529816 – Microsoft Defender for Office 365: Zero-hour auto-purge (ZAP) Teams protection capabilities to Defender for Office Plan 1

Product:

Defender, Defender for Office 365, Teams

Platform:

Android, iOS, Linux, Mac, Web, Windows Desktop, World tenant

Status:

Launched

Change type:

Links:

MC1187837

Details:

Security admins with Defender for Office 365 Plan 1 can utilize Zero-hour auto purge (ZAP) and admin quarantine for zapped Teams messages.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability

Created:
2025-11-17

updated:
2026-01-14

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Please, look at the most relevant linked item for details

explanation for non-techies**

Imagine your office as a fortress. In this fortress, you have guards at the gates to check who comes in and out, ensuring only trusted individuals can enter. Microsoft Defender for Office 365 acts like these guards, but for your digital workspace, specifically focusing on your communication tools like Microsoft Teams.

With the recent updates, even those with the basic level of protection, known as Plan 1, can now use some advanced security features. One of these features is called Zero-hour auto purge (ZAP). Think of ZAP as a quick-response team that removes any suspicious messages in Teams as soon as they are detected, much like how a security team might quickly remove an intruder from the premises before they can cause any harm.

Another feature is end-user reporting. This allows your team members to report any suspicious activity or messages they encounter, similar to how employees might alert security if they notice something unusual in the office. This empowers everyone to contribute to the overall safety of the digital environment.

Lastly, there's admin quarantine for zapped messages. Imagine a secure room where questionable items are stored for further inspection. This is what admin quarantine does for messages; it holds them in a safe place where administrators can review them to decide if they are indeed harmful or just a false alarm.

These features are designed to keep your digital workspace secure, allowing your team to focus on their work without worrying about potential threats. Whether you're using a desktop, a mobile device, or accessing your tools via the web, these protections are there to ensure a safe and efficient working environment.