Microsoft Defender for Office 365 Preset Security Policies

We are making enhancements to Microsoft Defender for Office 365 preset security policies. It will provide a way to apply the policy to the entire organization and be able to optionally configure a list of custom users and custom domains to protect against impersonation attacks.

Impersonation protection applies to Microsoft Defender for Office 365 Plan 1 and Plan 2 & Microsoft 365 Defender

(more…)

Microsoft Defender for Office 365: Update to Quarantine notification default subject and review button

We will be updating the default subject within the Quarantine notification email that is sent to users.

When this will happen:

(more…)

Outlook – Additional RSVP Options

The additional options for more detailed RSVP responses will start to roll out across Outlook. With this feature, attendees can let the organizer and other attendees know how they plan to attend a meeting, whether in person or virtually. These responses can be seen by anyone in the meeting invite, inside and outside of their organization, with a commercial or education Microsoft 365 account using a supported client and can be changed at any point.

When this will happen:

(more…)

Microsoft Defender for Office 365: Password protected download of quarantined messages

With this change we are giving the ability to password protects items they download from quarantine. We want users to be confident that the items they are downloading to their systems will not execute involuntarily without their consent, and this capability will allow them to safely transport the items to external analysis tools.

This message is associated with Microsoft 365 Roadmap ID 93305

(more…)

Microsoft Defender for Office 365: Quarantine asynchronous update

Microsoft Defender for Office 365 is introducing a new way of interacting with quarantined messages through an asynchronous approach. Previously, quarantine operations were carried out in a synchronous model on the technical execution side.

Note: This change is a major step towards introducing partial string search functionality and 1,000 message bulk operation support in quarantine.

(more…)

Microsoft Defender for Office 365: Quarantined message storage in hidden system folder on user mailbox

Microsoft Defender for Office 365 is making some changes to quarantine folder storage. The experience for users will remain the same and users can leverage the delete action to maintain the storage folder for their quarantined messages.

This message is associated with Microsoft 365 Roadmap ID 93302.

(more…)

Custom organization branding for quarantine notification (custom sender address and Custom subject)

We will be adding capabilities to making it possible for Security Operations (SecOps) to customize end user quarantine notifications with their respective organization sender address and custom subject.

This message is associated with Microsoft 365 Roadmap ID 93301.

(more…)

Microsoft Defender for Office 365: Updates to quarantine folder storage

Microsoft Defender for Office 365 is making some changes to quarantine folder storage. The experience for users will remain the same and users can leverage the delete action to maintain the storage folder for their quarantined messages.
More info: https://techcommunity.microsoft.com/t5/microsoft-defender-for-office/simplifying-the-quarantine-experience-part-two/ba-p/3354687

(more…)

Microsoft Defender for Office 365: Quarantined message storage in hidden system folder on user mailbox

Microsoft Defender for Office 365 is changing the way quarantined messages are stored for users. Previously, quarantined messages were stored in a hosted repository away from the User mailbox. Moving forward these messages will be stored in a hidden system folder that is in the user mailbox. Although this hidden system folder is in the user mailbox it is important to note that this folder is not accessible by the users in any way. It is also worth noting that this change aligns with our long-term goal of surfacing the quarantine experience for users in the outlook client. For users who do not have a cloud mailbox (i.e., On-prem users) we will continue storing their quarantined messages in a hosted repository.
More info: https://techcommunity.microsoft.com/t5/microsoft-defender-for-office/simplifying-the-quarantine-experience-part-two/ba-p/3354687

(more…)

Exchange: Customizable Message Expiration

A common request from Exchange Online admins is for the ability to customize the organizations message expiration timeout. When a message can’t be delivered immediately due to a transient error, it will queue up and be periodically retried until either the message is sent or until the message expires 24 hours later. For some messages, 24 hours can be too long to wait only to find out a message wasn’t delivered. So, we’re introducing the ability for admins to customize the message expiration timeout to be less than 24 hours.

(more…)


I've been working with Microsoft Technologies over the last ten years, mainly focused on creating collaboration and productivity solutions that drive the adoption of Microsoft Modern Workplace.