Microsoft Defender for Office 365 is introducing a new way of interacting with quarantined messages through an asynchronous approach. Previously, quarantine operations were carried out in a synchronous model on the technical execution side.
Note: This change is a major step towards introducing partial string search functionality and 1,000 message bulk operation support in quarantine.
This message is associated with Microsoft 365 Roadmap ID 93303.
Microsoft Defender for Office 365 is working to enable additional quarantine enhancements, like partial string search functionality and 1,000 message bulk operation support in quarantine. As a result, we’ll be making adjustments to the release process through an asynchronous approach. the first stage will be the introduction of the asynchronous updates and the second stage will the introduction of enhancement features such as partial string search and 1,000 message bulk support.
When this will happen
Standard: will begin rolling out in late June and be completed by mid-July.
Government: will begin rolling out in late July and be completed by early August.
How this will affect your organization
Previously, an Admin from Contoso.com could release a quarantine message to a User in Tailspintoys.com. However, to eliminate the risk that comes with such behavior we will be disabling it. Moving forward an Admin will need to download the item from quarantined with the password protected feature and use the download item for the specific workflow they want to accomplish. Please note that we will continue to support an Admin release to recipients who are in the same organization as the Admin.
Release to recipient in external organization disabled:
Share email screens:
New quarantine status:
We will be introducing two new quarantine statuses namely “Preparing to release” and “Error.” The “Preparing to release” status will indicate that the messages are in the process of being released while the “Error” status will indicate that a message release has failed, and the user needs to retry.
What you need to do to prepare
The goal for this communication is mostly for informational awareness. You may consider updating your training and documentation as appropriate.
- Microsoft Tech Community > Security, Compliance, and Identity > Microsoft Defender for Office 365 Blog > Simplifying the Quarantine Experience – Part Two
Message ID: MC384326
Published: 25 May 2022
Updated: 25 May 2022