Microsoft Teams: External domains anomalies report
Microsoft Teams will roll out an External domains anomalies report by March 2026, enabling admins to detect unusual external communication patterns. Available in the Teams admin center, it provides insights and blocking options for suspicious domains. Admins can enable alerts for proactive monitoring without required action to access the report. Introduction To help admins detect unusual or potentially risky interactions with external organizations, Microsoft Teams is introducing the External domains anomalies report. This report analyzes cross-tenant communication patterns for your tenant and highlights sudden spikes or abnormal engagement activity. These insights support proactive investigation and help protect your organization while enabling secure external collaboration. This message is associated with Microsoft 365 Roadmap ID 536572. When this will happen General Availability (Worldwide): Rolling out in late February 2026 and expected to complete in March 2026. How this affects your organization Who is affected: Teams administrators can view this report for their Microsoft 365 tenant if their organization collaborates with external organizations. What will happen: A new External domains anomalies report will be available in the Microsoft Teams admin center under Protection reports. Admins can select Communication anomalies, choose a date range, and run the report to view results: Insights include external domains with unusual communication activity: External domain name Total anomalies detected New 1:1 chat threads created by that domain New group chat threads created by that domain A Block option is available directly in the report for managing external domains: View image in new tab What you can do to prepare No action is required to access the report. To receive proactive alerts: Enable External domains anomalies alerts in the Teams admin center: Go to Notifications & alerts > Rules. Select External domains anomalies. Set status to Active. Specify a Teams channel for notifications if desired. View image in new tab Daily alerts will summarize the top five domains with unusual activity. View image in new tab Compliance considerations No compliance considerations identified. Review as appropriate for your organization. Message ID: MC1219794
The post Microsoft Teams: External domains anomalies report appeared first on M365 Admin.
Published on:
Learn moreWe can help you with Microsoft Teams: External domains anomalies report
If you want help implementing, troubleshooting, or improving this product, contact us and we’ll point you in the right direction.
Related posts
OneDrive Photos on Windows: admin controls and policy support
OneDrive Photos, integrated into the OneDrive sync app for Windows 10/11, is currently available only for personal Microsoft accounts, with wo...
Admin app retiring in Teams, Outlook and Microsoft365.com
The Admin app for very small businesses in Teams, Outlook, and Microsoft365.com will retire by October 2026, with rollout starting August 2026...
Calls popout into a new window on the browser to support multi-tasking and collaboration during a meeting
Microsoft Teams for Web will introduce a Picture-in-Picture Call Monitor in October 2026, allowing users to manage meeting controls in a separ...
Microsoft Windows Autopatch: September 2026 Windows security update requires a restart for hotpatch-enabled devices
The September 2026 Windows security update requires a restart for hotpatch-enabled devices because it is a standard update. Devices will remai...
Outlook for iOS: Minimum system requirements updated to iOS 26 and above
Outlook for iOS will require iOS 26 or later starting mid-September 2026, supporting only the two latest iOS, iPadOS, and watchOS versions. Us...
Allow connections to copilot.cloud.microsoft before the Copilot URL redirect
Starting September 2026, Microsoft will redirect users from m365.cloud.microsoft to copilot.cloud.microsoft. Organizations must ensure network...
Prepare for the removal of WMIC from Windows 11
The Windows Management Instrumentation command-line (WMIC) utility has been removed from Windows 11, version 24H2 and later. It’s no longer av...
Microsoft Agent 365: Active Users export for agent usage reporting
Microsoft Agent 365 will add an Active Users export in the Microsoft 365 admin center, allowing AI and Global Admins to generate a CSV report ...
The August 2026 Windows non-security preview update is now available
The August 2026 non-security preview update is now available for Windows 11, versions 26H1, 25H2, and 24H2. Information about the contents of ...
Dynamics 365 Project Operations – Assign task level schedule mode for precise planning
We are announcing the ability to assign task level schedule mode for precise planning in Dynamics 365 Project Operations. This feature will re...