The TeamworkDevice (beta) API in Microsoft Graph will be retired starting December 8, 2025. Organizations should transition to managing Teams Rooms on Windows via the Teams Rooms Pro Management Portal (PMP), which will consolidate management for all Teams device types. No admin action is required for retirement.
Microsoft Purview Data Lifecycle Management now lets admins create Priority Cleanup policies to delete OneDrive and SharePoint content before retention or legal hold expires, with simulation, audit, and review features. Requires two admins with specific roles and explicit policy enforcement. Rolling out late 2025 to early 2026.
By December 2, 2025, update firewall configurations to include new Azure Front Door IP addresses for Microsoft Intune. Add the service tag “AzureFrontDoor.MicrosoftSecurity” to allow outbound traffic on port 443. Do not remove existing Intune endpoints to ensure uninterrupted device and app management.
By December 2, 2025, update firewall allowlists to include Azure Front Door IP addresses tagged “AzureFrontDoor.MicrosoftSecurity” for Microsoft Intune and Basic Mobility and Security. Do not remove existing endpoints. Use the consolidated Intune endpoint list; previous scripts are outdated. Notify your networking team if needed.
This feature in Purview Compliance Manager shall enable customers to convert complex regulations from PDF documents to actionable controls and actions in multi cloud environment. Customers can use the converted regulatory templates to create assessments and identify compliance gaps, understand and implement controls to improve their compliance posture.
Leverage the latest AI advancements to build prototypes, learning applications or interactive reports using your favorite tools in Edge without worrying about your data. This extension enables apps to leverage some new security improvements for safely executing AI generated code.
This feature release ‘Always-on diagnostics’, captures critical diagnostic data from onboarded endpoint devices running on Windows OS for EDLP issue reporting. Comprehensive trace logs will be automatically recorded and stored locally on the devices, eliminating the need to reproduce issues when submitting investigation requests to Microsoft. It allows for the collection of detailed traces over extended periods (up to 90 days). While raising tickets to submit investigation requests to Microsoft regarding Microsoft Endpoint DLP, customers can share enhanced diagnostic information with Microsoft without needing to reproduce the exact scenario.
We’ve released updates to the following update channel for Microsoft 365 Apps:
By December 13, 2025, update Microsoft Sentinel analytic rules, automation, workbooks, and queries to use the new account entity naming precedence: UPN prefix → name → display name. Use coalesce patterns to avoid issues in incidents, alerts, dashboards, and playbooks relying on account names. Test changes before rollout.
I've been working with Microsoft Technologies over the last ten years, mainly focused on creating collaboration and productivity solutions that drive the adoption of Microsoft Modern Workplace.
Found my content useful?
Buy Me a Beer
HANDS ON SharePoint
HANDS ON Teams
HANDS ON Lists
HANDS ON tek
M365 Admin
