Photo credit: Copilot
Microsoft continues to accelerate changes across Microsoft 365, Teams, Copilot, SharePoint, Edge, Purview, and the Power Platform. The latest roadmap updates point to a consistent direction: more AI-driven experiences, stronger security controls, broader administrative governance, and an increasing number of capabilities arriving with little or no end-user configuration.
For stakeholders investing in this ecosystem, the important question is no longer simply “What new features are coming?” It is also “What will turn on automatically, and what do we need to govern before users discover it?”
Here are the updates worth watching.
Disclaimer: Unless explicitly mentioned, everything listed is sourced from the Microsoft Roadmap here: https://www.microsoft.com/en-us/microsoft-365/roadmap
Do your own due diligence prior to introducing change. This information is for entertainment purposes. I do not have a team, it’s just me using AI to edit. Consider supporting the effort here.
Teams Security Continues to Get Smarter
Microsoft is adding several security capabilities designed to address phishing, impersonation, social engineering, and malicious content directly within Teams.
AI-powered phishing detection
Teams is introducing AI-powered phishing detection that analyzes conversation context, particularly in higher-risk scenarios such as external first-contact chats. When suspicious activity is detected, users may receive warnings that help them recognize potential phishing or social-engineering attempts.
Malicious QR-code detection
QR-code phishing continues to grow as attackers attempt to bypass traditional URL protections. Teams will add near-real-time detection of malicious QR codes shared in messages by analyzing the destination embedded in the QR code and applying protections to malicious content.
Meeting impersonation protection
Teams is also introducing impersonation protection for meetings. When Teams identifies a potentially deceptive participant or organizer, it can display warnings and risk indicators to help users make better decisions before or during the meeting.
Facilitator gains scam detection
Looking further ahead, Facilitator is getting a Protection skill that can inspect meeting transcripts for possible social-engineering attempts involving external participants. When suspicious behavior is detected, Teams can warn participants and provide options to end the meeting or temporarily restrict information sharing. The roadmap currently targets this for November 2027.
Sysadmin takeaway: Teams should increasingly be viewed as part of the organization’s phishing and social-engineering defense boundary, not simply as a collaboration platform.
Teams Meeting AI Gets More Administrative Control
Microsoft is introducing enhanced Copilot and AI controls for Teams meetings. Organizers will have more control over who can enable and access AI experiences, while IT administrators will receive a simplified policy model covering AI behavior during and after meetings. The roadmap currently targets November 2026.
Another notable governance improvement is Default Meeting Templates. Administrators will be able to apply organizationally preferred meeting settings automatically whenever users create Teams meetings from Outlook or the Teams calendar. This includes meeting protection settings. Organizers require Teams Premium to use Default Meeting Templates.
Why it matters: This creates an opportunity to move meeting security from user choice toward centrally defined organizational defaults.
Work IQ Is Becoming an Important Administrative Layer
Several roadmap items show Work IQ evolving into an orchestration and intelligence layer connecting Copilot, organizational knowledge, agents, and Microsoft 365 services.
Upcoming capabilities include:
- Microsoft IQ, providing a unified intelligence layer for agents to discover and reason over organizational knowledge.
- Real-Time Transcripts, allowing applications and agents to access Teams meeting transcripts while meetings are happening.
- Human in the Loop, allowing agent workflows to pause for human approval or input.
- Agent Policy Governance, providing administrators with policy-based controls for managing agents and their capabilities at scale.
- REST endpoint tools, allowing governed Work IQ integrations to expose supported REST endpoints to agents.
- Retrieve and Upload capabilities, allowing agents to retrieve Microsoft 365 context and upload content to supported Microsoft 365 destinations.
For organizations working through AI governance, Agent Policy Governance and Human in the Loop are especially important. They indicate that Microsoft is building centralized governance controls alongside increasingly autonomous agents.
Copilot Search Is Coming to SharePoint and OneDrive
Copilot Search will bring natural-language, AI-powered search into SharePoint and OneDrive.
Users will be able to receive relevant results, AI-generated summaries with source references, filters, and a handoff into Copilot. The roadmap lists October 2026 preview and January 2027 general availability.
Admins should think beyond the search experience itself.
Copilot search effectiveness is directly tied to information architecture and permissions. Poorly governed content, excessive access, stale sites, and weak information lifecycle practices become increasingly visible when AI makes enterprise information easier to discover.
SharePoint Pages Are Becoming Agent Surfaces
A new Agent chat web part is coming to modern SharePoint pages. Page editors will be able to configure the web part to use a Microsoft 365 Copilot agent. Preview is targeted for November 2026 with general availability currently listed for January 2027.
This could make SharePoint an increasingly important delivery surface for purpose-built departmental agents.
Think:
- HR knowledge agents
- IT support agents
- Departmental policy assistants
- Onboarding assistants
- Internal knowledge agents
- Operational support experiences
Sysadmin takeaway: Agent governance and SharePoint governance will increasingly overlap.
SharePoint Gets an Inactive Files Policy
One particularly interesting storage-governance update is the new Inactive files policy within SharePoint Advanced Management.
Administrators will be able to automatically archive files based on last-accessed time. The policy can use inactivity thresholds ranging from 6 to 48 months, target all or selected SharePoint sites, and include or exclude specific file types and sites.
A What-If mode will allow administrators to evaluate impact before activating the policy. Eligible content moves to the Microsoft 365 Archive cold-storage tier while retaining metadata, permissions, compliance controls, and searchability. Microsoft 365 Archive and pay-as-you-go billing are required.
For admins dealing with large legacy SharePoint environments, this could become an important lifecycle-management tool.
Purview Continues Moving Toward Least Privilege
Microsoft Purview is adding a View-Only Device Management role for Endpoint Data Loss Prevention.
Historically, viewing device onboarding information could require broad roles such as Compliance Administrator, Global Administrator, or Security Administrator. The new role allows auditors and security analysts to inspect onboarding status, search devices, review configuration information, and export data without gaining the ability to change device configuration.
This is a welcome improvement for organizations adopting least-privilege administration.
Purview is also introducing clearer Insider Risk Management alert classifications:
- True positive
- Benign / operational
- False positive
These classifications replace the existing dismissal-reason approach and should improve reporting and tuning of insider-risk detections.
Edge Continues Evolving Into a Business PDF Platform
Several enhancements are coming to the built-in Microsoft Edge PDF experience.
Translate entire PDFs
Users will be able to translate full PDF documents from Edge. The translated version opens in another tab, and administrators can control availability using the TranslateEnabled policy.
Organize and merge PDFs
Users will also be able to:
- Extract pages
- Delete pages
- Rotate pages
- Reorder pages
- Merge PDFs
- Save the result as a new PDF
Processing happens locally on the device, and administrators can manage the capability using the PdfOrganizeAndMergeEnabled policy.
Better PDF annotation management
A Notes pane will consolidate highlights, text notes, ink notes, and comments so users can search, filter, edit, delete, and navigate annotations more easily.
For organizations reviewing alternatives following changes to legacy document workflows, Edge continues to become much more capable without requiring additional desktop software.
Enabled by Default: Pay Attention to These
Some of the most important roadmap items for admins are those users receive automatically.
Examples contained in the roadmap include:
Power Apps form fill assistance using speech
Users of model-driven applications will be able to use speech as input for AI-assisted form completion. The recording is transcribed and used as a source for the form entry, while the underlying audio is described as transient and not saved. The roadmap specifically categorizes the feature scope as Users (enabled by default).
Power Apps row summary visual refresh
The refreshed AI-generated row-summary experience is listed as always enabled, introducing a more prominent visual presentation for AI-generated insights in model-driven applications.
Power Apps modern visual experiences
The refreshed Fluent experience for the Power Apps mail application and embedded model-driven applications is also listed as always enabled for the applicable release channel. [
Dynamics and Power Platform examples
Several broader Microsoft business application capabilities are also automatically enabled, including certain Project Operations, Field Service, Business Central, Dataverse, and Sustainability improvements. Some changes explicitly state that no additional configuration is required.
Why sysadmins should care
“Enabled by default” should be treated differently from “available.”
When Microsoft automatically introduces a capability, admins should evaluate:
- Security impact
- Data exposure
- Compliance requirements
- Licensing implications
- User support/readiness
- Whether an administrative control exists
- Whether communications are needed before rollout
This becomes particularly important as AI capabilities are embedded deeper into everyday applications.
Retirements and Changes to Existing Administration
There is one notable retirement/removal item in the supplied roadmap.
Microsoft is consolidating AI configuration for Power Apps model-driven applications.
In Maker Studio, administrators and makers will get a centralized Copilot and AI settings area. In the Power Platform admin center, model-driven application AI settings are moving from the existing Environment > Settings location into Copilot Hub > Power Apps.
As part of the change, Microsoft states that the old model-driven app AI switches under Environment > Settings will be retired and removed.
This affects settings associated with capabilities such as:
- Generative pages
- Copilot in apps
- Form fill assistance
- Row summaries
- AI-generated charts
- Natural-language search and filtering
Admin action: Update runbooks, screenshots, internal KB articles, training material, and operational procedures that reference the old Power Platform administration path.
Endpoint and Microsoft 365 Apps Admins: Update Repair Is Worth Watching
A useful operational capability called Update Repair is coming to Microsoft 365 Apps inventory.
Admins will be able to identify Windows devices where Microsoft 365 Apps are out of date or experiencing update problems and, for eligible devices, remotely initiate Online Repair from the Microsoft 365 Apps admin center. Repair reinstalls Microsoft 365 Apps using the latest available build appropriate for the device’s configured update channel.
For endpoint teams, this creates another remediation option for devices that have drifted or failed to update correctly.
Microsoft is also enhancing Cloud Update exports, providing more device and update information and allowing administrators to export filtered results from Inventory and Cloud Update device views.
Edge Extended Stable Is Coming to macOS
Organizations managing macOS endpoints will be able to deploy the Microsoft Edge Extended Stable channel.
Extended Stable provides an 8-week major release cycle, compared with the more frequent Stable release cadence identified in the roadmap.
For organizations with strict change-control processes, this provides another way to reduce browser feature churn on managed Macs.
What Sysadmins Should Do Now
Based on this roadmap, I would prioritize five areas:
1. Review Teams AI and security policies
Prepare for expanding phishing detection, impersonation protection, meeting AI controls, and Facilitator security capabilities.
2. Start formalizing agent governance
Work IQ, MCP, Copilot agents, SharePoint agents, and agent-enabled business applications are quickly becoming interconnected administrative concerns.
3. Review SharePoint permissions and lifecycle management
Copilot Search and embedded agents will make enterprise content easier to surface. Good permissions, lifecycle management, ownership, and information architecture matter more than ever.
4. Review default-on capabilities
Do not assume a feature is harmless simply because Microsoft enables it automatically. Evaluate default-on features using the same security, privacy, compliance, support, and governance criteria used for explicitly deployed services.
5. Update Power Platform documentation
Prepare for the retirement of the older model-driven app AI switches under Environment > Settings and the transition toward centralized management through Copilot Hub > Power Apps.
Bottom Line
The theme in this roadmap is clear: Microsoft 365 administration is expanding from managing users, devices, applications, and data into managing AI capabilities, agents, context, and automated actions.
Security controls are becoming more intelligent. Copilot is reaching deeper into SharePoint, Teams, Outlook, Power Platform, and business applications. At the same time, Microsoft is increasingly delivering capabilities automatically or consolidating administration around centralized Copilot and AI governance surfaces. [
For sysadmins, the winning strategy is straightforward: know what is coming, identify what is enabled automatically, establish governance before adoption occurs organically, and treat AI configuration as part of the standard Microsoft 365 security and change-management process.
Follow
- Apple Podcasts – https://podcasts.apple.com/us/podcast/level-up-m365/id1718776415
- Spotify – https://podcasters.spotify.com/pod/show/levelupm365/
- Newsletter/Socials – https://levelupm365.com/subscribe-social-page/
If this post was helpful support the effort by ether of the following, share, like, subscribe, leave a tip!
