Change Log

Changes and updates made to Office 365 for IT Pros (2021 edition)

Original release: July 1, 2020. Current book dated: March 1, 2021

This log describes the changes made to the book since its original release. The document is up to date as of the version released on April 1, 2021. We try and release an updated version monthly, usually on the first of the month unless something like a major conference disrupts our ability to produce an update.

Changes per Chapter

This table serves as a rough approximation of where the book’s content has changed. The number of individual changes or additions of new text within a chapter might be far higher. The chapter numbers are bolded.

12345678910
8889747977
11121314151617181920
9969789984
2122232425     
78681     
Table 1: Distribution of chapter updates

Chapter Update Counts:

  • August 2020: 18 chapters.
  • September 2020: 17 chapters.
  • October 2020: 21 chapters.
  • November 2020: 22 chapters.
  • December 2020: 23 chapters.
  • January 2021: 21 chapters.
  • February 2021: 22 chapters.
  • March 2021: 23 chapters.
  • April 2021: 24 chapters.

We have released nine updates for the 2021 edition since its publication: 1 August, 1 September, 1 October, 1 November, 1 December, 1 January, 1 February, 1 March, 1 April. You can find update information on the inside cover of the book. We last updated the companion book on 1 February 2020.

We can only ask Amazon to update monthly and even so, sometimes they do not agree that we make enough changes to justify them sending a notification to customers that they can download the updated file.

Individual Chapter Changes for Office 365 for IT Pros, 2021 ed.

DateChapterChange
Apr1Microsoft has added Teams as a workload with multi-geo capabilities.
Apr2Added note about shared responsibility for cloud services; mentioned HAFNIUM and on-prem vulnerabilities; added intro section for T2T migrations.
Apr3Temporary access pass content; selective password hash synchronization; conditional access user actions update; Azure AD Connect V2 endpoint update
Apr4Added note about using typed variables with PowerShell cmdlets. Introduced billing notifications and conglomerate branding.
Apr5Added section about reporting managers and their direct reports.
Apr6Add note about blocking BCC delivery to distribution lists.
Apr7Added new external email tagging feature discussion
Apr8Several updates to reflect the current status of features. Added section about Viva Topics.
Apr9Yammer communities support Azure B2B collaboration (guests).
Apr10The preview version of the Azure AD PowerShell module allows the resending of invitations to change the email address used by a guest account to sign in. Updates section about blocking guest access for individual groups.
Apr11Support for Teams view-only meetings. Meeting reactions are available. Dynamic view for meetings is available. Removed section on the transition from Kaizala to Teams because Microsoft hasn’t said anything about it since June 2019. We therefore assume that Microsoft is letting Kaizala die slowly. Safari 14 supports video feed in Teams meetings and calls. Automatic transcription is now available for the Teams desktop client (US English only).
Apr12Several adjustments to text because transcripts are available for Teams meetings.
Apr13Version 2 of the Teams PowerShell module is available, removing the need to run the New-CsOnlineSession cmdlet to connect to the management endpoint. The Get-Team cmdlet gets a useful performance boost in the V2 module.
Apr14Added information about Operator Connect. Removed section about Teams Advanced Communication license as Microsoft is revising its plans. Added section about Teams panels.
Apr15Planner roster containers are on the way.
Apr16Automatic transcripts are now available for Teams meetings.
Apr17Minor text changes, including link to Company Portal setup instructions for macOS.
Apr18Added Authenticator code matching; noted pending retirement of Delve Mobile app; mentioned new signin method for OWA.
Apr19Added clarification about retention policy processing
Apr20Emphasize that the time required to run content searches is influenced by the number of mailboxes included in the search. From April 16, 2021, users will need Office 365 E5 or Microsoft 365 compliance licenses to create new Advanced eDiscovery cases.
Apr21Microsoft’s threat, profanity, and harassment classifiers are now available in seven languages other than English.
Apr22Microsoft is introducing a new Teams DLP recommendation which leads to the creation of a Teams DLP policy to protect common financial and PII data.
Apr23Section on Power Automate Desktop inserted.
Apr24The Microsoft 365 apps for enterprise (desktop) support co-authoring for protected documents. Deprecation of the classic AIP portal and labels (31 March). GA for external sharing capability controls in sensitivity labels.
Mar1SLA for Q4 CY2020 is available (99.97%).
Mar2Minor text cleanup.
Mar3Microsoft will require tenants to run a recent version of Azure AD Connect.
Mar4Application access policies now cover impersonation scenarios for EWS programs. Rewrote some paragraphs in the Graph Explorer section. Cleaned up discussion of Power Automate admin center. Introduced Exchange Online health monitoring feature.
Mar5Microsoft has paused their program to remove support for basic authentication for several Exchange Online connectivity protocols.
Mar7Updates for UI changes and to be more consistent and accurate in text descriptions. Add discussion about allow/block list.
Mar8New retain file sharing option when files move to a new site or OneDrive. Updates for the Microsoft 365 PnP project.
Mar9Included new script to print off group membership.
Mar10Minor updates and clarifications.
Mar11Added details about how features are enabled in the Teams client. New Allow cloud recording for calls option available for meeting policies to control the ability to record 1:1 calls.
Mar12Changes to Teams meeting policy to support 1:1 call control. Note that the Bulletins and Milestones sample apps are available to demonstrate integration between Power Platform and Teams. Template policies are now available to control the set of templates available to users when creating new teams.
Mar13Note that the New-Team and Set-Team cmdlets do not support the assignment of sensitivity labels. Included new script (downloadable) for reporting membership of a Microsoft 365 group.
Mar14Satin is now the codec for Teams 1:1 calls.
Mar15Planner now supports 25 labels instead of six.
Mar16Adjustment to July 7, 2021 for the date for the switchover from Stream to OneDrive storage for Teams meeting recordings.
Mar17Minor text cleanup; added info on new Intune reports.
Mar18Introduced Office LTSC. Added detail on M365 Apps Health service center.
Mar19Preservation lock for retention policies can now be enabled using the GUI (Compliance Center).
Mar20Content search previews can now decrypt and display protected messages.
Mar21Added note about how to discover new audit events.
Mar22Update some details in the description of how to create a new sensitive information type for use with DLP policies.
Mar23Microsoft is renaming the terms used to describe different types of flows.
Mar24Include note about how to audit who updates sensitivity label policies. Be more specific about the support for sensitivity labels with user-defined permissions.
Feb1Added section about Office 365’s links with Azure. Added data from Microsoft FY21 Q2 results.
Feb2Minor cleanup and typo fixes.
Feb3Azure AD now has 425 million monthly active users.
Feb4Added sections about Microsoft 365 priority accounts and using the Service Communications API to retrieve incident data. Rewrote an example of how to report assignment of a specific license to users. Introduced informed network routing. Minor cleanup and typo fixes.
Feb5Scripts using Send-MailMessage to send email via Exchange Online need to use TLS 1.2. Revised section about folder level permissions to include new ability to rebuild delegate access for a folder.
Feb6Added another example of a complex custom filter for a dynamic distribution list and updated the text for the topic.
Feb7Minor changes made as we continue to restructure this content to improve clarity and flow.
Feb8Upload limit for OneDrive sync client is now 250 GB. Added section about Microsoft Search reports. “At a glance” info now included in sharing links for Word documents.
Feb10Azure AD access review for guests in all teams and groups is available in preview.
Feb11Teams doesn’t display files attached to Outlook meeting requests. The channel calendar app is now available. Teams meeting add-in for Outlook for Windows now has a Meet Now button. The Meeting recap UI change is available for private meetings in the calendar app. Add some new data about the size of the Teams user base.
Feb12Added section about Teams app templates.
Feb13A new format for URLs used for the incoming webhook connector is being rolled out. Existing URLs need to be updated by April 11, 2021.
Feb14Added text about network validation. Included link to MTR security article. Restructured network planning section.
Feb16Confirmed dates for movement of recordings for new Teams meetings to OneDrive and SharePoint.
Feb15Planner can copy tasks to plans in other groups. Background images are now available for plans. Microsoft has reorganized the plan settings screen to make it more logical.
Feb17End of life for IE 11 support in Intune announced.
Feb18Updated guidance around macOS Office app version support.
Feb19Trainable classifiers are now GA. The Activity Explorer now incorporates sensitivity labels applied by all Office (online, desktop, and mobile) apps. Clarify when preservation hold library is created.
Feb21Moved some examples of accessing audit records from inline text to scripts downloadable from our GitHub repository. Validated and corrected some minor issues found in the scripts due to changes in audit record format. Added a better example of paging records from the unified audit log.
Feb22You can now use distribution lists or security groups in DLP policies for Teams to define the set of accounts to be monitored. Rewrote section about creating a custom sensitive information type due to new UI and setup.
Feb23Added section covering the creation of flows using Visio diagrams.
Feb24Microsoft methods to support decryption of protected content for a cloud exit only support Microsoft encryption technology (obvious but needed to be said). Audit records now generated for application of sensitivity labels by Microsoft 365 apps for enterprise.
Jan1SharePoint Online now has 200 million monthly active users.
Jan2Added short section on DR and BC planning for the cloud.
Jan3Minor updates to clarify licensing requirements for several features.
Jan4Skype for Business connector is retiring on 15 Feb 2021. Skype admin center deprecated. Added initial coverage of data-at-rest encryption and Customer Key. Updated section on Productivity Score.
Jan5Added section about updating user photos for mailboxes (and by extension, to other Office 365 apps). A new option allows Outlook desktop to create Teams online meetings by default.
Jan7Many small updates to sections. The most important change is that Exchange Online supports only TLS 1.2 connections from January 11, 2021.
Jan8External sharing capability for a site can be set via a sensitivity label. Microsoft search can recommend bookmarks for publication. New section about sharing for Microsoft Lists.
Jan9Yammer support for guest user access is in preview.
Jan10Dynamic Azure AD groups are limited to 5,000 per tenant.
Jan11Rewrote section on Meet Now after Microsoft released this capability for mobile clients. Added information about how to edit the deeplink used for Live events. Description added of pre-release channels for Teams. Meeting polls are available for personal Teams meetings. Microsoft has released a public gallery for Teams background images. Teams channel calendar app will roll out in January 2021.
Jan12Teams can now be archived through the Teams admin center. Rewrote opening section about creating Teams. Microsoft is tweaking the set of MAPI properties captured in Teams compliance records.
Jan13Made the point that Set-UserPhoto can update a picture for a team (Set-TeamPicture can too, but its use is limited to team owners). Updated description about the Teams PowerShell module. The Skype for Business Online connector is retired effective 15 February 2021. Rewrote section about using the Graph to process Groups and Teams data.
Jan14Updates on collaboration bar and collaborative calling.
Jan15Planner will generate compliance records for task creation and edits from January 2021.
Jan16Quota assigned to Stream classic is not transferred to SharePoint Online when the transition to the new Stream happens.
Jan17Minor typo fixes
Jan18Added mention of Teams Public Preview program and channels; minor corrections.
Jan19Minor corrections to Records management section.
Jan20Added note about including variations of personal identifiers as conditions for content searches. Advanced eDiscovery exports can decrypt protected documents stored in SharePoint and OneDrive.
Jan22New country-specific sensitive data types introduced for DLP policies.
Jan24The container management settings for sensitivity labels can now control external sharing capabilities for SharePoint Online sites. Microsoft has fixed the bug which caused documents with sensitivity labels to become inaccessible when moved or copied between sites.
Dec1SLA data for Q3 2020 (99.97%).
Dec2Fixed typos; clarified process of moving into GCC/GCC High tenants.
Dec3Microsoft strongly recommends use of app-based verification for MFA. Security defaults adds four new roles for mandatory MFA.
Dec4Updated V2 EXO cmdlet coverage; added forewarning of new stripped-down small-tenant admin center; added coverage of the new Productivity Score data set.
Dec5Added detail about what to do when the Recoverable Items folders approaches its quota limit.
Dec6Rewrote section about dynamic distribution lists.
Dec7Many changes and updates, including Advanced Threat Protection is now Microsoft Defender for Office 365, new blocks on automatic mail forwarding, and new blocks on high-confidence phish messages.
Dec8General refresh. OneDrive For Business Admin features to be integrated in the SharePoint Admin Center. Added available Microsoft Lists controls to disable personal lists creation and specific list templates.
Dec9Teams button is now available in the Outlook Groups toolbar and is exposed when a team-enabled group is accessed. Replaced Figure 9-10.
Dec10Rewrote section about dynamic Microsoft 365 Groups.
Dec11Together mode in Teams meetings now supports a set of backgrounds provided by Microsoft. Rewrote section about roles in meetings. Teams personal now supports desktop (Windows) and browser clients. Switching to public preview is now available for desktop and browser clients.
Dec12Rewrote section covering disabling chat.
Dec13Fixed bug in script for synchronizing security group membership with a Microsoft 365 Group.
Dec14Minor updates.
Dec15Minor updates including noting that a task can have a maximum of 20 checklist items.
Dec17Added info on Intune reports; clarified macOS/iOS support timelines.
Dec18Added coverage of M365 App Admin Center; updated recommended best practice for Office app channel balance.
Dec19Expanded section about retention labels marked as records to include regulatory records.
Dec20Export of attachments for protected email found by searches now decrypt attachments (MC225739). Edge now needs to be configured to allow ClickOnce to download and run the eDiscovery Export tool.
Dec21The ApplyRecord audit action is available for mailboxes to track marking items as regulatory records (with retention labels).
Dec22Clarify how the order of DLP policies and rules within policies affect the evaluation of potential violations. Sensitivity labels can now be specified as a condition for checking in DLP policies. Endpoint DLP policies are now generally available (require Microsoft 365 E5 licenses – not Office 365).
Dec23Microsoft Power Platform CoE Starter Kit is available.
Dec24Updated notes for EnablePDFEncryption setting. Rewrote introduction to section about sensitivity labels. Office desktop apps will generate audit records when sensitivity labels are applied to documents.
Nov1Included SLA result for Q2 2020. Included Microsoft FY21 Q1 results.
Nov2Added section on GCC and country clouds; added mention of adoption.microsoft.com site.
Nov3Azure AD now has nearly 400 million daily active users. Adjusted text for CA policy for Outlook mobile.
Nov4Rewrote section in discussion about the need for Office 365 backup. More changes to reflect new security and compliance centers. Cross-reference to discussion of new Advanced Audit license in Chapter 21.
Nov5Emphasize that mailboxes forwarding email must remain licensed to work.
Nov8SharePoint spaces is now GA. Extra search vertical added (Power BI) for Microsoft Search. SharePoint Syntex is available.
Nov9Clarify that guests are automatically added to group subscriber lists. Replaced Figure 9-8.
Nov10Updated sections about Dynamic Groups and Group expiration policy.
Nov11Users can now set their Teams status to be offline. The Teams desktop client now has some basic support for offline working. A native ARM client is now available for ARM on Windows devices. Teams meeting recordings can now be stored in OneDrive for Business. A duration setting is now available for user presence.
Nov12Teams admin center (Manage apps) now supports the ability to assign permissions, including resource specific consent, for third-party and LOB apps. Several changes following the change in storage location for Teams compliance records.
Nov13Example script updated after Microsoft changed the storage location for Teams compliance records.
Nov14Updated information about Teams Displays and Collaboration bars. Add information about location-based routing for direct routing.
Nov15The Tasks in Teams app has reached general availability. Updated text to make it clear which plans are shown in the app. Replaced Figure 15-17.
Nov16Tenants can now store Teams meeting recordings in OneDrive for Business.
Nov17Updates to iOS/macOS/Android channel names. Updated description of OneDrive sync client updates. Fixed a few typos and broken links.
Nov18Added guidance on OS support timelines for Windows & macOS. Added coverage of help and troubleshooting toolset in Intune.
Nov19New UI introduced (simplified and better) for creating retention labels. Screen shots updated and text refreshed.
Nov20Added information about unindexed items found by content searches.
Nov21Three new crucial audit events are available to help investigators track what happens inside compromised accounts.
Nov22Microsoft has made a playbook available to help tenants move from Exchange DLP policies to Microsoft 365 DLP policies. Therefore, we moved the information about Exchange DLP policies to Chapter 8 of the companion volume.
Nov23CDS storage of 1 GB is provided to Office 365 tenants. Additional storage can be purchased.
Nov24Double key encryption is now generally available. End-user training material for sensitivity label is available from Microsoft. Scoping for sensitivity labels is now generally available, which necessitated a major rewrite of that section.
Oct2Added notes on Teams SBA and Project Nucleus. Updated dates for TLS 1.2 decommissioning. Various text updates.
Oct3Minor updates, including public preview of Continual Access Evaluation.
Oct4Version 2.0.3 of the Exchange Online Management module supports simultaneous connections to the Exchange Online and the Security and Compliance endpoints. More on the security/compliance center split. Mention of Linux support for EXO V2. Introduced modern EAC. Added coverage of new network connectivity health checks; miscellaneous text updates.
Oct5Added section about plus addressing support for Exchange Online.
Oct6Section on dynamic distribution lists rewritten.
Oct7Rewrites of many sections as this chapter is restructured and refreshed.
Oct8Added section about SharePoint weekly mail digest and other tweaks across the chapter.
Oct9Outlook desktop is changing the way it displays unread counts for Groups.
Oct10Rationalization and rewriting of some sections about adding guests to groups.
Oct11Safari 13 supports incoming video for Teams meetings. Customized badges are supported for the Praise app. Link to new feature by platform page included. Section added about Teams breakout rooms.
Oct12Added extra content about how sensitivity labels can restrict guests being added to team membership.
Oct13Note about the better performance of the Where method for arrays.
Oct14Sections added about Teams Survivable Branch Appliances and 3pip Phones.
Oct15Planner has some limited offline capability.
Oct16Stream 2.0 moves video storage to SharePoint Online and OneDrive for Business. Recordings of Teams meetings can move to the new platform in October. Added notes about replacing a video in Stream.
Oct17Silverlight Intune is EOL! Updated MEM/Intune naming usage to reflect MS guidance. Renamed M365 MDM to Basic Mobility and Security. Noted upcoming EOL for Android Device Admin.
Oct18A few minor updates to cover changes announced at Ignite.
Oct19Information barrier policies now GA for SharePoint Online and OneDrive for Business sites.
Oct21New trainable classifiers and roles available for communications compliance policies. Update for the sample PowerShell script to report workload data via the Graph is available. New layout for standard workload usage reports in Microsoft 365 admin center (Figure 21-18). Added section explaining how to search the audit log for actions performed against objects (documents, users, and groups).
Oct22An action in a DLP policy can now block access to SPO and ODFB content for those with Anyone links.
Oct24The advent of scoping for sensitivity labels means that the sections describing how to plan for and create and edit sensitivity labels were rewritten.
Sept1Added link to Microsoft’s per-country list of where Office 365 customer data is stored.
Sept3Minor changes to wording in several places.
Sept4Refreshed Graph Explorer control to reflect the fact that Microsoft is pushing out some tenant admin controls that can only be set through the Graph. Internet Explorer 11 will not be supported after August 17, 2021. Added mention of new support PIN verification process. Added Visio and Project to list of self-service license purchase SKUs. Incident notification in Outlook
Sept5OWA now includes a warning when mailbox quota exceeds 90% of allocation.
Sept7Updated PowerShell examples for quarantine access. General restructuring of some sections covering Message Hygiene.
Sept8Discover view is being retired in ODFB. Microsoft Lists a new App in Microsoft 365 to access and create new enhanced SharePoint lists is rolled out.
Sept9Preview now available to assign Azure AD roles to (new) groups.
Sept11New guidance for deploying Teams on Windows Virtual desktop and VDI environments. Whiteboard app for Teams now supports sticky notes and text boxes. Added more detail about Teams meeting settings. Teams now remembers the background effect chosen by users and persists it for every video meeting until a new effect is chosen. Teams won’t support IE11 after November 30, 2020. The Graph presence subscription API is now used to detect calendar changes and calculate user presence.
Sept12Microsoft 365 communication compliance policies which process Teams messages can now block messages which violate policy.
Sept14Added info about connecting analog devices to direct routing; how to bypass enterprise voice and dial-in conferencing during migrations; and info about the CallRecord API.
Sept15Clarification about Planner service location.
Sept16Clarification about the video view captured in Teams meeting recordings.
Sept17Added mention of end of support for iOS 11.
Sept18Updated deathwatch dates for Internet Explorer 11. Added info on per-user storage restriction in OneDrive.
Sept19Added definition of trainable classifier and other minor changes.
Sept21Emphasize that Planner does not generate audit records. Sway no longer generates audit events. Rewrite section about alert policies.
Sept24Power BI now supports sensitivity label inheritance for Excel worksheets generated through the PivotTable connection and Analyze with Excel features.
August1Updates for Microsoft FY20 Q4 results.
August2Several refinements for information about planning for cloud migrations.
August3Minor changes.
August4Update to Power Apps admin center URL; added self-service purchase approval flow warning; intro to Exchange PowerShell v2 cert-based authentication; updated coverage of the improved Secure Score experience; various text updates and fixes.
August5Preview of Exchange Online Management PowerShell module supports unattended script execution. Note about importing on-premises archives larger than 100 GB to Exchange Online. Microsoft has reduced the number of events created from email to just travel and parcel delivery. Changes to discussion about inactive mailboxes and how to preserve data for ex-employees.
August7Beginning of an end-to-end review by new author taking over chapter to refine, clarify, and improve flow of text.
August8Added section about Content Type Gallery. Fixed some typos.
August9Change in OWA create new Microsoft 365 dialog meant changes to several screen shots and accompanying text.
August10Moved script for updating group display names in line with naming policy to GitHub after updating it to deal with both prefixes and suffixes.
August11Clarifications about different forms of Teams meetings. Note added about Teams memory usage on Windows.
August12Added discussion about the ramifications of disabling the Chat app in Teams. Updated section about bulk policy assignment for Teams. Storage of Teams compliance records is not charged against user mailbox quotas. Added note about resource-specific consent for Teams apps. Removed text about discovery of private teams (Microsoft is reconsidering how to engineer the functionality).
August13Rewrote script for archiving a group to make it handle multiple groups. The Teams preview and production PowerShell modules are now both in the PowerShell gallery.
August14Added details about Teams advanced communications licenses, and updates for auto attendants and call queues.
August15Planner doesn’t have a recycle bin (emphasized). Noted that the Planner browser client is updated regularly, and users are prompted to refresh to load the changed code. New Tasks in Teams app released.
August16Changes for A1 users about what happens when they record a Teams meeting.
August17Short introduction to Desktop Analytics; coverage of new Intune pivot in Microsoft 365 admin center.
August21Communication compliance policies now cover Teams messages sent by users with on-premises mailboxes.
August22Included example of using a SharePoint Online managed property as a condition in a DLP policy.
August23Rewrote section about Power Platform management.
August24Chromium-based Edge browser can open protected PDFs. Sensitivity labels can control sharing capability for SharePoint Online sites.