Windows 11 26H2 went GA on September 29 as an enablement package: KB5121794, one restart, and a cumulative update you have to be current on first. The catch is policy, not code. Allow Temporary Enterprise Feature Control turns on every dormant feature at the next restart rather than the one you wanted, and Microsoft’s own EPM troubleshooting page says Administrator protection breaks Endpoint Privilege Management elevation on the same device today. Read that page before you pilot either one.
Microsoft Defender for Linux now supports scheduled scans, and Edge Stable shifts to a two-week release cycle on August 27. MSPs need to make two configuration decisions now: close the Linux scan gap and choose the right Edge channel per client.
Microsoft shipped two things this week that sound unrelated but aren’t: Copilot Health Preview brings regulated medical data into the M365 tenant, and Copilot Studio’s computer-using agents can now drive legacy desktop apps without APIs. Together they point to a future where an AI agent detects a lab result and schedules the follow-up by clicking through an EMR—no human, no API. If you’re managing M365 tenants, the governance questions start now. Who can use Copilot Health on managed devices? What’s your credential vaulting policy for agents that act like authenticated users? How do you audit a workflow that has no API call to log?
Microsoft names Hayete Gallot Executive VP, Security, and assigns Charlie Bell to lead engineering quality. Leadership … Updates in two of our core prioritiesRead more
