MC1304290 – (Updated) 2026 Microsoft 365 Packaging Update

Product:

Defender, Defender for Office 365, Defender XDR, Enterprise Mobility + Security, Entra, Exchange, Intune

Platform:

mobile, Online, Web, World tenant

Status:

Change type:

Admin impact, Updated message, User impact

Links:

Details:

Summary:
Starting mid-June 2026, Microsoft 365, Office 365, and EMS suites will receive enhanced security features like Microsoft Defender Plan 1, URL time-of-click protection, Intune improvements, and +50GB Exchange Online storage. Rollout completes by August 1, 2026, with new alerts and policy controls for admins.

Details:
Updated May 20, 2026: Organizations using Microsoft 365 operated by 21Vianet can safely disregard this message.
[Introduction]
As a part of the 2026 Microsoft 365 Packaging and Pricing Update, we're excited to share that the following features will begin to roll out to Microsoft 365, Office 365, and Enterprise Mobility and Security (EMS) suites in mid-June and are expected to be complete by August 1, 2026.
Refer to the licensing blog for feature availability by suite. Government and Commercial packaging changes are listed separately.
Microsoft Defender for Office 365 Plan 1: Protection against advanced phishing and malware
URL time-of-click protection: Scans URLs at time of click to prevent access to malicious websites
Intune Remote Help: Secure remote support for devices
Intune Advanced Analytics: Insights to improve user experience
Intune Plan 2: Tunnel for MAM, FOTA, and specialty device management
Intune Endpoint Privilege Management: Supports least-privilege access
Microsoft Cloud PKI: Cloud-based certificate lifecycle management
Intune Enterprise Application Management: Enterprise App Catalog of Win32 applications with preconfigured deployment settings.
Exchange Online: +50GB email storage
Refer to list of service display names affected below:
Display NamePart Number
Microsoft 365 built-in email and collaboration security (URL time-to-click protection)MDOLITE_ENTERPRISE
Microsoft Defender for Office 365 (Plan 1)ATP_ENTERPRISE
Exchange Online Storage (50GB additional)EXCHANGE_STORAGE_50GB
Remote HelpREMOTE_HELP
Microsoft Intune Advanced AnalyticsIntune_AdvancedEA
Intune Plan 2INTUNE_P2
Intune ServiceNow IntegrationIntune_ServiceNow
Microsoft Tunnel for Mobile Application ManagementIntune-MAMTunnel
Intune Enterprise Application Management3_PARTY_APP_PATCH
Intune Endpoint Privilege ManagementIntune-EPM
Microsoft Cloud PKICLOUD_PKI

[When this will happen:]
We will begin rolling out in mid-June 2026 and expect to complete by early August 2026.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:

Created:
2026-05-09

updated:
2026-05-21

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Increased Security Features
Default application of built-in protection policies may lead to false positives, affecting user access to legitimate emails and links.
   - roles: Microsoft 365 Admin, End Users
   - references: https://learn.microsoft.com/defender-office-365/, https://www.microsoft.com/licensing/news/2026-M365-Packaging-Pricing-Updates

Intune Configuration Changes
New Intune features not configured by default may lead to inconsistent user experiences and potential security gaps until properly set up.
   - roles: IT Support Staff, End Users
   - references: https://learn.microsoft.com/intune/device-management/specialty-devices, https://learn.microsoft.com/intune/intune-service/fundamentals/remote-help

Increased Mailbox Storage
While increased storage is beneficial, users may experience temporary disruptions during the transition period as the new storage limits are applied.
   - roles: End Users, Microsoft 365 Admin
   - references: https://www.microsoft.com/licensing/news/2026-M365-Packaging-Pricing-Updates-FAQ, https://learn.microsoft.com/office365/servicedescriptions/office-365-advanced-threat-protection-service-description

New Alerts and Monitoring
Introduction of new alerts may overwhelm admins with notifications, leading to potential oversight of critical issues.
   - roles: Microsoft 365 Admin, Security Analysts
   - references: https://learn.microsoft.com/defender-office-365/preset-security-policies#use-the-microsoft-defender-portal-to-add-exclusions-to-the-built-in-protection-preset-security-policy, https://learn.microsoft.com/intune/advanced-analytics/

Compliance and Data Processing Changes
Changes in data processing may require additional compliance checks, potentially leading to delays in reporting and audits.
   - roles: Compliance Officers, Microsoft 365 Admin
   - references: https://learn.microsoft.com/intune/device-security/microsoft-tunnel/mam, https://learn.microsoft.com/mem/intune/protect/microsoft-cloud-pki-overview

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

XXXXXXX ... free basic plan only

Potentional Risks**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only