Microsoft Teams is bringing malicious URL protection to GCC High and DoD environments, enabling Teams to detect and warn users when harmful links appear in chat and channel messages. This capability — already available in commercial clouds — closes a meaningful security gap in sovereign environments where phishing and malware attacks delivered through chat links are a real threat vector. Users receive an in-context warning before following a suspicious link, reducing the risk of successful attacks without requiring additional tooling outside of Teams. The feature is currently in development and expected to begin rolling out in October 2026.

Microsoft Purview sensitivity label inheritance is coming to Outlook, automatically applying or recommending email sensitivity labels based on the labels already applied to attached files. When a user attaches a document labeled as Confidential or higher, Outlook aligns the email’s protection level to match — reducing the risk of sensitive attachments leaving on under-protected emails without requiring users to manually select the right label every time. For GCC High organizations where consistent data classification across email and attachments is a compliance requirement, this update closes a gap that has historically relied on user judgment rather than policy enforcement. The feature is currently in development and expected to begin rolling out in September 2026.

Teams Rooms on Windows in GCC High and DoD can now join Google Meet meetings directly, and Google Meet devices can join Teams meetings in return, through two-way Direct Guest Join. Users join with one click from the calendar or by entering a meeting ID; no dial-in workarounds, no guest app installs. Commercial tenants got this interoperability in February 2026, and government clouds are now catching up on a capability agencies increasingly need as cross-organization meetings mix platforms. The feature is currently rolling out for GCC and GCC High.

M365 Copilot can now reason directly over your organization’s Power BI data, pulling grounded answers straight from reports and semantic models without leaving the chat. Ask a natural-language question about a metric or trend and get an accurate answer sourced from your existing BI content with no switching tools or digging through dashboards. This closes a real workflow gap for teams who already lean on Copilot for quick answers but still had to break flow to check BI numbers. The feature is currently in development and expected to begin rolling out in August 2026.

Microsoft Teams is extending explicit recording and transcription consent to PSTN participants in GCC High and DoD environments, requiring phone callers to actively acknowledge recording or transcription before they can unmute and participate in a meeting. Participants who do not provide consent remain muted for the duration of the call, ensuring no one is inadvertently recorded without acknowledgment. This feature has been available in commercial and GCC clouds and is now reaching sovereign environments, closing a compliance gap for organizations where documented participant consent is a regulatory requirement. The feature is currently in development and expected to begin rolling out in August 2026.

Microsoft Purview Insider Risk Management (IRM) now allows analysts to preview files referenced directly within an IRM alert without first creating a case, removing a step that previously slowed early-stage triage. Users with appropriate permissions can view relevant content directly in Activity Explorer within each alert, making it faster to assess whether an alert warrants escalation before committing investigation resources. For GCC High environments where insider risk triage speed and accuracy are critical compliance requirements, this update meaningfully improves the signal-to-noise ratio in alert workflows. The feature is currently rolling out for GCC High environments.

Microsoft is adding screen capture blocking to the OneDrive and SharePoint web PDF viewer in Microsoft Edge, enforcing the “Do Not Allow Screen Capture” permission on sensitivity-labeled PDFs directly at the point of viewing. When a user opens a labeled PDF in the web viewer, Edge will block screenshots and screen capture attempts — preventing a straightforward workaround that has historically allowed sensitive content to leave an organization even when DLP policies were in place. For GCC High environments where document-level data protection is a compliance requirement, this update closes a gap between labeling intent and actual enforcement. The feature is currently in development and expected to begin rolling out in August 2026.

Microsoft 365 Copilot is bringing its PowerPoint capabilities to GCC High environments, enabling users to create, edit, and refine presentations through natural language directly inside their decks. Users can ask Copilot to generate slides, update content, improve layouts, and polish design while preserving existing formatting, structure, and branding — with brand kit integration available for applying branded templates and brand-approved images. For GCC High organizations that have been waiting on feature parity with commercial Microsoft 365, this update brings one of Copilot’s most visible productivity capabilities into the government cloud. The feature is currently in development and expected to begin rolling out in September 2026.

Microsoft Purview Endpoint DLP is expanding to monitor and protect sensitive data transferred from managed endpoints over FTP and SFTP, closing a long-standing gap in data exfiltration coverage. Organizations gain visibility into file transfers using these protocols and can apply DLP policies to prevent unauthorized movement of sensitive content, extending the same level of control already in place for other data channels. For GCC High environments where data leaving the boundary through less-monitored pathways is a real compliance risk, this update brings file transfer protocols under the same governance umbrella as email, SharePoint, and OneDrive. The feature is currently in development and expected to begin rolling out in August 2026.

Microsoft Purview is adding AI-powered investigation for Endpoint DLP policy sync and device health, giving admins visibility into whether DLP protection is actually deployed and enforced across their devices. The system proactively identifies impacted devices, explains the root cause of sync failures, and recommends specific actions to resolve issues — closing the gap between assuming devices are protected and confirming it. For organizations managing DLP at scale, this update turns a previously manual troubleshooting process into a guided, AI-assisted diagnosis. The feature is currently in development and expected to begin rolling out in August 2026.