Microsoft announce new European Cloud options


Microsoft announce new cloud options for Europe. There is an increasing push back from European organisations, particularly Government, against so many critical services and so much data all being run out of the US…this has been accelerated by the current geo-political situation too.

These announcements are Microsoft’s attempt to pre-emptively stem the flow of European customers away from their cloud services.

Altogether we’ve got:

  • Sovereign Public Cloud
  • Sovereign Private Cloud
  • National Partner Clouds
  • Microsoft 365 Local
  • Data Guardian
  • External Key Management
  • Regulated Environment Management

Microsoft 365 Local is interesting but the MS announcement only talks about productivity workloads like Exchange Server & SharePoint Server. Does M365 Local include Teams, Stream, ClipChamp, Planner etc.? 🤷‍♂️

Sovereign Public Cloud

Will be offered across all existing European datacentre regions, for all European customers, across enterprise services such as Microsoft Azure, Microsoft 365, Microsoft Security and Power Platform.

Customer data stays in Europe, under European Law, with operations and access controlled by European personnel, and encryption is under full control of customers.

Sovereign Private Cloud

Will support critical collaboration, communication and virtualization services workloads on Azure Local. This solution now integrates Microsoft 365 Local and the security platform with Azure Local, providing consistent capabilities for hybrid or air-gapped environments to meet resiliency and business continuity requirements

National Partner Clouds

Available in France (Bleu) & Germany (Delos Cloud), these will offer comprehensive capabilities of Microsoft 365 and Microsoft Azure in an independently owned and operated environment.

Microsoft 365 Local

Microsoft 365 Local provides customers with additional choice by bringing together Microsoft’s productivity server software into an Azure Local environment that can run entirely in a customer’s own datacentre.

This provides a simplified deployment and management framework for organizations to run Microsoft’s trusted productivity servers in environments they fully control. It remains to be seen exactly what is included and how the licensing works…

Data Guardian

Data Guardian will add an additional level of assurance by ensuring that only Microsoft personnel residing in Europe control remote access to these systems and adds additional human and technical oversight whenever engineers outside of Europe need access.

All remote access by Microsoft engineers to the systems that store and process your data in Europe is approved and monitored by European resident personnel in real time and will be logged in a tamper-evident ledger.

External Key Management

With external key management, customers can connect Azure to keys stored on their own Hardware Security Module (HSM) on-premises or hosted by a trusted third party.

Regulated Environment Management

The Regulated Environment Management service will allow customers to easily manage all these features in one place (for instance, configuring Data Guardian policies or reviewing access log entries).

The Microsoft announcement is here.

Microsoft Product Terms for June 2025


Photo by Markus Winkler on Pexels.com

It’s the Microsoft Product Terms for June 2025 and, as you’d expect in the last month of the FY, not too much has changed.

Clarification that it’s Cloud Add-ons to SA that must be acquired on the same agreement as the base license…rather than all SLs that have a pre-requisite license.

Azure App Service plan added to MCA.

Clarification that Entra ID Governance for External Identities may be used only for External Users. <– This seems like it’s closing a loophole that customers may have been using.

Copilot Studio added as a “covered product” to the Customer Copyright Commitment.

Microsoft Remote Network Bandwidth


Do you use Microsoft Global Secure Access?

Did you know you have an allocation of Microsoft remote network bandwidth?

Each license of:

  • Microsoft Entra ID P1
  • Microsoft Entra Internet Access
  • Microsoft Entra Suite

contributes towards the total as so:

https://learn.microsoft.com/en-gb/entra/global-secure-access/concept-remote-network-connectivity

If you need additional bandwidth, there is now a Remote Network Bandwidth SKU you can purchase.

Microsoft Product Terms: May 2025


Photo by Markus Winkler on Pexels.com

Microsoft have made a few changes this month:

Added “hidden offer products” to MCA Availability tables – these seem to include:

  1. M365 Cross-tenant User Data Migration
  2. Microsoft Defender Vulnerability Management Add-on to Microsoft Defender for Endpoint for Servers
  3. Viva Glint
  4. VDA Add-on for M365 E3/E5 USL
  5. M365 Apps for Enterprise
  6. Workplace Analytics

Numbers 2, 4, and 7 may not be available “in all sales channels and geos” and may also require “engaging with a Microsoft representative to place an order“.

A new Remote Network Bandwidth SKU has been added to the M365 section (this relates to Global Secure Access via Entra).

Microsoft Dragon Copilot has been added – this is a healthcare focused product from their Nuance acquisition.

Microsoft bring 3 year licenses to CSP


Microsoft have announced 3-year subscription terms on CSP for:

  • 1) Microsoft 365 E3 (with and without Teams)
  • 2) Microsoft 365 E5 (with and without Teams)
  • 3) Microsoft Teams Enterprise
  • 4) Microsoft 365 E5 Security
  • 5) Microsoft 365 E5 Compliance

Numbers 1, 2, and 3 will be available from June 1, 2025 while 4 & 5 will come on July 1, 2025.

The price will be the same as 3 x 12-month subscriptions but of course, with the price protection against increases that a longer commit brings. It seems there will be a 100 SKU minimum for these 3-year SKUs.

This strengthens the push for smaller EA customers to move across to CSP and comes hot on the heels of the “channel transfers interface” to that launched in April to help partners renew Enterprise Agreements (EAs) into CSP and retain their existing rights to bundled Teams.

Microsoft have also announced enhanced investment in, and incentives for, CSP partners moving into FY26 from July 1st.

See more info here.

Microsoft Purview gets more PAYG SKUs for AI


Microsoft Purview is a suite of products focused on data security, governance, and compliance across the Microsoft portfolio.

Microsoft first introduced Pay As You Go (PAYG) aka Consumption SKUs for Purview in January 2025 and now, from May 1, 2025 there are a new set. These new SKUs are aimed at protecting “your data as it moves across networks and through GenAI applications“.

The * is to note that Audit Standard is included within “Microsoft first party applications such as Microsoft 365 applications, Fabric, and Microsoft first party AI apps like Microsoft 365 Copilot, Security Copilot or AI applications custom-built using Copilot Studio“.

New metric/acronym alert! The 10,000 events for Insider Risk Management are known as a “Data Security Processing Unit (DPSU)”.

I notice that, for “Data Security Investigations”, Microsoft say:

“Data Security Investigations is billed through two meters: 1) the Data Security Investigations non-AI processing and storage meter and 2) Security Compute Units.

The Data Security Investigations non-AI processing and storage meter allows customers to store data related to an investigation. Security Compute Units are used to measure the computational capacity needed to run the AI analysis within DSI.”

Security Compute Units (SCUs) were introduced with Microsoft Security Copilot. It seems now that certain Purview PAYG usage may also consume your SCUs – needing further planning and budget insights.

You can see more from Microsoft here.

Microsoft on-premises hotpatching comes to Windows Server 2025 – at a cost


Hotpatching – the ability to install patch updates without needing to restart the server – has been available in Microsoft Azure for a while. It is now coming to on-premises Windows Server 2025 machines…for a fee.

This new capability requires connection to Azure Arc and is currently free in preview but, from July 1 2025, it will cost $1.50 per core per month. That’s over $100,000 per year for 100 x 64 core servers…

*Update May 2026*

As of May 15th, 2026 – Hotpatch enabled by Azure Arc is available at no additional cost for Windows Server 2025. See more here:

Simplified access to Hotpatching enabled by Azure Arc for Windows Server 2025 | Microsoft Community Hub

If you’ve enrolled into the Preview, make sure you unenroll by June 30th to avoid being charged!

Interestingly, it doesn’t remove reboots completely but reduces the number from 12 per year to 4.

See more details from Microsoft here.

Microsoft Product Terms: April 2025


Photo by Markus Winkler on Pexels.com

Frontline Worker Use Rights have moved to the Universal Terms for Online Services from product specific pages

A new definition for “Frontline Worker License” has been introduced in the Glossary

“Frontline Worker License means a license for a Microsoft Product designated with an “F”, “FLW”, or “Frontline” as identified in the Product Conditions table of product specific terms, which are subject to the Eligibility to Assign Frontline Worker Licenses terms in the Universal License Terms for all Online Services.”

Added Windows 10 ESU Cloud Managed SKUs

Removed Dynamics 365 Fraud Protection and Fraud Protection Additional Capacity from Availability tables

Updated Windows 365 Frontline terms and grant Windows 365 access rights for Windows Cloud PC OS

Added Windows 365 Disaster Recovery Plus Add-on to Availability Table

Microsoft announce on-premises price increases


Photo by Monstera on Pexels.com

Microsoft have announced more price increases!

From July 1st, 2025 there will be a 10% increase for the on-premises versions of:

SharePoint Server
Exchange Server
Skype for Business Server

The Subscription Editions of Exchange and Skype will also be available from July 2025.

But wait – there’s more!

From the same date, Core CAL Suite will increase by 15% and Enterprise CAL Suite will increase by 20%.

*Update* The price increase for the CAL Suites has been pushed back to August 1st, 2025

See the announcement here: https://techcommunity.microsoft.com/blog/microsoft_365blog/licensing-and-pricing-updates-for-on-premises-server-products-coming-july-2025/4400174

Microsoft Product Terms: March 2025


Photo by Markus Winkler on Pexels.com

Removed “without Microsoft’s prior written approval” from the clause preventing using MS service to mine crypto…I guess they realised they were never going to give anyone permission for this!

Changed the Use Rights for Azure Local software from:

“Customer may use the Azure Local software only (i) on servers dedicated to Customer’s internal use“

to

“Customer may use the Azure Local software only (i) on devices dedicated to Customer’s internal use“

Microsoft say this represents a move to “include smaller, more affordable devices than traditional servers“

They also removed the following clause “Any customer support for Azure Local that may be available from Microsoft requires that Azure Local runs on server hardware that is pre-validated and listed in the Azure Local catalog or any successor.”

Added Microsoft 365 Copilot Chat to the list of EU Data Boundary Services

March 5th

You can now add the Microsoft 365 E5 Security add-on to the Business Premium SKU.

March 12th

Added a section on Data Handling of Query Data with M365 Copilot & M365 Copilot Chat:

  • Microsoft has no rights in Query Data other than as needed to provide the services,
  • Query Data is not used to improve Bing,
  • Query Data is not used to create advertising profiles or track user behavior,
  • Query Data is not shared with advertisers or otherwise beyond Microsoft and its contracted suppliers who are subject to terms no less protective than these provisions,
  • Query Data is not used to train generative AI foundation models, and
  • Query Data is treated as Customer confidential information and protected by appropriate technical and organizational measures.

Clarification that certain concurrent use rights for Defender on up to 5 devices does not include Server OSEs:

  • Eligible Licensed Users may use Microsoft Defender for Business on up to five concurrent devices. Customer may not use a Microsoft Defender for Business User SL with server OSEs.
  • Eligible Licensed Users may use Microsoft Defender Vulnerability Management or Microsoft Defender Vulnerability Management Add-on on up to five concurrent devices. Customer may not use Microsoft Defender Vulnerability Management or Microsoft Defender Vulnerability Management Add-On User SLs with server OSEs.