cyber.hendryadrian.com
Security News · techcommunity.microsoft.com

Microsoft Announces Security Initiative for On-Premises Servers

· Original article ↗

Summary

Microsoft announced an on-premises security initiative for Exchange, SharePoint, and Skype for Business Server, with plans for automatic updates, hardened defaults, configuration-drift identification, and expanded emergency mitigations.

Key points

  • Microsoft's initiative focuses initially on server workloads, combining guidance, migration, and product changes to help customers assess risk and strengthen systems that remain on-premises.
  • On-Premises Baseline Security Mode aims to provide supported server workloads with a tested, secure-by-default configuration while preserving administrator control.
  • Microsoft says it has released Critical and Important security updates outside Patch Tuesday since September 2026 when faster action was needed.
  • Microsoft is targeting automatic security-update application after a fixed period for connected Exchange, SharePoint, and Skype for Business Server environments in Q1 2027.
  • For Q1 2027, Microsoft plans hardened default configurations and configuration-drift identification for the supported server products.
  • Emergency Mitigation Service 2.0 is planned for Exchange and Skype for Business Server in December 2026 and SharePoint Server in January 2027; Microsoft says it will be enabled by default and apply a broader set of interim mitigations.

Article Details

Event Type
Microsoft announced an on-premises security initiative, including security-by-default investments for supported server workloads.
Impact
The initiative aims to reduce security risk and manual configuration effort for organizations running on-premises servers. Microsoft describes existing security updates, configuration assessment, and interim mitigations, and plans automatic updates, hardened defaults, configuration-drift identification, and expanded Emergency Mitigation Service capabilities for Exchange Server, SharePoint Server, and Skype for Business Server.

Vendors

Microsoftinitiative will soon be available through Secure Now, which also includes our AI readiness checklist in Microsoft Security Exposure Management and guidance for strengthening foundational security. 

Products

Emergency Mitigation ServiceEmergency Mitigation Service can automatically apply interim mitigations for certain emerging vulnerabilities, helping reduce exposure while a permanent security update is prepared and deployed.Microsoft 365 Apps for EnterpriseMove workloads to Microsoft 365 where possible to take advantage of cloud-based security, resilience, and continuous innovation.Microsoft Exchange Serverthe products themselves through On-Premises Baseline Security Mode, starting with supported Exchange Server, SharePoint Server, and Skype for Business Server workloads.Microsoft Security Exposure Managementsoon be available through Secure Now, which also includes our AI readiness checklist in Microsoft Security Exposure Management and guidance for strengthening foundational security. On-Premises Baseline Security Modethe on-premises security initiative, we’re also hardening the products themselves through On-Premises Baseline Security Mode, starting with supported Exchange Server, SharePoint Server, and Skype for Business ServerSharePoint Serverthemselves through On-Premises Baseline Security Mode, starting with supported Exchange Server, SharePoint Server, and Skype for Business Server workloads.Skype for Business ServerBaseline Security Mode, starting with supported Exchange Server, SharePoint Server, and Skype for Business Server workloads.Tenant Configuration ManagementTenant Configuration Management can help customers assess supported SharePoint, Exchange, and Skype for Business Server environments and identify where permissions are broader than intended.

Related Articles