Microsoft 365 Updates: How Update Channels, Versions and Release Options Work in 2026

By The Uptime Report Team · Last reviewed: October 2026

Microsoft 365 updates reach Windows desktops through update channels: Current Channel ships several builds a month, Monthly Enterprise Channel ships on the second Tuesday, and since July 2026 Semi-Annual devices get those same monthly builds.

How do Microsoft 365 updates work?

Microsoft 365 updates for the desktop apps arrive as complete new builds, not as separate patches. Each release lands on the Office Content Delivery Network (officecdn.microsoft.com), carries every earlier fix, and installs through a scheduled task named Office Automatic Updates 2.0. Microsoft Learn states that Windows Update and WSUS cannot deliver individual Microsoft 365 Apps updates.

A release that adds features raises the version number, for example from Version 2608 to Version 2609. A release that only carries security or non-security fixes raises the build number and leaves the version alone, per Microsoft’s update channel overview. In practice the version tracks year and month: Version 2609 first reached Current Channel on September 22, 2026.

The update cycle on each Windows device runs in three automatic steps, as documented in Microsoft’s overview of the update process and update basics pages:

1. Detect. The Office Automatic Updates 2.0 task (Task Scheduler Library > Microsoft > Office) compares the installed build with the build at the update location, which is the Office CDN unless an admin sets a network share.
2. Download. Only changed files are copied, compressed, into a local Download folder. The system drive needs at least 4 GB free, and an interrupted download resumes instead of restarting.
3. Apply. Click-to-Run installs in the background once the affected apps are closed. With an update deadline set, users get reminders, the last one 30 minutes before the deadline, and open apps then close automatically.

What are the Microsoft 365 update channels?

Microsoft 365 update channels decide how often a Windows device gets new features. Microsoft lists three primary channels: Current Channel, Monthly Enterprise Channel and Semi-Annual Enterprise Channel, plus Current Channel (Preview) and the unsupported Beta Channel for testing. All three primary channels receive security fixes on the second Tuesday of the month. The channel is set per device, not per user, and one device runs one channel for Microsoft 365 Apps, Project and Visio together.

The default channel for Microsoft 365 Apps for enterprise, Microsoft 365 Apps for business and the subscription Project and Visio apps is Current Channel, so any device installed without a channel setting lands there. Microsoft’s own overview says Current Channel usually gets two or three releases a month. Its 2026 update history shows four or five in every full month from January to September.

What is the latest version of Microsoft 365 Apps?

As of October 26, 2026, the latest Microsoft 365 Apps release is Version 2610 (Build 20527.20088) on Current Channel, released October 21, and Version 2609 on Monthly Enterprise Channel (Build 20430.20180) and Semi-Annual Enterprise Channel (Build 20430.20178), released October 13. Both enterprise channels also support Versions 2608 and 2607, according to Microsoft’s update history page.

To read the version on a single PC, open Word or Excel and go to File > Account: the About section shows the version, build and channel name. Choosing Update Options > Update Now forces a check against the configured update location. On a fleet, a device whose build sits below the oldest row for its channel is out of support and gets no new security fixes.

What changed for Semi-Annual Enterprise Channel in 2026?

Semi-Annual Enterprise Channel stopped being semi-annual in July 2026. Under Message center post MC1274325, Version 2606 (released July 14, 2026) moved devices configured for Semi-Annual Enterprise Channel onto the Monthly Enterprise Channel feature and security cadence, according to Microsoft’s channel unification page. No policy change or reinstall was required, and existing Group Policy, Intune and Configuration Manager settings keep working.

• Identity. After Version 2606 installs, File > Account shows Monthly Enterprise Channel. Some reporting tools still say Semi-Annual; any build above 20131.20000 confirms Version 2606 or later is installed.
• Download. The first jump from Version 2508 to 2606 is roughly 1.6 GB per device.
• Deadline. Version 2508 was supported through September 8, 2026, so a device still on it in October 2026 is unpatched.
• Copilot. Devices whose users meet Copilot requirements become eligible for Copilot once they run the Monthly Enterprise build; our Microsoft 365 Copilot license guide covers which licence those users still need.
• Cloud Update. Tenants that use Cloud Update for Monthly Enterprise Channel see former Semi-Annual devices onboard automatically unless exclusion groups or profile settings stop it.

A second 2026 cutoff hits Windows 10 PCs. Microsoft’s Windows 10 support page for Microsoft 365 Apps says those devices stay on Version 2608 and receive only security updates until October 10, 2028. To list them, open Inventory in the Microsoft 365 Apps admin center, choose Show all devices, filter the OS version column and export the list; the Office build spread insight on the same page flags devices on unsupported builds, per Microsoft’s inventory documentation.

Several pages that rank for this topic, one of them Microsoft’s own overview (last updated May 27, 2026), now disagree with Microsoft’s release data. The table sets each claim against the current documentation.

How do you change the Microsoft 365 update channel?

To change the Microsoft 365 update channel, set the target channel in one management tool and let the next update apply it: no reinstall is needed. Microsoft’s channel change guide lists Cloud Update, Intune, Windows Autopatch, Group Policy, the Office Deployment Tool, Configuration Manager and the Microsoft 365 admin center. When several tools set a channel, Cloud Update wins.

Microsoft suggests the same five values for Group Policy and Intune. Applied through a computer-scoped Group Policy Object, the steps are:

1. Import the latest Administrative Template files (ADMX/ADML) for Microsoft 365 Apps.
2. Under Microsoft Office 2016 (Machine) > Updates, set Enable Automatic Updates = Enabled and Hide option to enable or disable updates = Enabled.
3. Set Hide update notifications = Disabled, Update Channel = the target channel and Update Deadline = 1.
4. Link the GPO to the right organizational unit, check link order for conflicting policies, then run gpupdate /force on a test device.
5. Confirm the switch in File > Account: the channel name changes only after a build from the new channel installs.

For the Office Deployment Tool, the configuration file needs an Updates element with the Channel attribute, deployed with setup.exe /configure yourconfigfile.xml. Moving to a channel with an older version removes features that exist only in the newer one, and Configuration Manager does not support that direction at all. Cloud Update and the admin center Inventory require Microsoft 365 Business Standard, Business Premium, Office 365 E3 or E5, Microsoft 365 E3 or E5, or A3 or A5, and exclude GCC, GCC High, DoD and 21Vianet tenants, per the requirements page. Microsoft 365 Apps for business is not on that list, so for those clients the channel has to come from Group Policy, the ODT or a policy value written by your RMM; our Microsoft 365 business plans comparison shows which plans include the desktop apps.

When two tools disagree, Microsoft 365 Apps follows a fixed order. Microsoft’s channel change guide lists seven levels, and the highest one with a value set wins:

To audit a client fleet read-only from an RMM script, read UpdatePath and UpdateBranch under both Policies paths, then UpdateUrl, UnmanagedUpdateURL, CDNBaseUrl and VersionToReport under the ClickToRun Configuration key; Microsoft’s own Configuration Manager detection example reads VersionToReport as the installed Microsoft 365 version. Any patch tool from an MSP software stack that writes UpdateBranch under the Policies key sits at level 4, so a Cloud Update profile a client admin assigns later overrides it without warning.

How big are Microsoft 365 updates?

A Microsoft 365 update usually downloads 50 MB to 300 MB per device when it is one or two releases behind, and 1.5 to 2 GB when a full package is needed. Microsoft 365 Apps picks the smallest package type, per the update process overview. A channel switch to a lower build skips binary delta compression, and Microsoft’s download sizes page warns that a switch can mean a download of at least 1 GB.

Microsoft’s download sizes page gives the real figures for each release, for the en-us x64 build, with a stated margin of up to 50 MB. The chart uses the October 13, 2026 tables, and the worked example multiplies them by a 50-device branch office on one internet link.

Microsoft’s update process overview says Windows Delivery Optimization, on by default in Windows 11 Enterprise and Education, lets nearby PCs share the payload, and that Microsoft Connected Cache, where deployed, serves it from an on-premises cache before the CDN. Either one cuts the totals in the worked example, which assume every device downloads from the internet.

How many security fixes do Microsoft 365 updates include?

The October 13, 2026 Microsoft 365 Apps release fixed 132 CVEs: 51 in Excel, 36 in shared Office components, 13 each in Access and Word, 8 in Outlook, 7 in PowerPoint, 3 in Visio and 1 in OneNote. That count comes from Microsoft’s release notes for Office security updates. It is the largest single release in those notes, which go back to November 2018.

From January to October 2026 the release notes list 480 CVEs for Microsoft 365 Apps, against 144 in the same months of 2025, and 399 of the 480 arrived from July onward. Our Patch Tuesday statistics found the same pattern across Microsoft’s Security Update Guide as a whole: 2,859 Microsoft-assigned CVEs from January to September 2026, but 19 exploited zero-days against 20 in the same months of 2025.

Matching the 480 CVE IDs to the per-CVE ratings in Microsoft’s Security Update Guide (CVRF API, monthly documents for January to October 2026) shows what the surge is made of. 317 of the 480 list remote code execution as their main impact, and 113 carry Microsoft’s top severity rating, Critical; 88 of those 113 arrived from July onward. Only 2 are marked Exploitation Detected, and 4 Exploitation More Likely.

The two exploited flaws are security feature bypasses: CVE-2026-21509 in Office, which MSRC published in its January 2026 release and which reached Microsoft 365 Apps in the February 10, 2026 build, and CVE-2026-21514 in Word, fixed the same day. None of the 399 CVEs fixed from July to October was marked exploited in the CVRF data retrieved on October 26, 2026. One ID in the release notes, CVE-2026-68818, has no CVRF entry and is counted as unrated.

Because builds are cumulative, the only way to get a fix is the current build for the device’s channel; no channel offers security-only downloads. For a client SLA, that profile supports the normal second-Tuesday cadence with Update Deadline = 1, plus an out-of-band push only when MSRC marks a flaw Exploitation Detected or CISA lists it; most entries in our analysis of the CISA KEV catalog 1,025 of its 1,733 entries carry a 21-day federal deadline, a usable outer bound.

Where do you see upcoming Microsoft 365 changes?

Microsoft announces upcoming Microsoft 365 changes in two places: the Message center in the Microsoft 365 admin center (Health > Message center) and the AI at Work Roadmap, which Microsoft’s change management overview says was formerly the Microsoft 365 Roadmap. Microsoft says the roadmap provides early planning signals that complement Message center announcements.

Message center flags a Major update at least 30 days ahead when admins must act, tags posts with High, Medium or Low relevance, and sends a weekly email digest to up to two addresses, per Microsoft’s Message center documentation. Each post carries a Message ID, such as MC1274325 for the channel unification, which support cases can cite. The AI at Work Roadmap shows which features are coming, when they are expected and which environments they apply to. Live incidents appear in Service health, not in Message center; our Microsoft 365 outage guide covers what to do when one hits.

These release options cover Teams, OneDrive, SharePoint Online, Outlook on the web, new Outlook for Windows, Office for the web and the admin center. They do not change Microsoft 365 Apps update channels. Microsoft recommends mapping “Targeted release for selected users” to Deferred release for the tenant with pilot users added to Standard release.

Do Teams, OneDrive and the web apps follow the same channels?

No. Microsoft 365 update channels govern only the Windows desktop apps such as Word, Excel, Outlook, Project and Visio. The Teams client updates twice a month on its own schedule, the OneDrive sync app moves through three rings, Mac apps update through Microsoft AutoUpdate (MAU), and the web services follow the release options above, per the Teams and OneDrive update pages.

Which Microsoft 365 update channel should each device use?

For most business devices, Monthly Enterprise Channel is the best fit: one release on the second Tuesday, three supported versions and three months of rollback. Current Channel fits users who need new Copilot and app features first. Windows 10 PCs are frozen at Version 2608 whatever the channel, and Semi-Annual no longer buys six months of feature stability.

For an MSP, the channel decision belongs in the managed services agreement rather than in a technician’s memory. Four lines cover it:

1. Channel per device group, for example Monthly Enterprise Channel for staff PCs and Current Channel for a named Copilot pilot group.
2. Owner of the setting: Cloud Update, Intune, Group Policy or the RMM, named against its level in the seven-level precedence table, with any higher level (such as a Cloud Update profile) kept empty so it cannot override the agreed channel.
3. Deadline and rollback: Update Deadline = 1 in policy, and the three-month rollback window Monthly Enterprise Channel allows.
4. Floor: no device older than Microsoft’s supported versions table (Version 2607 on Monthly Enterprise Channel as of October 13, 2026), checked monthly from Inventory or an RMM registry read.

How we compiled this

We compiled this guide from 23 Microsoft primary documents on Microsoft Learn and microsoft.com, accessed in October 2026, plus the 10 monthly MSRC CVRF documents for 2026 retrieved on October 26, 2026. We counted releases and CVEs ourselves from Microsoft’s update history and Office security release notes, then matched each CVE ID to its MSRC severity, impact and exploitability rating. No product testing or survey was involved. Competitor guides appear only in the comparison table, quoted with their dates.

Frequently asked questions

Do Microsoft 365 updates need a restart?

Usually not. Office applies a downloaded update in the background once the affected apps are closed. If it cannot do that for several days, users see a message that updates are ready, and if the PC restarts first, the update is applied as Windows starts without blocking sign-in, per Microsoft’s update process overview. Teams is different: it needs an app restart.

Can Microsoft 365 updates install without internet access?

Yes. Microsoft lists four ways to update Microsoft 365 Apps, and two avoid the internet on each PC: point devices at a network share filled with the Office Deployment Tool, set by ODT or Group Policy, or deliver updates through Configuration Manager. The share route lets you hold users on a tested build, per Microsoft Learn.

Why does a PC set to Semi-Annual Enterprise Channel show Monthly Enterprise Channel?

Because Version 2606 moved Semi-Annual devices onto Monthly Enterprise builds, File > Account now shows Monthly Enterprise Channel, while some management tools still report Semi-Annual. A build number above 20131.20000 confirms the switch, per the unification page. The admin center Inventory reports the channel of the installed build, so it can lag until the next update completes.

Do Office LTSC 2024 and Office 2021 get Microsoft 365 updates?

Not the same ones. Volume-licensed Office LTSC 2024 and 2021 use their own channels, PerpetualVL2024 and PerpetualVL2021, and get security fixes only: on October 13, 2026 that was Version 2408 (Build 17932.21056) for LTSC 2024 and Version 2108 (Build 14334.20974) for LTSC 2021, per Microsoft’s security release notes. Office 2019 support ended October 14, 2025.

Why is the Update Now button missing in Microsoft 365?

Update Now sits under File > Account > Update Options and appears when updates are enabled; Microsoft’s fix is Update Options > Enable updates, per its update basics page. If that choice is not offered, an admin policy manages updates: Microsoft’s suggested Group Policy and Intune settings include Hide option to enable or disable updates = Enabled, so ask whoever runs the tenant.

Can I roll back a Microsoft 365 update?

On Monthly Enterprise Channel, Microsoft supports up to three months of rollback, and Semi-Annual Enterprise Channel supports two months; Current Channel has no rollback window. Cloud Update offers pause and rollback for Monthly Enterprise profiles. The Office Deployment Tool can also install a specific Version, and Microsoft recommends setting the Channel attribute alongside it, per the ODT configuration options page.

Sources

1. Microsoft Learn, Update history for Microsoft 365 Apps (listed by date). Accessed October 2026.
2. Microsoft Learn, Overview of update channels for Microsoft 365 Apps. Accessed October 2026.
3. Microsoft Learn, Upcoming channel unification: Semi-Annual Enterprise Channel to Monthly Enterprise Channel. Accessed October 2026.
4. Microsoft Learn, Change the Microsoft 365 Apps update channel for devices in your organization. Accessed October 2026.
5. Microsoft Learn, Configuration options for the Office Deployment Tool. Accessed October 2026.
6. Microsoft Learn, Overview of the update process for Microsoft 365 Apps. Accessed October 2026.
7. Microsoft Learn, Choose how to manage updates to Microsoft 365 Apps. Accessed October 2026.
8. Microsoft Learn, Keep Office apps up to date with the latest updates. Accessed October 2026.
9. Microsoft Learn, Download sizes for updates to Microsoft 365 Apps. Accessed October 2026.
10. Microsoft Learn, Release notes for Microsoft Office security updates. Accessed October 2026.
11. Microsoft Learn, Release notes for Current Channel. Accessed October 2026.
12. Microsoft Learn, Overview of cloud update. Accessed October 2026.
13. Microsoft Learn, Requirements for cloud update. Accessed October 2026.
14. Microsoft Learn, Windows 10 end of support and Microsoft 365 Apps. Accessed October 2026.
15. Microsoft Learn, Set up the Standard or Targeted release options for Microsoft 365. Accessed October 2026.
16. Microsoft Learn, Plan for the retirement of Targeted release in Microsoft 365. Accessed October 2026.
17. Microsoft Learn, Modern change management for Microsoft 365: Overview. Accessed October 2026.
18. Microsoft Learn, Track new and changed features in the Microsoft 365 Message center. Accessed October 2026.
19. Microsoft Learn, Teams client update process. Accessed October 2026.
20. Microsoft Learn, The OneDrive sync app update process. Accessed October 2026.
21. Microsoft, AI at Work Roadmap (formerly Microsoft 365 Roadmap). Accessed October 2026.
22. Microsoft Learn, Inventory in the Microsoft 365 Apps admin center. Accessed October 2026.
23. Microsoft Learn, New-CMDetectionClauseRegistryKeyValue (VersionToReport example). Accessed October 2026.
24. Microsoft Security Response Center, Security Update Guide CVRF API v3.0, 2026-Jan to 2026-Oct. Accessed October 2026.
25. The Uptime Report, Patch Tuesday Statistics 2026. Accessed October 2026.
26. The Uptime Report, Known Exploited Vulnerabilities analysis 2026. Accessed October 2026.