check before: 2025-10-01
Product:
Defender, Defender for Office 365, Defender XDR, eDiscovery
Platform:
Online, World tenant
Status:
Change type:
User impact, Retirement
Links:
Details:
Summary:
Starting October 1, 2025, Microsoft Defender for Office 365 will retire the "Add to existing remediation" option due to low usage. Users must switch to "Create new remediation." No admin action is needed, but users should be informed and documentation updated accordingly. Other functionalities remain unaffected.
Details:
Introduction
Starting October 1, 2025, we will retire the Add to existing remediation option under the Propose remediation action in Microsoft Defender for Office 365. This change is being made due to consistently low usage and is intended to streamline the remediation experience.
When this will happen
This change will take effect on October 1, 2025.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
Created:
2025-09-03
updated:
2025-09-03
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
summary for non-techies**
XXXXXXX ... free basic plan only
Direct effects for Operations**
User Experience Disruption
Users accustomed to the 'Add to existing remediation' option may face confusion and frustration when required to switch to 'Create new remediation' without prior notice.
- roles: End Users, IT Support Staff
- references: https://learn.microsoft.com/microsoft-365/security/office-365-security/threat-explorer?view=o365-worldwide
Training and Documentation Gaps
Internal documentation and training materials may become outdated, leading to misinformation and improper usage of the new remediation process.
- roles: Training Coordinators, End Users
- references: https://learn.microsoft.com/microsoft-365/security/office-365-security/threat-explorer?view=o365-worldwide
Increased Support Requests
The change may lead to an increase in support requests from users who are unaware of the new process, impacting IT support resources.
- roles: IT Support Staff, Help Desk Agents
- references: https://learn.microsoft.com/microsoft-365/security/office-365-security/threat-explorer?view=o365-worldwide
Workflow Interruptions
Users who rely on the retired option may experience interruptions in their workflow, affecting productivity and efficiency.
- roles: End Users, Project Managers
- references: https://learn.microsoft.com/microsoft-365/security/office-365-security/threat-explorer?view=o365-worldwide
Compliance Risks
If users do not adapt to the new remediation process, it may lead to compliance risks if remediation actions are not executed properly.
- roles: Compliance Officers, End Users
- references: https://learn.microsoft.com/microsoft-365/security/office-365-security/threat-explorer?view=o365-worldwide
Configutation Options**
XXXXXXX ... paid membership only
Potentional Risks**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
Last updated 1 month ago ago
