Skip to Content

MC1193689: New Microsoft baseline security mode for Office, SharePoint, Exchange, Teams, and Entra

Summary

  • Introduction of Baseline Security Mode to enhance security across Microsoft 365 services.
  • New dashboard in the Microsoft 365 admin center for viewing security posture and recommendations.
  • Ability for admins to run impact analysis reports and assess security changes.
  • Recommendations will be organized by risk level with clear statuses.
  • No immediate effect on users unless changes are implemented by admins.

Admin Impact: Medium
User Impact: Low
Release Start: 14 Nov 2025
Release End: 31 Jan 2026
Services: M365
Category: Plan for change
Tags: New Feature, Admin Action

History

12/10/2025 Item Added to Message Center

Microsoft Message

Introduction

Baseline Security Mode is a centralized experience that helps you meet Microsoft’s recommended security standards across Office, SharePoint, Exchange, Teams, and Entra. It leverages Microsoft’s threat intelligence and insights from two decades of Microsoft Response Center cases to strengthen your organization’s security posture and prepare for evolving AI-driven threats.

When this will happen

  • Public Preview: Rollout begins mid-November 2025 and completes by late January 2026.
  • General Availability (Worldwide): Rollout begins mid-November 2025 and completes by late January 2026.
  • General Availability (GCC): Rollout begins early January 2026 and completes by late January 2026.
  • General Availability (DoD): Rollout begins early February 2026 and completes by late February 2026.
  • General Availability (GCCH): Rollout begins early March 2026 and completes by late March 2026.

How this affects your organization

Who is affected: Global admins and security admins managing Microsoft 365 tenants across Office, SharePoint, Exchange, Teams, and Entra.

What will happen:

  • A new Baseline Security Mode dashboard will be available in the Microsoft 365 admin center.
  • Admins can view the tenant’s current security posture compared to Microsoft’s recommended minimum security bar.
  • Admins can run impact analysis reports to assess changes before applying them.
  • Recommendations will be grouped by risk level, with statuses such as “At risk” or “Meets standards.”
  • No immediate user impact unless admins apply changes.

What you can do to prepare

  1. Navigate to Microsoft 365 admin center > Settings > Org Settings > Security & privacy > Baseline Security Mode.
  2. Review recommendations marked as “At risk.”
  3. Initiate an impact report to understand potential changes.
  4. Apply recommendations to bring your tenant to “Meets standards.”

Communicate upcoming changes to your helpdesk or security teams.

Learn more: Baseline security mode settings | Microsoft Learn

Compliance considerations

No compliance considerations identified; review as appropriate for your organization.