(Updated) Microsoft Defender for Office 365: Quarantine Notifications enabled for Preset Security Policies

  • Home |
  • (Updated) Microsoft Defender for Office 365: Quarantine Notifications enabled for Preset Security Policies
Microsoft Exchange Curtain Reveal Tech Bulletin Header

MC505088 Exchange Online, SharePoint Development Services

From Microsoft Corporation
Technical Bulletin MC505088 · Published Jan 27, 2023 · Last updated Feb 16, 2023

Message Summary

Updated February 16, 2023: We have updated the content below for clarity. Thank you for your patience.

We are updating the recommended quarantine notification policy in the Standard and Strict preset security policies.

Policy Quarantine Policy Standard Delivery location Strict Delivery location
Anti-Spam SpamQuarantineTag DefaultFullAccessPolicy* Junk folder DefaultFullAccessWithNotificationPolicy Quarantine
Anti-Spam HighConfidenceSpamQuarantineTag DefaultFullAccessWithNotificationPolicy Quarantine DefaultFullAccessWithNotificationPolicy Quarantine
Anti-Spam PhishQuarantineTag DefaultFullAccessWithNotificationPolicy Quarantine DefaultFullAccessWithNotificationPolicy Quarantine
Anti-Spam HighConfidencePhishQuarantineTag AdminOnlyAccessPolicy Quarantine AdminOnlyAccessPolicy Quarantine
Anti-Spam BulkQuarantineTag DefaultFullAccessPolicy* Junk flolder DefaultFullAccessPolicy Quarantine
Anti-Phish SpoofQuarantineTag DefaultFullAccessPolicy* Junk flolder DefaultFullAccessWithNotificationPolicy Quarantine
Anti-Phish   TargetedUserQuarantineTag DefaultFullAccessWithNotificationPolicy Quarantine DefaultFullAccessWithNotificationPolicy Quarantine
Anti-Phish   TargetedDomainQuarantineTag DefaultFullAccessWithNotificationPolicy Quarantine DefaultFullAccessWithNotificationPolicy Quarantine
Anti-Phish   MailboxIntelligenceQuarantineTag DefaultFullAccessPolicy Junk folder DefaultFullAccessPolicy Quarantine
Anti-malware   QuarantineTag AdminOnlyAccessPolicy Quarantine AdminOnlyAccessPolicy Quarantine
Safe Attachments QuarantineTag AdminOnlyAccessPolicy Quarantine AdminOnlyAccessPolicy Quarantine

With the DefaultFullAccessWithNotificationPolicy, Users will receive quarantine notifications for emails quarantined due to the corresponding threat policy.

*Note that the Quarantine policy assigned here is ineffective since the delivery location is Junk folder

Here is what the quarantine notification looks like: 

quarantine notification
View image in new tab

When this will happen:

We will begin rolling this out in mid-February 2023 and complete rolling out by mid-March 2023.

How this will affect your organization:

If your organization has enabled preset security policies, these will be automatically updated to include the quarantine notification policies (DefaultFullAccessWithNotificationPolicy) as listed in the above table for the standard and strict protection preset profiles.

What you need to do to prepare:

No action required. Please review the following links to learn more:

Recent Comments

No comments to show.

Recent Posts

Microsoft 365 Curtain Reveal Tech Bulletin Header
New Outlook for Windows: Auto-reading emails with Microsoft Windows Narrator
October 14, 2024
Microsoft 365 Curtain Reveal Tech Bulletin Header
(Updated) Microsoft Purview: Minor encrypted message portal design updates, URL to remain the same
October 14, 2024
Microsoft Exchange Curtain Reveal Tech Bulletin Header
(Updated) Microsoft Defender for Office 365: Tenant Allow/Block List will support IPv6 allow and block entries
October 14, 2024