Microsoft Purview compliance portal: Insider Risk Management – Experience enhancements to IRM alert investigation workflow

Experience enhancements to IRM alert investigation workflow including updates to the alert’s “All risk factors” page and activity explorer. These enhancements will give customers the ability to maximize the visual space for their investigation. We are adding to each component a minimize/ maximize button and hiding the horizontal banner on the Alerts pages by default. We are also enhancing the All Risk Factors page for better UX.

(more…)

Microsoft Purview compliance portal: Upcoming Update to Audit Records for Microsoft Purview Role Group Changes

To improve clarity and transparency, we’re updating the audit data for events related to Microsoft Purview role group membership changes. This update affects audit events under the SecurityComplianceRBAC workload (RecordType 87), specifically for operations for GrantPermission, DeletePermission. While the audit schema remains unchanged, the PreExecutionMessage and PostExecutionMessage fields will be refined to better reflect the nature of the changes captured in the logs. Action Required: If your organization consumes these audit log events programmatically (e.g., via scripts or automation tools), please review and update your parsing logic to accommodate the enhanced message content. Rollout Timeline: This change will be rolled out starting in August. We recommend validating your systems against the updated message format as soon as it becomes available in your environment.

(more…)

Microsoft Purview compliance portal: Insider Risk Management- Multi selectable DLP policies as an IRM triggering event

Insider Risk Management is releasing the ability to select multiple Data Loss Prevention (DLP) policies as triggering events in a policy. Previously, admins could only select one DLP policy as a triggering event within Insider Risk Management policies. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.

(more…)

Outlook: Summarize email attachments with Copilot in classic Outlook for Windows

Copilot users will now be able to summarize PDF, Word, and PowerPoint email attachments in classic Outlook for Windows.

(more…)

Microsoft Teams: Threads in channels

Threads in channels allow you to start a side conversation within a channel and focus on specific topics while keeping the main conversation clutter-free. You can reply to specific messages and create a separate thread, helping to minimize distractions and foster better collaboration.

(more…)

Microsoft Teams: Introducing the Network Strength Indicator

Microsoft Teams is introducing a Network Strength Indicator to improve meeting clarity by showing network quality with a 3-bar system. Rollout starts in July 2025 for Targeted Release and August 2025 for General Availability. Update your training and documentation accordingly.

(more…)

Microsoft OneDrive and Microsoft SharePoint: Use the table of contents in a PDF to navigate

Microsoft OneDrive and SharePoint will display a table of contents for PDFs that have one, allowing users to navigate directly to sections. This feature will roll out from mid-June to early July 2025 and will be enabled by default. No admin action is required, but user notification is recommended.

(more…)

Microsoft Defender for Cloud Apps: SIEM agents will retire

Microsoft Defender for Cloud Apps will retire SIEM agents between mid-November 2025 and late November 2025. No new SIEM agents can be configured after June 19, 2025. Transition to APIs for managing activities and alerts data from multiple workloads is recommended. Microsoft Sentinel agents remain supported.

(more…)

Microsoft Outlook for iOS and Android: Custom account icons

Microsoft Outlook for iOS and Android will allow users to choose custom icons for their accounts starting from June 2025, with completion expected by mid-July 2025. This feature, available in the account settings, will help users navigate multiple accounts more easily. No admin action is required before the rollout.

(more…)

Audit Log Update: Transitioning to Unified Fabric Platform Logging

Audit logs for Datamarts will transition to the Microsoft Fabric Platform, eliminating redundant entries and improving clarity. This change will occur from June 22, 2025, to July 7, 2025. No admin action is required, but users should be informed, and documentation updated. Learn more [here](https://learn.microsoft.com/power-bi/enterprise/service-admin-auditing).

(more…)


I've been working with Microsoft Technologies over the last ten years, mainly focused on creating collaboration and productivity solutions that drive the adoption of Microsoft Modern Workplace.

Trending Posts