MC931401 - Ensuring Security and Compliance: Keep your Microsoft Teams desktop clients up to date

Service

Microsoft Teams

Published

Nov 12, 2024

Tag

User impact
Admin impact

Summary

The message emphasizes the importance of keeping Microsoft Teams desktop clients updated for security and compliance. Teams updates automatically, but admins should ensure this feature is properly configured. Starting November 12th, 2024, outdated clients will receive notifications, and by December 4th, 2024, a blocking page will appear for versions older than 90 days. Admins need to prepare by updating Teams and verifying configurations.

More information

In today’s security climate, our work across the company and greater industry to keep this critical ecosystem secure is more important than ever. And while we also ship bug fixes and other new features via continuous innovation, in the end security is job one.

Keeping Microsoft Teams up to date is critical to ensure your devices are secure and compliant. By default, and as designed, Teams updates automatically which successfully updates most clients in the world without additional overhead for customers.

Microsoft Teams is governed by the Modern Lifecycle Policy which requires that the Teams desktop client be kept up to date. This is not a new policy, for instance in MC298823 (November 2021), a version that is far out of date will become incompatible with the service until it’s updated. As documented, when a client falls out of date, the user will see:

  • Recurring in-app alerts, if the app is between 30d-90d out of date.
  • A blocking page in Teams, if the app is greater than 90 days out of date. At this point, the app will show options to update, to contact their IT administrator, or continue to Teams on the web.

As an example, if the Teams app is hypothetically on a version released on January 1 and the next update is fully available on January 15, an in-app alert would be shown on February 14th (30 days after the January 15th update).

For reference, link to the Teams app's version's release dates. Also, The Microsoft Teams desktop client usage report gives you an overview of the Teams desktop clients in use within your organization.

Classic Teams is not in scope for this post; see MC783985 for Classic Teams Timelines regarding end of support and end of availability.

When this will happen:

The existing policy enforcement will be visible beginning November 12th, 2024.

How this will affect your organization:

New Teams - Windows & Mac Versions desktop clients (not running in a VDI environment)

  • Beginning November 12th, 2024 , Teams desktop clients >30d out of date, will present a banner or notification to users that they are on an outdated version of Teams. For reference,
    • Windows client versions less than 24231.512.3106.6573 are impacted on November 12.
    • Mac client versions less than 242507.3125.3475 are impacted on Nov 12.
  • Beginning December 4th, 2024, Teams desktop clients older than 90d out of date, will present a blocking page. They will be shown an option to update to the latest version of Teams from this page or use Teams on the web. For reference,
    • Windows client versions less than 24193.1805.3040.8975 are impacted on December 4th.
    • Mac client versions less than 24215.1002.3039.5089 are impacted on December 4th.

New Teams app running in a VDI environment – Windows desktop clients will follow the same policies as non-VDI environments, with enforcement starting on dates below

  • Beginning January 13th 2025, for clients more than 30d out of date will get a banner or notification to users that they are on an outdated version of Teams.
  • Beginning February 3rd 2025, for clients older than 90d out of date, the Teams desktop client will present a blocking page.

Note: The enforcement policies on preview rings may start mid-November. The 30d out of date in app messaging and 90d out of date blocking dates still apply (for versions released to that ring)

What you can do to prepare:

To avoid disruption to end-users, the admins with users on Teams versions older than the currently released versions, should update their users to the most recent version.

Admins should make sure Teams is automatically updating to stay current and within the compatibility window. Common configurations to validate include:

  • Teams clients on macOS have Microsoft AutoUpdate (MAU) configured properly. Learn More
  • Customer network settings, and any device management software e.g. antivirus, are configured properly to allow automatic updates.
  • Windows Policies must not block new Teams or the Webview2 updater.

Please visit this page to learn more.