Retirement of remediation action “Delete attachment”

Note: we are publishing this message again to ensure visibility for all impacted tenants. We apologize for any inconvenience.

We are retiring the ability to delete attachments as a response action in Microsoft Defender for Office 365. Instead admins can continue to take remediation actions on emails, which includes any attachments related to those emails.

Key points

  • Timing: February 15, 2021
  • Roll-out: tenant level
  • Action: review and assess 

How this will affect your organization

Users and admins who have a search and purge role assigned can still remove emails, but the separate remove attachment option will no longer be available as that functionality should be applied at the email level.  

What you need to do to prepare

You might want to notify other admins about this retirement and update your training and documentation as appropriate. 

Learn more: Remediate malicious email delivered in Office 365

Message ID: MC238894


No comments yet

Leave a Reply


I've been working with Microsoft Technologies over the last ten years, mainly focused on creating collaboration and productivity solutions that drive the adoption of Microsoft Modern Workplace.

%d bloggers like this: