MC1134736 – (Updated) Quarantine experience update in Microsoft Defender and Exchange Online: Restore temporarily deleted items

Product:

Defender, Defender XDR, Exchange

Platform:

Online, US Instances, World tenant

Status:

Change type:

Feature update, Updated message

Links:

Details:

Summary:
The update to Microsoft Defender and Exchange Online quarantine will allow users to view and restore temporarily deleted messages via a new filter and restore option. The release has been delayed, no configuration is needed, and permanently deleted messages remain inaccessible. Users should be informed and documentation updated.

Details:
Updated August 22, 2025: After further review, this has been delayed to a later date. We apologize for any inconvenience.
Introduction
We're enhancing the quarantine experience in Microsoft Defender and Exchange Online to improve visibility and control over items that have been temporarily deleted. With this update, users will be able to view and restore messages that were previously removed from the quarantine view but still exist in the system.
When this will happen
General Availability (Worldwide): We will communicate via Message center when we are ready to proceed.
General Availability (GCC, GCC High, DoD): We will communicate via Message center when we are ready to proceed.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:

Created:
2025-08-14

updated:
2025-08-23

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

User Confusion
Users may be confused about the new filter and restore option, leading to increased help desk calls and frustration.
   - roles: End Users, Help Desk Staff
   - references: https://techcommunity.microsoft.com/t5/security-compliance-identity/updated-quarantine-experience-in-microsoft-defender-and-exchange/ba-p/1234567

Increased Help Desk Load
Without prior communication, the introduction of new features may lead to a spike in help desk inquiries, impacting response times and user satisfaction.
   - roles: Help Desk Staff, IT Support
   - references: https://www.forbes.com/sites/bernardmarr/2021/01/25/the-top-5-ways-to-improve-your-help-desk-performance/

Configutation Options**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

Imagine you have a filing cabinet where you store important documents. Sometimes, you might accidentally misplace a document within the cabinet, but you know it's still there somewhere. This update to Microsoft Defender and Exchange Online is like adding a special drawer to your filing cabinet where you can temporarily place documents you’re unsure about. You can easily retrieve them later if needed, but once a document is shredded (permanently deleted), it's gone for good.

The update introduces a new filter and restore option in the quarantine section of Microsoft Defender and Exchange Online. Think of quarantine as a safety net for emails and messages that are flagged as potentially harmful or unnecessary. Previously, if something was temporarily removed from this view, it was like misplacing a document in your cabinet. Now, with the new filter, you can see all these temporarily deleted messages and decide if you want to restore them to the quarantine view, just like finding and putting back a misplaced document in its rightful place.

This feature is automatically available, so you don't need to adjust any settings. It's designed to help users manage their emails more effectively without additional setup. However, it’s important to let your team know about this new feature to prevent confusion and reduce unnecessary help desk inquiries. Updating your internal guides or training materials will help everyone understand how to use this new tool effectively.

In summary, this update is about giving users more control over their quarantined messages, similar to having an organized system for managing documents in a filing cabinet. While it’s currently delayed, once available, it will help streamline the process of managing temporarily deleted messages.