Chat with us, powered by LiveChat
Partner Login

365 Multi-Tenant Manager Release on October 2nd, 2026

Written by Hornetsecurity / 02.10.2026 / 365 Multi-Tenant Manager for MSPs,365 Multi-Tenant Manager para MSPs,Release Notes,Release-Notes

Enhancements

  • The following new policies were added:
    • HS-P0103 — Protect admin access to Microsoft admin portals with phishing-resistant authentication
    • HS-P0105 — Block insecure protocols for file opens
    • HS-P0106 — Block FrontPage Remote Procedure Call (FPRPC) protocol for file opens
    • HS-P0109 — Block ActiveX controls
    • HS-P0110 — Block OLE Graph and OrgChart objects
    • HS-P0111 — Dynamic Data Exchange (DDE) server launches are blocked in Excel
    • HS-P0116 — Ensure exclusionary geographic access controls are utilized
    • HS-P0117 — Ensure Token Protection is enforced for session tokens
    • HS-P0118 — Ensure that periodic reauthentication is required for all users
  • The following new settings were added:
    • HS-S0141 — Restrict end-user consent to Microsoft 365 certified and single tenant apps with low-risk permissions
    • HS-S0142 — Block legacy browser authentication connections to SharePoint and OneDrive with legacy Relying Party suite (RPS) protocol
    • HS-S0144 — Ensure DLP policies are published for Copilot users
    • HS-S0145 — Disable Access to Microsoft Store for SharePoint
    • HS-S0146 — Disable organization-wide access to Exchange Web Services (EWS)
    • HS-S0147 — Don’t allow resource accounts on Teams Rooms devices from accessing Microsoft 365 files
    • HS-S0148 — Ensure users cannot create Microsoft 365 groups in Azure portals, API or PowerShell
    • HS-S0151 — Ensure the ability to add personal email accounts and calendars is disabled
    • HS-S0152 — Ensure Microsoft Authenticator on companion applications is disabled
    • HS-S0153 — Ensure authentication transfer is blocked
    • HS-S0154 — Ensure maximum certificate lifetime for applications does not exceed 180 days
    • HS-S0155 — Ensure that Account Lockout duration in seconds is at least 60 seconds
    • HS-S0156 — Ensure that Account Lockout threshold is 10 or less
    • HS-S0157 — Ensure password addition is blocked for applications
    • HS-S0158 — Ensure password lifetime for applications does not exceed 180 days
    • HS-S0159 — Ensure new application passwords are system-generated
  • The CIS M365 v7.0 template was added, including newly supported CIS v7.0 controls.
  • The Microsoft Baseline Security Mode template was added, including newly supported baseline controls.

Check other releases