Updated October 3, 2022: We have updated the rollout timeline below. Thank you for your patience.
Updated June 30, 2022: We have updated the rollout timeline below. Thank you for your patience.
Microsoft Defender for Office 365 is introducing a new way of interacting with quarantined messages through an asynchronous approach. Previously, quarantine operations were carried out in a synchronous model on the technical execution side.
Note: This change is a major step towards introducing partial string search functionality and 1,000 message bulk operation support in quarantine.
This message is associated with Microsoft 365 Roadmap ID 93303.
Microsoft Defender for Office 365 is working to enable additional quarantine enhancements, like partial string search functionality and 1,000 message bulk operation support in quarantine. As a result, we’ll be making adjustments to the release process through an asynchronous approach. the first stage will be the introduction of the asynchronous updates and the second stage will the introduction of enhancement features such as partial string search and 1,000 message bulk support.
Table of Contents
When this will happen
Standard: will begin rolling out in late July 2022 (previously late June 2022) and be completed by late February 2023 (previously late August 2022).
Government: will begin rolling out in early March 2023 (previously early September 2022) and be completed by early April 2023 (previously late September 2022).
How this will affect your organization
Previously, an Admin from Contoso.com could release a quarantine message to a User in Tailspintoys.com. However, to eliminate the risk that comes with such behavior we will be disabling it. Moving forward an Admin will need to download the item from quarantined with the password protected feature and use the download item for the specific workflow they want to accomplish. Please note that we will continue to support an Admin release to recipients who are in the same organization as the Admin.
Release to recipient in external organization disabled:
Share email screens:
New quarantine status:
We will be introducing two new quarantine statuses namely “Preparing to release” and “Error.” The “Preparing to release” status will indicate that the messages are in the process of being released while the “Error” status will indicate that a message release has failed, and the user needs to retry.
What you need to do to prepare
The goal for this communication is mostly for informational awareness. You may consider updating your training and documentation as appropriate.
- Microsoft Tech Community > Security, Compliance, and Identity > Microsoft Defender for Office 365 Blog > Simplifying the Quarantine Experience – Part Two
Message ID: MC384326
Published: 25 May 2022
Updated: 03 October 2022