NexlinksField Notes from a CTO & CISO
Menu
Source-led perspectives on Microsoft technology. Explore the October briefing ↗
← Microsoft 365

HISTORICAL NEWSLETTER / Microsoft 365

April 2025 Technology Newsletter

A historical monthly edition covering Microsoft cloud, security, collaboration, and hybrid infrastructure updates.

Published
By Phil Kinsley
Republished historical edition. Rollout dates, deadlines, availability, and pricing describe the original period. Check current vendor documentation before acting.
Microsoft source publication: not confirmed
Source reviewed October 12, 2026. Practitioner analysis is editorial interpretation.

What’s New in the Hybrid Data Center?

Nutanix

Multicloud ExpansionNutanix Cloud Clusters (NC2) now support Google Cloud, reinforcing Nutanix’s hybrid cloud strategy by enhancing workload portability and simplifying licensing.

Key Releases

AOS 6.10.1.5 / AHV 20230302.103014: Critical CVE patch resolves rare VM deletion during DR failback.

AOS 7.0.1 / AHV 10.0.1: Adds support for AMD Turin-based nodes (e.g., Nutanix G10 platforms).

End of Maintenance ReminderThe following NX G7 platforms will reach EOM in September: 3170, 3155G, 1065, 8155, 8170, 8035.

Industry InsightNutanix’s 2025 predictions remain relevant, particularly Predictions #2, #3, and #4, which continue influencing decision makers.

Pure Storage

New Preview: Pure Storage Cloud for AVSNow in public preview, this fully managed Storage-as-a-Service solution offers an alternative to Cloud Block Store for Azure VMware Solution (AVS).

Product Launch: FlashArray RC20Designed for SMBs and remote offices, RC20 uses factory-renewed controllers to reduce cost and promote sustainability.

Cohesity

New Support: Nutanix Database Service (NDB)Cohesity is the first vendor to protect NDB, expanding backup capabilities for mission-critical databases.

Release: Patch 7.1.2_u3Includes numerous product and security enhancements, highly recommended update.

Entra ID IntegrationDataProtect as a Service now supports fast backup and instant recovery for Microsoft Entra ID data, with ransomware resilience in a unified console.

Rubrik

End-of-Sale: R6000 SeriesSales will end September 2025; hardware support continues through 2030. Customers will receive direct notifications.

Launch: R7000 SeriesReplaces R6000 with higher capacity and performance for on-premises CDM environments.

Rubrik Cloud Vault (RCV) on AWSOrganizations can now back up data to air-gapped AWS tenants for enhanced offsite protection.

VMware

ESXi ReturnsBroadcom has reinstated free downloads of VMware ESXi 8.0 U3e (login required).

Note: This version includes an embedded license and limitations, such as lacking vCenter management, DRS, and other advanced features.

What’s New in Microsoft Cloud?

Azure

Azure: Hyperscale & Copilot Disk Insights

SQL Hyperscale Conversion: Now supports enhanced reporting and explicit cutover control.

Copilot for Disk Performance: General Availability release enables Copilot to analyze VM/disk metrics and resolve issues.

Microsoft 365 Copilot

Microsoft 365 Copilot: New Features & Rollouts (April–May)

Inbox Prioritization (April): New feature for Outlook on Windows/web.

SafeLinks Integration: Native URL protection + removal of redacted hyperlinks (May).

Context IQ in BizChat: Third-party Graph Connectors now supported.

On-Brand PowerPoint Templates: Starter templates + organizational asset library support.

PDF Support in PowerPoint: Use PDFs as Copilot references.

Agent Discovery: Browse all Copilot agents across Teams, Outlook, and Microsoft 365, even without Copilot licenses.

Image Generation: Available in mobile Teams and Outlook apps.

Follow-Up Suggestions: Copilot will suggest follow-up prompts during meetings.

AI Admin Role: Delegated management of Copilot agents.

Transcript Privacy Controls: Option to block transcript access for agents created in Copilot Studio.

Multiple Account Access: Copilot supports personal and work accounts simultaneously.

Document Referencing in Forms: Users can reference existing content when building forms (with label restrictions).

Mobile Browser Redirect: Mobile access to m365.cloud.microsoft now redirects to app downloads.

Defender for Cloud Apps

Defender for Cloud Apps: Firewall & Alert Updates

IP Updates Required (by April 21st): Allow outbound traffic to new ranges listed here.

Alert Source Field Update (May): Improves accuracy across XDR and API systems.

Defender for Office 365

Defender for Office: Security Bundle + Data Platform

New Security Add-On: Microsoft 365 Security Bundle is available for Business Premium.

Threat Classification Reports: Added to Threat Protection/Mail Flow summaries (May).

Platform Migration (by June): Enhances data consistency, scalability, and performance.

Defender XDR

Exposure Management Update: Recommendations now align with CIS benchmarks for secure admin sign-in policies.

Entra ID

Entra ID: PowerShell & Licensing Changes

New PowerShell Module: Improves scripting + automation.

Migration Wizard: Assists with moving authorization methods.

Retirement Notice: MSOnline PowerShell ends soon, switch to Graph SDK.

End of Sale: External Identities P2 ends May 1st; full B2C retirement by March 2026.

Excel

Python in Excel: Expands to web apps under Microsoft 365 commercial licenses. Optional add-on for compute speed.

Exchange Online

New EWS Usage Reports (April): Available in Microsoft 365 Admin Center, includes third-party app usage.

Intune

Intune: Android + Apple Policy Changes

Android BYOD Changes (2025–2026): Migration to web-based AM API begins this year.

Apple T&Cs Update: Accept new terms to ensure continued device sync.

CDN Endpoint Changes (by April 30): Update proxy settings if using strict outbound rules.

Microsoft 365 Apps Admin Center

Network Connectivity Test: Now General Availability. Helps validate Copilot readiness.

OneDrive

Known Folder Move (KFM): Desktop apps now prompt users to enroll and select folders.

Outlook Mobile

Outlook Mobile: Recall & MailTips Updates

Recall Support: Available in iOS/Android.

MailTips Improvement: Better offline accuracy.

Outlook (New)

Outlook (New): Pronunciations & Offline Access

Name Pronunciation Support (April): Users can record and listen to name pronunciations. Admins can enable this via Microsoft Graph.

Offline Attachment Access

Updated Admin Policies: Separate settings for web vs. native Outlook apps. The CASMailbox-`OWAEnabled` parameter will only block Outlook for the web, while the CASMailbox-`OneWinNativeOutlookEnabled` policy will manage the new Outlook for Windows.

Planner

Recent Tab Change (April 18): Project-created plans will no longer appear in Planner Recent tab.

Purview

Purview: DLP for Fabric + AI Prompt Protection

On-Demand File Classification: PAYG feature scans historical OneDrive/SharePoint files.

DLP for Fabric: Now supports lakehouses; coming soon for KQL/mirrored databases.

Browser DLP Enhancements: Blocks AI prompts (e.g., ChatGPT) with sensitive data.

Restricted App Access in Edge: Visual policy enforcement for blocked apps.

SharePoint

SharePoint: Quick Steps & Card Animations

Quick Steps: Automate routine tasks via the Automate menu.

Card Animations: Coming to Pages, News, and Viva Amplify.

Teams

Teams , Calendar Update + App Blocking Notices

Client Versions Old Teams clients (>90 days) will be blocked. Warnings start 60 days prior.

Old Teams clients (>90 days) will be blocked. Warnings start 60 days prior.

Calendar Enhancements New Outlook/Teams-integrated calendar with Copilot features coming May 2025.

New Outlook/Teams-integrated calendar with Copilot features coming May 2025.

Teams Chat , “Shared” Tab + Facilitator Agent

“Files” tab renamed to “Shared” for clarity.

Facilitator Agent now summarizes meetings (requires Microsoft 365 Copilot).

Teams Meetings , Recap + Background Blur on iOS

New control for viewing chats while screen sharing.

iOS users can now blur/change backgrounds while recording.

Transcripts are now stored in OneDrive with IT retention policy support.

Town hall recaps are available via Copilot or Teams Premium.

Teams Phone , Call Summary & Policy Changes

Call Summaries via Copilot in transfer panels.

Improved noise suppression for distant mic input.

New location privacy prompts for iOS/Android. (Also: Read about new location sharing settings for emergency calls here.)

Legacy phones >5 months old will stop working in June 2025. If your older phones cannot upgrade to 1449/1.0.94.2025020301, they will just stop working.

Teams Admin Center , App Security Visibility

App detail pages now include security/compliance info for admins. Admins will be notified of this feature and can access a tutorial and live count of certified apps. Rollout starts late February 2025 and completes by early April 2025, with no admin action needed.

Windows

Windows: Kerberos Patch

Kerberos Vulnerability Fix (Action Required)Microsoft released security updates on April 8, 2025 addressing a Kerberos authentication vulnerability. Follow these steps to ensure full protection:

Update Apply Windows updates released on or after April 8th to all Domain Controllers.

Apply Windows updates released on or after April 8th to all Domain Controllers.

Monitor Watch for new event logs on Domain Controllers to identify Certificate Authorities (CAs) not in the NTAuth store.

Watch for new event logs on Domain Controllers to identify Certificate Authorities (CAs) not in the NTAuth store.

Enable Enforcement Once you’ve confirmed no certificates are issued by unauthorized CAs, enable Enforcement Mode to block vulnerable authentication attempts.

Once you’ve confirmed no certificates are issued by unauthorized CAs, enable Enforcement Mode to block vulnerable authentication attempts.

🔗 Microsoft Documentation on Kerberos Fix

Remote Desktop Deprecation

Remote Desktop Client Retirement (Plan Now)The Remote Desktop client for Windows (MSRDC) will reach end of support on March 27, 2026. To avoid disruptions:

Action Required: Transition to the new Windows App before the deadline.

This affects access to: Windows 365 Azure Virtual Desktop (AVD) Microsoft Dev Box

Windows 365

Azure Virtual Desktop (AVD)

Microsoft Dev Box

MSTSC (Remote Desktop Connection) remains unaffected.

🔗 Learn More About the Transition

Edition reference

Edition reference: Disk metrics - Azure Virtual Machines ↗

This is one reference used in the edition, not evidence for every item. Specific references are linked next to the relevant items above; broad roadmap links are release trackers rather than dated announcements.

Further sources

predictions ↗

public preview ↗

first vendor to protect NDB ↗

DataProtect as a Service ↗

Rubrik Cloud Vault (RCV) on AWS ↗

Disk metrics - Azure Virtual Machines ↗

Keep your presentation on-brand with Copilot | Microsoft Support ↗

Connect organizational asset libraries to PowerPoint for an on-brand experience - SharePoint in Microsoft 365 ↗

Network requirements - Microsoft Defender for Cloud Apps ↗

What’s new in Microsoft Entra – March 2025 | Microsoft Community Hub ↗

What’s new in Microsoft Entra – March 2025 | Microsoft Community Hub ↗

What’s new in Microsoft Entra – March 2025 | Microsoft Community Hub ↗

What’s new in Microsoft Entra – March 2025 | Microsoft Community Hub ↗

General Availability ↗

Redirect and move Windows known folders to OneDrive - SharePoint in Microsoft 365 ↗

Recent Tab Change (April 18) ↗

location privacy prompts ↗

here ↗

KB5020805: How to manage Kerberos protocol changes related to CVE-2022-37967 | Microsoft Support ↗

Use the Remote Desktop client to connect to Azure Virtual Desktop - Remote Desktop client ↗

Continue reading

Copilot collaboration starts with information ownership ↗

Purview and AI: make the data boundary explicit ↗