CybersecurityInfrastructure

Microsoft Axes Companion Apps, Shifts Focus to New Authentication Methods

Analyst 207||Source: BleepingComputer
Windows 11 desktop with minimalist taskbar and laptop screen showing Microsoft 365 interface, set against a modern office…

"The Microsoft 365 companion apps—Calendar, People, and Files — are taskbar-integrated apps designed to streamline everyday workflows, helping users stay focused, reduce context switching, and complete tasks faster," Microsoft said in a Microsoft 365 message center update on Friday.

Microsoft sets December 16, 2026 as the companion apps' end-of-life

Microsoft announced the Microsoft 365 companion apps — Calendar, People, and Files — will reach end of life on December 16, 2026. After that date, the company said, the apps "will no longer function or be supported." The message center update explicitly advised administrators to remove the apps from devices in their tenant by that date.

What the companion apps provided on Windows 11

The apps were designed as taskbar-integrated shortcuts that surfaced Microsoft 365 content and contextual AI help via Copilot. According to Microsoft, they could "help locate people within the organization, access Microsoft 365 and locally stored files, and manage one's schedule using the Microsoft 365 calendar from the Windows 11 taskbar." Microsoft support also noted that, once installed, the apps launch automatically at startup by default so they "show relevant results as soon as users open the app."

How Microsoft rolled them out and how admins could opt out

This retirement follows Microsoft’s October 2025 announcement that it would begin automatically installing the companion apps on all Windows 11 enterprise devices with the Microsoft 365 desktop client apps by the end of December 2025. The company acknowledged administrative controls: IT teams could opt out of automatic installation using Device Configuration settings in the Apps Admin Center. Individual users could also disable auto-launch from each app’s Settings dialog by turning off the "Start app minimized when you log in" option.

Current change in deployment and cleanup responsibilities

Starting on Friday, Microsoft stopped installing these companion apps through Microsoft 365 Apps updates. While Microsoft previously installed them automatically on compatible systems, the company asked administrators and users of unmanaged devices to uninstall the apps themselves. Microsoft characterized the decision as a formal retirement and set the December 16, 2026 stop-of-support date roughly a year after the automatic rollout began.

What this means for IT admins, Entra ID admins, and end users

  • IT administrators: Microsoft advised admins to remove the companion apps from devices in their tenant by December 16, 2026. Admins who previously relied on device-level opt-outs should confirm which devices received automatic installs, and follow organizational change-control processes for removing apps before the end-of-life date.
  • Entra ID administrators: Microsoft also used the update as a reminder to migrate Entra ID users to phishing-resistant authentication methods — such as passkeys, QR code authentication, or FIDO2 security keys — to avoid sign-in disruptions after Microsoft retires SMS first-factor sign-in starting in February 2027.
  • End users and unmanaged-device owners: Microsoft asked users of unmanaged devices to uninstall the apps themselves. Because the company has said the apps "will no longer function" after December 16, 2026, users who keep the apps installed can expect them to stop working and to be unsupported after that date.

The company’s quick pivot — an automatic rollout beginning after an October 2025 announcement, followed by a retirement notice about a year later — compresses planning and cleanup into a tight window. Administrators must balance the operational task of removing three preinstalled taskbar apps with the separate authentication work Microsoft highlighted for Entra ID ahead of SMS deprecation in February 2027. Microsoft’s guidance is explicit: remove the apps from managed devices by December 16, 2026, and migrate authentication methods to phishing‑resistant options to prevent sign-in disruption.

Original story: https://www.bleepingcomputer.com/news/microsoft/microsoft-to-retire-microsoft-365-companion-apps-in-december/

Emerging ThreatsMicrosoft 365Software UpdatesWindows 11Application SecurityTechnology TransitionAuthentication MethodsEnd Of LifeProductivity Apps
Related Intelligence

Continue Reading

Cloud computing infrastructure with rows of equipment and a single out-of-focus laptop in the foreground.

AWS Neutralizes Compromised IAM Credentials with Managed Policy Updates

In a controlled test, AWS swiftly responded to a compromised access key by attaching a managed policy that quarantines the threat, all within 10 seconds of the key being publicly exposed on GitHub. By doing so, AWS effectively limited potential damage by denying access to certain high-risk actions.

Analyst 207
Briefing room with wooden table, chairs, and open notebook, lit by daylight from a tall window.

Democrats Push for CISA Workforce Assessment Amid Cyber Threats

House Democrats are pushing for a comprehensive review of the Cybersecurity and Infrastructure Security Agency's workforce to ensure America's cyber defenses are equipped to tackle growing threats. The proposed assessment would determine if the agency has the right personnel, training, and certifications to succeed.

Analyst 207
Close-up of disassembled Flock license plate reader showing internal circuit boards and components.

Hackers Reverse-Engineer Flock Cameras, Expose Surveillance Capabilities

In a fascinating hack, experts got their hands on a Flock camera and uncovered a treasure trove of data, including over a million images captured over several weeks, revealing the surprising extent of its surveillance capabilities. The recovered data showed that the camera's software can detect not just license plates, but also people, vehicles, and bicycles.

Analyst 207
Technicians work in dimly lit server room with bright laptop screen in foreground.

Identity Infrastructure Exposes Hidden Risks in Active Directory

In today's cybersecurity landscape, identity has become the new perimeter - and Active Directory and Entra ID are the control centers that keep it all connected, making them prime targets for attackers. Compromising these identity infrastructures can give hackers access to an entire environment, not just a single system.

Analyst 207