+Anyone who is interested can contribute to the articles. When you contribute, your work goes into the content set after it's been reviewed and merged. It's then published to [Microsoft Learn](https://learn.microsoft.com/), and you're listed as a contributor at: <https://github.com/MicrosoftDocs/microsoft-365-docs/graphs/contributors>.

+Contributors who make infrequent or small updates can edit the file directly on GitHub.com without installing any software. This article shows you how. [This two-minute video](https://www.microsoft.com/videoplayer/embed/RE1XQTG) also covers how to contribute.

+> [!TIP]

+> To edit an article, you need to get to it on the GitHub.com backend. If you're already on the GitHub.com page of the article, you're starting at step 4.

+>

+> Your permissions in the repo determine what you see in step 5 and later. People with no special privileges see the steps as described. People with permissions to approve their own pull requests see a similar experience with different button and page titles (for example, **Commit changes** instead of **Propose changes**), extra options for creating a new branch, and fewer confirmation pages. The point is: click any green buttons that are presented to you until there are no more.

+1. Verify that you're signed in to GitHub.com with your GitHub account.

+2. On learn.microsoft.com, find the article that you want to update.

+3. Above the title of the article, select  **Edit this document**.

+ 

+4. The corresponding article file opens on GitHub. Select  **Edit this file**.

+ 

+5. The article file opens in a line-numbered editor page where you can make updates.

+ Articles on learn.microsoft.com are formatted using the Markdown language. For help on using Markdown, see [Mastering Markdown.](https://guides.github.com/features/mastering-markdown/).

+ Select **Preview** to view your changes as you go. Select **Edit** to go back to making updates.

+ When you're finished making changes, select the green **Commit changes** button.

+ 

+6. In the **Propose changes** dialog that opens, review and/or enter the following values:

+ - **Commit message**: This value is required. You can accept the default value ("Update \<filename\>") or you can change it.

+ - **Extended description**: This value is optional. For example:

+ - An explanation of the changes.

+ - @ include the GitHub alias of someone to review and merge your changes.

+ When you're finished on the **Propose changes** dialog, select the green **Propose changes** button.

+ 

+7. On the **Comparing changes** page that opens, select the green **Create pull request** button.

+ 

+8. On the **Open a pull request** page that opens, review the title and comments, and then select the green **Create pull request** button.

+ 

+9. That's it. There's nothing more for you to do.

+ The article owner (identified in metadata) is notified about the changes to the article. Eventually, the article owner or another party will review, possibly edit, and approve your changes. After your pull request is merged, the article is updated on learn.microsoft.com.

+For more information, see the [Code of Conduct FAQ](https://opensource.microsoft.com/codeofconduct/faq/) or contact [opencode@microsoft.com](mailto:opencode@microsoft.com) with any questions or comments.

+When you submit a pull request, a CLA-bot automatically determines whether you need to provide a CLA and decorate the PR appropriately (for example, label, comment). Follow the instructions provided by the bot. You only need to do this step once across all repos using our CLA.

+Microsoft, Windows, Microsoft Azure and/or other Microsoft products and services referenced in the documentation may be either trademarks or registered trademarks of Microsoft in the United States and/or other countries/regions.

+The licenses for this project don't grant you rights to use any Microsoft names, logos, or trademarks. Microsoft's general trademark guidelines can be found at <https://go.microsoft.com/fwlink/?LinkID=254653>.

+In-product testing is limited, and running tests local to the user collects more data resulting in deeper insights. Network insights in the Microsoft 365 Admin Center show that there's a networking problem at a specific office location. The Microsoft 365 connectivity test can help to identify the root cause of that problem and provide a targeted performance improvement action.

+We recommend that these insights be used together where networking quality status can be assessed for each office location in the Microsoft 365 Admin Center. More specifics can be found after deployment of testing based on the Microsoft 365 connectivity test.

+When you select the *Run test* button, we show the running test page and identify the office location. You can type in your location by city, state, and country/region or choose to have it detected for you. If you detect the office location, the tool requests the latitude and longitude from the web browser and limits the accuracy to 300 meters by 300 meters before use. It's not necessary to identify the location more accurately than the building to measure network performance.

+There are two parts to the Microsoft 365 network connectivity test: the web site <https://connectivity.office.com> and a downloadable Windows client application that runs advanced network connectivity tests. Most of the tests require the application to be run. It populates results back into the web page as it runs.

+Once the client application starts, the web page updates to show this result. Test data starts to be received to the web page. The page updates each time new-data is received and you can review the data as it arrives.

+When the tests are completed, the web page and the advanced tests client will both show that. If the user is signed in, the test report is uploaded to the customer's tenant.

+The test report requires authentication to your Microsoft 365 account. Your administrator selects how you can share your test report. The default settings allow for sharing of your reports with other user within your organization and the ReportID link isn't available. Reports will expire by default after 90 days.

+Here's an example of the details tab output. On the details tab, we show a green circle check mark if the result was compared favorably. We show a red triangle exclamation point if the result exceeded a threshold indicating a network insight. The following sections describe each of the details tab results rows and explain the thresholds used for network insights.

+We identify the network egress IP address on the server side. Location databases are used to look up the approximate location for the network egress. These databases typically have an accuracy of about 90% of IP addresses. If the location looked up from the network egress IP address isn't accurate, this inaccuracy would lead to a false result. To validate if this error is occurring for a specific IP address, you can use publicly accessible network IP address location web sites to compare against your actual location.

+We determine the distance from that location to the office location. This distance is shown as a network insight if the distance is greater than **500 miles** (800 kilometers) since that is likely to increase the TCP latency by more than 25 ms and may affect user experience.

+This test detects if you're using a VPN to connect to Microsoft 365. A passing result shows if you have no VPN, or if you have a VPN with recommended split tunnel configuration for Microsoft 365.

+Each **Optimize** category route for Exchange Online, SharePoint Online, and Microsoft Teams is tested to see if It's tunneled on the VPN. A split out workload avoids the VPN entirely. A tunneled workload is sent over the VPN. A selective tunneled workload has some routes sent over the VPN and some split out. A passing result shows if all workloads are split out or selective tunneled.

+Network latency between the user office location and the Exchange Online service is compared to other Microsoft 365 customers in the same metro area. A network insight is shown if 10% or more of customers in the same metro area have better performance. This means their users have better performance in the Microsoft 365 user interface.

+This is provided for information only and doesn't contribute to any network insight.

+The in-use DNS Recursive Resolver is identified by making a specific DNS request and then asking the DNS Name Server for the IP Address that it received the same request from. This IP Address is the DNS Recursive Resolver and it is looked up in IP Address location databases to find the location. The distance from the user office location to the DNS Recursive Resolver server location is then calculated. This is shown as a network insight if the distance is greater than **500 miles** (800 kilometers).

+The location looked up from the network egress IP Address may not be accurate and this inaccuracy would lead to a false result from this test. To validate if this error is occurring for a specific IP Address, you can use publicly accessible network IP Address location web sites.

+This network insight affects the selection of the Exchange Online service front door. To address this insight local and direct network egress should be a prerequisite and then DNS Recursive Resolver should be located close to that network egress.

+The in-use SharePoint service front door is identified in the same way that the OneDrive client does. We measure the network TCP latency from the user office location to it.

+We measure the download speed for a 15-Mb file from the SharePoint service front door. The result is shown in megabytes per second to indicate what size file in megabytes can be downloaded from SharePoint or OneDrive in **one second**. The number should be similar to one tenth of the minimum circuit bandwidth in megabits per second. For example if you have a 100mbps internet connection, you may expect 10 megabytes per second (10 MBps).

+During the 15 Mb download, we measure the TCP latency to the SharePoint service front door. This is the latency under load and it's compared to the latency when not under load. The increase in latency when under load is often attributable to consumer network device buffers being loaded (or bloated). A network insight is shown for any bloat of 100 ms or more.

+We test for HTTP connectivity from the user office location to all of the required Microsoft 365 network endpoints. These are published at [https://aka.ms/o365ip](./urls-and-ip-address-ranges.md). A network insight is shown for any required network endpoints, which can't be connected to.

+Connectivity may be blocked by a proxy server, a firewall, or another network security device on the enterprise network perimeter. Connectivity to TCP port 80 is tested with an HTTP request and connectivity to TCP port 443 is tested with an HTTPS request. If there's no response the FQDN is marked as a failure. If there's an HTTP response code 407 the FQDN is marked as a failure. If there's an HTTP response code 403, then we check the Server attribute of the response and if it appears to be a proxy server we mark this as a failure. You can simulate the tests we perform with the Windows command-line tool curl.exe.

+We test the TLS/SSL certificate at each required Microsoft 365 network endpoint that is in the optimize or allow category as defined at [https://aka.ms/o365ip](./urls-and-ip-address-ranges.md). If any tests don't find a Microsoft TLS/SSL certificate, then the encrypted network connected must have been intercepted by an intermediary network device. A network insight is shown on any intercepted encrypted network endpoints.

+Where an TLS/SSL certificate is found that isn't provided by Microsoft, we show the FQDN for the test and the in-use TLS/SSL certificate owner. This TLS/SSL certificate owner may be a proxy server vendor, or it may be an enterprise self-signed certificate.

+This section shows the results of an ICMP traceroute to the Exchange Online service front door, the SharePoint Online service front door, and the Microsoft Teams service front door. It's provided for information only and there's no associated network insight. There are three traceroutes provided. A traceroute to _outlook.office365.com_, a traceroute to the customers SharePoint front end or to _microsoft.sharepoint.com_ if one wasn't provided, and a traceroute to _world.tr.teams.microsoft.com_.

+When you're signed in you can review previous reports that you have run. You can also share them or delete them from the list.

+This shows any significant health issues with Microsoft's global network, which might affect Microsoft 365 customers.

+We provide a command line executable that can be used by your remote deployment, execution tools and run the same tests as are available in the Microsoft 365 network connectivity test tool web site.

+The first time you launch the executable you'll be prompted to accept the end user license agreement (EULA) before testing is performed. If you have already read and accepted the EULA, you can create an empty file called Microsoft-365-Network-Connectivity-Test-EULA-accepted.txt in the current working directory for the executable process when it's launched. To accept the EULA, you can type 'y' and press enter in the command line window when prompted.

+- -city &lt;city&gt; For the city, state, and country/region fields the specified value will be used if provided. If not provided then Windows Location Services (WLS) will be queried. If WLS fails the location will be detected from the machines network egress

+Output of results is written to a JSON file in a folder called TestResults, which is created in the current working directory of the process unless it already exists. The filename format for the output is connectivity_test_result_YYYY-MM-DD-HH-MM-SS.json. The results are in JSON nodes that match the output shown on the web page for the Microsoft 365 network connectivity test tool web site. A new result file is created each time you run it and the standalone executable doesn't upload results to your Microsoft tenant for viewing in the Admin Center Network Connectivity pages. Front door codes, longitudes, and latitudes aren't included in the result file.

+You can double select on the executable to start the testing and a command prompt window will appear.

+In Windows Task Scheduler you can add a task to launch the standalone test executable. You should specify the current working directory of the task to be where you have created the EULA accepted file since the executable blocks until the EULA is accepted. You can't interactively accept the EULA if the process is started in the background with no console.

+The commandline tool uses Windows Location Services to find the users City State Country/region information for determining some distances. If Windows Location Services is disabled in the control panel, then user location based assessments are blank. In Windows Settings "Location services" must be on and "Let desktop apps access your location" must also be on.

+The commandline tool attempts to install the .NET Framework if it isn't already installed. It also downloads the main testing executable from the Microsoft 365 network connectivity test tool and launch that.

+The reports are available on the below screen once the Assistant has finished scanning the user's machine. To access these reports, simply select on the &#8220;View log&#8221; option to view them.

+This report runs the raw JSON file against a rule engine to make sure defined thresholds are being met and if they aren't met a &#8220;warning&#8221; or &#8220;error&#8221; is displayed in the output column of the CSV file. You can view the NetworkConnectivityReport.csv file to be informed about any detected issues or defects. See [What happens at each test step](office-365-network-mac-perf-onboarding-tool.md#what-happens-at-each-test-step) for details on each test and the thresholds for warnings.

+The advanced test client requires .NET 6.0 Runtime. If you run the advanced test client without that installed you'll be directed to [the .NET 6.0 installer page](https://dotnet.microsoft.com/en-us/download/dotnet/6.0/runtime?utm_source=getdotnetcore). Be sure to install from the Run desktop apps column for Windows. Administrator permissions on the machine are required to install .NET 6.0 Runtime.

+The advanced test client uses SignalR to communicate to the web page. For this, you must ensure that TCP port 443 connectivity to **connectivity.service.signalr.net** is open. This URL isn't published in the <https://aka.ms/o365ip> because that connectivity isn't required for a Microsoft 365 client application user.

+## Related articles

+# Use the Virtual Appointments app in Microsoft Teams

+## Before you begin

+This article is intended primarily for users in your organization who will set up the Virtual Appointments app for staff members on their team. This can include managers, supervisors, schedulers, or other employees. Users who initially create a shared appointment calendar are automatically assigned the Virtual Appointments admin role for that calendar and can perform most of the tasks in this article.

+If youΓÇÖre an IT admin, see [Manage the Virtual Appointments app](/microsoftteams/manage-virtual-appointments-app?bc=/microsoft-365/frontline/breadcrumb/toc.json&toc=/microsoft-365/frontline/toc.json) to learn how to control access to the app in your organization.

+Team members can find the app in the Teams app store, or you can share the [installation link](https://teams.microsoft.com/l/app/6e106207-4565-4312-b3ea-bbe9b3ed0a02?source=app-details-dialog) to help them find it. IT admins can use an [app setup policy](/microsoftteams/teams-app-setup-policies) to pin the app for your organization, or team members can [pin the app themselves](https://support.microsoft.com/office/pin-an-app-for-easy-access-3045fd44-6604-4ba7-8ecc-1c0d525e89ec).

+## Overview of the app

+Use the [Virtual Appointments app](https://support.microsoft.com/topic/22df0079-e6d9-4225-bc65-22747fb2cb5f) in Microsoft Teams for all your virtual appointment needs. The app enables a seamless end-to-end experience for business-to-customer engagements, integrating schedules, analytics, and management options, all in one place.

+You can schedule, view, and manage virtual appointments, get real-time status updates in a queue view, send appointment reminders, view analytics and reports on virtual appointments activity, and configure calendar, staff, and booking page settings.

+Use it to schedule and manage appointments such as financial consultations, healthcare visits, virtual fittings, interviews, customer support, education office hours, and more. You can also publish an online booking page for your clients, customers, and patients to book appointments with your staff.

+The app makes it easy to manage the complex scheduling demands of any organization. Schedulers can manage multiple department and staff calendars, as well as communications with internal and external attendees, from a single experience.

+The virtual appointments are held through Teams meetings, which offer robust video conferencing capabilities. For example, a doctor can share their screen and review test results with a patient. Or, a banking advisor can request electronic signatures on documents, allowing them to close transactions remotely.

+You get an experience that's tailored to your industry. Here are some examples of how you can use it in your organization.

+|Healthcare |Financial services |Retail|Sales|HR|

+||||||

+|<ul><li>Diagnosis or post-op follow-up sessions</li><li>Consultations with clinicians and insurance providers</li><li>Therapy sessions</li></ul>|<ul><li>Financial consultations</li><li>Insurance policy and claim support</li><li>Loan advisory/management</li></ul>|<ul><li>Showcase products</li><li>Virtual fittings or tour showrooms</li><li>Provide technical advice and resolve conflicts</li></ul>|<ul><li>High trust sales calls</li><li>Issue resolution</li><li>Customer service</li></ul>|<ul><li>Custom waiting rooms for applicants</li><li>Engage multiple interviewers</li><li>Post-interview action</li></ul>|

+With any Microsoft 365 license, you can use basic Virtual Appointments capabilities that make it easy to schedule and join business-to-customer meetings. For example, you can schedule appointments in the calendar and external attendees can [join through a browser](browser-join.md) without having to download Teams. [Teams Premium](/microsoftteams/teams-add-on-licensing/licensing-enhance-teams) unlocks advanced Virtual Appointments capabilities to manage and personalize the experience. These include a queue view of scheduled and on-demand appointments, SMS notifications, custom waiting rooms, and analytics.

+## Set up an appointment calendar

+To schedule and manage appointments in the app, you must first set up an appointment calendar. You must have the Virtual Appointments admin role to set up and manage most appointment calendar settings.

+### Step 1: Create a new appointment calendar or connect an existing calendar

+To get started, [create a new appointment calendar](#to-create-a-new-appointment-calendar) or [connect an existing one](#to-work-with-an-existing-appointment-calendar) that you previously created.

+#### To create a new appointment calendar

+1. On the **Home** tab or **Schedule** tab of the app, choose **Create appointment calendar**.

+1. Complete the form and choose the relevant service category for your organization. If youΓÇÖre part of a larger organization, consider creating separate calendars for specific departments within your organization.

+ :::image type="content" source="media/virtual-appointments-app-new-appointment-calendar.png" alt-text="Screenshot of the new appointment calendar page." lightbox="media/virtual-appointments-app-new-appointment-calendar.png":::

+ To learn more, see [Create a calendar in Virtual Appointments](https://support.microsoft.com/topic/0efc10f6-6152-42db-9cbd-0f939c57d8be).

+#### To work with an existing appointment calendar

+1. On the **Home** tab or **Schedule** tab of the app, choose **Connect existing calendar**.

+1. Search for the calendar that you want, select it, and then choose **Done**.

+### Step 2: Add staff

+You can add up to 100 staff members to an appointment calendar. Each person you add will have their calendar displayed on the **Schedule** tab. Schedulers can then view their availability in the app and schedule appointments for them.

+1. On the **Manage** tab, select **Staff**.

+1. Add staff members and assign a role to each person you add.

+ To learn more, see [Add and manage staff to make scheduling a breeze](https://support.microsoft.com/topic/9953defc-509d-4427-a2b9-8a2837495db7).

+### Step 3: Add services using appointment types

+Next, add services to the calendar using the appropriate appointment type. Before you do that, it's important to understand the two different appointment types so that you can choose the appointment type that best represents the services offered by your organization:

+- **Scheduled appointment type**: Used by schedulers to book scheduled appointments for staff and attendees. These appointments are scheduled for a specific date, time, and duration.

+- **On-demand appointment type**: Used by your customers, clients, and patients for on-demand appointments. On-demand appointments are for services that are provided upon request, similar to a walk-in waiting room. This feature requires [Teams Premium](/microsoftteams/teams-add-on-licensing/licensing-enhance-teams).

+1. To add a service, on the **Manage** tab, select **Services**, and then under **Scheduled** or **On-demand**, select **Add service**.

+ :::image type="content" source="media/virtual-appointments-app-services.png" alt-text="Screenshot of the Services tab." lightbox="media/virtual-appointments-app-services.png":::

+1. Do one of the following:

+ - If you chose **Scheduled**, follow the steps in [Scheduled appointments](#scheduled-appointments).

+ - If you chose **On-demand**, follow the steps in [On-demand appointments](#on-demand-appointments).

+#### Scheduled appointments

+1. Enter a name for the service. For example, Account opening, Prescription renewal, Loan consultation, or Tax preparation.

+1. Specify any other information and settings you want. Schedulers can then use the appointment type to schedule an appointment. The information that you add is included in the email confirmation that's sent to attendees every time this type of appointment is booked.

+ You can configure options such as whether attendees can [join from a desktop or mobile browser](browser-join.md) without having to download Teams, add an email reminder, [set up SMS text notifications](#set-up-sms-text-notifications), and [link forms](#link-forms).

+To send SMS notifications to attendees by default, turn on **Send them text messages**. Attendees receive confirmation and reminder text messages that include the Teams meeting link and scheduled appointment details. They can opt out of receiving the messages by replying STOP, or resume receiving them by replying START.

+> [!NOTE]

+> Admins can use the [SMS notifications usage report](sms-notifications-usage-report.md) to see how your workforce is using SMS notifications with virtual appointments.

+You can link up to four forms for attendees to fill out each time a scheduled appointment type is booked. For example, you may require attendees to complete a registration form before they join an appointment.

+1. To link a form, choose **Link a form**.

+1. Enter the URL of the form, and then choose **Link**.

+ If this is the first time you're linking a form, you're prompted to create a Microsoft 365 group to store forms. Choose **Create group** to create the group. You only have to do this one time for the booking calendar.

+#### On-demand appointments

+Enter a name for the service. For example, Drop-in appointment, Account opening, Prescription renewal, Loan consultation, or Tax preparation.

+Your customers, clients, and patients can then choose the appointment type on your [booking page](#publish-a-booking-page) to request an on-demand appointment with your staff.

+If you're a Virtual Appointments admin, you can publish an online booking page where people can book scheduled and on-demand appointments with your staff.

+1. On the **Manage** tab, select **Publish your booking page**.

+1. Turn on **Publish booking page**.

+1. To enable people to request on-demand appointments on your booking page, turn on **Allow requests for On-demand services**.

+  **This feature requires [Teams Premium](/microsoftteams/teams-add-on-licensing/licensing-enhance-teams).**

+ :::image type="content" source="media/virtual-appointments-app-booking-page-settings.png" alt-text="Screenshot of booking page settings." lightbox="media/virtual-appointments-app-booking-page-settings.png":::

+Here's an example of what a published booking page looks like.

+You can customize and manage your booking page settings in the Bookings web app. To learn more, see [Customize and publish your booking page for customers to schedule appointments](https://support.microsoft.com/topic/72fc8c8c-325b-4a16-b7ab-87bc1f324e4f) and [Customize and publish your booking page](/microsoft-365/bookings/customize-booking-page).

+## View analytics

+- Virtual Appointments admins get organizational analytics. If you're an admin, you'll see an org-level report showing aggregated analytics across all departments in your organization. To learn more, see [Virtual Appointments usage report](virtual-appointments-usage-report.md).

+- [What is Virtual Appointments?](https://support.microsoft.com/topic/22df0079-e6d9-4225-bc65-22747fb2cb5f) help documentation for your users

+Use the Virtual Appointments app for all your virtual appointment needs. The app enables a seamless end-to-end experience for business-to-customer engagements, integrating schedules, analytics, and management options, all in one place.

+You can schedule, view, and manage virtual appointments, get real-time status updates in a queue view, send appointment reminders, view analytics and reports on virtual appointments activity, and configure calendar, staff, and booking page settings.

+With Microsoft 365 A3, A5, E3, E5, F1, F3, Business Basic, Business Standard, and Business Premium licenses, you can use basic Virtual Appointments capabilities that make it easy to schedule and join business-to-customer meetings. For example, you can schedule appointments in the appointment calendar and external attendees can [join through a browser](browser-join.md) without having to download Teams. [Teams Premium](/microsoftteams/teams-add-on-licensing/licensing-enhance-teams) unlocks advanced Virtual Appointments capabilities that your organization can use to manage and customize the experience. These include a queue view of scheduled and on-demand appointments, SMS text notifications, custom waiting rooms, and analytics.

+The Virtual appointment template is a default meeting template in Teams that your users can use to schedule virtual appointments with customers, clients and other people outside your organization.

+With this template, you can enable a consistent experience across your organization for virtual appointments scheduled directly within Teams.

+## Week of September 11, 2023

+| Published On |Topic title | Change |

+|||--|

+| 9/11/2023 | [Use the Centralized Deployment PowerShell cmdlets to manage add-ins](/microsoft-365/enterprise/use-the-centralized-deployment-powershell-cmdlets-to-manage-add-ins?view=o365-worldwide) | modified |

+| 9/11/2023 | [What's new in Microsoft Defender for Endpoint on Linux](/microsoft-365/security/defender-endpoint/linux-whatsnew?view=o365-worldwide) | modified |

+| 9/11/2023 | [Get relevant info about an entity with go hunt](/microsoft-365/security/defender/advanced-hunting-go-hunt?view=o365-worldwide) | modified |

+| 9/11/2023 | Coin miners | removed |

+| 9/11/2023 | Exploits and exploit kits | removed |

+| 9/11/2023 | Fileless threats | removed |

+| 9/11/2023 | Macro malware | removed |

+| 9/11/2023 | Phishing trends and techniques | removed |

+| 9/11/2023 | How to protect against phishing attacks | removed |

+| 9/11/2023 | Prevent malware infection | removed |

+| 9/11/2023 | Rootkits | removed |

+| 9/11/2023 | Supply chain attacks | removed |

+| 9/11/2023 | Tech Support Scams | removed |

+| 9/11/2023 | Trojan malware | removed |

+| 9/11/2023 | Understanding malware & other threats | removed |

+| 9/11/2023 | Unwanted software | removed |

+| 9/11/2023 | Worms | removed |

+| 9/11/2023 | Protection features in Azure Information Protection rolling out to existing tenants | removed |

+| 9/11/2023 | [Order and precedence of email protection](/microsoft-365/security/office-365-security/how-policies-and-protections-are-combined?view=o365-worldwide) | modified |

+| 9/11/2023 | [Overview of the Microsoft Feed](/microsoft-365/ms-feed/m365-feed?view=o365-worldwide) | modified |

+| 9/11/2023 | Help and support for EOP | removed |

+| 9/12/2023 | [Manage Microsoft Defender for Endpoint using Intune](/microsoft-365/security/defender-endpoint/manage-mde-post-migration-intune?view=o365-worldwide) | modified |

+| 9/12/2023 | Manage spoofed senders using the spoof intelligence policy and spoof intelligence insight | removed |

+| 9/12/2023 | [What's new in Microsoft Secure Score](/microsoft-365/security/defender/microsoft-secure-score-whats-new?view=o365-worldwide) | modified |

+| 9/13/2023 | [Onboard non-persistent virtual desktop infrastructure (VDI) devices](/microsoft-365/security/defender-endpoint/configure-endpoints-vdi?view=o365-worldwide) | modified |

+| 9/13/2023 | [What's new in Microsoft Defender for Endpoint on Linux](/microsoft-365/security/defender-endpoint/linux-whatsnew?view=o365-worldwide) | modified |

+| 9/13/2023 | [Set up and configure Microsoft Defender for Endpoint Plan 1](/microsoft-365/security/defender-endpoint/mde-p1-setup-configuration?view=o365-worldwide) | modified |

+| 9/13/2023 | [Minimum requirements for Microsoft Defender for Endpoint](/microsoft-365/security/defender-endpoint/minimum-requirements?view=o365-worldwide) | modified |

+| 9/13/2023 | Maintain your Microsoft Defender for Business environment | removed |

+| 9/13/2023 | [Use network protection to help prevent connections to bad sites](/microsoft-365/security/defender-endpoint/network-protection?view=o365-worldwide) | modified |

+| 9/13/2023 | Specify additional definition sets for network traffic inspection for Microsoft Defender Antivirus | removed |

+| 9/13/2023 | [Quarantine policies](/microsoft-365/security/office-365-security/quarantine-policies?view=o365-worldwide) | modified |

+| 9/13/2023 | [Understanding overrides within the email entity page in Microsoft Defender for Office 365](/microsoft-365/security/office-365-security/step-by-step-guides/understand-overrides-in-email-entity?view=o365-worldwide) | modified |

+| 9/14/2023 | [Validate apps against a custom image](/microsoft-365/test-base/validate-apps-against-a-custom-image?view=o365-worldwide) | added |

+| 9/14/2023 | Get help and support for Microsoft Defender for Business | removed |

+| 9/14/2023 | [Quarantined email messages](/microsoft-365/security/office-365-security/quarantine-about?view=o365-worldwide) | modified |

+| 9/14/2023 | [Quarantined messages FAQ](/microsoft-365/security/office-365-security/quarantine-faq?view=o365-worldwide) | modified |

+| 9/14/2023 | [Overview of optical character recognition in Microsoft Syntex (Preview)](/microsoft-365/syntex/ocr-overview) | modified |

+| 9/14/2023 | [Remove a former employee - Overview](/microsoft-365/admin/add-users/remove-former-employee?view=o365-worldwide) | modified |

+| 9/14/2023 | [Add a user or contact to a distribution group](/microsoft-365/admin/email/add-user-or-contact-to-distribution-list?view=o365-worldwide) | modified |

+| 9/14/2023 | [Send email as a distribution list](/microsoft-365/admin/manage/send-email-as-distribution-list?view=o365-worldwide) | modified |

+| 9/14/2023 | [Use a QR code to sign-in to the Outlook mobile apps](/microsoft-365/admin/manage/use-qr-code-download-outlook?view=o365-worldwide) | modified |

+| 9/14/2023 | [Create distribution lists](/microsoft-365/admin/setup/create-distribution-lists?view=o365-worldwide) | modified |

+| 9/14/2023 | [Add staff to Bookings](/microsoft-365/bookings/add-staff?view=o365-worldwide) | modified |

+| 9/14/2023 | [Turn Microsoft Bookings on or off](/microsoft-365/bookings/turn-bookings-on-or-off?view=o365-worldwide) | modified |

+| 9/14/2023 | [Deploy frontline dynamic teams at scale](/microsoft-365/frontline/deploy-dynamic-teams-at-scale?view=o365-worldwide) | modified |

+| 9/14/2023 | [What's new in Microsoft Defender for Endpoint on Mac](/microsoft-365/security/defender-endpoint/mac-whatsnew?view=o365-worldwide) | modified |

+| 9/14/2023 | [Manage endpoint security policies in Microsoft Defender for Endpoint](/microsoft-365/security/defender-endpoint/manage-security-policies?view=o365-worldwide) | modified |

+| 9/15/2023 | [Advanced hunting in multi-tenant management in Microsoft 365 Defender](/microsoft-365/security/defender/mto-advanced-hunting?view=o365-worldwide) | added |

+| 9/15/2023 | [Vulnerability management in multi-tenant management](/microsoft-365/security/defender/mto-dashboard?view=o365-worldwide) | added |

+| 9/15/2023 | [View and manage incidents and alerts in multi-tenant management in Microsoft 365 Defender](/microsoft-365/security/defender/mto-incidents-alerts?view=o365-worldwide) | added |

+| 9/15/2023 | [Multi-tenant management in Microsoft 365 Defender](/microsoft-365/security/defender/mto-overview?view=o365-worldwide) | added |

+| 9/15/2023 | [Set up multi-tenant management in Microsoft 365 Defender](/microsoft-365/security/defender/mto-requirements?view=o365-worldwide) | added |

+| 9/15/2023 | [Devices in multi-tenant management](/microsoft-365/security/defender/mto-tenant-devices?view=o365-worldwide) | added |

+| 9/15/2023 | [Manage tenants with multi-tenant management in Microsoft 365 Defender](/microsoft-365/security/defender/mto-tenants?view=o365-worldwide) | added |

+| 9/15/2023 | How to opt out of Microsoft Defender Experts for XDR preview | removed |

+| 9/15/2023 | [List machines API](/microsoft-365/security/defender-endpoint/get-machines?view=o365-worldwide) | modified |

+- [Taiwanese identification number](../compliance/sit-defn-taiwan-national-identification-number.md)

+Video: [Preview: Microsoft 365 Lighthouse Sales Advisor](https://cloudpartners.transform.microsoft.com/download?assetname=assets%2FM365-Lighthouse-Sales-Advisor-Sizzle-Video.mp4)

+Ensure your customers' success by using AI-driven customer insights, actionable recommendations, and prescriptive guidance. Maximize your customers' investment in Microsoft 365 and deliver value at every stage of their journey.

+- Take advantage of Microsoft's best-practice recommendations.

+6. In the **Task** window that opens, go to the **General** tab under **Security options** and select **Change User or Group**, enter SYSTEM, then select **Check Names** and then **OK**. NT AUTHORITY\SYSTEM appears as the user account that the task will run as.

+Defender Experts for Hunting customers are assigned 10 **Ask Defender Experts** credits, which you can use to submit questions, at the start of each calendar quarter. Unused credits from the current quarter roll up to the next one. You can use up to 20 credits only per quarter. All unused credits expire by the end of the calendar year or at the end of your subscription term, whichever comes first.

+As part of the service's built-in [Microsoft Defender Experts for Hunting](defender-experts-for-hunting.md), you're also assigned 10 **Ask Defender Experts** credits, which you can use to submit questions, at the start of each calendar quarter. Unused credits from the current quarter roll up to the next one. You can use up to 20 credits only per quarter. All unused credits expire by the end of the calendar year or at the end of your subscription term, whichever comes first.

+# Edit, delete and export roles in Microsoft 365 Defender Unified role-based access control (RBAC)

+ :::image type="content" source="../../media/defender/m365-defender-rbac-edit-roles.png" alt-text="Screenshot of the edit roles flyout page" lightbox="../../media/defender/m365-defender-rbac-edit-roles.png":::

+## Delete roles

+## Export roles

+The Export feature enables you to export the following roles data:

+- Role name

+- Role description

+- Permissions included in the role

+- The assignment name

+- The assigned data sources

+- The assigned users or user groups

+When a role has multiple assignments, each assignment will be represented as a separate row in the CSV file.

+The CSV also includes a snapshot of the Unified RBAC activation status for each workload available on the tenant.

+The following steps guide you on how to export roles in Microsoft 365 Defender Unified RBAC:

+>[!Note]

+>To export roles, you must be a Global Administrator or Security Administrator in Azure Active Directory, or have the **Authorization (manage)** permission assigned for all data sources in Microsoft 365 Defender Unified RBAC and have at least one workload activated for Unified RBAC.

+>

+>For more information on permissions, see [Permission pre-requisites](../defender/manage-rbac.md#permissions-pre-requisites).

+1. Sign in to the [Microsoft 365 Defender portal](https://security.microsoft.com) with the required roles or permissions.

+2. In the navigation pane, select **Permissions**.

+3. Select **Roles** under Microsoft 365 Defender to get to the Permissions and roles page.

+4. Select the **Export** button.

+ :::image type="content" source="../../media/defender/m365-defender-rbac-export-roles.png" alt-text="Screenshot of the export roles page" lightbox="../../media/defender/m365-defender-rbac-export-roles.png":::

+A CSV file containing all the roles data will be generated and downloaded to the local machine.

+## September 2023

+### Export roles for Microsoft 365 Defender Unified role-based access control (RBAC)

+Now you can easily export your existing roles in Unified RBAC to a CSV file. The exported file will include details such as the role name, the included permissions, the assigned users or user groups, and assigned data sources. When a role has multiple assignments, each assignment will be listed on a separate row in the CSV file. The CSV also includes a snapshot of the Unified RBAC activation status for each workload available on the tenant. For more information, see [Edit, delete and export roles](./edit-delete-rbac-roles.md#export-roles).

+It's important to understand how user allows and blocks, tenant allows and blocks, and filtering stack verdicts in EOP and Defender for Office 365 complement or contradict each other.

+- [Exchange mail flow rules](/exchange/security-and-compliance/mail-flow-rules/mail-flow-rules) (also known as transport rules):

+ |Filtering stack verdict|Mail flow rule allows^\*|Mail flow rule blocks|

+ ||||

+ |Malware|**Filter wins**: Email quarantined|**Filter wins**: Email quarantined|

+ |High confidence phishing|**Filter wins**: Email quarantined except in complex routing|**Filter wins**: Email quarantined|

+ |Phishing|**Tenant wins**: Email delivered to mailbox|**Tenant wins**: Phishing action in the applicable anti-spam policy|

+ |High confidence spam|**Tenant wins**: Email delivered to mailbox|**Tenant wins**: Email delivered to user's Junk Email folder|

+ |Spam|**Tenant wins**: Email delivered to mailbox|**Tenant wins**: Email delivered to user's Junk Email folder|

+ |Bulk|**Tenant wins**: Email delivered to mailbox|**Tenant wins**: Email delivered to user's Junk Email folder|

+ |Not spam|**Tenant wins**: Email delivered to mailbox|**Tenant wins**: Email delivered to user's Junk Email folder|

+ ^\* Organizations that use a third-party security service or device in front of Microsoft 365 should consider using [Authenticated Received Chain (ARC)](use-arc-exceptions-to-mark-trusted-arc-senders.md) (contact the third-party for availability) and [Enhanced Filtering for Connectors (also known as skip listing)](/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/enhanced-filtering-for-connectors) instead of an SCL=-1 mail flow rule. These improved methods reduce email authentication issues and encourage [defense-in-depth](step-by-step-guides/defense-in-depth-guide.md) email security.

+ - Block messages from specific countries/regions or in specific languages.

+ Title: "Strengthen your security posture with Microsoft 365 Defender"

+- ContentEnagagementFY24

+# Strengthen your security posture with Microsoft 365 Defender

+- ContentEnagagementFY24

+- ContentEnagagementFY24

+- ContentEnagagementFY24

+- ContentEnagagementFY24