE Conditional Access policies to ensure continued access to Dataverse. How does this affect me? Dataverse user access is transitioning to CAE-enabled authentication, where user sessions are continuously evaluated based on Conditional Access policy signals rather than only at the initial sign-in. As part of this rollout, user sign-in traffic to Dataverse may originate from managed locations that must be permitted and compliant w

Geändert

12.03.2026

Services

Windows

If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live chat-based event on the Tech Community called Windows Office Hours. Members of the Windows, Microsoft Intune, Windows Autopilot, Windows Autopatch, and Windows 365 engineering teams will be standing by to answer your questions. We also have experts from FastTrack, the Customer Acceleration Team, and Microsoft public sector teams. Want to attend the March 19 session of Office Hours? Add it to your calendar and select Attend on the event page to let us know you’re coming. There is no video or live meeting component. Simply visit the event page, log in to the Tech Community, and leave your questions in the Comments section. You can also bookmark https://aka.ms/Windows/OfficeHours for upcoming dates (and the ability to add this event to your calendar).

Geändert

10.03.2026

Services

Windows

You can now use familiar Remote Server Administration Tools (RSAT) on Arm-based Windows 11 devices. With the February 2026 non-security preview update, five of the most widely used RSAT components are available for everyday system administrator tasks. Add users to Active Directory, edit GPOs, configure NDS and DHCP servers, and more. When will this happen: Starting with the February 2026 non-security preview update How this will affect your organization: For the past several years, if you’ve used Windows on Arm, you had to rely on alternative management methods (such as Windows Admin Center) or switch to an x64 device for certain tasks. Similarly, testing newer Arm-powered laptops for your enterprise highlighted the pressing need for RSAT support on Arm64 devices. With RSAT support, Windows 11 on Arm becomes a more viable platform for enterprise IT management. What you need to do to prep

Geändert

10.03.2026

Services

Windows

The March 2026 security update is now available for all supported versions of Windows. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 update history page. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. Highlights for the Windows 11, version 25H2 update: This security update includes improvements that were a part of update KB5077181 (released February 10, 2026).This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.This update adds high‑confidence device targeting, expanding coverage for automatic Secure Boot certificate delivery.This update improves File Explorer search reliability when searching across multiple drives or "This PC". This