Microsoft 365 deadlines calendar

What changes: Microsoft Defender for Cloud Apps is retiring File policies on January 6, 2027. As part of this retirement, Microsoft is beginning to phase out File policy management capabilities.
Starting October 9, 2026, disabled File policies can no longer be re-enabled in Microsoft Defender for Cloud Apps. Once a File policy is disabled after this date, it will remain disabled. Existing enabled File policies will continue to be supported and enforced until January 6, 2027.

What changes: No more security updates, fixes or help from Microsoft. Upgrade or move to Microsoft 365 before this date.

What changes: As announced in 2023, Exchange Web Services (EWS) in Exchange Online is being retired. Phased disablement will begin on October 1, 2026.
Starting October 15, 2026, Microsoft Defender for Cloud Apps app governance threat detections that rely on EWS activity signals will also be sunset.
For full details on the EWS retirement, see the Learn documentation: Deprecation of Exchange Web Services in Exchange Online | Microsoft Learn

What changes: Microsoft is retiring support for loading Power Query data into the Python runtime in Excel for the web. After this change, users will no longer be able to use Power Query as a data source for Python in Excel when working in Excel for the web. This retirement aligns investments in Python in Excel with supported experiences and does not affect Excel for Windows desktop.

What changes: As part of Microsoft's Secure Future Initiative, we are strengthening the security of the Microsoft Entra ID sign-in experience by introducing additional Content Security Policy (CSP) protections. This change helps protect users from threats such as cross-site scripting (XSS) by allowing only trusted Microsoft-hosted scripts to run during authentication and blocking unauthorized or externally injected code.

What changes: Deprecated the privilegedAccess resource and all the associated APIs that are part of the Privileged Identity Management (PIM) iteration 2 APIs for Azure resources. These APIs are deprecated and will stop returning data on October 28, 2026. Use the new Azure REST PIM API for Azure resource roles.

What changes: Microsoft is retiring the CIQ-based "@" entity insertion experience on the document canvas in Word for the web. This retirement aligns Word for the web with the experience available in other Microsoft 365 applications, including Word desktop, Excel, and PowerPoint, where this entry point is no longer available.
As part of this change, users will no longer be able to invoke the CIQ menu from the document canvas by typing "@". This retirement does not affect @mentions in comments.

What changes: We are retiring Themes by Copilot in Microsoft Outlook. Themes by Copilot currently allows users with a Copilot license to create and apply a Copilot-generated theme in Settings. As part of this change, Themes by Copilot will be removed from Settings, and users will no longer be able to select or return to a Theme by Copilot after changing to a different theme.

What changes: Added the windows365SwitchCompatibilityFailureReasonType enumeration type. Added the cloudPcLaunchDetail resource type. Deprecated the cloudPcLaunchInfo resource type. The cloudPcLaunchInfo resource is deprecated and will stop returning data on October 30, 2026. Going forward, use the cloudPcLaunchDetail API. Added the retrieveCloudPcLaunchDetail method to the cloudPC resource. Deprecated the getCloudPcLaunchInfo method of the cloudPC resource.

What changes: We are retiring support for Microsoft Defender for Endpoint (MDE) on Amazon Linux 2 (AL2) running on ARM64 architecture, effective October 31, 2026.

What changes: Targeted release for Microsoft 365 services will be retiring in January 2027 as Microsoft 365 transitions to three release options: Frontier, Standard release, and Deferred release.
To prepare for this change, review users currently enrolled in Targeted release and configure the release preference that best meets your organization's needs.
Choose your preferred release preference in the Microsoft 365 admin center:

What changes: Deprecated the sharedWithMe method on the drive resource. This API is deprecated and will stop returning data after November, 2026. Deprecated the recent method on the drive resource. This API is deprecated and will stop returning data after November 2026. Removed the Org.OData.Core.V1.Revisions resource. Removed the Org.OData.Core.V1.Revisions resource.

What changes: The paid Extended Security Update (ESU) period ends: no more security updates after this date.

What changes: The paid Extended Security Update (ESU) period ends: no more security updates after this date.

What changes: Starting November 1, 2026, Dynamics 365 Sales Insights as a standalone add-on will have reached end of support. Sales Insights is a legacy offering whose capabilities are already included in Sales Premium.
Sales Premium delivers the Sales Insights capabilities at the same price as the Sales Enterprise + Sales Insights combination. It also includes Copilot Credits, additional Dataverse storage capacity, and access to new Sales Premium capabilities.

What changes: Microsoft Entra is introducing workload identity–based authentication for SAP SuccessFactors provisioning. This new capability allows the Microsoft Entra provisioning service to authenticate to SAP SuccessFactors using Entra workload identity and short‑lived tokens instead of static credentials (username and password).

What changes: As previously announced in MC1448379 (August 5, 2026), the public preview of the MemberOf rule operator in Microsoft Entra ID is ending. Organizations using MemberOf in dynamic membership groups, dynamic administrative units (AUs), or entitlement management auto-assignment policies must replace these configurations by November 3, 2026.
Microsoft continues to improve the scale and reliability of dynamic membership processing.

What changes: Microsoft will retire the SharePoint Page Agent (Frontier) for SharePoint Online. This early access experience enabled users to turn content from Microsoft 365 Copilot conversations into draft SharePoint pages and news posts.
As Microsoft continues to invest in AI-powered content creation experiences, page and news authoring capabilities are now available directly within SharePoint through Copilot in SharePoint.

What changes: Apps in Copilot Cowork are now available through the Frontier program, and Apps in Microsoft Copilot Studio are rolling out in public preview.To provide a unified experience for building apps with natural language, Microsoft is retiring the App Builder agent in Microsoft 365 Copilot and vibe.powerapps.com.
Copilot Cowork and Microsoft Copilot Studio will become the primary experiences for creating apps using natural language.

What changes: Beginning November 30, 2026, Microsoft will start retiring the Microsoft Purview Data Security Posture Management (DSPM) classic and DSPM for AI classic experiences. Retirement will be completed by December 31, 2026.
As part of our continued investment in Microsoft Purview Data Security Posture Management, we have unified DSPM capabilities into a single experience that helps organizations discover, protect, and investigate data risks across traditional data sources and AI applications and…

What changes: Admins can perform a bulk replacement or removal of a retention label using the Purview compliance portal. They can perform the action across the entire tenant or targeted to specific content using KQL and static or adaptive scopes.

What changes: Admins can perform a bulk replacement or removal of a retention label using the Purview compliance portal. They can perform the action across the entire tenant or targeted to specific content using KQL and static or adaptive scopes.

What changes: We are retiring Data Risk Graph in Microsoft Purview Insider Risk Management (IRM).
Data Risk Graph provides a visual investigation experience that helps investigators review connections among impacted data, users, and alert-related activities. As part of ongoing investments in Insider Risk Management investigation experiences, we are retiring this capability and directing customers to alternative investigation tools that provide detailed activity timelines and investigative context.

What changes: The Microsoft 365 companion apps—Calendar, People, and Files — are taskbar-integrated apps designed to streamline everyday workflows, helping users stay focused, reduce context switching, and complete tasks faster.
We are retiring the companion apps, and they will no longer function or be supported after 16. December 2026. We advise admins remove the apps from devices in their tenant by this date. Detailed admin guidance is in Microsoft 365 companion app retirement.

What changes: Microsoft is retiring the Surveys agent and transitioning customers to a unified, Copilot-powered experience within Microsoft Forms. This change streamlines form creation, data collection, and analysis into a single, integrated experience—improving productivity and providing more advanced AI-driven capabilities without requiring additional licensing. Users can continue their workflows seamlessly while benefiting from enhanced Copilot features built directly into Forms.

What changes: Added the cloudPcUsageCategoryReport member to the cloudPcRecommendationReportType enumeration. Deprecated the cloudPcUsageCategoryReports member from the cloudPcRecommendationReportType enumeration. Added the cloudPcUsageCategoryReport member to the cloudPcReportName enumeration. Deprecated the cloudPcUsageCategoryReports member from the cloudPcReportName enumeration. Added the cloudPcReport resource. Deprecated the cloudPcReports resource.

What changes: Targeted release for Microsoft 365 services will be retiring in January 2027 as Microsoft 365 transitions to three release options: Frontier, Standard release, and Deferred release.
To prepare for this change, review users currently enrolled in Targeted release and configure the release preference that best meets your organization's needs.
Choose your preferred release preference in the Microsoft 365 admin center:

What changes: To improve security and reduce reliance on vulnerable authentication methods, Microsoft is continuing the retirement of SMS first-factor sign-in in Microsoft Entra ID. Microsoft recommends phishing-resistant authentication methods, such as passkeys, as the preferred sign-in experience because they help reduce the risk of phishing, fraud, and account compromise associated with phone-based authentication.

What changes: Microsoft introduced security enhancements to Exchange Online PowerShell authentication in ExchangeOnlineManagement module version 3.10.1. These enhancements strengthen the authentication flow and provide protection against emerging threats. Customers using a version earlier than 3.10.1 should upgrade to version 3.10.1 or later. Customers already using version 3.10.1 or later do not need to take additional action beyond keeping the module up to date.

What changes: Microsoft is retiring pre-authenticated URLs, also known as tempauth URLs, from SharePoint Online and OneDrive. Beginning April 1, 2027, selected Microsoft Graph file APIs will no longer return URLs that contain embedded authentication information and will no longer issue HTTP 302 redirects to those URLs.
To help organizations prepare, new SharePoint Online tenant controls are coming soon in a future release of Microsoft SharePoint Online PowerShell.

What changes: Added the user member to the agentIdentityType enumeration. Added the displayName property to the agentRiskDetection resource. Added the identityId property to the agentRiskDetection resource. Deprecated the agentId property in the agentRiskDetection resource. Use identityId instead. This property will be removed after 2027-04-28. Deprecated the agentDisplayName property in the agentRiskDetection resource. Use displayName instead. This property will be removed after 2027-04-28.

What changes: The Microsoft Graph AuditLogQuery API is generally available for programmatic access to Microsoft Purview Audit activity logs. We are also announcing the planned retirement of the Search-UnifiedAuditLog PowerShell cmdlet on October 15, 2027.
The AuditLogQuery API provides improved scalability and reliability, more granular workload-level permissions, and support for exporting up to 1 million audit records per query.

What changes: No more security updates, fixes or help from Microsoft. Upgrade or move to Microsoft 365 before this date.

What changes: No more security updates, fixes or help from Microsoft. Upgrade or move to Microsoft 365 before this date.