Microsoft Teams is enabling end users in GCC High and DoD environments to report suspicious messages and external users directly within Teams, surfacing those reports in the Teams admin center as actionable security signals. Admins gain greater visibility into potential phishing, impersonation, spam, and other messaging threats — with end-user reports serving as an additional detection layer alongside automated security tooling. For GCC High organizations where identifying and responding quickly to social engineering in Teams is a security priority, this update turns every user into an active participant in the organization’s threat detection workflow. The feature is currently in development and expected to begin rolling out in October 2026.

Microsoft 365 Copilot Chat is expanding to chats, channels, calls, and meetings in GCC High and DoD environments, giving users AI-powered assistance to stay informed and catch up quickly across every Teams surface. This marks a significant step in bringing the full Copilot Chat experience to government cloud users who have been waiting on feature parity with commercial Microsoft 365. The wave of Copilot capability arriving in GCC High doesn’t stop there — Viva Insights and Copilot Analytics, and the new Outlook for Windows are also on the horizon for GCC High in September, signaling a meaningful acceleration in government cloud feature alignment. The Copilot Chat feature is currently in development and expected to begin rolling out in October 2026.

Microsoft Purview Insider Risk Management is expanding to cover AI agents, introducing agent-specific indicators and risk scoring built around agentic activities. As declarative agents and Copilot-powered workflows gain the ability to access enterprise data, execute actions, and make decisions at machine speed, the insider risk they represent is meaningfully different from human user activity — and now gets treated that way. Admins can monitor agent behavior through the same IRM framework used for human insiders, with scoring and indicators tailored to how agents interact with sensitive data. For GCC High organizations adopting Copilot agents in regulated workflows, this update provides governance coverage that keeps pace with the expanding agentic surface. The feature is currently in development and expected to begin rolling out in October 2026.

Microsoft Teams is bringing malicious URL protection to GCC High and DoD environments, enabling Teams to detect and warn users when harmful links appear in chat and channel messages. This capability — already available in commercial clouds — closes a meaningful security gap in sovereign environments where phishing and malware attacks delivered through chat links are a real threat vector. Users receive an in-context warning before following a suspicious link, reducing the risk of successful attacks without requiring additional tooling outside of Teams. The feature is currently in development and expected to begin rolling out in October 2026.

Microsoft Purview sensitivity label inheritance is coming to Outlook, automatically applying or recommending email sensitivity labels based on the labels already applied to attached files. When a user attaches a document labeled as Confidential or higher, Outlook aligns the email’s protection level to match — reducing the risk of sensitive attachments leaving on under-protected emails without requiring users to manually select the right label every time. For GCC High organizations where consistent data classification across email and attachments is a compliance requirement, this update closes a gap that has historically relied on user judgment rather than policy enforcement. The feature is currently in development and expected to begin rolling out in September 2026.

Teams Rooms on Windows in GCC High and DoD can now join Google Meet meetings directly, and Google Meet devices can join Teams meetings in return, through two-way Direct Guest Join. Users join with one click from the calendar or by entering a meeting ID; no dial-in workarounds, no guest app installs. Commercial tenants got this interoperability in February 2026, and government clouds are now catching up on a capability agencies increasingly need as cross-organization meetings mix platforms. The feature is currently rolling out for GCC and GCC High.

M365 Copilot can now reason directly over your organization’s Power BI data, pulling grounded answers straight from reports and semantic models without leaving the chat. Ask a natural-language question about a metric or trend and get an accurate answer sourced from your existing BI content with no switching tools or digging through dashboards. This closes a real workflow gap for teams who already lean on Copilot for quick answers but still had to break flow to check BI numbers. The feature is currently in development and expected to begin rolling out in August 2026.

Microsoft Teams is extending explicit recording and transcription consent to PSTN participants in GCC High and DoD environments, requiring phone callers to actively acknowledge recording or transcription before they can unmute and participate in a meeting. Participants who do not provide consent remain muted for the duration of the call, ensuring no one is inadvertently recorded without acknowledgment. This feature has been available in commercial and GCC clouds and is now reaching sovereign environments, closing a compliance gap for organizations where documented participant consent is a regulatory requirement. The feature is currently in development and expected to begin rolling out in August 2026.

Microsoft Purview Insider Risk Management (IRM) now allows analysts to preview files referenced directly within an IRM alert without first creating a case, removing a step that previously slowed early-stage triage. Users with appropriate permissions can view relevant content directly in Activity Explorer within each alert, making it faster to assess whether an alert warrants escalation before committing investigation resources. For GCC High environments where insider risk triage speed and accuracy are critical compliance requirements, this update meaningfully improves the signal-to-noise ratio in alert workflows. The feature is currently rolling out for GCC High environments.

Microsoft is adding screen capture blocking to the OneDrive and SharePoint web PDF viewer in Microsoft Edge, enforcing the “Do Not Allow Screen Capture” permission on sensitivity-labeled PDFs directly at the point of viewing. When a user opens a labeled PDF in the web viewer, Edge will block screenshots and screen capture attempts — preventing a straightforward workaround that has historically allowed sensitive content to leave an organization even when DLP policies were in place. For GCC High environments where document-level data protection is a compliance requirement, this update closes a gap between labeling intent and actual enforcement. The feature is currently in development and expected to begin rolling out in August 2026.