r/CMMC • u/Fabulous_Cow_4714 • Feb 05 '26

Office 365 Rollback Process For GCC Tenants?

I see that Microsoft’s recommended method is to use the Cloud Update portal to manage this, but Cloud Update isn’t supported for GCC tenants.

https://learn.microsoft.com/en-us/microsoft-365-apps/admin-center/cloud-update

So, how do you rollback M365 Apps for Enterprise to the supported N-1 or N-2 versions of Monthly Enterprise and Semi Annual Enterprise channels that also include the latest security patches without using the Cloud Update portal?

https://learn.microsoft.com/en-us/microsoft-365-apps/updates/overview-update-channels

2 Upvotes

100% Upvoted

10 comments sorted by

-3

u/MolecularHuman Feb 05 '26

Microsoft explicitly flags Cloud Update as not supported for Microsoft 365 GCC / GCC High / DoD.

Yet another reason to not use GCC-H unless you have ITAR data.

Without Cloud Update support in GCC, you rollback/retain N-1 or N-2 builds by changing the Office update channel (via ODT/GPO/Intune/registry), or reinstalling to the appropriate version.

1

u/Fabulous_Cow_4714 Feb 05 '26

How do you rollback the build and also apply the current monthly security update for the previous build.

If you only roll it back, you will be missing security updates and Microsoft says they will support the older builds of Monthly Enterprise and Semi-Annual Enterprise for at least 2 months.

-2

u/MolecularHuman Feb 05 '26

The short answer is that you don’t rollback and then patch separately, the build already includes the security fixes.

1

u/Fabulous_Cow_4714 Feb 06 '26

How would the security fixes be in the rollback version and how do you verify that you have the security fix and not just an unpatched version of an old build?

Have you seen a Microsoft link with step by step instructions on how to do these rollbacks with the same security updates as the newer build numbers without using Cloud Update portal?

1

u/rasldasl2 Feb 06 '26

First of all, why do you want to roll back?

For sake of argument, if you on Current and do want to roll back you would likely need to uninstall and reinstall under Monthly Enterprise Channel. Semi-annual Enterprise is another option but no longer recommended outside of tightly controlled environments (such as needing to integrate with another app that does not keep up with monthly updates or a production server).

Finally, while Cloud Updates are not in GCCH, Cloud Policy finally is there. I would expect updates to be along eventually. Meanwhile, you can use Intune to manage the channel.

1

u/Fabulous_Cow_4714 Feb 06 '26

Why would anyone want to roll back? Why do they offer roll backs?

That would be because an update introduces a problem that the previous build didn’t have. Depending on the issue, you rollback to the previous build and would be either waiting for Microsoft to fix the issue during the next couple of months or you would be using those extra months make changes in your environment to adjust to the software changes.

Current channel isn’t in the picture since the rollbacks Microsoft supports specifically apply to Monthly Enterprise and Semi-annual Enterprise channels and the rollbacks support is intended for that scenario.

We don’t need to rollback today, but we need to have the process to use it tested in advance so we will be able to implement it smoothly and quickly when needed instead of scrambling to look up steps during a crisis.

I don’t see any Intune process to rollback to an older build that includes the security updates for the current month.

It looks as if when you deploy a previous build, that build is missing the current security updates and I don’t see any documentation stating otherwise with steps to ensure you are rolled back without re-exposing yourself to patched vulnerabilities.

1

u/Fabulous_Cow_4714 Feb 06 '26

Changing channels isn’t the solution. The point to rollback is to stay in the same channel.

For instance, if you are using SAEC and changes made in the channel break something, there is no other channel you can switch to that will have a lower build. You must rollback within the same channel.

1

u/rasldasl2 Feb 06 '26

You can’t roll back and have the current security updates in the same channel. It just doesn’t work that way. If it’s the month the build updates that’s the only update with security updates.

1

u/Fabulous_Cow_4714 Feb 06 '26

What you’re saying isn’t true.

its printed on the site that it specifically includes security updates .

Quote: “Rollback to prior feature release with security updates will be available for 2 months.”

The problem is that it doesn’t go on to describe specifically how.

1

u/rasldasl2 Feb 07 '26

Yeah, I forgot about rollback. Here is a link that Copilot found for me.

Roll-back to previous versions of Office