Microsoft 365 Changes: February 2026 Roundup — What Admins Need to Know

Introduction

Microsoft 365 doesn't stop changing. Every month brings new features, deprecations, security enforcement deadlines, and licensing shifts that directly affect how you manage your tenant. Miss one critical update and you're firefighting. Miss several and you're accumulating risk.

That's why we publish this monthly roundup. February 2026 was a particularly dense month: over 25 significant changes landed across security, identity, compliance, collaboration, and administration. The dominant themes were MFA enforcement going fully live, the EWS retirement timeline becoming concrete, expanded Copilot integrations across the suite, and a continued push toward legacy protocol retirement.

This article is structured for busy admins and IT leads. Each section includes a summary table with impact ratings and required actions so you can triage quickly. If you only have five minutes, read the executive summary below and the prioritized action list at the end.

Top 5 Most Impactful Changes

Security & Defender

February's biggest security story is the MFA enforcement that went live on February 9. This was long anticipated but still caught some organizations off guard — particularly SMBs with shared admin accounts and automation scripts using user identities.

MFA Enforcement: What You Need to Know

This is Phase 1 of Microsoft's mandatory MFA rollout. As of February 9, 2026, every account accessing the Microsoft 365 admin center must have at least one MFA method registered. No exceptions, no grace period.

• Shared admin accounts — These need to be eliminated or converted to named accounts with MFA.
• Break-glass (emergency access) accounts — Configure FIDO2 passkeys or certificate-based authentication to satisfy the MFA requirement.
• Service accounts using user identities — Scripts using ROPC (Resource Owner Password Credential) flow are incompatible with MFA. Migrate to service principals or managed identities.
• Phase 2 (Azure CLI, PowerShell, SDK, REST APIs) — began October 1, 2025. If you postponed it, you can request an extension until July 1, 2026.

Identity & Entra ID

Entra ID received several notable updates in February, including a new app deactivation capability, simplified session revocation, hybrid join improvements, and stronger Authenticator protections.

Entra App Deactivation: Why This Matters

The new app deactivation feature fills a gap that has existed since the early days of Azure AD. Previously, investigating a suspicious application meant either leaving it active (risky) or deleting it (destructive). Now you can set "isDisabled": true via the Entra admin center or Microsoft Graph API, which immediately blocks new token requests while preserving all configuration, permissions, and metadata for forensic review.

PATCH https://graph.microsoft.com/beta/applications/{applicationObjectId}
{ "isDisabled": true }

Compliance & Purview

Microsoft Purview received updates across posture reporting, sensitive information type detection, role management, and eDiscovery workflows.

Microsoft Teams

Teams received a wave of updates focused on external collaboration controls, meeting intelligence, and phone system improvements.

SharePoint & OneDrive

The standout SharePoint change this month is the Content Security Policy (CSP) in report-only mode. This is a warning shot: strict CSP enforcement arrives in March 2026, and any custom SharePoint solutions using inline scripts or third-party embeds will break if not remediated now.

Exchange Online

February was a pivotal month for Exchange Online. The EWS retirement timeline is now official and non-negotiable, and the Exchange ActiveSync version block goes live March 1. Both require immediate action.

EWS Retirement: The Full Timeline

Exchange Web Services has been the backbone of mail, calendar, and contact integrations for nearly 20 years. Microsoft Graph now provides near-complete API parity, and the retirement timeline is final.

Your immediate steps should be to check EWS usage in the Microsoft 365 Admin Center → Reports → Usage → Exchange → EWS usage, identify every application and vendor relying on EWS, and begin migration planning to Microsoft Graph. According to UpTech Media, many third-party vendors have already migrated, but custom-built integrations and legacy line-of-business applications are the most common stragglers. The relevant Message Center notification is MC1227454.

If your organization uses EWS for anything — calendar sync, room booking, contact management, archive tools — this is the single most important action item from February's changes. The April 2027 deadline is absolute.

Intune & Endpoint Manager

Intune received reporting accuracy improvements and a new Secure Boot status report that's especially time-sensitive due to expiring certificates in June 2026.

Admin & Licensing

The most significant licensing change is the end of the free grace period for expired subscriptions, replaced by a paid Extended Service Term starting May 2026.

Notable Retirements in February 2026

Several features reached end-of-life this month. Source: r/sysadmin.

Copilot Quick Update

February was a big month for Microsoft 365 Copilot as well. Highlights include unified Copilot Chat experience in Teams meetings, customizable meeting recap templates with visual references from screen shares, SharePoint Lists/Sites grounding in Copilot Chat, meeting time analytics, scheduling from email threads, and brand kits in Copilot Create. All AI features require a Copilot license.

What to Do This Month

Here's a prioritized action list based on impact and urgency. Work through it top to bottom.

February 2026 packed a significant punch. The MFA enforcement and EWS retirement announcements alone justify a thorough tenant review. The good news: most of these changes either improve your security posture or give you better tools to manage your environment. The key is staying ahead of the enforcement deadlines rather than reacting to them.

We'll be back next month with the March 2026 roundup. If you want these delivered directly to your inbox, subscribe below — or if you'd prefer a hands-on review of how these changes affect your specific environment, book a free assessment.