Windows Cloud Rebuild reinstalls the OS from Windows Update — image and drivers, no USB — even when Windows won’t boot. It’s Experimental-channel pre-release, not GA yet, so validate it in the lab first.
Untitled
As of July 1, Microsoft folded EPM, Cloud PKI, and Advanced Analytics into M365 E5 (select pieces into E3). If you manage E5/E3 clients, they now own tooling they were paying extra for — here’s the enable-first order and a per-tenant checklist.
Untitled
Most frontline device pilots stall at identity. Microsoft just published a practical guide to the assigned vs. shared device decision — and it has real consequences for Conditional Access, auditability, and shift-based workflows. Here’s the checklist that keeps your rollout from derailing.
Untitled
Microsoft retires the classic alert experience and agent/classic toggle in Purview Insider Risk Management on August 31, 2026. Here’s what changes, what ships, and what to do before the deadline.
Where IT Teams Can Actually Trust AI Agents in 2026
Microsoft’s 2026 Agent Confidence Index is useful if IT teams read it as a trust map, not a permission slip. Start with reversible work like reports, release notes, certificate monitoring, and stream summaries. Keep humans on production changes, schema migrations, and security decisions.
Intune Field Notes: MDOP Migration Deadlines and macOS Platform SSO Gotchas
Two Intune signals deserve client action this quarter: MDOP is now out of extended support, and Microsoft’s Platform SSO field notes show where Mac rollouts can break. MSPs should inventory legacy MDOP dependencies, prioritize MBAM replacement, and pilot Platform SSO before pushing it broadly.
Copilot Cowork Is GA — What MSPs Need to Watch Before Turning Agents Loose
Copilot Cowork is GA, but MSPs should treat it as an operations change, not just another Copilot feature. The work now is permissions, billing controls, agent identity, audit trails, and deciding which client workflows are safe enough for long-running agents.
Deploying Claude Desktop Behind Entra ID: The No-Backend Architecture MSPs Need
Claude Desktop ships with a shared API key in a local config file — no per-user identity, no MFA, no audit trail. For MSPs with regulated clients, that’s a non-starter. Microsoft just published an architecture that routes Claude Desktop through Entra ID and Azure API Management with zero custom backend code. Per-user identity, Conditional Access, auditable, and the config can be pushed via Intune. If your clients are asking for sanctioned AI desktop tools alongside their existing M365 stack, this closes a real governance gap.
Catching Silent MDE Gaps — Automate Defender Compliance Checks Across Azure VMs
Most MSPs can tell you which Azure VMs are running. Fewer can tell you which ones stopped sending Defender telemetry last week. A new Logic App automation from Microsoft closes that gap daily — and it is a compliance-monitoring service waiting to happen.
M365 Archive Gets File-Level Cold Storage — Cutting SharePoint Costs for MSP Clients
Stale files in SharePoint don’t just waste storage—they degrade Copilot’s answers by feeding it outdated content. Microsoft 365 Archive now supports file-level cold storage, and for MSPs, this is both a cost-control play and a Copilot-readiness service hiding in plain sight.