November 2025 Security Curriculum Updates Now Available
The November 2025 Microsoft Security Curriculum Newsletter provides important updates across SC‑200, SC‑5001, SC‑5006, and MD‑4011. Key Highlights Unified Security Operations Enhancements Workbook editing for Microsoft Sentinel is now available directly in the Defender portal. Unified RBAC distribution profiles are generally available. New capabilities include incident task assignment, blast‑radius analysis, and expanded graph‑based hunting with updated schema tables. SC‑200 Updates Lab environment deployment now averages approximately 44 minutes for modules 6–10. Trainers should plan their sessions accordingly. New Threat Intelligence Briefing Agent (Preview) and expanded identity investigation data through the IdentityAccountInfo table. Unified RBAC alignment across Defender XDR and Defender for Cloud. SC‑5006 Updates Security Copilot is now included with Microsoft 365 E5 at no additional cost. Updated agentic defense features and guidance on Security Compute Unit allocations. Additional Resources Newly released Microsoft Sentinel Video Library. Course Preparation Resources SC-200 study guide SC-200 exam prep video SC-200 practice assessment One goal, many roles: Microsoft Security Copilot use cases for all Security Partner Growth: Managed Services with Defender & Sentinel Innovating security operations with Microsoft Sentinel🔍 Help Shape the Future of the SC‑200 Certification
Microsoft is updating the SC‑200: Microsoft Security Operations Analyst certification, and the blueprinting survey is a key part of this process. As MCTs, your insights directly influence how the updated exam reflects modern SOC workflows, tools, and responsibilities. The exam blueprint defines how many questions will be allocated to each skill area within the SC‑200 certification. Input from trainers and subject matter experts ensures the exam remains accurate, relevant, and aligned with real‑world SOC tasks. Microsoft is now collecting feedback through the SC‑200 Blueprinting Survey, open to all MCTs and qualified security practitioners—including external SMEs. This ensures broad representation from those who actively teach, deploy, and operate Microsoft security technologies. By taking the survey, you help ensure that skills such as threat investigation, incident response, KQL-based hunting, Defender XDR capabilities, and Sentinel workflows are weighted according to their real operational impact. Your input helps prevent mis‑weighting or over‑emphasis on low‑value skills, a challenge noted in previous blueprint cycles. Survey Link: https://microsoftlearning.co1.qualtrics.com/jfe/form/SV_3eXv88iTMTckTVI Deadline: January 6, 2026 If you have questions regarding the survey process, you may contact: John Sowles (josowles@microsoft.com) Don Tanedo (dtanedo@microsoft.com) Your contribution ensures the SC‑200 certification continues to reflect the evolving responsibilities of today’s Security Operations Analysts. Your expertise as an MCT plays a critical role in shaping the future of the SC‑200 certification. Completing the survey ensures the exam remains aligned with real-world SOC practices and the latest Microsoft Defender XDR and Sentinel capabilities. Broad participation strengthens the credibility and relevance of the certification for learners worldwide.
OneDrive Files on-demand
Hello, I was wondering if anyone has some insight around OneDrive files on-demand. I found that clicking the button to free up space works just fine and all of my items switch to cloud unless I am accessing something, however, when I try to implement this via group policy, I can see the policy is being pushed because the files on-demand section of settings is now grayed out but it is not uploading everything to cloud. In fact, nothing seems to change like it does when I was able to click the button. We have tried this on multiple computers and get the same results. No GPO and the button works fine, with GPO, it's grayed out but doing nothing. Am I missing something with the GPO to force that upload to cloud? Any help with this would be greatly appreciated. Thanks!
Wifi constantly drops in Windows 11
Apologies in advance of this question has been asked but I've been experiencing an issue for the past 2-3 weeks that has been driving me nuts. My wifi connection seems to constantly drop throughout the day while using my Windows 11 laptop. I've tried 1) restarting 2) restarting the router 3) uninstalling/reinstalling the latest Wi-Fi driver recommended by my manufacturer 4) Uninstalling reinstalling the latest Intel wifi driver recommended 5) Network reset and it still consistently happens. All my other devices stay connected. I've noticed that it tends to particular happen after I upload large files to Dropbox or Google Drive. Other odd happenings include being able to maintain a video call yet if I try to access a website there is no connection all the while the video call maintains. I'm tempted to take this to the Best Buy geek squad but I'm worried they either won't put that much effort into and/or will just tell me to do a complete Windows reinstall which I don't feel will help. Because the connection comes and goes, I tend to not think it's a hardware issue but let me know if you have any thoughts.
"Authorization has been denied for this request"
Hello, We’re encountering an issue with sending proactive messages to Microsoft Teams. We have multiple tenants, and in one of them the REST API works correctly. The app registration is multi-tenant, and we obtain the access token from https://login.microsoftonline.com/botframework.com/oauth2/v2.0/token, which works without any problems. However, in another tenant the same flow fails with "Authorization has been denied for this request", even though we are still able to retrieve the access token. After decoding both tokens, everything matches except for the tid. I also tried switching the app to single-tenant and requesting the token from https://login.microsoftonline.com/<my-tenant-id>/oauth2/v2.0/token. This returns a valid token, but using it to send a proactive message results in the same authorization error. My understanding from recent documentation is that multi-tenant bot creation has been deprecated and bots should now migrate to a single-tenant model. Does this also apply to bots created in the Developer Portal? The Bot Framework REST API documentation doesn’t explicitly mention any changes: https://learn.microsoft.com/en-us/azure/bot-service/rest-api/bot-framework-rest-connector-authentication?view=azure-bot-service-4.0&tabs=multitenant#bot-to-connector I could also see multiple users facing the same issue, so is there a bug that is currently preventing some tenants from using the service?Task Scheduler
I'am new to this forum. I'm trying to use Task Scheduler to print a document on every Friday at noon. My document is located on > my computer >WindowsSSD (C:) > Program File (x86) > Microsoft Office > Office12 > Print A Test Page Every Friday At Noon.docx. My printer is located here on http://192.168.12.154:80/WSD/DEVICE. I'm not sure if this is where I'm supposed to post this. Any help would be grateful.Read this BEFORE you post!
The community lounge is a place for you to you provide feedback about the Microsoft Tech Community (https://techcommunity.microsoft.com). Please use the community directory to find the correct place to post about Microsoft Products / Services. Off topic posts may not be answered and maybe removed.
Teams B2B sync on macOS
Hi all, I have set up B2B collaboration between two Microsoft 365 tenants. Each tenant has its own Teams environment and users can switch tenants inside the Teams app without any problems. Both sides would like to work in each other's Teams channels and they also want something very specific. They want OneDrive on macOS to sync both their own tenant’s files and the other tenant’s files locally in Finder. This is where things break. Everything looks correctly configured. B2B collaboration is enabled on both tenants Guest access is allowed Sharing settings are set to the least restrictive level When a user opens a SharePoint library in the other tenant and clicks Sync, the OneDrive popup shows up and macOS asks to open the OneDrive app, but then nothing happens. No new library appears in OneDrive and there is no error. My question is whether this is simply an expected limitation. Can OneDrive on macOS actually sync document libraries from a different tenant when the user is only a B2B guest? Or is this not supported? I have seen mixed information. Some people say guests cannot sync cross tenant libraries at all. Others say it only works when the team is set up as a Shared Channel. Before restructuring everything I want to confirm the real behaviour. Do I need to create a Shared Team or Shared Channel to make cross tenant file sync work in Finder? Or is the missing sync just how OneDrive behaves for B2B guests on macOS? Any real world experience would be very helpful.RSS feed blocking readers
Hey recently my RSS feeds all stopped working, like 20 days or so ago. Using Feeder and its saying the RSS feed is likely blocking bots which means its unable to query the RSS. Anyone know who to contact about that? Or an RSS reader that still works? https://techcommunity.microsoft.com/t5/s/gxcuf89792/rss/board?board.id=IntegrationsonAzureBlog
