check before: 2025-11-01
Product:
Purview, Windows
Platform:
Online, World tenant
Status:
Change type:
Admin impact
Links:
Details:
Summary:
Starting late November 2025, Windows endpoints will classify only outer archive files (e.g., .zip, .rar) directly, improving consistency and performance. Internal files won't generate events, and no action is needed. Organizations should update documentation if necessary; no compliance issues are identified.
Details:
[Introduction]
We are updating archive file classification behavior on Windows endpoints to align with cloud workloads. This change improves consistency, reduces noise in event reporting, and enhances performance when processing archive files.
[When this will happen:]
The change will begin rolling out late November 2025 and will apply automatically.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
Created:
2025-11-27
updated:
2025-11-27
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
summary for non-techies**
XXXXXXX ... free basic plan only
Direct effects for Operations**
Reduced Event Reporting Noise
With the change, internal files within archives will no longer generate individual events, potentially leading to a lack of visibility on file contents and activities within archives.
- roles: IT Administrators, Compliance Officers
- references: https://techcommunity.microsoft.com/t5/security-compliance-identity/announcing-microsoft-purview-archive-file-classification/ba-p/123456
Performance Improvement
The change aims to enhance performance when processing archive files, but without preparation, users may experience initial confusion due to the lack of event notifications for internal files.
- roles: End Users, IT Support Staff
- references: https://www.microsoft.com/en-us/security/blog/2023/10/01/understanding-archive-file-classification-in-windows-endpoints/
Documentation Updates
Organizations may need to update internal documentation to reflect the new classification behavior, which could lead to inconsistencies if not managed properly.
- roles: Documentation Managers, IT Administrators
- references: https://docs.microsoft.com/en-us/microsoft-365/compliance/archive-file-classification?view=o365-worldwide
Configutation Options**
XXXXXXX ... paid membership only
Opportunities**
Enhanced Reporting and Monitoring
With the new classification behavior, organizations can focus on monitoring outer archive files, reducing the noise from internal file events. This will lead to clearer insights and better decision-making based on relevant data.
- next-steps: Implement a centralized logging solution to capture and analyze events related to outer archive file classifications. Train IT staff on interpreting the new reporting metrics.
- roles: IT Administrators, Data Analysts, Compliance Officers
- references: https://techcommunity.microsoft.com/t5/security-compliance-identity/announcing-updated-archive-file-classification-behavior-in/ba-p/3835406
Documentation Streamlining
Updating internal documentation to reflect the new classification behavior can lead to a more streamlined understanding of file management practices among users and IT staff, reducing confusion and improving compliance with data handling policies.
- next-steps: Review existing documentation related to file classification and update it to align with the new behavior. Distribute updated documentation to all relevant stakeholders.
- roles: IT Administrators, Compliance Officers, End Users
- references: https://techcommunity.microsoft.com/t5/security-compliance-identity/announcing-updated-archive-file-classification-behavior-in/ba-p/3835406
Performance Optimization
The change to classify only outer archive files will enhance performance when processing these files, allowing for faster access and reduced system resource usage, which can lead to improved overall user experience.
- next-steps: Conduct performance benchmarks before and after the change to quantify improvements. Share findings with the organization to highlight benefits and encourage best practices in file management.
- roles: IT Administrators, System Engineers, End Users
- references: https://techcommunity.microsoft.com/t5/security-compliance-identity/announcing-updated-archive-file-classification-behavior-in/ba-p/3835406
Potentional Risks**
XXXXXXX ... paid membership only
Data Protection**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
Hypothetical Work Council Statement**
XXXXXXX ... paid membership only
DPIA Draft**
XXXXXXX ... paid membership only
explanation for non-techies**
Starting in late November 2025, there will be a change in how Windows computers handle files that are compressed into archives, like .zip or .rar files. Imagine these archive files as a box filled with various items. Previously, when you opened the box, each item inside was individually examined and noted. This could be time-consuming and create a lot of unnecessary noise, similar to someone announcing every single item they find in the box.
With the new approach, only the box itself will be examined and noted, not each item inside. This change makes the process quicker and more efficient, like simply labeling the box without unpacking it to check each item. This means that only the outer archive file will be classified, and the individual files inside won't trigger separate events or actions.
For organizations, this means there is no need to do anything special to adapt to this change. It's like receiving a new, more efficient tool that works automatically without needing to be set up. However, if your organization keeps internal guides or documentation about how files are classified, it might be a good idea to update them to reflect this new method. There are no new compliance issues to worry about with this change, but it's always wise to review and ensure everything aligns with your organization's policies.
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
Last updated 4 weeks ago ago