Day 24 of #ITAdvent. And this concludes yet another run. I hope you found some usefull tips, I had a nasty cold so that might have had an impact. In any case, happy holidays and see you in the next year! And yes, I haven't forgotten that #MSExchange and Start-of-authority blog post ;-)

Day 23 of #ITAdvent. When I design, licensing is an important part of it. Knowing what capability or #license is present in which bundle or add-on is important for cost estimates. One big help is the #Microsoft365 Enterprise plan comparison table, which is updated frequently. Download the PDF here: https://go.microsoft.com/fwlink/p/?LinkID=2139145&clcid=0x409&culture=en-us&country=us?wt.mc_id=M365-MVP-5000976

Day 22 of #ITAdvent. In February 2026 #MicrosoftTeams will rollout Express Voice Enrollment and prompt users to opt-in. When the user choses to enroll the features enables improved voice isolation, speaker attribution in meetings rooms etc., this is probably something that organizations explain to their users. Especially when there are #privacy concerns on biometric data. See #Microsoft365 roadmap ID #537269 https://www.microsoft.com/nl-nl/microsoft-365/roadmap?filters=&searchterms=537269
and the Learn article https://learn.microsoft.com/en-us/microsoftteams/rooms/voice-and-face-recognition?wt.mc_id=M365-MVP-5000976

Day 22 of #ITAdvent. In February 2026 #MicrosoftTeams will rollout Express Voice Enrollment and prompt users to opt-in. When the user choses to enroll the features enables improved voice isolation, speaker attribution in meetings rooms etc., this is probably something that organizations explain to their users. Especially when there are #privacy concerns on biometric data. See #Microsoft365 roadmap ID #537269 https://www.microsoft.com/nl-nl/microsoft-365/roadmap?filters=&searchterms=537269
and the Learn article https://learn.microsoft.com/en-us/microsoftteams/rooms/voice-and-face-recognition?wt.mc_id=M365-MVP-5000976

Day 21 of #ITAdvent. From February 2026, #MicrosoftTeams will remove #EXIF #metadata from shared photo's, which can include location data. This is a good move as #Purview #DLP (as far as I know) cannot use EXIF data in it's policies.
Currently on the #Microsoft365 Roadmap #542795 under https://www.microsoft.com/en-us/microsoft-365/roadmap?&searchterms=542795

Day 20 of #ITAdvent. Unfortunatly too often I encounter environments that do not follow proper #security best practices with #Microsoft365 administrative accounts. Too often privileged roles are assigned to normal workforce identities, with the argument that the separation of duty is ensured with Privileged Identity Management (or Just-in-time admin).

Day 19 of #ITAdvent. One other consideration of using Automatic Certificate Management Environment or #ACME is that you also need to update your #TLSA #DNS record for #DANE. This record contains the #certificate thumbprint, binding that certificate to that specific URI enabling clients to check authenticity.

Day 18 of #ITAdvent. While I like #Microsoft365 #Copilot and use it in my #MVPAward tenant, it also enables me to use some capabilities in other tenants even if I do not have a Copilot license there. For instance: my tenant A has Copilot, tenant B does not. I am signed into Word with tenant A and B, now Word has some Copilot capabilities for documents opened from B.

Day 17 of #ITAdvent: One thing to put on your 2026 to-do list is getting acquainted with Automatic Certificate Management Environment or #ACME. This is due to coming changes in #certificate lifetime eventually be reduced to 47 days in 2029. I know orgs already struggle with 1yr... Let's also hope that software vendors requiring certificates are prepared for this as well.

Day 16 of #ITAdvent. In the coming months #Microsoft will roll-out Baseline Security Mode in #Microsoft365 (see #MC1193689 ). It's goal is to increase #security in a more admin friendly way. It can apply recommended settings or evaluate your current settings and whether they are at risk.