Learn Watch · week 39

Microsoft Intune3 what's new3changes

Microsoft Defender XDR2 what's new2changes

Microsoft Entra1 what's new1 important1 heads-up2changes

Key signals

Heads-up Heads-up and plan for change 1

Entra Microsoft Entra Private Network Connectors - Global Secure Access · Global Secure Access

How to read this report

Added The entry was not in this section of the page in the previous version: it is genuinely new.
Changed An entry with the same title in the same section existed, but its text changed. Open it to see the removed and added words.
Removed The entry disappeared from the page and was not found on an archive page. Withdrawn marks one that was announced under a recent heading.
Moved to archive The entry left the page but now appears on the product's archive page. This is routine housekeeping, not a withdrawal.
Not compared yet There is no earlier version of the page yet. These are the entries under the most recent heading, not necessarily new this week.
possible replacement In the same section entries were both removed and added. They are shown next to each other so you can compare them.
Rewritten Most of the page changed. The card lists the new, removed and changed sections; the full diff is one click away.
Changes per product The number on each product card counts what's new pages, new pages, important changes, moved and removed pages. Minor and bulk edits are not counted.

Microsoft Intune

3 what's new

What's new, release notes and known issues 3

Known issues with deployments in Microsoft IntuneKnown issues

Device Management · updated 2026-09-21

not compared yet No previous version of this page yet, so these are the 4 entries under its most recent heading - not necessarily new this week.

Not compared yet The Deployments page does not currently support sorting options.
The Deployments page does not currently support sorting options. The list is sorted based on when a ring starts in an active deployment.
Open on Learn ·
Not compared yet Search in the Deployments page only searches on deployment name.
Search in the Deployments page only searches on deployment name.
Open on Learn ·
Not compared yet Deployments
When you create a deployment for a payload protected by a Multi Admin Approval access policy, the deployment doesn't appear in the Deployments list until the approval is complete.
Open on Learn ·
Not compared yet To view the Multi Admin Approval status for a Deployment, open the deployment or use Tenant administration:
To view the Multi Admin Approval status for a Deployment, open the deployment or use Tenant administration: Multi Admin Approval, or Admin tasks.
Open on Learn ·

In developmentIn development

What's new · updated 2026-09-25

not compared yet No previous version of this page yet, so this is the entry under its most recent heading - not necessarily new this week.

Microsoft Intune Suite
Not compared yet Scope tags support for Endpoint Privilege Management reports
We're fixing how scope tags work with Endpoint Privilege Management (EPM) reports. With this change, EPM reports will respect the report viewer's assigned scope and display the details for only the users and devices that the report user is scoped to view.
Open on Learn ·

What's new in Microsoft IntuneWhat's new

What's new · updated 2026-09-25

not compared yet No previous version of this page yet, so these are the 16 entries under its most recent heading - not necessarily new this week.

Week of September 21, 2026 › Device management
Not compared yet Stage app and policy rollout with deployment plansWindows
Microsoft Intune now supports deployment plans, a new way to roll out apps and configuration policies in stages instead of all at once. From the new Deployments experience in the Intune admin center, you can stage a rollout across multiple rings, control rollout timing, and integrate with Multiple Admin Approval to reduce risk when deploying changes to large device fleets. For more information, see Deployment plans and deployments in Microsoft Intune. Applies to: WindowsWin32 and Enterprise app catalog appsSettings catalog and Endpoint security policies
Open on Learn ·
Week of September 28, 2026 (Service release 2609) › Advanced capabilities (formerly "Microsoft Intune Suite")
Not compared yet Microsoft Cloud PKI support for US Government GCC HighWindowsAndroidiOS/iPadOSmacOS
Microsoft Cloud PKI is now available for Microsoft Intune tenants in the Microsoft Government Community Cloud High (GCC High) environment. You can create and manage a cloud-based public key infrastructure that automates certificate issuance, renewal, and revocation for Intune-managed devices without deploying an on-premises certification authority, Network Device Enrollment Service, or Intune Certificate Connector for device certificate delivery. Use these certificates for certificate-based authentication to organizational resources such as Wi-Fi, VPN, and applications. Support includes managed Windows, Android, iOS/iPadOS, and macOS devices. Cloud PKI isn't currently supported in the Department of Defense environment. For more information, see Overview of Microsoft Cloud PKI for Microsoft Intune. Applies to: WindowsAndroidiOS/iPadOSmacOS
Open on Learn ·
Week of September 28, 2026 (Service release 2609) › App management
Not compared yet Faster delivery of Win32 appsWindows
Microsoft Intune now uses push notifications for admin-initiated and service-side changes to Win32 apps. Managed devices can check in sooner after app changes, reducing delivery and refresh delays compared with waiting for normal polling intervals. This update improves Win32 app deployment responsiveness without requiring a new admin workflow. Applies to: Windows
Open on Learn ·
Not compared yet Newly available protected app for IntuneAndroidiOS/iPadOS
Microsoft Dragon Copilot by Microsoft Corporation is now available as a protected app for Microsoft Intune. You can apply Intune app protection policies to the app on supported Android and iOS/iPadOS devices, helping protect organizational data while clinicians use its AI-assisted documentation capabilities. For more information, see Microsoft Intune protected apps. Applies to: AndroidiOS/iPadOS
Open on Learn ·
Not compared yet Require Managed Home Screen authentication for protected app activitiesAndroid
Microsoft Intune now helps prevent users from bypassing Managed Home Screen (MHS) authentication when they access protected activities in MAM-integrated apps. If MHS requires sign-in or a session PIN, the app redirects the user to MHS before allowing access to protected content. Assign an Intune app protection policy to both the app and the signed-in user; no specific app protection policy setting is required. For more information, see Configure the Microsoft Managed Home Screen app for Android Enterprise. Applies to: Android Enterprise corporate-owned dedicated devices using Managed Home Screen with Microsoft Entra shared device mode
Open on Learn ·
Not compared yet Faster Win32 app delivery after Windows enrollmentWindows
Microsoft Intune Management Extension now checks for Windows app assignments immediately after the Enrollment Status Page (ESP) completes. This reduces the delay before required Win32 apps that weren't installed during ESP begin installing on newly enrolled devices. For more information, see Intune Management Extension for Windows. Applies to: Windows
Open on Learn ·
Week of September 28, 2026 (Service release 2609) › Device configuration
Not compared yet New Apple settings in the Settings Catalog for iOS/iPadOS and macOSiOS/iPadOSmacOS
Microsoft Intune now includes new Apple Settings Catalog options for supported iOS/iPadOS and macOS devices. You can configure additional controls for areas such as app settings, Apple Intelligence, network and web-content filtering, and the macOS login window by using the same Settings Catalog policy workflow in the Microsoft Intune admin center. For more information, see Create a policy using settings catalog. Applies to: iOS/iPadOSmacOS
Open on Learn ·
Not compared yet Assignment filters for Android Settings Catalog policiesAndroid
Microsoft Intune now supports assignment filters for Android Enterprise and Android Open Source Project (AOSP) Settings Catalog policies. You can include or exclude specific devices based on device properties, giving you more granular control over policy deployments and helping apply the right settings to the right Android devices. For more information, see Use assignment filters in Microsoft Intune. Applies to: Android EnterpriseAndroid (AOSP)
Open on Learn ·
Week of September 28, 2026 (Service release 2609) › Device enrollment
Not compared yet Automatically launch Microsoft Defender for Endpoint during Android Enterprise device setupAndroid
Microsoft Intune now supports automatically opening Microsoft Defender for Endpoint during out-of-box setup for supported corporate-owned Android Enterprise devices. After you configure the Defender for Endpoint connector, turn on Grant MTD role permissions, and assign the Defender app as required, enable the experience from Endpoint security > Defender for Endpoint. Intune opens Defender during enrollment so users can complete its initial configuration as part of device setup. If configuration isn't completed, the Intune setup step remains available so users can open Defender again. For setup-time availability, assign Defender for Endpoint to user groups or all devices before enrollment. Assignment processing for a specific device group might not complete early enough for Defender to be available during setup. Applies to: Android Enterprise corporate-owned fully managed devices (COBO)Android Enterprise corporate-owned devices with a work profile (COPE)
Open on Learn ·
Not compared yet Skip the Device Features Tour during Apple enrollmentiOS/iPadOS
Microsoft Intune now includes the Device features tour Apple OS 27 Setup Assistant skip key in Automated Device Enrollment profiles. You can hide this pane to reduce setup interactions and provide a more streamlined enrollment experience on supported iPhone and iPad devices. For more information, see Set up automated device enrollment for iOS/iPadOS. Applies to: iOS/iPadOS
Open on Learn ·
Not compared yet Upgrade an existing Android Enterprise connection to a managed Google domainAndroid
Microsoft Intune now supports an optional upgrade for tenants that connected Android Enterprise with a Gmail account. You can link the enterprise to a managed Google domain and manage the Google-Intune connection with your Microsoft Entra work account instead. Start at Devices > Enrollment, select Android, and under Prerequisites, select Managed Google Play. For more information, see Connect your Intune account to your managed Google Play account. Applies to: Android Enterprise
Open on Learn ·
Week of September 28, 2026 (Service release 2609) › Device management
Not compared yet Bulk manage eSIMs on corporate-owned Android Enterprise devicesAndroid
Microsoft Intune now supports bulk eSIM actions for corporate-owned Android Enterprise devices. From Devices > All devices > Bulk device actions, you can activate eSIMs on up to 100 selected devices running Android 15 or later by using a carrier activation server URL. When you bulk wipe supported devices, Intune preserves eSIM data plans by default. You can select the option to remove eSIMs when the wipe should also remove the data plans. Personally owned Android Enterprise work profile devices aren't supported. Applies to: Android Enterprise corporate-owned fully managed devices (COBO)Android Enterprise corporate-owned dedicated devices (COSU)Android Enterprise corporate-owned devices with a work profile (COPE)
Open on Learn ·
Not compared yet Updated minimum supported version for iOS and iPadOSiOS/iPadOS
Microsoft Intune now requires iOS/iPadOS 18 or later for standard device-management, Company Portal, and app-protection scenarios. Administrators should identify and upgrade affected devices. Userless devices enrolled through Automated Device Enrollment have a separate support statement. Applies to: iOS/iPadOS
Open on Learn ·
Not compared yet New single device page becomes the default experience in the Intune admin center
Microsoft Intune now uses the new single device page as the default experience for all admins, and the previous device page is no longer available. In Devices > All devices, select a device to view details and properties, monitor activity, access tools and reports, and perform supported actions from a consistent layout across platforms. Existing device-management capabilities remain available. For more information, see See device details in Microsoft Intune. Applies to: All platforms
Open on Learn ·
Week of September 28, 2026 (Service release 2609) › Device security
Not compared yet Configure MDE AI agent runtime protection for WindowsWindows
Microsoft Intune now includes Microsoft Defender for Endpoint AI agent runtime protection settings in the new endpoint security template for Windows. You can use Audit mode to detect and alert on unsafe AI agent activity without blocking it, or Block mode to stop threats before they execute. These settings support Windows devices managed through Intune or MDE security settings management. For more information, see AI agent runtime protection with Microsoft Defender for Endpoint. Applies to: Windows
Open on Learn ·
Not compared yet Onboard MDM compliance partners with new self-service functionality
Microsoft Intune now supports bring-your-own connector functionality for MDM compliance partners. Partners can build, test, and onboard compliance connectors using Intune documentation, contracts, and validation hooks. As an admin, you can opt in to a partner connector by providing the vendor's information in the Microsoft Intune admin center, speeding partner onboarding and expanding the compliance solutions available to your organization. For more information, see Self-service onboarding for compliance partners. Applies to: All supported platforms
Open on Learn ·

Changed, no previous version to compare with yet (21)

Configure the Microsoft Managed Home Screen App App Management · 2026-09-24
Create a policy using settings catalog in Microsoft Intune Device Configuration · 2026-09-23
Device features and settings in Microsoft Intune Device Configuration · 2026-09-23
Device restriction settings for Android in Microsoft Intune Device Configuration · 2026-09-24
Create a deployment plan in Microsoft Intune Device Management · 2026-09-21
Create and manage a deployment in Microsoft Intune Device Management · 2026-09-21
Deployment plans and deployments overview in Microsoft Intune Device Management · 2026-09-21
Device Actions - Wipe, Lock, Locate, and More Device Management · 2026-09-25
Manage eSIM plans in Microsoft Intune Device Management · 2026-09-25
Permissions, scope tags, and approvals for deployments in Microsoft Intune Device Management · 2026-09-21
Understand Microsoft Intune Management Extension Device Management · 2026-09-24
Wipe devices with Microsoft Intune Device Management · 2026-09-25
Third-party device compliance partners support in Microsoft Intune Device Security · 2026-09-23
Upgrade the Microsoft Tunnel Gateway server software Device Security · 2026-09-22
Assignment filter properties and operators reference Fundamentals · 2026-09-23
Microsoft Intune Government Service overview Fundamentals · 2026-09-25
Network endpoints for China deployments Fundamentals · 2026-09-25
Platforms and policy types supported by assignment filters Fundamentals · 2026-09-23
Device management Intune (general) · 2026-09-21
Microsoft Cloud PKI for Microsoft Intune Intune (general) · 2026-09-25
Plan for Remote Help with Microsoft Intune Remote Help · 2026-09-25

Microsoft Defender XDR

2 what's new

What's new, release notes and known issues 2

What's new in Microsoft Defender for Office 365What's new

Defender for Office 365 · updated 2026-09-21

not compared yet No previous version of this page yet, so this is the entry under its most recent heading - not necessarily new this week.

September 2026
Not compared yet Expanding user reporting in Teams to include group calls
Expanding user reporting in Teams to include group calls: Users can report completed or missed group Microsoft Teams calls from the call history as malicious (scam) or nonmalicious (non-scam). Depending on user reported settings, reported calls are sent to the specified reporting mailbox, to Microsoft, or both.
Open on Learn ·

Microsoft Defender for Endpoint release notesRelease notes

Defender for Endpoint · updated 2026-09-28 · +19 −9 words

Compared with the previous version: 1 changed

Linux releases › Linux | September 2026 | 101.26081.0010
Changed Enhancements and featuresLinux
What changed in this entry (~~removed~~ / added):
| Feature area | Update summary | | --- | --- | | Device identity | Fixed an issue where cloned Linux virtual machines could retain the source image's machine identifier, causing multiple endpoints to appear with the same Microsoft Defender for Endpoint device ~~identity.~~ identity.Each cloned endpoint is now correctly identified as a unique device. | | Bug fix | Fixed `SIGILL` crashes on systems with processors that don't support SSE4.1. ~~The crashes were caused by bundled open-source libraries.~~ | | General | Reliability and quality improvements. |
Full text as it is now
| Feature area | Update summary | | --- | --- | | Device identity | Fixed an issue where cloned Linux virtual machines could retain the source image's machine identifier, causing multiple endpoints to appear with the same Microsoft Defender for Endpoint device identity.Each cloned endpoint is now correctly identified as a unique device. | | Bug fix | Fixed SIGILL crashes on systems with processors that don't support SSE4.1. | | General | Reliability and quality improvements. |
Open on Learn ·

Show full page diff

§ Enhancements and features

Feature area Update summary
Device identity	Fixed an issue where cloned Linux virtual machines could retain the source image's machine identifier, causing multiple endpoints to appear with the same Microsoft Defender for Endpoint device ~~identity.~~ identity.Each cloned endpoint is now correctly identified as a unique device.
Bug fix	Fixed `SIGILL` crashes on systems with processors that don't support SSE4.1. ~~The crashes were caused by bundled open-source libraries.~~
General	Reliability and quality improvements.

Changed, no previous version to compare with yet (64)

Investigate OAuth app threat detection alerts with app governance Defender for Cloud Apps · 2026-09-24
AI agent runtime protection demonstration Defender for Endpoint · 2026-09-22
Collect Microsoft Defender Antivirus diagnostic data Defender for Endpoint · 2026-09-23
Configure Conditional Access with Microsoft Defender for Endpoint Defender for Endpoint · 2026-09-22
Configure device discovery in Microsoft Defender for Endpoint Defender for Endpoint · 2026-09-22
Configure Microsoft Defender for Endpoint on iOS using MAM Defender for Endpoint · 2026-09-22
Configure network connectivity to Microsoft Defender for Endpoint Defender for Endpoint · 2026-09-22
Configure proxy connectivity for Microsoft Defender for Endpoint Defender for Endpoint · 2026-09-23
Onboard devices using streamlined connectivity for Microsoft Defender for Endpoint Defender for Endpoint · 2026-09-22
Onboard non-persistent VDI devices to Microsoft Defender for Endpoint Defender for Endpoint · 2026-09-22
Onboard Windows devices to Microsoft Defender for Endpoint with a local script Defender for Endpoint · 2026-09-22
Onboard Windows devices to Microsoft Defender for Endpoint with Configuration Manager Defender for Endpoint · 2026-09-22
Onboard Windows devices to Microsoft Defender for Endpoint with Group Policy Defender for Endpoint · 2026-09-22
Prerequisites for Microsoft Defender for Endpoint on Linux Defender for Endpoint · 2026-09-24
Use the Microsoft Defender deployment tool for Windows Defender for Endpoint · 2026-09-23
Web content filtering in Microsoft Defender for Endpoint Defender for Endpoint · 2026-09-22
Microsoft Defender for Office 365 support for Microsoft Teams Defender for Office 365 · 2026-09-21
Order and precedence of email protection Defender for Office 365 · 2026-09-22
Roles and role groups in Microsoft Defender for Office 365 and Microsoft Purview Defender for Office 365 · 2026-09-24
User reported settings in Teams Defender for Office 365 · 2026-09-21
Supported operating systems platforms and capabilities Defender Vulnerability Management · 2026-09-24
Advanced hunting with Microsoft Sentinel data in Microsoft Defender Defender XDR · 2026-09-23
Alert correlation and incident merging in the Microsoft Defender portal Defender XDR · 2026-09-23
Audit and retain case data in Log Analytics Defender XDR · 2026-09-23
Automation integrations with ISOC in Microsoft Defender Defender XDR · 2026-09-23
Automation with ISOC in Microsoft Defender Defender XDR · 2026-09-23
Case management in the Microsoft Defender portal Defender XDR · 2026-09-23
CloudStorageAggregatedEvents table in the advanced hunting schema Defender XDR · 2026-09-24
Configure case templates in the Microsoft Defender portal Defender XDR · 2026-09-23
Connect data sources to UEBA with Microsoft 365 E5 Defender XDR · 2026-09-23
Create an ISOC workspace in the Microsoft Defender portal Defender XDR · 2026-09-23
Create and edit workbooks with Copilot for ISOC in Microsoft Defender Defender XDR · 2026-09-23
Create and manage workbooks with ISOC in Microsoft Defender Defender XDR · 2026-09-23
Create automation rules with ISOC in Microsoft Defender Defender XDR · 2026-09-23
Data ingestion and billing for ISOC in Microsoft Defender Defender XDR · 2026-09-23
Deploy content as code from your repository for an ISOC workspace Defender XDR · 2026-09-23
Generate playbooks using AI in the Microsoft Defender portal Defender XDR · 2026-09-23
Incidents and alerts in the Microsoft Defender portal Defender XDR · 2026-09-23
Integrated Security Operations Center (ISOC) in Microsoft Defender Defender XDR · 2026-09-23
Investigate incident cases in the Microsoft Defender portal Defender XDR · 2026-09-23
Manage case tasks in the Microsoft Defender portal Defender XDR · 2026-09-23
Manage generic cases in the Microsoft Defender portal Defender XDR · 2026-09-23
Manage incident case tasks in the Microsoft Defender portal Defender XDR · 2026-09-23
Manage incident cases in the Microsoft Defender portal Defender XDR · 2026-09-23
Manually create an incident or alert in the Microsoft Defender portal (Legacy) Defender XDR · 2026-09-23
Merge and split incident cases in the Microsoft Defender portal Defender XDR · 2026-09-23
Merge incident cases manually in the Microsoft Defender portal Defender XDR · 2026-09-23
Merge incidents manually in the Microsoft Defender portal (Legacy) Defender XDR · 2026-09-23
Microsoft Defender XDR documentation Defender XDR · 2026-09-23
Move alerts from one incident case to another in the Microsoft Defender portal Defender XDR · 2026-09-23
Move alerts from one incident to another in the Microsoft Defender portal (Legacy) Defender XDR · 2026-09-23
Plan an incident response workflow in the Microsoft Defender portal Defender XDR · 2026-09-23
Prioritize incident cases in the Microsoft Defender portal Defender XDR · 2026-09-23
Prioritize incidents in the Microsoft Defender portal (Legacy) Defender XDR · 2026-09-23
Query threat intelligence in Microsoft Defender Defender XDR · 2026-09-23
SLA policies for cases in the Microsoft Defender portal Defender XDR · 2026-09-23
Streamline incident response using tasks in the Microsoft Defender portal (Legacy) Defender XDR · 2026-09-23
Threat intelligence in Microsoft Defender Defender XDR · 2026-09-23
Transition to the new Threat intelligence experience in Microsoft Defender Defender XDR · 2026-09-23
Use Content hub with ISOC in Microsoft Defender Defender XDR · 2026-09-23
Use Intel explorer in Microsoft Defender Defender XDR · 2026-09-23
View and manage cases across multiple tenants in the Microsoft Defender multitenant portal Defender XDR · 2026-09-23
View and manage incidents and alerts in Microsoft Defender multitenant management Defender XDR · 2026-09-23
Codename MDASH Overview Security Exposure Management · 2026-09-25

Microsoft Entra

1 what's new 1 important 1 minor

What's new, release notes and known issues 1

Microsoft Entra Connect: Version release historyRelease notes

Hybrid · updated 2026-09-24

not compared yet No previous version of this page yet, so this is the entry under its most recent heading - not necessarily new this week.

Not compared yet Known issue: Synchronization fails after upgrade if miiserver.exe.config was previously modified
Applies to Microsoft Entra Connect 2.5.190.0Microsoft Entra Connect 2.6.1.0
Open on Learn ·

Important changes 1

Microsoft Entra Private Network Connectors - Global Secure AccessHeads-up

Global Secure Access · updated 2026-09-28 · +359 −158 words

Changed in:

What changed

§ Configure dynamic and AutoReuse TCP port ranges

Configure dynamic and AutoReuse TCP port ranges

§ Expanding ephemeral port range

Expanding ephemeral port range

§ Configure dynamic and AutoReuse TCP port ranges

Private network connectors initiate outbound TCP and UDP connections to configured destinations. Each connection requires an available source port on the connector host.

§ Expanding ephemeral port range

Private network connectors initiate TCP and UDP connections to designated destination endpoints. These connections require available source ports on the connector host machine. Expanding the ephemeral port range can improve the availability of source ports, particularly when you're managing a high volume of concurrent connections.

§ Configure dynamic and AutoReuse TCP port ranges

For high-volume TCP workloads, configure separate, non-overlapping dynamic and AutoReuse port ranges:

§ Expanding ephemeral port range

To view the current dynamic port range on a system, use the following netsh commands:

§ Configure dynamic and AutoReuse TCP port ranges

Dynamic TCP range: 49152–65535 (16,384 ports)

§ Expanding ephemeral port range

netsh int ipv4 show dynamicport tcp

§ Configure dynamic and AutoReuse TCP port ranges

AutoReuse TCP range: 10000–49151 (39,152 ports)

§ Expanding ephemeral port range

netsh int ipv4 show dynamicport udp

§ Configure dynamic and AutoReuse TCP port ranges

The AutoReuse range improves TCP connection scalability by allowing eligible outbound connections to reuse a local source port when the complete connection tuple—source IP, source port, destination IP, and destination port—remains unique.

§ Expanding ephemeral port range

netsh int ipv6 show dynamicport tcp

§ Configure dynamic and AutoReuse TCP port ranges

Important

§ Expanding ephemeral port range

netsh int ipv6 show dynamicport udp

§ Configure dynamic and AutoReuse TCP port ranges

The dynamic and AutoReuse TCP ranges must not overlap.

§ Expanding ephemeral port range

Here are sample netsh commands to increase the ports:

§ Configure dynamic and AutoReuse TCP port ranges

Before you begin:

§ Expanding ephemeral port range

netsh int ipv4 set dynamicport tcp start=1025 num=64511

§ Configure dynamic and AutoReuse TCP port ranges

Use Windows Server 2016 or later.

§ Expanding ephemeral port range

netsh int ipv4 set dynamicport udp start=1025 num=64511

§ Configure dynamic and AutoReuse TCP port ranges

Run the commands from an elevated PowerShell session.

§ Expanding ephemeral port range

netsh int ipv6 set dynamicport tcp start=1025 num=64511

§ Configure dynamic and AutoReuse TCP port ranges

Confirm that ports 10000–49151 aren't required by applications installed on the connector server.

§ Expanding ephemeral port range

netsh int ipv6 set dynamicport udp start=1025 num=64511

§ Configure dynamic and AutoReuse TCP port ranges

Review the excluded TCP port ranges:

… 16 more changes: see the page or its history

Minor changes (1) · fewer than 15 words

How to configure connectors for Microsoft Entra Private Access - Global Secure Access

Global Secure Access · updated 2026-09-28 · +6 −6 words

Changed in:

What changed

§ Recommendations for the connector server

- Consider [performance and scalability] of your connector deployment, including ~~[extending the TCP~~ [configuring dynamic and ~~UDP ephemeral ports]~~ AutoReuse TCP port ranges] on your connector server. See [Understand the Microsoft Entra private network connector] for more information.

Changed, no previous version to compare with yet (34)

Choose a telephony provider for SMS and voice authentication Authentication · 2026-09-23
FAQ for Microsoft-provided SMS and voice retirement Authentication · 2026-09-23
Frequently asked questions about telephony providers in Microsoft Entra ID Authentication · 2026-09-21
Passkeys by default and retirement of Microsoft-provided SMS and voice authentication Authentication · 2026-09-23
Token Protection Deployment Guide - Windows Conditional Access · 2026-09-24
Assign users and devices to traffic forwarding profiles - Global Secure Access Global Secure Access · 2026-09-22
Create a Microsoft Entra Private Access traffic forwarding profile - Global Secure Access Global Secure Access · 2026-09-22
Delete a Microsoft Entra Private Access traffic forwarding profile - Global Secure Access Global Secure Access · 2026-09-22
Global Secure Access traffic forwarding profiles - Global Secure Access Global Secure Access · 2026-09-22
Manage Private Access traffic forwarding profiles - Global Secure Access Global Secure Access · 2026-09-22
Attribute mapping in Microsoft Entra Cloud Sync Hybrid · 2026-09-24
Embrace cloud-first posture and convert Group Source of Authority (SOA) to the cloud Hybrid · 2026-09-24
Guidance for using Group Source of Authority (SOA) in Microsoft Entra ID Hybrid · 2026-09-24
Microsoft Entra AD object enforcement (Preview) Hybrid · 2026-09-24
Microsoft Entra Cloud Sync supported topologies and scenarios Hybrid · 2026-09-24
Microsoft Entra cloud-first identity guidance Hybrid · 2026-09-24
Microsoft Entra directory extensions for provisioning to AD Hybrid · 2026-09-24
Microsoft Entra prerequisites for AD (Preview) Hybrid · 2026-09-24
Microsoft Entra provisioning behavior (Preview) Hybrid · 2026-09-24
Microsoft Entra provisioning options (Preview) Hybrid · 2026-09-24
Microsoft Entra provisioning setup (Preview) Hybrid · 2026-09-24
On-demand provisioning - Microsoft Entra ID to Active Directory Hybrid · 2026-09-24
On-demand provisioning in Microsoft Entra Cloud Sync Hybrid · 2026-09-24
Preserve a group's organizational unit (Preview) Hybrid · 2026-09-24
Provision Microsoft Entra ID objects to AD Hybrid · 2026-09-24
Provisioning to Active Directory with Microsoft Entra Cloud Sync FAQ Hybrid · 2026-09-24
Test Microsoft Entra provisioning (Preview) Hybrid · 2026-09-24
Transfer user SOA to Microsoft Entra ID Hybrid · 2026-09-24
Tutorial: Govern access to an on-premises app (Preview) Hybrid · 2026-09-24
Use directory extensions when provisioning to Active Directory Hybrid · 2026-09-24
Microsoft Entra ID Governance licensing for guest users ID Governance · 2026-09-24
Hybrid identity documentation Identity · 2026-09-24
Flexible federated identity credentials (preview) Workload ID · 2026-09-23
Set up a Flexible Federated identity credential (preview) Workload ID · 2026-09-23

Week 39 · 21 Sep – 27 Sep 2026

Key signals

Heads-up Heads-up and plan for change 1

Microsoft Intune

What's new, release notes and known issues 3

Microsoft Defender XDR

What's new, release notes and known issues 2

Microsoft Entra

What's new, release notes and known issues 1

Important changes 1