Search

MC505088 – (Updated) Microsoft Defender for Office 365: Quarantine Notifications enabled for Preset Security Policies (archived)

Microsoft Exchange Logo

check before: 2023-02-10

Product:

Defender, Defender for Office 365, Exchange, Microsoft 365 Apps, Microsoft 365 Defender

Platform:

Online, World tenant

Status:

Change type:

Admin impact, Feature update, Updated message

Links:

Details:

Updated March 22, 2023: We have updated the rollout timeline below. Thank you for your patience.
We are updating the recommended quarantine notification policy in the Standard and Strict preset security policies.
PolicyQuarantine PolicyStandardDelivery locationStrictDelivery location
Anti-SpamSpamQuarantineTag DefaultFullAccessPolicy*Junk folderDefaultFullAccessWithNotificationPolicyQuarantine
Anti-SpamHighConfidenceSpamQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-SpamPhishQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-SpamHighConfidencePhishQuarantineTag AdminOnlyAccessPolicy QuarantineAdminOnlyAccessPolicy Quarantine
Anti-SpamBulkQuarantineTag DefaultFullAccessPolicy* Junk flolderDefaultFullAccessPolicy Quarantine
Anti-PhishSpoofQuarantineTag DefaultFullAccessPolicy* Junk flolderDefaultFullAccessWithNotificationPolicyQuarantine
Anti-Phish TargetedUserQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-Phish TargetedDomainQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-Phish MailboxIntelligenceQuarantineTag DefaultFullAccessPolicy Junk folderDefaultFullAccessPolicy Quarantine
Anti-malware QuarantineTag AdminOnlyAccessPolicy QuarantineAdminOnlyAccessPolicy Quarantine
Safe AttachmentsQuarantineTag AdminOnlyAccessPolicy QuarantineAdminOnlyAccessPolicy Quarantine



With the DefaultFullAccessWithNotificationPolicy, Users will receive quarantine notifications for emails quarantined due to the corresponding threat policy.
*Note that the Quarantine policy assigned here is ineffective since the delivery location is Junk folder
Here is what the quarantine notification looks like:





[When this will happen:]
We will begin rolling this out in mid-February 2023 and complete rolling out by mid-April 2023 (previously mid-March).

Change Category:
XXXXXXX ...

Scope:
XXXXXXX ...

Release Phase:

Created:
2023-01-28

updated:
2023-03-23

the free basic plan is required to see all details. Sign up here


A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.


changes*

DatePropertyoldnew
2023-03-23MC Last Updated02/16/2023 21:59:002023-03-23T04:14:06Z
2023-03-23MC MessagesUpdated February 16, 2023: We have updated the content below for clarity. Thank you for your patience.
We are updating the recommended quarantine notification policy in the Standard and Strict preset security policies.
PolicyQuarantine PolicyStandardDelivery locationStrictDelivery location
Anti-SpamSpamQuarantineTag DefaultFullAccessPolicy*Junk folderDefaultFullAccessWithNotificationPolicyQuarantine
Anti-SpamHighConfidenceSpamQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-SpamPhishQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-SpamHighConfidencePhishQuarantineTag AdminOnlyAccessPolicy QuarantineAdminOnlyAccessPolicy Quarantine
Anti-SpamBulkQuarantineTag DefaultFullAccessPolicy* Junk flolderDefaultFullAccessPolicy Quarantine
Anti-PhishSpoofQuarantineTag DefaultFullAccessPolicy* Junk flolderDefaultFullAccessWithNotificationPolicyQuarantine
Anti-Phish TargetedUserQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-Phish TargetedDomainQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-Phish MailboxIntelligenceQuarantineTag DefaultFullAccessPolicy Junk folderDefaultFullAccessPolicy Quarantine
Anti-malware QuarantineTag AdminOnlyAccessPolicy QuarantineAdminOnlyAccessPolicy Quarantine
Safe AttachmentsQuarantineTag AdminOnlyAccessPolicy QuarantineAdminOnlyAccessPolicy Quarantine



With the DefaultFullAccessWithNotificationPolicy, Users will receive quarantine notifications for emails quarantined due to the corresponding threat policy.
*Note that the Quarantine policy assigned here is ineffective since the delivery location is Junk folder
Here is what the quarantine notification looks like:





[When this will happen:]
We will begin rolling this out in mid-February 2023 and complete rolling out by mid-March 2023.
Updated March 22, 2023: We have updated the rollout timeline below. Thank you for your patience.
We are updating the recommended quarantine notification policy in the Standard and Strict preset security policies.
PolicyQuarantine PolicyStandardDelivery locationStrictDelivery location
Anti-SpamSpamQuarantineTag DefaultFullAccessPolicy*Junk folderDefaultFullAccessWithNotificationPolicyQuarantine
Anti-SpamHighConfidenceSpamQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-SpamPhishQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-SpamHighConfidencePhishQuarantineTag AdminOnlyAccessPolicy QuarantineAdminOnlyAccessPolicy Quarantine
Anti-SpamBulkQuarantineTag DefaultFullAccessPolicy* Junk flolderDefaultFullAccessPolicy Quarantine
Anti-PhishSpoofQuarantineTag DefaultFullAccessPolicy* Junk flolderDefaultFullAccessWithNotificationPolicyQuarantine
Anti-Phish TargetedUserQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-Phish TargetedDomainQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-Phish MailboxIntelligenceQuarantineTag DefaultFullAccessPolicy Junk folderDefaultFullAccessPolicy Quarantine
Anti-malware QuarantineTag AdminOnlyAccessPolicy QuarantineAdminOnlyAccessPolicy Quarantine
Safe AttachmentsQuarantineTag AdminOnlyAccessPolicy QuarantineAdminOnlyAccessPolicy Quarantine



With the DefaultFullAccessWithNotificationPolicy, Users will receive quarantine notifications for emails quarantined due to the corresponding threat policy.
*Note that the Quarantine policy assigned here is ineffective since the delivery location is Junk folder
Here is what the quarantine notification looks like:





[When this will happen:]
We will begin rolling this out in mid-February 2023 and complete rolling out by mid-April 2023 (previously mid-March).
2023-03-23MC End Time04/20/2023 09:00:002023-05-29T09:00:00Z
2023-02-17MC MessagesUpdated February 14, 2023: We have updated the content below for clarity. Thank you for your patience.
We are updating the recommended quarantine notification policy in the Standard and Strict preset security policies.
PolicyQuarantine PolicyStandardDelivery locationStrictDelivery location
Anti-SpamSpamQuarantineTag DefaultFullAccessPolicy*Junk folderDefaultFullAccessWithNotificationPolicyQuarantine
Anti-SpamHighConfidenceSpamQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-SpamPhishQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-SpamHighConfidencePhishQuarantineTag AdminOnlyAccessPolicy QuarantineAdminOnlyAccessPolicy Quarantine
Anti-SpamBulkQuarantineTag DefaultFullAccessPolicy* Junk flolderDefaultFullAccessPolicy Quarantine
Anti-SpamSpoofQuarantineTag DefaultFullAccessPolicy* Junk flolderDefaultFullAccessWithNotificationPolicyQuarantine
Anti-Phish TargetedUserQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-Phish TargetedDomainQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-Phish MailboxIntelligenceQuarantineTag DefaultFullAccessPolicy Junk folderDefaultFullAccessPolicy Quarantine
Anti-malware QuarantineTag AdminOnlyAccessPolicy QuarantineAdminOnlyAccessPolicy Quarantine
Safe AttachmentsQuarantineTag AdminOnlyAccessPolicy QuarantineAdminOnlyAccessPolicy Quarantine



With the DefaultFullAccessWithNotificationPolicy, Users will receive quarantine notifications for emails quarantined due to the corresponding threat policy.
*Note that the Quarantine policy assigned here is ineffective since the delivery location is Junk folder
Here is what the quarantine notification looks like:





[When this will happen:]
We will begin rolling this out in mid-February 2023 and complete rolling out by mid-March 2023.
Updated February 16, 2023: We have updated the content below for clarity. Thank you for your patience.
We are updating the recommended quarantine notification policy in the Standard and Strict preset security policies.
PolicyQuarantine PolicyStandardDelivery locationStrictDelivery location
Anti-SpamSpamQuarantineTag DefaultFullAccessPolicy*Junk folderDefaultFullAccessWithNotificationPolicyQuarantine
Anti-SpamHighConfidenceSpamQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-SpamPhishQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-SpamHighConfidencePhishQuarantineTag AdminOnlyAccessPolicy QuarantineAdminOnlyAccessPolicy Quarantine
Anti-SpamBulkQuarantineTag DefaultFullAccessPolicy* Junk flolderDefaultFullAccessPolicy Quarantine
Anti-PhishSpoofQuarantineTag DefaultFullAccessPolicy* Junk flolderDefaultFullAccessWithNotificationPolicyQuarantine
Anti-Phish TargetedUserQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-Phish TargetedDomainQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-Phish MailboxIntelligenceQuarantineTag DefaultFullAccessPolicy Junk folderDefaultFullAccessPolicy Quarantine
Anti-malware QuarantineTag AdminOnlyAccessPolicy QuarantineAdminOnlyAccessPolicy Quarantine
Safe AttachmentsQuarantineTag AdminOnlyAccessPolicy QuarantineAdminOnlyAccessPolicy Quarantine



With the DefaultFullAccessWithNotificationPolicy, Users will receive quarantine notifications for emails quarantined due to the corresponding threat policy.
*Note that the Quarantine policy assigned here is ineffective since the delivery location is Junk folder
Here is what the quarantine notification looks like:





[When this will happen:]
We will begin rolling this out in mid-February 2023 and complete rolling out by mid-March 2023.
2023-02-17MC Last Updated02/14/2023 21:14:162023-02-16T21:59:00Z
2023-02-15MC MessagesUpdated February 9, 2023: We have updated the content below for clarity. Thank you for your patience.
We are updating the recommended quarantine notification policy in the Standard and Strict preset security policies.
PolicyQuarantine PolicyStandardDelivery locationStrictDelivery location
Anti-SpamSpamQuarantineTag DefaultFullAccessPolicy*Junk folderDefaultFullAccessWithNotificationPolicyQuarantine
Anti-SpamHighConfidenceSpamQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-SpamPhishQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-SpamHighConfidencePhishQuarantineTag AdminOnlyAccessPolicy QuarantineAdminOnlyAccessPolicy Quarantine
Anti-SpamBulkQuarantineTag DefaultFullAccessPolicy* Junk flolderDefaultFullAccessPolicy Quarantine
Anti-Phish TargetedUserQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-Phish TargetedDomainQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-Phish MailboxIntelligenceQuarantineTag DefaultFullAccessPolicy Junk folderDefaultFullAccessPolicy Quarantine
Anti-malware QuarantineTag AdminOnlyAccessPolicy QuarantineAdminOnlyAccessPolicy Quarantine
Safe AttachmentsQuarantineTag AdminOnlyAccessPolicy QuarantineAdminOnlyAccessPolicy Quarantine



With the DefaultFullAccessWithNotificationPolicy, Users will receive quarantine notifications for emails quarantined due to the corresponding threat policy.
*Note that the Quarantine policy assigned here is ineffective since the delivery location is Junk folder
Here is what the quarantine notification looks like:





[When this will happen:]
We will begin rolling this out in mid-February 2023 and complete rolling out by mid-March 2023.
Updated February 14, 2023: We have updated the content below for clarity. Thank you for your patience.
We are updating the recommended quarantine notification policy in the Standard and Strict preset security policies.
PolicyQuarantine PolicyStandardDelivery locationStrictDelivery location
Anti-SpamSpamQuarantineTag DefaultFullAccessPolicy*Junk folderDefaultFullAccessWithNotificationPolicyQuarantine
Anti-SpamHighConfidenceSpamQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-SpamPhishQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-SpamHighConfidencePhishQuarantineTag AdminOnlyAccessPolicy QuarantineAdminOnlyAccessPolicy Quarantine
Anti-SpamBulkQuarantineTag DefaultFullAccessPolicy* Junk flolderDefaultFullAccessPolicy Quarantine
Anti-SpamSpoofQuarantineTag DefaultFullAccessPolicy* Junk flolderDefaultFullAccessWithNotificationPolicyQuarantine
Anti-Phish TargetedUserQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-Phish TargetedDomainQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-Phish MailboxIntelligenceQuarantineTag DefaultFullAccessPolicy Junk folderDefaultFullAccessPolicy Quarantine
Anti-malware QuarantineTag AdminOnlyAccessPolicy QuarantineAdminOnlyAccessPolicy Quarantine
Safe AttachmentsQuarantineTag AdminOnlyAccessPolicy QuarantineAdminOnlyAccessPolicy Quarantine



With the DefaultFullAccessWithNotificationPolicy, Users will receive quarantine notifications for emails quarantined due to the corresponding threat policy.
*Note that the Quarantine policy assigned here is ineffective since the delivery location is Junk folder
Here is what the quarantine notification looks like:





[When this will happen:]
We will begin rolling this out in mid-February 2023 and complete rolling out by mid-March 2023.
2023-02-15MC Last Updated02/09/2023 22:41:512023-02-14T21:14:16Z
2023-02-10MC MessagesWe are updating the recommended quarantine notification policy in the Standard and Strict preset security policies.


PolicyQuarantine PolicyStandardStrict
Anti-SpamSpamQuarantineTag DefaultFullAccessPolicy DefaultFullAccessWithNotificationPolicy
Anti-SpamHighConfidenceSpamQuarantineTag DefaultFullAccessWithNotificationPolicyDefaultFullAccessWithNotificationPolicy
Anti-SpamPhishQuarantineTag DefaultFullAccessWithNotificationPolicyDefaultFullAccessWithNotificationPolicy
Anti-SpamHighConfidencePhishQuarantineTag AdminOnlyAccessPolicy AdminOnlyAccessPolicy
Anti-SpamBulkQuarantineTag DefaultFullAccessPolicy DefaultFullAccessPolicy
Anti-Phish TargetedUserQuarantineTag DefaultFullAccessWithNotificationPolicyDefaultFullAccessWithNotificationPolicy
Anti-Phish TargetedDomainQuarantineTag DefaultFullAccessWithNotificationPolicyDefaultFullAccessWithNotificationPolicy
Anti-Phish MailboxIntelligenceQuarantineTag DefaultFullAccessPolicy DefaultFullAccessPolicy
Anti-malware QuarantineTag AdminOnlyAccessPolicy AdminOnlyAccessPolicy
Safe AttachmentsQuarantineTag AdminOnlyAccessPolicy AdminOnlyAccessPolicy

With the DefaultFullAccessWithNotificationPolicy, Users will receive quarantine notifications for emails quarantined due to the corresponding threat policy.

Here is what the quarantine notification looks like:





[When this will happen:]
We will begin rolling this out in mid-February 2023 and complete rolling out by mid-March 2023.
Updated February 9, 2023: We have updated the content below for clarity. Thank you for your patience.
We are updating the recommended quarantine notification policy in the Standard and Strict preset security policies.
PolicyQuarantine PolicyStandardDelivery locationStrictDelivery location
Anti-SpamSpamQuarantineTag DefaultFullAccessPolicy*Junk folderDefaultFullAccessWithNotificationPolicyQuarantine
Anti-SpamHighConfidenceSpamQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-SpamPhishQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-SpamHighConfidencePhishQuarantineTag AdminOnlyAccessPolicy QuarantineAdminOnlyAccessPolicy Quarantine
Anti-SpamBulkQuarantineTag DefaultFullAccessPolicy* Junk flolderDefaultFullAccessPolicy Quarantine
Anti-Phish TargetedUserQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-Phish TargetedDomainQuarantineTag DefaultFullAccessWithNotificationPolicyQuarantineDefaultFullAccessWithNotificationPolicyQuarantine
Anti-Phish MailboxIntelligenceQuarantineTag DefaultFullAccessPolicy Junk folderDefaultFullAccessPolicy Quarantine
Anti-malware QuarantineTag AdminOnlyAccessPolicy QuarantineAdminOnlyAccessPolicy Quarantine
Safe AttachmentsQuarantineTag AdminOnlyAccessPolicy QuarantineAdminOnlyAccessPolicy Quarantine



With the DefaultFullAccessWithNotificationPolicy, Users will receive quarantine notifications for emails quarantined due to the corresponding threat policy.
*Note that the Quarantine policy assigned here is ineffective since the delivery location is Junk folder
Here is what the quarantine notification looks like:





[When this will happen:]
We will begin rolling this out in mid-February 2023 and complete rolling out by mid-March 2023.
2023-02-10MC TitleMicrosoft Defender for Office 365: Quarantine Notifications enabled for Preset Security Policies(Updated) Microsoft Defender for Office 365: Quarantine Notifications enabled for Preset Security Policies
2023-02-10MC Last Updated01/27/2023 20:31:352023-02-09T22:41:51Z
2023-02-10MC MessageTagNamesFeature update, Admin impactUpdated message, Feature update, Admin impact

*starting April 2022

Last updated 10 months ago

Share to MS Teams

Login to your account

Welcome Back, We Missed You!