What's new in Microsoft Security: March 2026

Call to action: update older Microsoft Sentinel content as code (Sentinel repositories) API versions before June 15, 2026

Starting June 15, 2026 , older API versions used by Microsoft Sentinel repositories will no longer be supported. This change impacts all Source Control and Source Controls actions in the Microsoft Sentinel REST API for the affected API versions. The…

DocsSource Control - REST API (Azure Sentinel)New·Source Controls - REST API (Azure Sentinel)New·Manage custom content with repository connections

Source Control - REST API (Azure Sentinel) Learn more about [Sentinel Source Control Operations]. How to [list Repositories].

(Preview) The following advanced hunting schema tables are now available for preview: The CloudDnsEvents table

(Preview) The following advanced hunting schema tables are now available for preview: The CloudDnsEvents table contains information about DNS activity events from cloud infrastructure environments. The CloudPolicyEnforcementEvents table contains policy enforcement evaluation decisions and metadata of security gating events for…

DocsCloudDnsEvents table in the advanced hunting schemaUpdated·CloudPolicyEnforcementEvents table in the advanced hunting schema

CloudDnsEvents table in the advanced hunting schema Learn about the CloudDnsEvents table in the advanced hunting schema, which contains information about DNS activity events from cloud infrastructure environments.

Identity security enhancements

Identity security enhancements : New identity security capabilities help you monitor and manage identity security for human and non-human identities: (Preview) Identity Security dashboard: The Identity Security dashboard provides summary cards for identity providers, on-premises identities, SaaS identities, PAM and…

DocsView your identity coverage and maturityNew·Non-human identities in Microsoft DefenderNew·View the Identity inventoryUpdated·Investigate IdentitiesUpdated

View your identity coverage and maturity Learn how to use the Coverage and maturity page in Microsoft Defender to check your identity protection status and close coverage gaps in your environments.

(Preview) Customers can now use filters on very large incidents with many alerts and entities or hide specific

(Preview) Customers can now use filters on very large incidents with many alerts and entities or hide specific entities to simplify complex incident graphs. By simplifying the graphs, security teams can focus their investigations on what matters most. Learn more

DocsInvestigate incidents in the Microsoft Defender portal (Legacy)New

Investigate incidents in the Microsoft Defender portal (Legacy) Investigate incidents on various assets from correlated signals of various Defender services and other Microsoft security products like Microsoft Sentinel.

New Microsoft Secure Score recommendations

New Microsoft Secure Score recommendations. Microsoft Secure Score now includes new recommendations to help organizations proactively prevent common endpoint attack techniques: - Block outbound network connections from Microsoft HTML Application Host (mshta.exe): Helps mitigate attacks that leverage mshta.exe (a trusted…

New Microsoft Secure Score recommendations

New Microsoft Secure Score recommendations. Microsoft Secure Score now includes new recommendations to help organizations reduce exposure to common attack techniques involving remote access and authentication relay attacks: - Block file transfer over RDP : Restricts file transfer capabilities in…

Updates to Secure Score category calculations for increased accuracy

To improve accuracy and better protect organizational identities, some security recommendations categorized as Cloud apps recommendations are now considered identity‑related and grouped under the Identity category. While the total Secure Score remains unchanged, individual identity and app scores may change.

Cloud apps

To improve accuracy and better protect organizational identities, we've made updates to the Secure Score category calculations. Some security recommendations categorized as Cloud apps recommendations are now considered identity‑related and grouped under the Identity category. While the total Secure Score…

The proactive user containment (contain user) action as part of the predictive shielding feature is now genera

The proactive user containment (contain user) action as part of the predictive shielding feature is now generally available. This action infuses activity data with exposure data to identify exposed credentials at risk of being compromised and reused to conduct malicious…

DocsTake response actions on a device in Microsoft Defender for EndpointUpdated

Take response actions on a device in Microsoft Defender for Endpoint Respond to attacks on a device in Microsoft Defender for Endpoint by isolating it, collecting an investigation package, running a scan, or restricting apps.

macOS release: Build 101.26012.0017

macOS release: Build 101.26012.0017. Release version 20.126012.17.0 released: See enhancements and features for this release .

DocsMicrosoft Defender for Endpoint release notesNew

Microsoft Defender for Endpoint release notes Find release details for Microsoft Defender for Endpoint on Windows, macOS, Linux, Android, and iOS from the past six months.

macOS release: Build 101.26012.0015

macOS release: Build 101.26012.0015. Release version 20.126012.15.0 released: See enhancements and features for this release .

DocsMicrosoft Defender for Endpoint release notesNew

Microsoft Defender for Endpoint release notes Find release details for Microsoft Defender for Endpoint on Windows, macOS, Linux, Android, and iOS from the past six months.

Windows release: Windows Defender Antivirus: Platform 4.18.26020.6 / Engine 1.1.26020.3

Windows release: Windows Defender Antivirus: Platform 4.18.26020.6 / Engine 1.1.26020.3. See enhancements and features for this release .

DocsMicrosoft Defender Antivirus updates - Previous versions for technical …

Microsoft Defender Antivirus updates - Previous versions for technical upgrade support Understand the type of technical support offered for previous versions of Microsoft Defender Antivirus

Proactive user containment (contain user)

Proactive user containment (contain user). The proactive user containment (contain user) action as part of the predictive shielding feature is now generally available. This action infuses activity data with exposure data to identify exposed credentials at risk of being compromised…

DocsTake response actions on a device in Microsoft Defender for EndpointUpdated

Take response actions on a device in Microsoft Defender for Endpoint Respond to attacks on a device in Microsoft Defender for Endpoint by isolating it, collecting an investigation package, running a scan, or restricting apps.

Linux release: Build 101.26021.0002

Linux release: Build 101.26021.0002. Release version 30.126021.0002.0 released: See enhancements and features for this release .

DocsMicrosoft Defender for Endpoint release notesNew

Microsoft Defender for Endpoint release notes Find release details for Microsoft Defender for Endpoint on Windows, macOS, Linux, Android, and iOS from the past six months.

Linux release: Build 101.26012.0007

Linux release: Build 101.26012.0007. Release version 30.126012.0007.0 released: See enhancements and features for this release .

DocsMicrosoft Defender for Endpoint release notesNew

Microsoft Defender for Endpoint release notes Find release details for Microsoft Defender for Endpoint on Windows, macOS, Linux, Android, and iOS from the past six months.

Library management for live response

Library management for live response. Library management for live response is now generally available. This feature provides a centralized view for managing files and scripts used during live response sessions.

DocsManage the live response file library in Microsoft Defender for …

Manage the live response file library in Microsoft Defender for Endpoint Use Microsoft Defender for Endpoint to configure libraries for live response.

Linux · March 24, 2026 · Update: post-release fix

Fixed an issue in the January 2026 release, where real-time scanning of the /dev/watchdog device could trigger unexpected system reboots on systems with hardware watchdog enabled. For more information, see Linux | January 2026 | Platform: 101.25102.0005 .

Windows Antivirus · March 2026 · Platform 4.18.26030.3011 · Engine 1.1.26030.3008

Release details Component Version Date Platform 4.18.26030.3011 April 14, 2026 Engine 1.1.26030.3008 April 8, 2026 Security intelligence 1 1.449.16.0 April 14, 2026 Support phase Security and Critical Updates - 1 The security intelligence version listed here is relevant to the…

DocsSecurity intelligence updates for Microsoft Defender Antivirus and …

Linux · March 2026 · 101.26021.0002

Release details Release version Engine version Signature version 30.126021.0002.0 1.1.26010.1003 1.445.553.0 Enhancements and features Feature area Update summary Performance and stability Improved agent performance and stability under sustained, high‑throughput workloads.

Linux · March 2026 · 101.26012.0007

Release details Release version Engine version Signature version 30.126012.0007.0 1.1.25110.3002 1.443.508.0 Enhancements and features Feature area Update summary Vulnerability detection Strengthened Linux security coverage for Python workloads by improving vulnerability detection across system, user, and virtual environments, expanding coverage for…

Suspected pass-the-ticket attack alert is now generally available

The Suspected pass-the-ticket attack alert is now generally available. This alert was previously available in public preview as Pass-the-Ticket (PtT) attack . For more information, see Lateral movement alerts .

DocsMicrosoft Defender for Identity XDR security alertsUpdated

Microsoft Defender for Identity XDR security alerts Learn about security alerts issued by Defender for Identity in the extended detection and response (XDR) format.

Updates to Secure Score category calculations for increased accuracy

To improve accuracy and better protect organizational identities, some security recommendations categorized as Cloud apps recommendations are now considered identity-related and grouped under the Identity category. While the total Secure Score remains unchanged, individual identity and app scores may change.

Sensor v3.x support for domain controllers with Microsoft Entra Connect identity roles

Defender for Identity sensor v3.x now supports domain controllers that run Microsoft Entra Connect, including detections and identity security posture management (ISPM) recommendations. Detections and ISPM recommendations for additional identity roles, including AD FS and AD CS, will become available…

DocsDeploy Microsoft Defender for Identity sensorsNew·Deploy the Microsoft Defender for Identity sensor v3.xNew·March 2026 Cumulative Update

Deploy Microsoft Defender for Identity sensors Learn how to deploy Microsoft Defender for Identity sensors on domain controllers and identity servers. Choose the right sensor version for your environment.

New Defender for Identity security alerts

These new alerts were added to the Defender for Identity security alerts: New alerts related to Entra ID : Attempt to disable Defender for Identity service principal observed Suspicious Entra account enablement after disruption Suspicious Intune device registration activity Suspicious…

DocsMicrosoft Defender for Identity XDR security alertsUpdated

Microsoft Defender for Identity XDR security alerts Learn about security alerts issued by Defender for Identity in the extended detection and response (XDR) format.

Migrate Defender for Identity sensors from v2.x to v3.x

You can now migrate Defender for Identity sensors from v2.x to v3.x directly from the Microsoft Defender portal. The v2.x sensor continues running during the migration until the v3.x sensor is ready, so there's no downtime. Eligible servers appear as…

DocsMigrate from sensor v2.x to sensor v3.xNew

Migrate from sensor v2.x to sensor v3.x Learn how to migrate from the Defender for Identity sensor v2.x to the sensor v3.x with no downtime using the Sensors page in the Microsoft Defender portal.

Migrate Defender for Identity sensors from v2.x to v3.x

You can now migrate Defender for Identity sensors from v2.x to v3.x directly from the Microsoft Defender portal. The v2.x sensor continues running during the migration until the v3.x sensor is ready, so there's no downtime. Eligible servers appear as…

DocsMigrate from sensor v2.x to sensor v3.xNew

Migrate from sensor v2.x to sensor v3.x Learn how to migrate from the Defender for Identity sensor v2.x to the sensor v3.x with no downtime using the Sensors page in the Microsoft Defender portal.

Defender for Identity sensor updates

Sensor versions now display the full version number (for example, 2.255.19201.14651) instead of only the major/minor version (for example, 2.255). This makes it easier to identify the exact update installed on each sensor. When you validate upgrades or troubleshoot, the…

Defender for Identity sensor updates

Sensor versions now display the full version number (for example, 2.255.19201.14651) instead of only the major/minor version (for example, 2.255). This makes it easier to identify the exact update installed on each sensor. When you validate upgrades or troubleshoot, the…

Continued rollout of new health alert: Sensor v3.x RPC audit misconfigured

The Sensor v3.x RPC Audit Misconfigured health alert is continuing to be rolled out gradually to customers. The new health alert helps identify v3.x sensors where Enhanced RPC auditing configuration is either missing or incorrectly applied. Enhanced RPC auditing is…

DocsDeploy the Microsoft Defender for Identity sensor v3.xNew

Deploy the Microsoft Defender for Identity sensor v3.x Learn the requirements and configuration steps to deploy the Defender for Identity sensor v3.x on eligible identity-role servers.

Identity security enhancements

New identity security capabilities help you monitor and manage identity security for human and non-human identities: Identity Security dashboard (Preview) : The Identity Security dashboard provides summary cards for identity providers, on-premises identities, SaaS identities, PAM and IGA integrations, and…

DocsView your identity coverage and maturityNew·Non-human identities in Microsoft DefenderNew·View the Identity inventoryUpdated·Investigate IdentitiesUpdated

View your identity coverage and maturity Learn how to use the Coverage and maturity page in Microsoft Defender to check your identity protection status and close coverage gaps in your environments.

Identity security enhancements

New identity security capabilities help you monitor and manage identity security for human and non-human identities: Identity Security dashboard (Preview) : The Identity Security dashboard provides summary cards for identity providers, on-premises identities, SaaS identities, PAM and IGA integrations, and…

DocsView your identity coverage and maturityNew·Non-human identities in Microsoft DefenderNew·View the Identity inventoryUpdated·Investigate IdentitiesUpdated

View your identity coverage and maturity Learn how to use the Coverage and maturity page in Microsoft Defender to check your identity protection status and close coverage gaps in your environments.

Public Preview - Microsoft Entra Backup and Recovery is now available

Type: Public Preview Service category: Entra Backup and Recovery Product capability: Entra Backup and Recovery Microsoft Entra Backup and Recovery is a built-in solution to help restore your tenant after accidental changes or malicious updates. Always on by default, it…

DocsMicrosoft Entra Backup and Recovery overviewUpdated

Microsoft Entra Backup and Recovery overview Learn how Microsoft Entra Backup and Recovery helps you recover from malicious attacks or accidental changes to tenant objects

General Availability – Improved readability for Authentication Methods Policy Update audit logs

Type: General Availability Service category: Authentications (Logins) Product capability: User Authentication Starting in April 2026, the Authentication Methods Policy Update and Authentication Methods Policy Reset audit log activities has been updated to improve readability and clarity. Previously, audit logs included…

DocsMicrosoft Entra audit log activity reference

Microsoft Entra audit log activity reference Get an overview of the audit activities that can be logged in your audit logs in Microsoft Entra ID.

General Availability - Tenant configuration management APIs

Type: General Availability Service category: Tenant Governance Product capability: Tenant Governance Tenant Configuration Management APIs allow organizations to take snapshots of their tenants' current configuration settings in a JSON format and to enforce configuration settings by offering continuous monitoring of…

DocsOverview of the Tenant Configuration Management APIs in Microsoft …

Overview of the Tenant Configuration Management APIs in Microsoft Graph Use the Tenant Configuration Management APIs in Microsoft Graph to control and manage configuration settings for an entire organization.

General Availability - Synced passkeys in Microsoft Entra ID

Type: General Availability Service category: Authentications (Logins) Product capability: User Authentication Microsoft Entra ID now supports synced passkeys as a generally available authentication method. Synced passkeys are FIDO2-based credentials that can be stored in built-in or third-party passkey providers and…

DocsHow to enable passkeys (FIDO2) in Microsoft Entra ID

How to enable passkeys (FIDO2) in Microsoft Entra ID Learn how to enable passkeys (FIDO2) in Microsoft Entra ID.

General Availability - SCIM 2.0 APIs for Microsoft Entra ID

Type: General Availability Service category: Provisioning Product capability: Identity Lifecycle Management SCIM 2.0 APIs give customers, developers, and partners a standards-based option for managing users and groups in Microsoft Entra using the System for Cross-domain Identity Management (SCIM) 2.0 specification…

DocsEnable Microsoft Entra SCIM 2.0 APIs

General Availability - Passkey profiles in Microsoft Entra ID

Type: General Availability Service category: Authentications (Logins) Product capability: User Authentication Passkey profiles in Microsoft Entra ID are now generally available. Passkey profiles provide a structured way to manage passkey (FIDO2) authentication by allowing administrators to define multiple profiles with…

DocsHow to enable passkeys (FIDO2) in Microsoft Entra ID

How to enable passkeys (FIDO2) in Microsoft Entra ID Learn how to enable passkeys (FIDO2) in Microsoft Entra ID.

General Availability - New M365 group creation experience in My Groups

Type: General Availability Service category: Group Management Product capability: End User Experiences We’re improving the Microsoft 365 group creation experience in My Groups to give group owners more control and clarity from the start. The updated experience lets you configure…

DocsMy Groups

General Availability - Microsoft Single Sign-On for Linux support for authenticating with Phish-Resistant MFA credentials

Type: General Availability Service category: Authentications (Logins) Product capability: SSO The major improvements that this release provides includes: Enables authentication using CBA/YubiKey with certificate (PRMFA) Removes dependency on Java runtime as part of the Intune install Improved performance and reliability…

DocsMicrosoft single sign-on for Linux

Microsoft single sign-on for Linux Overview of Microsoft single sign-on for Linux that enables Microsoft Entra ID integration and seamless authentication.

General Availability - Microsoft Entra Connect Health now enforces TLS 1.2

Type: General Availability Service category: Entra Connect Product capability: Entra Connect We’ve completed a full migration to TLS 1.2 for Entra Connect Health and removed legacy TLS 1.1 references as part of security hardening. Ensure your Health agents are up…

DocsEnable TLS 1.2 support as Microsoft Entra TLS 1.0/1.1 is deprecated

Enable TLS 1.2 support as Microsoft Entra TLS 1.0/1.1 is deprecated Learn how to enable TLS 1.2 support in your environment before Microsoft Entra discontinues TLS 1.0 and 1.1. Get step-by-step guidance to ensure secure connections.

General Availability - Just‑in‑Time Password Migration in Microsoft Entra External ID

Type: General Availability Service category: B2C - Consumer Identity Management Product capability: B2B/B2C Just‑in‑Time Password Migration is now generally available in Microsoft Entra External ID. Customers can migrate user passwords securely at first sign‑in, allowing users to continue using their…

General Availability - Enabling Email and SMS OTP MFA in Entra External ID Native Authentication

Type: General Availability Service category: B2C - Consumer Identity Management Product capability: Developer Experience Build secure sign‑in and sign‑up experiences for applications in Entra External ID using Native Authentication, with Email and SMS OTP MFA available through developer‑friendly SDKs and…

DocsNative authentication

Native authentication Learn how to set up native authentication in Microsoft Entra External ID. Customize the user interface for mobile and desktop apps, and provide a seamless sign-in experience.

Plan for change – Agent Registry consolidation into Microsoft Agent 365

Type: Plan for change Service category: Other Product capability: Directory We’re consolidating agent management experiences to make it easier to observe, govern, and secure all agents in your tenant. Agent 365 will be the single source of truth, offering a…

DocsEntra admin center·All agents view within the Microsoft 365 admin center (MAC)·agentRegistry resource type·Agent Registry convergence with Microsoft Agent 365

agentRegistry resource type Represents the Microsoft Entra Agent Registry, which serves as a centralized repository for managing AI agents within an organization. The agent registry allows administrators to register, organize, and manage AI agents and their capabilities, including agent identities, agent users, and…

Public preview - Tenant governance relationships

Type: Public Preview Service category: Tenant Governance Product capability: Tenant Governance This feature allows admins to request and accept tenant governance relationships, which grant admins of the governing tenant access and administrative control over the governed tenant. For more information…

DocsWhat is Microsoft Entra Tenant Governance?

What is Microsoft Entra Tenant Governance? Learn about Microsoft Entra Tenant Governance and how it helps organizations discover, manage, and govern tenants across their environment

Public preview - Tenant configuration management administration portal experience

Type: Public Preview Service category: Tenant Governance Product capability: Tenant Governance Now you can use the Entra admin center to administer tenant configuration management capabilities of Entra tenant governance. You can use this experience to: Create and update monitors that…

DocsConfiguration management in Tenant Governance

Configuration management in Tenant Governance Learn about configuration management capabilities in Microsoft Entra Tenant Governance, including baselines and drift monitoring

Public preview - Secure add-on tenant creation

Type: Public Preview Service category: Tenant Governance Product capability: Tenant Governance Permissioned users can now create add-on tenants that are owned and governed by their home tenant. Governance is established through tenant governing relationships, granting admins access and control via…

DocsWhat is Microsoft Entra Tenant Governance?

What is Microsoft Entra Tenant Governance? Learn about Microsoft Entra Tenant Governance and how it helps organizations discover, manage, and govern tenants across their environment

Public Preview - Related Tenants

Type: Public Preview Service category: Tenant Governance Product capability: Tenant Governance This feature allows admins to discover related tenants connected to their own by B2B activity or shared billing information. Admins can use this information to request and establish tenant…

DocsWhat is Microsoft Entra Tenant Governance?

What is Microsoft Entra Tenant Governance? Learn about Microsoft Entra Tenant Governance and how it helps organizations discover, manage, and govern tenants across their environment

Public Preview - Phased Rollout with the Conditional Access Agent

Type: Public Preview Service category: Conditional Access Product capability: Identity Security & Protection You can now use the Conditional Access Optimization Agent to safely roll out any report‑only Conditional Access policy in phases. When you initiate the process, the agent…

DocsConditional Access Optimization Agent phased rollout

Conditional Access Optimization Agent phased rollout Learn about the phased rollout capability for the Security Copilot for Microsoft Entra optimization agent.

Public Preview - Passkey Adoption Campaigns with the Conditional Access Optimization Agent

Type: Public Preview Service category: Conditional Access Product capability: Identity Security & Protection The Conditional Access Optimization Agent now supports passkey adoption campaigns in public preview, helping organizations roll out phishing‑resistant authentication in a structured and automated way. With this…

DocsDeploy passkeys with the Microsoft Entra Conditional Access …

Deploy passkeys with the Microsoft Entra Conditional Access Optimization Agent Learn how to use the Conditional Access Optimization Agent to safely deploy a passkey program to roll out phishing-resistant authentication methods.

Public Preview - Microsoft Entra passkeys on Windows

Type: Public Preview Service category: Authentications (Logins) Product capability: User Authentication Microsoft Entra passkeys on Windows are now available in public preview. This feature allows users to register device‑bound passkeys directly in the local Windows Hello container and use them…

DocsHow to enable passkeys (FIDO2) in Microsoft Entra ID

How to enable passkeys (FIDO2) in Microsoft Entra ID Learn how to enable passkeys (FIDO2) in Microsoft Entra ID.

Public Preview - Entra Hybrid Join using Entra Kerberos

Type: Public Preview Service category: Device Registration and Management Product capability: Device Lifecycle Management This new capability enables a Windows device to become Hybrid Entra joined immediately at provisioning time , without waiting for Entra Connect sync or requiring AD…

DocsMicrosoft Entra hybrid join using Microsoft Entra Kerberos (preview)Updated

Microsoft Entra hybrid join using Microsoft Entra Kerberos (preview) Explains prerequisites and steps to set up Microsoft Entra hybrid join by using Microsoft Entra Kerberos.

Public Preview - Cross-tenant security group synchronization

Type: Public Preview Service category: Provisioning Product capability: Collaboration We’re introducing cross-tenant group synchronization, a new capability that allows organizations to synchronize security groups across Microsoft Entra tenants. This feature enables centralized management of group membership in a source tenant…

DocsWhat is cross-tenant synchronization in Microsoft Entra ID?New

What is cross-tenant synchronization in Microsoft Entra ID? Learn about cross-tenant synchronization in Microsoft Entra ID.

Intune ending support for legacy Apple MDM software update policies

With the release of iOS 26, iPadOS 26, and macOS 26, Apple has deprecated legacy mobile device management (MDM) software update commands and payloads. As a result, Microsoft Intune will soon end support for creating legacy iOS/iPadOS and…

DocsPost Support tip: Move to declarative device management for Apple software …

Support tip: Move to declarative device management for Apple software updates By: Benjamin Flamm – Product Manager | Microsoft Intune Apple recently announced at the Worldwide Developer Conference (WWDC) in June 2025 that mobile...

Newly available protected apps for Intune

The following protected apps are now available for Microsoft Intune: PerfectServe Clinical Collab by PerfectServe Synigo Pulse by Synigo B.V. DeepL for Intune by DeepL SE Foxit PDF Editor by Foxit Software Inc. EasyPlant QC Inspections by Technip…

DocsSupported Microsoft Intune AppsUpdated

Supported Microsoft Intune Apps This article provides lists of support partner and Microsoft apps that are commonly used with Microsoft Intune.

Intune security baseline for Windows 11, version 25H2

The Windows security baseline for Windows 11, version 25H2 is now available in Microsoft Intune. This baseline reflects current Microsoft security recommendations for supported Windows devices and is the latest available Windows security baseline in Intune. The Windows…

DocsPost Windows 11, version 25H2 security baseline·Default configuration of Intune's Windows security baselinesNew·Configure security baseline policies in Microsoft Intune

Windows 11, version 25H2 security baseline Microsoft is pleased to announce the security baseline package for Windows 11, version 25H2! You can download the baseline package from...

Newly available protected apps for Intune

The following protected apps are now available for Microsoft Intune: Jump by Accio Inc. Mijn InPlanning by Intus Workforce Solutions (Android) For more information about protected apps, see Microsoft Intune protected apps .

DocsSupported Microsoft Intune AppsUpdated

Supported Microsoft Intune Apps This article provides lists of support partner and Microsoft apps that are commonly used with Microsoft Intune.

Support for system proxy settings in endpoint analytics and Advanced Analytics

Devices configured with system-level (WinHTTP) proxy settings can now send telemetry to endpoint analytics and Advanced Analytics, enabling more comprehensive reporting. Endpoint Privilege Management (EPM) will also include elevation usage data from these devices. No admin action…

DocsNetsh.exe commands - Win32 apps

Netsh.exe commands - Win32 apps You can use commands in the netsh winhttp context to configure proxy and tracing settings for Windows HTTP.

Support for Red Hat Enterprise Linux 9 and later

Microsoft Intune supports Red Hat Enterprise Linux (RHEL) 9 LTS and RHEL 10 LTS. Support for RHEL 8 LTS will end in July 2026. Devices already enrolled on RHEL 8 will remain enrolled. You can identify devices running…

DocsLinux device enrollment guide for Microsoft Intune

Linux device enrollment guide for Microsoft Intune Enroll Linux devices in Intune using the Intune app. Set an overview of the administrator and end user tasks to enroll devices.

Support Assistant access expanded to all authenticated users

All authenticated users can now access Support Assistant in the Intune admin center to find solutions and troubleshooting guidance. Creating and managing support tickets still requires a Microsoft Entra role that includes the microsoft.office365.supportTickets permission. For more…

DocsGet support in the Microsoft Intune admin centerUpdated

Get support in the Microsoft Intune admin center Get online and telephone support for Microsoft Intune and other device management cloud services from within the Microsoft Intune admin center.

Remote Help connectivity update for Windows devices

We've improved connectivity when using the Launch Remote Help capability in the Intune admin center for Windows devices. For the best experience, we recommend updating firewall rules to include this new endpoint: *.trouter.communications.svc.cloud.microsoft For the current list of…

DocsUnderstand Microsoft Intune Management ExtensionNew·Network endpoints for Microsoft IntuneUpdated·Network endpoints for Microsoft IntuneUpdated·Using Remote Help on Windows to Assist Authenticated Users

Understand Microsoft Intune Management Extension Understand Microsoft Intune management extension for Windows.

Recovery lock features available for macOS devices

On macOS devices, you can configure a recovery OS password that prevents users from booting company-owned devices into recovery mode, reinstalling macOS, and bypassing remote management. Admins can also rotate this password. There are two ways to use…

DocsCreate a policy using settings catalog in Microsoft IntuneNew·Device Action: Rotate Recovery Lock PasscodeUpdated

Create a policy using settings catalog in Microsoft Intune Use settings catalog in Microsoft Intune to configure thousands of settings for Windows 10/11, iOS/iPadOS, macOS, and Android client devices, including Microsoft Office apps, Microsoft Edge, administrative templates (ADMX), and more. Add these settings in a device configuration profile to…

New updates to the Apple settings catalog

The Settings Catalog lists all the settings you can configure in a device policy, and all in one place. For more information about configuring Settings Catalog profiles in Intune, see Create a policy using settings catalog . There…

DocsCreate a policy using settings catalog in Microsoft IntuneNew·Microsoft Intune admin center

Create a policy using settings catalog in Microsoft Intune Use settings catalog in Microsoft Intune to configure thousands of settings for Windows 10/11, iOS/iPadOS, macOS, and Android client devices, including Microsoft Office apps, Microsoft Edge, administrative templates (ADMX), and more. Add these settings in a device configuration profile to…

New supported OEMConfig app for Android Enterprise

The following OEMConfig app is available in Intune for Android Enterprise: Inventus | com.inventus.oemconfig.gen For more information about OEMConfig, see Use and manage Android Enterprise devices with OEMConfig in Microsoft Intune .

DocsUse OEMConfig on Android Enterprise devices in Microsoft IntuneNew

Use OEMConfig on Android Enterprise devices in Microsoft Intune Use Microsoft Intune to manage and use devices running Android Enterprise with OEMConfig. See all the steps, including an overview, see the prerequisites, create the configuration profile in Intune, and see a list of supported OEMConfig apps.

New settings in the Windows settings catalog

There are new settings in the Windows settings catalog. To see and configure these settings in Intune, create a Windows settings catalog profile ( Devices > Configuration profiles > Create profile > Windows 10 and later > Settings…

DocsConnectivity Policy CSPNew·WindowsAI Policy CSPNew·Create a policy using settings catalog in Microsoft IntuneNew

Connectivity Policy CSP Learn more about the Connectivity Area in Policy CSP.

Microsoft Intune app for Linux now supports the Microsoft Identity Broker

The Microsoft Intune app for Linux now uses the Microsoft Identity Broker on supported Ubuntu and Red Hat Enterprise Linux (RHEL) distributions. Broker version 2.0.2 and later introduces a major architectural change from the previous Java-based broker. This…

DocsMicrosoft single sign-on for Linux

Microsoft single sign-on for Linux Overview of Microsoft single sign-on for Linux that enables Microsoft Entra ID integration and seamless authentication.

Improvements to device query for multiple devices

Device query for multiple devices now includes new capabilities to help you work with query results more efficiently. You can use a search text box to search across all resulting rows of a query, use column headers…

DocsDevice Query for Multiple Devices

Device Query for Multiple Devices Use device query for multiple devices in Microsoft Intune to run KQL queries, analyze inventory trends, and start querying your managed fleet now.

Hotpatching default enablement in Windows Autopatch

Starting with the May 2026 Windows security update, hotpatch updates are enabled by default for all eligible devices managed through Windows Autopatch. Hotpatch updates install faster and require fewer restarts, helping devices get secure sooner. If your organization…

Docshttps://aka.ms/HotpatchByDefault

Declarative Device Management for Apple line-of-business apps on iOS/iPadOS

Microsoft Intune now supports Apple Declarative Device Management (DDM) for required line-of-business apps on devices running iOS/iPadOS 18 and later. By changing the management type to DDM in App information, you can deploy and configure apps using Apple's…

Guided scenarios being removed from the Intune admin center

All guided scenarios except Windows 365 Boot are removed from the Microsoft Intune admin center. You can no longer access the guided scenario wizards, but any Intune objects previously created by these wizards remain available and manageable. The…

DocsMicrosoft Intune documentation·Intune prescriptive guides·https://m365accelerator.microsoft.com/intune·Securing apps for mobile | Android

Security Copilot in Intune features overview Microsoft Security Copilot in Intune is an AI platform. It can help you create policies, get information about existing policies, and show more details on specific settings, including their impacts on users and devices. You can also use Copilot to…

Improved Remote Help update reporting on macOS

We've improved the update and reporting experience for Remote Help on macOS to make version management more reliable and transparent for IT admins. After you deploy the latest Remote Help client (version 1.0.26012221) through Microsoft Intune, you can…

DocsDeploy Remote Help with Microsoft Intune

Deploy Remote Help with Microsoft Intune Follow the steps to deploy Remote Help with Microsoft Intune on Windows, macOS, and Android Enterprise.

Updates to operators in device query for multiple devices

Device query for multiple devices now includes expanded operator support, clearer query validation, and improved results to make building and interpreting queries easier. New join types supported You can now use the following join types when querying…

New updates to the Apple settings catalog

The Settings Catalog lists all the settings you can configure in a device policy, and all in one place. For more information about configuring Settings Catalog profiles in Intune, see Create a policy using settings catalog . There…

DocsCreate a policy using settings catalog in Microsoft IntuneNew·Set preferences for Microsoft Defender for Endpoint on macOSNew·Microsoft Intune admin center

Create a policy using settings catalog in Microsoft Intune Use settings catalog in Microsoft Intune to configure thousands of settings for Windows 10/11, iOS/iPadOS, macOS, and Android client devices, including Microsoft Office apps, Microsoft Edge, administrative templates (ADMX), and more. Add these settings in a device configuration profile to…

New settings in the Windows settings catalog

There are new settings in the Windows settings catalog. To see and configure these settings in Intune, create a Windows settings catalog profile ( Devices > Configuration profiles > Create profile > Windows 10 and later > Settings…

DocsWindows settings backup and restore OverviewNew·WindowsBackupAndRestore CSPNew·Create a policy using settings catalog in Microsoft IntuneNew·Filter formats for URL list-based policies

Windows settings backup and restore Overview Learn how to configure devices to use Windows settings backup and restore.

Multi-administrator approval support for device compliance and device configuration policies

Multi-administrator approval now supports device configuration policies created through the settings catalog and device compliance policies. When you turn on this feature, any changes you make, including creating, editing, or deleting a policy, must be approved by a…

DocsUse Multi Admin Approval in Intune

Use Multi Admin Approval in Intune Configure Multi Admin Approval to protect your tenant against the use of compromised administrative accounts in Intune.

Autopatch update readiness

Autopatch update readiness provides a unified experience for tracking and remediating Windows update issues across Intune-enrolled devices and Windows Autopatch group-enrolled devices. With a single dashboard, admins can view all managed devices, including enrollment status and policy assignments…

DocsWindows Autopatch update readiness overviewUpdated

Windows Autopatch update readiness overview Provides an overview of a unified set of reporting called Windows Autopatch update readiness.

Apple declarative device management (DDM) supports assignment filters

You can use assignment filters in policy assignments for DDM-based configurations, like software updates. Note This feature is rolling out slowly and should be available for all customers by late March 2026. Note This feature is rolling out…

DocsCreate assignment filters in Microsoft Intune

Create assignment filters in Microsoft Intune Create assignment filters in Microsoft Intune to target policies based on device properties like OS version or manufacturer. Learn to create, update, and delete filters for managed devices and apps.

Scoped permissions for Role-based access control (preview)

Intune now includes an opt-in preview to enable Scoped permissions , making your role-based access control (RBAC) configuration more precise. Enabling Scoped permissions is a one-time choice that can't be undone. In the future, this will become…

DocsUse role-based access control (RBAC) and scope tags for distributed IT

Use role-based access control (RBAC) and scope tags for distributed IT Use role-based access control (RBAC) and scope tags to filter configuration profiles to specific roles.

New setting controls MDM enrollment during account registration on Windows (preview)

A new setting that affects the Microsoft Entra account registration experience on Windows is available in the Microsoft Intune admin center. The setting, Disable MDM enrollment when adding work or school account on Windows , controls whether devices…

DocsEnable MDM automatic enrollment for Windows

Enable MDM automatic enrollment for Windows Enable Intune automatic enrollment for Windows devices joining or registering with your Microsoft Entra ID.

Edge security update: Microsoft released the latest Microsoft Edge Stable Channel (Version 146.0.3856.84) which incorporates the latest Securi

Microsoft released the latest Microsoft Edge Stable Channel (Version 146.0.3856.84) which incorporates the latest Security Updates of the Chromium project. For more information, see the Security Update Guide .

DocsSecurity Update Guide

Edge security update: Microsoft released the latest Microsoft Edge Stable Channel (Version 146.0.3856.72) which incorporates the latest Securi

Microsoft released the latest Microsoft Edge Stable Channel (Version 146.0.3856.72) which incorporates the latest Security Updates of the Chromium project. For more information, see the Security Update Guide .

DocsSecurity Update Guide

Edge security update: Microsoft released the latest Microsoft Edge Stable Channel (Version 146.0.3856.62) which incorporates the latest Securi (1 CVE)

Microsoft released the latest Microsoft Edge Stable Channel (Version 146.0.3856.62) which incorporates the latest Security Updates of the Chromium project. The Chromium team reported that CVE-2026-3909 has an exploit in the wild, and this update contains a fix for it…

DocsCVE-2026-3909·Security Update Guide

Edge security update: Microsoft released the latest Microsoft Edge Stable Channel (Version 146.0.3856.59) which incorporates the latest Securi (2 CVEs)

Microsoft released the latest Microsoft Edge Stable Channel (Version 146.0.3856.59) which incorporates the latest Security Updates of the Chromium project. The Chromium team reported that CVE-2026-3910 has an exploit in the wild, and this update contains a fix for it…

DocsCVE-2026-3910·Security Update Guide·CVE-2026-0385

Edge security update: Android and iOS Stable Channel 145.3800.99 (1 CVE)

Microsoft released the latest Microsoft Edge for Android and iOS Stable Channel (Version 145.3800.99). This release includes the most recent security updates from the Chromium project. Security Update Guide . This update contains the following Microsoft Edge specific security fixes…

DocsSecurity Update Guide·CVE-2026-26133

Edge security update: Microsoft released the latest Microsoft Edge Stable Channel (Version 145.0.3800.97) which incorporates the latest Securi

Microsoft released the latest Microsoft Edge Stable Channel (Version 145.0.3800.97) which incorporates the latest Security Updates of the Chromium project. For more information, see the Security Update Guide .

DocsSecurity Update Guide

Deprecation of preview of container and container images vulnerability recommendations

March 04, 2026 As part of the transition to individual recommendations, Microsoft Defender for Cloud is deprecating existing grouped container vulnerability recommendations. This change enables more granular visibility, prioritization, and governance of container security findings. Grouped recommendations previously aggregated multiple…

DocsReview Security Recommendations in Microsoft Defender for CloudUpdated

Review Security Recommendations in Microsoft Defender for Cloud Learn how to review security recommendations in Microsoft Defender for Cloud to improve the security posture of your environments.

Kubernetes gated deployment support for AKS Automatic (GA)

March 12, 2026 Kubernetes gated deployment is now generally available for AKS Automatic clusters. To use this capability, install the Defender for Containers sensor by using Helm in the kube-system namespace. If the sensor is currently installed through the AKS…

DocsInstall Defender for Containers Sensor Using HelmUpdated

Install Defender for Containers Sensor Using Helm Install the Defender for Containers sensor on AKS, EKS, and GKE clusters by using Helm, including prerequisites, deployment steps, and upgrade guidance.

Automated malware remediation in Defender for Storage

March 31, 2026 Automated malware remediation in Defender for Storage is now generally available. Defender for Cloud now lets you automatically soft-delete malicious blobs detected during on-upload or on-demand malware scanning. Soft-deleted blobs are quarantined and can be recovered for…

DocsSet Up Automated Remediation for Malware Detection

Set Up Automated Remediation for Malware Detection Learn how to set up automated remediation for malware detection in Microsoft Defender for Storage to protect your Azure Storage accounts from harmful files.

Support for additional Azure regions for Defender for APIs and API security posture management with Defender CSPM

March 31, 2026 Microsoft Defender for APIs and API security posture management with Defender CSPM has expanded to provide its capabilities in the following Azure regions: Sweden Central Sweden South Germany West Central Germany North Italy North France Central France…

DocsAPI security posture overview·Overview of the Microsoft Defender for APIs plan

API security posture overview Learn how Microsoft Defender for Cloud enhances API security posture management for your APIs across Azure API Management, Function Apps, and Logic Apps.

Severity-based risk assignment for "Not evaluated" recommendations

March 11, 2026 Recommendations that previously appeared as Not evaluated will now receive a risk level derived from the recommendation severity. As a result, these recommendations will now be prioritized in the recommendations list based on their assigned risk level…

DocsSecurity Recommendations

Security Recommendations Learn about security recommendations in Microsoft Defender for Cloud to improve the security posture of your environments.

File Integrity Monitoring requires MDE agent version 10.8799+ for legacy Windows machines

Due to a pipeline change in Microsoft Defender for Endpoint (MDE), File Integrity Monitoring now requires the Defender for Servers Windows client (Microsoft Defender for Endpoint agent) version 10.8799 or above for proper functionality on legacy Windows machines (downlevel clients)…

DocsEnable File Integrity MonitoringNew·Overview of file integrity monitoring in Microsoft Defender for Cloud

Enable File Integrity Monitoring Configure File Integrity Monitoring in Microsoft Defender for Cloud. Use the Defender for Endpoint scanning to collect monitoring data.

On-demand malware scanning of Azure Files in Microsoft Defender for Storage (Preview)

March 10, 2026 On-demand malware scanning for Azure Files in Microsoft Defender for Storage is now in preview. This preview extends the existing on-demand malware scan feature and lets you scan entire Azure Storage accounts that contain blobs and files…

DocsMicrosoft Defender for Storage On-demand Malware ScanningUpdated

Microsoft Defender for Storage On-demand Malware Scanning Learn about the benefits and features of on-demand malware scanning in Microsoft Defender for Storage.

New individual recommendations format in Azure portal (Preview)

March 04, 2026 Microsoft Defender for Cloud is converting grouped recommendations into individual recommendations in the Azure portal. This change reflects a shift from grouping related findings under one recommendation to listing each recommendation separately. What's changing. You might see…

DocsTransition from grouped to individual recommendations in Defender for …Updated·Review Security Recommendations in Microsoft Defender for CloudUpdated

Transition from grouped to individual recommendations in Defender for Cloud Learn about the transition from grouped to individual recommendations in Microsoft Defender for Cloud, including operational impacts and best practices.

Expanded multicloud coverage for AWS and GCP (Preview)

March 29, 2026 Microsoft Defender for Cloud expands multicloud posture management with broader native coverage for AWS and GCP. This update adds discovery and posture assessment for additional resource types across compute, databases, storage, analytics, networking, identity, secrets, DevOps, and…

DocsReview Security Recommendations in Microsoft Defender for CloudUpdated

Review Security Recommendations in Microsoft Defender for Cloud Learn how to review security recommendations in Microsoft Defender for Cloud to improve the security posture of your environments.

Code to runtime enrichment for recommendations (Preview)

March 10, 2026 Microsoft Defender for Cloud now provides Code to runtime capabilities, enabling end-to-end visibility across the software development lifecycle (SDLC). This feature helps security teams trace runtime security issues back to their source code origins and understand the…

DocsUse Code-to-runtime Visibility for Security RecommendationsUpdated·Map container images from code to runtime

Use Code-to-runtime Visibility for Security Recommendations Learn how to use code to runtime visibility to trace security issues from runtime back to source code and fix them at the origin to prevent recurrence.

AI model security for Azure Machine Learning (Preview)

March 30, 2026 Microsoft Defender for Cloud now offers AI model security in preview for Azure Machine Learning registries and workspaces. AI model security helps security teams discover and scan custom AI models for risks before deployment, and review findings…

DocsDiscover AI models (Preview)

Discover AI models (Preview) Learn about AI model security in Microsoft Defender for Cloud.

Updates to Secure Score category calculations for increased accuracy

To improve accuracy and better protect organizational identities, some security recommendations categorized as Cloud apps recommendations are now considered identity‑related and grouped under the Identity category. While the total Secure Score remains unchanged, individual identity and app scores may change.

Expanding User reporting in Teams to include Calls

Expanding User reporting in Teams to include Calls : Users can reported completed or missed one-to-one Microsoft Teams calls from the call history as malicious (scam) or non malicious (non-scam) to the specified reporting mailbox, or Microsoft and the reporting…

DocsUser reported settings in TeamsNew·Configure user reported message settings in Microsoft Defender for …New

User reported settings in Teams Admins can configure whether users can report malicious messages, calls, meetings, or meeting participants in Microsoft Teams.

Added support for contextual Teams messages in User reported Teams Messages

Added support for contextual Teams messages in User reported Teams Messages : When Users report Microsoft Teams messages from chats, channels (standard, shared, and private), and meeting conversations to Microsoft as malicious (security risk), up to fifteen messages before and…

DocsUser reported settings in TeamsNew

User reported settings in Teams Admins can configure whether users can report malicious messages, calls, meetings, or meeting participants in Microsoft Teams.

Sensitivity labels

General availability (GA) : Manual labeling for OneNote, supported at the section level . Because retention labels also support labeling at the section level, you might find it helpful to review the architecture diagram for retention policies and retention labels…

DocsEnable sensitivity labels for files in SharePoint and OneDriveNew·Automatically apply a sensitivity label to Microsoft 365 dataNew·section level·Learn about retention for SharePoint and OneDrive

Enable sensitivity labels for files in SharePoint and OneDrive Administrators can enable sensitivity label support for Word, Excel, PowerPoint, and PDF files in SharePoint and OneDrive.

Insider Risk Management

In preview : Disable content download to create cases without content to reduce triage time. To get started, see Enable or disable content download . General availability (GA) : Microsoft Fabric indicators now include Lakehouse indicators. General availability (GA) …

DocsInvestigate Microsoft Purview Insider Risk Management activities·Configure policy indicators in Insider Risk Management·Create and manage Insider Risk Management policies·Use reports in Insider Risk Management

Investigate Microsoft Purview Insider Risk Management activities Learn how to investigate and triage Insider Risk Management alerts in Microsoft Purview. Review risk factors, explore activities, and create cases.

Data Governance

General availability (GA) : Authoring custom data quality rules using SQL expression language is now generally available. Users can create custom rules using both Azure Data Factory expression and SQL expression languages. In preview : Configurable Data Quality thresholds allows…

DocsCreate Data Quality Rules in Unified Catalog·Data Quality Thresholds for data quality rules in Microsoft Purview …

Create Data Quality Rules in Unified Catalog Get an overview of data quality rules in Microsoft Purview Unified Catalog, and how you can use them to increase the quality and trustworthiness of your data.

Deployment models

Updated : Expanded Microsoft Purview deployment models with comprehensive step-by-step inline guides for five deployment scenarios: Prevent data leak to shadow AI , Secure and govern Microsoft 365 Copilot agents , Deploy and use Data Security Posture Management , Lightweight…

DocsMicrosoft Purview deployment models·Prevent data leak to shadow AI·Secure and govern Microsoft 365 Copilot agents·Deploy and use Data Security Posture Management

Microsoft Purview deployment models Microsoft Purview deployment models are scenario-based guides created by the engineering team from proven customer deployments.

Data Loss Prevention

Preview : DLP supports adaptive scopes for scoping SharePoint policies. SharePoint location scoping

DocsData Loss Prevention policy referenceNew

Data Loss Prevention policy reference DLP policy component and configuration reference. This article provides a detailed anatomy of a DLP policy.

eDiscovery

In preview : Use the new Advanced review set explorer to query review set data with Kusto Query Language (KQL). Build advanced queries with complex filtering, pattern-based text extraction, and data visualization to analyze and find key information in your…

DocsSearch content in a review set with the Advanced review set explorer …·Add search results to a review set in eDiscovery

Search content in a review set with the Advanced review set explorer (preview) Learn how to use the Advanced review set explorer to query review set data with Kusto Query Language (KQL) in Microsoft Purview eDiscovery.

Data Security Posture Management (preview)

New : Extend coverage of data insights to third-party SaaS and IaaS platforms by using Microsoft Sentinel with partner solutions to provide holistic data insights across Google Cloud Platform, Snowflake, and Databricks. New : You can now use federated credentials…

DocsSetup tasks for Microsoft Purview Data Security Posture Management·Overview of federated identity credentials in Microsoft Entra ID·Considerations for deploying Microsoft Purview Data Security Posture …

Setup tasks for Microsoft Purview Data Security Posture Management Learn about the setup tasks in Microsoft Purview Data Security Posture Management to help you discover, protect, and investigate data across your digital environments.

Data Security Investigations

New : Categorization now includes a Standard and Advanced option. Standard categorization can significantly reduce the time it takes to complete processing and the amount of Data Security Investigation Compute Units (compute unit) needed for categorization. In preview : New…

DocsSet up compliance boundaries in eDiscoveryNew·Search, review, and refine results in Data Security InvestigationsUpdated·Use AI analysis in Data Security Investigations·Get started with the Data Security Posture agent (preview) in Data …

Set up compliance boundaries in eDiscovery Learn how to set up compliance boundaries that control which content locations eDiscovery managers can search in Microsoft Purview eDiscovery.

Preview API version deprecation

Azure Key Vault is deprecating older preview control plane API versions in accordance with Azure guidelines. All preview API versions except 2026-04-01-preview will be deprecated with a 90-day notice period. Customers using preview API versions should plan to migrate to…

DocsUpdate the Azure Key Vault API version you useNew

Update the Azure Key Vault API version you use Learn how to determine which Azure Key Vault API version your applications use, and move to a current, supported control plane or data plane version.

New control plane API versions

New Azure Key Vault control plane API versions (2026-02-01 and 2026-03-01-preview) are now available across public Azure regions, with availability extended to Mooncake and Fairfax clouds.

Supported control plane API versions

Use the latest stable version for production workloads. Preview versions are for early testing only and aren't covered by Azure support SLAs. Each link points to the API specification in the azure-rest-api-specs repository. Stable API versions. 2026-02-01 (recommended) 2025-05-01 2024-11-01…

Docs2026-05-15·2026-02-01·2025-05-01·2024-11-01

Private endpoint limit enforcement

Azure Key Vault is enforcing limits on the number of private endpoints per vault. Customers exceeding these limits may need to reduce usage or request an exception through Azure support. For more information on private endpoint limits, see Azure Key…

DocsAzure Key Vault service limits

Azure Key Vault service limits Review the service limits for Azure Key Vault, including transaction throughput, API request limits, and Managed HSM capacity.

Azure RBAC is the default access control model for new vaults

Azure Key Vault API version 2026-02-01 introduces Azure RBAC as the default access control model for newly created key vaults when using this API version. Existing vaults continue using their current access model unless explicitly updated. Both Azure RBAC and…

DocsPlan for Azure RBAC as the default access control model in Key VaultNew

Plan for Azure RBAC as the default access control model in Key Vault Learn how API version 2026-02-01 and later affects the default access control model for new Azure Key Vaults, and decide whether to use Azure RBAC or access policies.

Control plane SDK releases

All five Azure Key Vault control plane management SDKs supporting API version 2026-02-01 are now released. Control plane management SDKs that use older API versions will stop working when those API versions retire on February 27, 2027. Upgrade to the…