Changes and updates made to Office 365 for IT Pros (2022 edition)
Original release: July 1, 2021, latest update: June 1, 2022
This log describes the changes made to the book since its original release. The document is up to date as of the version released on June 1, 2022 (monthly update #84). We try and release an updated version monthly, usually on the first of the month unless something like a major conference disrupts our ability to produce an update.
We last updated the companion book on 1 May 2022.
We can only ask Amazon to update monthly and even so, sometimes they do not agree that we make enough changes to justify them sending a notification to customers that they can download the updated file.
|Introduction||August: Included data from Microsoft FY21 Q4 results.|
September: Rewrote section covering products and licenses. Microsoft will increase prices for Office 365 and Microsoft 365 plans in March 2022. SLA data available for Q2 2021.
October: No changes.
November: Updated financial details for Microsoft Cloud revenue and Office 365 usage numbers from Microsoft FY22 Q1 results. New SLA figure for Q3 2021.
December: Visio web app is now part of Office 365 enterprise plans.
January: No change.
February: Microsoft results for FY22 Q2 and SLA data for Q4 2021 added.
March: Multi-geo qualification has changed to facilitate smaller organizations with Microsoft enterprise agreements.
April: Removed references to Black Forest deployment in Germany.
May: Microsoft FY22 Q3 results, including new user numbers and other interesting information.
June: SLA figure for Q1 2022 inserted.
|Embracing the Cloud||August: Added scale and endpoint protection points to pro-cloud arguments.|
September: added link to legacy TLS Exchange Online endpoint; various fixes.
October: fixes for grammar and clarity; added mention of CMP.
November: fixes for grammar and clarity; added gentle reminder of the importance of protecting on-prem AD against ransomware.
December: fixes for grammar and clarity.
January: grammar and clarity fixes; introduced Informed Network Routing.
February: grammar and clarity fixes; removed old network map and added link to new global presentation.
March: grammar and clarity fixes.
April: O365 Deutschland is now gone. Various other fixes for clarity.
May: added note about O365 Secret cloud. Added note on network quality verification. Various other fixes for clarity.
June: fixed some broken links, other fixes for clarity.
|Managing Identity||August: Added a section on application permissions, managing consent, and the risks of illicit consent.|
September: Added coverage of new Authenticator app registration “nudge” and direct-enrollment; Miscellaneous fixes and updates.
October: Minor changes.
December: Added backup authentication service (BAS) coverage; discussion of new Authenticator app features; updates to remove preview markers from now-released features.
January: Conditional access updates including policy templates and workload identities. Update to LinkedIn integration details
February: Added an example to configure workload identity conditional access; Updated conditional access samples to reflect UI changes.
March: Updates to preview/release status; discussion of certificate-based authentication; added cross-tenant trust settings for B2B.
April: Updates to feature dates and previews; remove deprecated device state feature; additional coverage of B2B Direct Connect; add authentication methods analysis workbook.
May: Various updates to reflect UI changes; updates to features in preview; added more content on B2B controls and cross-tenant access settings.
June: Various updates and clarifications across several sections.
|Managing Your Tenant||August: Updated timeline for SCC redirect. Added a new section on Integrated apps settings page. Updated references to service communications API.|
September: minor text changes and cleanup.
October: added note on future deprecation of classic EAC. Added coverage of priority accounts for health monitoring
November: added section on user feedback management; other grammar and style fixes.
December: The Office 365 Service Communications API will be deprecated on 17 December 2021. Added example Log Analytics query to find old TLS clients. Various grammar and style fixes.
January: updated description of Microsoft Defender and Compliance Center admin UI; various grammar and style fixes.
February: removed outdated references to UWP admin app. Added info on affected user counts. Updated MCAS naming. Added section on remote connectivity tests.
March: grammar and style fixes; change to message center digest emails; addition of new NPS aggregator pivot to feedback section.
April: Note upcoming root CA change. Added note on Compliance Manager alert policies. Added note on ServiceNow SHD integration app. Added coverage of RCA Teams tests.
May: first installment of the long and no-doubt-painful process of keeping up with the Purview rebranding. Quick mention of NPS feedback labeling. Updated description of M365 health monitoring dashboard.
June: fixed broken links, plus cleanup work for clarity and grammar.
|Managing Users||August: Added a couple of new admin roles (Attack Simulator Admin, etc.). Introduced Windows 365 as a new service.|
September: Exchange Online will enable plus addressing as its default mode in January 2022. Updated AAD group licensing section to cover forthcoming end of AAD Premium requirement. Added section on Azure AD role-enabled groups.
October: minor edits for clarity and grammar.
November: Rewrote section about Exchange Online mailbox plans.
December: Minor style and grammar fixes.
January: added note about self-service trial signup for Visio + Project. Added mention of Loop component storage in OneDrive. Removed mention of Intune pivot.
February: updated discussion of account blocking to cover continuous access evaluation.
March: minor grammar and style fixes; updated date of plus-addressing setting removal.
April: Settings to control plus addressing and send from proxy addresses are now available in the EAC. Microsoft has introduced an opt-out organization setting to stop the use of plus addressing in a tenant.
May: added note about tagging accounts for priority status based on DL membership.
June: various grammar and style fixes.
|Managing Clients||August: Added mention of forthcoming “Teams 2.0” client; cleaned up some references to the various preview channels.|
September: updated death-to-IE11 and death-to-iOS13 comments to reflect current dates Added new section on Edge WebView2 Runtime. Minor text changes and cleanup.
October: Teams desktop clients now display a P beside the user avatar when running in preview mode. Updated mention of iOS15 support policy. Fixed various typos.
November: Lists client is coming for Android; “Coming soon” flag for Outlook for Windows. Added info on EWS deprecation timeline.
December: updated release dates for Office LTSC branch. Updated support info for new macOS versions.
January:added note on Apple Silicon-native OneDrive client; minor grammar and style updates; one new screenshot.
February: Internet Explorer 11 is still dead. We needed to emphasize that point.
March: added info on MAU for M365 apps and MAU-loaded Teams updates for macOS.
April: covered new global web app timeout setting.
May: Firefox meeting support coming in late May. IE11 is still dead but now you can tell users more precisely how to get away from it. Added note about upcoming change to Semi-Annual Enterprise clients. Cheeky note referencing leak of M1-native Teams client.
June: minor fixes for grammar and style.
|Managing Exchange Online||August: Minor changes and updates.|
September: Minor changes and updates (mostly correction of typos).
October: Added section about controlling mailbox settings for Viva Insights. Added section about updating the default calendar availability settings for mailboxes. Microsoft will disable basic authentication for email connectivity protocols like IMAP4 on October 1, 2022. A new 1.5 TB limit for auto-expanding archive mailboxes will apply from November 1, 2021.
November: Clarify the use of default archive tags to move mailbox items into archive mailboxes. Add point about the way MFA processes the Purges, Versions, and DiscoveryHolds subfolders of Recoverable items when mailboxes are archive-enabled. Added more information about the removal of basic authentication for email connectivity.
December: Clarified that non-default authentication policies must be assigned to new accounts after creation.
January: No changes.
February: Clarified access to archive mailboxes for mobile clients.
March: Added information about setting time zones for mailboxes and the calendar.
April: Rewrote section about delegate permissions for shared mailboxes.
May: Purview changes and grammar/typo suppression.
June: New format introduced for the Name and DistinguishedName properties for newly-created mailboxes. Several other changes due to a technical review.
|Managing Groups||August: Added section about deleting distribution lists. Updated the section about Yammer compliance records.|
September: Added example of how to transfer DL membership from one mailbox to another. Added note about updated Group creation setting in the Azure AD admin center. Rewrote introductory section to Azure AD policy for Groups and how to control group creation.
October: Fixed several annoying typos.
November: Changes in the description of creating a new Microsoft 365 group from the admin center.
January: Dynamic distribution group membership is now calculated on a timed rather than an on-demand basis.
February: Added example of finding all the dynamic distribution lists a mailbox belongs to.
March: Yammer communities (Microsoft 365 groups) now come within the scope of the Group expiration policy.
April: No changes.
May: Purview and grammar/typo updates.
|Managing Mail Flow||August: Rewrote sections about anti-phishing and anti-spoofing. Added section about external tagging of email.|
September: New method to integrate third-party attack simulator tools with Microsoft Defender for Office 365. The release of the first contact safety tip means that it’s no longer necessary to use a transport rule.
October: Rewrite several sections to improve chapter readability and provide better explanations of topics.
November: Update several sections covering Microsoft Defender for Office 365, including many updates for quarantine processing.
December: Restructuring of content for better flow. Many small updates.
January: Updates for DANE and DNSSEC.
February: Restructuring and clarification in several areas.
March: Added section about MTA-STS.
April: Update the Monitoring and Troubleshooting Mail Flow section with new widgets and reports. Update to Spoof Intelligence section with new Tenant Allow Block List (TABL) PowerShell commands and examples.
May: Some restructuring of content to improve the flow. Added coverage of the Mail flow map report and mail latency report.
June: Figure 9-3 updated.
|Managing SharePoint Online||August: From August 13, SharePoint only stores 30 days’ worth of PST versions in a document library. Added section about the tenant domain rename. process and made minor changes. Updated several sections with new information, including the guest expiration sharing policy.|
September: Added section about enabling support for live components within a tenant. Syntex section updated with the new Content center template designed to experiment with the creation, training and management of document understanding models at no cost.
October: A Home site can now be defined in the SharePoint admin center. Updated Microsoft Lists section to reflect the fact that working offline with list data is not available on any kind of list. Updated the Viva Connections section to reflect the new deployment process through the Teams admin center.
November: A hub site can be associated to a parent hub site to expand search results across an organization. OneDrive for Business admin center has been retired by Microsoft and all the OneDrive settings are managed in the SharePoint admin center. SharePoint Migration Tool allows choice in migrations of the information architecture to use (Remain in classic vs. Go to modern) before actually starting a data migration.
December: Updated text from live to loop components. Expanded coverage of SharePoint Online expiring access policy. New Manage reports section in the SharePoint Admin Center. Now it’s possible to customize default Search verticals in Microsoft Search.
January: By default, the download of audio and video files is blocked in sharing links generated by SharePoint and OneDrive. The OneDrive Sync client is now supported in ARM devices. List rules can be created in SharePoint document libraries.
February: Private Channels site can be now managed from the SharePoint Admin Center. Content services reports are present in the SharePoint Admin Center Reports section when a SharePoint Syntex is available in the tenant. The SharePoint Migration Tool supports (in preview) the migration of out of the box lists workflow to Power Automate Flows.
March: New Issues tab added to the OneDrive for Business Health reports. New OneDrive for Business Sync client preview for Apple Silicon. Microsoft Search in Bing now includes Exchange Online messages. The ability to search Teams and Outlook conversations is available in SharePoint Search and the Office.com portal. Custom filters can be added to default and new Search verticals in Microsoft Search.
April: SharePoint App catalog is now called App Site. App site section rewritten to be aligned with the modern App Site released by Microsoft. OneDrive shortcuts can be moved from the root Files folder to a shared or public Document library. Microsoft Lists formatting now supports the customization of lists command bars by hiding or customizing command actions with JSON code. Topics in Viva Topics can be generated from terms in the SharePoint Syntex taxonomy services. Topics can also be excluded from the Viva Topics mining process by providing a list of names in the configuration of the product.
May: Removed information about classic sites. Viva Topics cards are now supported in Teams chat and OWA. Lists can be accessed from the SharePoint menu bar.
June: The IsLoopEnabled setting replaces the IsFluidEnabled setting to control access to Loop components by Microsoft 365 apps. Site templates applied to a site can be viewed by Site owners through the View template history link in the Site information panel.
|Teams Architecture and Structure||August: Rewrote the section about hiding Teams from Exchange Online and added a new script to tidy up visible teams. Users can now choose how to open Office documents.|
September: Microsoft has released some details about the capabilities enabled by the Teams Advanced Communications add-on. Live captions and transcripts now support more languages than U.S. English.
October: The ability to customize background scenes for Together mode is now generally available (but needs a Teams advanced communications license). When a channel is renamed, Teams now correctly synchronizes the updated name to SharePoint Online. The general deployment of the transition of whiteboard storage to OneDrive for Business is delayed until January 2022 (but a new version of the Whiteboard client for Teams is available). Safari browser users can now use a 2×2 video gallery view during Teams meetings.
November: Rewrote section about managing channels. Added new usage data for Teams from Microsoft FY22 Q1 results.
December: Added section about Teams end to end encryption for 1:1 calls. Updated text about using loop components in Teams chat. Updated section about meeting roles to add co-organizers. Microsoft has extended the temporary limit of 20,000 attendees for live events to June 30, 2022.
January: Note the introduction of the Teams Essentials product. Rewrote section about Activity Feed because of introduction of new options to disable notifications generated for reactions and apps.
February: Added section about options to help maintain focus during meetings. Noted changes in the capabilities of Outlook’s Reply with IM feature (like support for Teams users in other domains).
March: Teams has withdrawn the facility to create and use custom praise badges. Local time information is now included in the user profile card, so the section about user presence and status was rewritten. Updated the section on tag management because admins can now let owners and users create tags by default. Added information about loop components.
April: Added details about shared channels. A new filter is available for chats to filter out all chats except those from meetings. Added link to article describing how to create a report about tag usage in a tenant.
May: Brightness and soft-focus filters are available for Teams meetings. Added section about how licensing individual service plans can affect user access to Teams features. Added information about real-time streaming support for Teams meetings.
June: Introduction of the Team Owners automatic tag for channel conversations. Sharing a shared channel with a team only shares it with tenant members of the target team (clarification). Note about suggested replies in 1:1 chats.
|Managing Teams||August: Minor changes.|
September: Rewrote section covering email support for channels.
October: Added detail to the Teams compliance section covering how webinar artifacts are exposed to eDiscovery. When creating a team from a template, you can now add a sensitivity label before the new team is created. Microsoft has updated the layout of menu options in the Teams admin center.
November: Added details in several sections.
December: DocuSign now supports the Teams Approvals app. Added section covering the Teams feedback policy. Added note about how to generate a report for Teams policy assignments with PowerShell.
January: Updated section on Resource Specific Consent. High-value audit events are available for Teams meetings. Teams desktop and browser clients can manage guest access to other tenants.
February: Added section about system messages posted for Teams membership changes.
March: Added section about Teams and the Microsoft 365 app certification program.
April: Added compliance information for shared channels.
May: Rewrote section about archiving teams (a PowerShell cmdlet to archive a team is available and you can get a list of archived teams using the Get-Team cmdlet). A Graph API is now available to return per-team usage stats.
June: Added section about the Admin Teams app. Users can now request administrators to allow them to install blocked apps.
|Managing Teams Calling||August: Added section covering Call Health during teams calls. Also covered Assign Caller ID for Call Queues.|
September: Added section about managing and automating phone numbers.
October: Updated with changes to Teams Admin center for voice and naming standards.
December: Added update on unassigned numbers, removed mention of advanced communication license for real-time telemetry and renamed to real-time analytics, added info about how to manage health impact on peripheral devices for MTRoW.
January: Added info about SIP Gateway under the planning and configuring subchapters, added info about Surface hubs now in Teams admin center with new screenshot. Added a section about UserCallingSettings under the managing calling capabilities subchapter. Updated references to the Teams admin center for devices, it is called Teams devices now and not just devices.
February: Updated with a new routine for assigning phone numbers to users using the Set-CsPhoneNumberAssignment cmdlet.
March: Added a note on how MTRoW gets updated, Tuned the cmdlet on how to get all users with a phone number in PowerShell.
April: Added note on the announcement for Operator Connect Mobile. Validated calling related PowerShell routines for the new Teams module. Update on Real-Time Analytics.
May: Added link to docs article about the basic setup of resource account for shared devices and a mention of the Operator Connect Accelerator program.
June: Added a note on troubleshooting no dial pad for users with links to a docs article on the subject
|Managing tenants with PowerShell||August: Added several clarifications. Added section about using OData filters with Graph API calls in PowerShell scripts. Added some extra context about using Graph API calls with PowerShell.|
September: Added section about advanced Azure AD queries. Rewrote script to remove service plans (individual features) from a set of Azure AD accounts (note that Microsoft will remove the ability of current cmdlets to interact with user licenses on June 30, 2022). Added a bunch of information about how to connect to the Microsoft Graph using the PowerShell SDK. Updated section about tenant controls for item insights (options to access these settings are now in the Microsoft 365 admin center).
October: Because of the change in license management cmdlets, we provide guidance on upgrading scripts to use the Microsoft Graph SDK for PowerShell. Added section about using lambda qualifiers to filter Graph queries.
November: Added section about archiving a team with PowerShell. Added link to script to generate a tenant licensing report with cmdlets from the Microsoft Graph SDK for PowerShell. Added information about using Invoke-MgGraphRequest.
December: Teams now supports the Cloud Shell, so we updated that section.
January: No changes.
February: Added a more comprehensive note about the use of filters with the new REST-based Exchange Online cmdlets. Added example (PS and Graph) for how to fetch the set of teams a user belongs to. Updated sections covering using the Microsoft Graph (and its SDK) in PowerShell scripts.
March: Restructured and expanded section about working with the Microsoft Graph. Added Azure Automation section.
April: Microsoft has extended the deprecation of the Azure AD and MSOL modules to the end of 2022 (the Azure AD license management cmdlets will cease working on 26 August 2022). Added some details about PowerShell cmdlet support for Teams shared channels. Added notes about pagination with the Microsoft Graph PowerShell SDK. Revised the section about license management with PowerShell in preparation for the changeover to the Microsoft Graph PowerShell SDK cmdlets. Added examples of basic Azure AD account and group management operations using the SDK cmdlets. (MAJOR UPDATE)
May: Microsoft won’t support versions of the Teams module prior to 4.0 after mid-June. Added extra information to sections about using the Graph SDK to manage user accounts and groups.
June: Small tweaks to command examples.
|Managing Tasks||August: No changes.|
September: noted forthcoming arrival of lightweight Plans. Updated coverage of PowerShell for Planner. Mentioned plan for new To Do backend service. Added instructions on how to remove user data.
October: updated availability info for lightweight Plans; added section on tenant-to-tenant Planner migration.
November: added info on rich task note content and inter-group task moves.
December: Planner support for compliance records is rolling out.
January: Minor grammar and style fixes.
February: Updated what guest users can do inside a plan. Added info on how to block users from deleting other people’s tasks.
March: no new features from Microsoft means no new updates here.
April: still no updates from Microsoft, but we threw in a few clarifications. May: minor style and grammar fixes.
June: updated section on roster containers and lightweight Plans.
|Managing Devices||August: Added information about minimum supported operating systems. Reminder to only use modern authentication with email profiles.|
September: Added a section on managed Google Play store and Apple Business Manager for apps.
October: Added coverage of app configuration policies, device categories, and app categories
November: Added curated app protection target categories; updates for minimum device OS versions; Android AOSP enrollment support; added discussion of filters preview.
December: Example of how to populate device extension attributes with the Graph API.
January: Minor updates to device OS support, device filters use cases.
February: Updates to device filters to reflect general availability; update to device cleanup rules.
March: Added a section covering how to require terms and conditions acceptance upon device enrollment.
April: Added a section on custom push notifications.
May: Updates to Apple Business Manager; app protection policy settings.
|Managing Video||August: Microsoft has released a preview of the new Stream browser interface.|
September: Microsoft is introducing a new auto-expiration setting for Teams meeting recordings stored in ODSP. Stream will start removing automatic transcripts from some older videos in September 2022.
October: It is now possible to search for spoken words captured in the transcript of a Teams meeting recording. Teams now supports recordings of PSTN and VOIP calls.
November: Auto-expiration policy for Teams meeting recordings is delayed to January 2022. However, the cmdlets to set the policy are now available.
December: You can update the auto-expiration policy for Teams meeting recordings through the Teams admin center.
January: No changes.
February: Minor changes as we wait for Microsoft to release the migration from Stream classic to Stream 2.0.
March: The default retention period for Teams meeting recordings in SharePoint Online and OneDrive for Business is now 120 days.
April: No updates (waiting for the launch of Stream 2.0).
May: Purview and grammar/typo suppression. Also added details of the new web player for Stream 2.0 audio and video files, like those generated for Teams meeting recordings.
June: No changes.
|Managing Compliance||August: Minor changes.|
September: The SharePoint Information barriers compliance assistant is in public preview. Added reference to an article explaining how to track updates made to retention policies. Added Microsoft flowchart (Figure 18-2) as a helpful aid to understanding how information governance retention and deletion works. Multiple other changes were made throughout the chapter to clarify and improve content.
October: Data subject requests are now available in the User data search feature under eDiscovery in the Microsoft 365 compliance center. Microsoft will introduce the preview of Adaptive scopes for retention policies during October 2021.
November: Refreshed description of SharePoint Online Preservation Hold Library to reflect changes to retention processing coming in mid-November.
December: Added details about adaptive scopes for retention policies. Revised coverage of information barriers. Added section about using sensitivity label as a criterion for auto-application of retention labels.
January: New trainable classifiers are available for use out-of-the-box. New lookup policy feature available in preview to help organizations figure out what retention policies apply to users, sites, and groups.
February: Expanded discussion about auto-label retention policies based on sensitivity labels. Added section about records management settings. Added detail about a possible migration process to move from Exchange Online mailbox retention policies to Microsoft 365 retention policies. Added expanded section covering trainable classifiers (replaces previous yellow box). Preview GUI for Information Barriers is available in the compliance center.
March: Minor formatting and clarity changes.
April: Added note that auto-label retention policies which use trainable classifiers can’t process material that’s more than six months old.
May: Many updates caused by the Purview renaming.
|Managing eDiscovery||August: Note that Advanced eDiscovery actions can sometimes be slow. Very slow.|
September: Minor updates.
October: Fixed the misnumbering of figures. Added new Figure 19-1.
November: Search by item list will be deprecated at the end of November 2021.
December: Gave examples of how to interpret the SuccessResults and SearchStatistics properties for a content search using PowerShell.
January: No changes.
February: Added description of KQL editor in the content search compose wizard.
March: The Privacy management Subject Rights Requests solution is available.
April: Minor updates.
May: Updated for the Purview rebranding. Many other changes were made throughout the chapter.
|Managing Auditing & Reporting||August: The Discrimination classifier is in preview for communications compliance policies. Added suggestion for how people can find audit events for actions they wish to investigate.|
September: No changes
October: Anonymized usage data is now the default for any report generated using the Microsoft Graph usage reports API.
November: Updated details of communications compliance policies (like a reviewer can have items translated to their default language).
December: Updated details about searching for audit events. Updated Figures 20-5 and 20-6 to reflect current GUI. Updated link to OCAS (now not available in the compliance center).
January: Added details of Teams high-value audit events. Added section covering how to report audit data for SharePoint Online file deletions.
February: Minor updates.
March: Minor updates.
April: Minor updates.
May: Updates for Purview.
|Managing DLP||August: No changes.|
September: Minor updates.
October: Microsoft has released a new playbook to help tenants move from ETRs to Microsoft 365 DLP policies. The number of standard sensitive information type definitions has now reached 220.
November: Microsoft plans to remove Exchange transport rule based DLP policies from the Exchange Online admin center in the April-June 2022 period.
December: Included reference to example DLP policy to prevent users sharing Teams meeting recordings outside the organization.
January: New sensitive information types and classification templates available for use. February: No changes.
March: Added note about encrypted message types used in DLP rules which process email.
April: No changes.
May: 51 new sensitive information types are available for DLP and other Purview solutions.
|Managing Apps||August: Several small changes made to text throughout the chapter.|
September: Added section about Teams Dataverse.
October: No changes.
November: Changes in many sections with refreshed graphics to bring content up to date.
December: Details of new price plans for Power Apps and added details about Power Virtual Agents.
February: Added details about the Power Apps developer plans and using a Microsoft 365 development tenant. Updated information about environment roles.
March: Added script to report connectors in use by flows. This can be used to identify if any connectors should be blocked by a DLP policy. Added section covering Teams development with Power Automate.
April: New pricing models for Power Apps and Power Automate.
May: Updated Figure 22-2.
|Managing Information Protection||August: Note that a label applied by a sensitivity label with visual markings will overwrite any existing header or footer present in a document.|
September: Clarified the use of publishing licenses and use licenses when protecting items. The limitation for auto-label policies for sensitivity labels to 10 locations has been removed. A tenant can now use up to 100 auto-label policies.
October: General availability of support in Microsoft 365 apps for enterprise (Windows and Mac) for co-authoring of protected files. Support for user-defined label permissions for the Office Online apps and SharePoint Online is due in March 2022.
November: All Microsoft Information Protection actions are now logged and accessible in the audit log and Activity Explorer.
December: Minor fixes.
January: Note that the SPO browser interface tells users if a sensitivity label is applied manually or automatically. Office apps now apply sensitivity labels to both new documents (as they did before) and modified documents (if they don’t already have a label). Refreshed text about usage rights in sensitivity labels. Removed obsolete note about Autosaving protected Office documents. Unified labeling client enters maintenance mode on January 1, 2022.
February: Several updates and clarifications.
March: Updated Figure 23-18 to capture new heading for CA settings for container management by sensitivity labels. Updated section on reading rights definitions for sensitivity labels with PowerShell. Advanced settings of sensitivity labels can define defaults sharing link settings for documents in addition to sites (now GA).
April: Minor updates, like the preview for co-authoring of protected Office documents on mobile devices.
May: The AIPService PowerShell module has been updated to support certificate-based authentication. Updated text about sensitivity label publishing policies to clarify that default labels can be assigned for files and email, containers, and Power BI content. Updates for Purview. A new advanced setting is available for sensitivity labels to control SharePoint site sharing permissions. The sensitivity label advanced setting for external sharing capability is now in LabelActions.