MC505088 Exchange Online, SharePoint Development Services
From Microsoft Corporation
Technical Bulletin MC505088 · Published Jan 27, 2023 · Last updated Feb 16, 2023
Message Summary
Updated February 16, 2023: We have updated the content below for clarity. Thank you for your patience.
We are updating the recommended quarantine notification policy in the Standard and Strict preset security policies.
Policy | Quarantine Policy | Standard | Delivery location | Strict | Delivery location |
---|---|---|---|---|---|
Anti-Spam | SpamQuarantineTag | DefaultFullAccessPolicy* | Junk folder | DefaultFullAccessWithNotificationPolicy | Quarantine |
Anti-Spam | HighConfidenceSpamQuarantineTag | DefaultFullAccessWithNotificationPolicy | Quarantine | DefaultFullAccessWithNotificationPolicy | Quarantine |
Anti-Spam | PhishQuarantineTag | DefaultFullAccessWithNotificationPolicy | Quarantine | DefaultFullAccessWithNotificationPolicy | Quarantine |
Anti-Spam | HighConfidencePhishQuarantineTag | AdminOnlyAccessPolicy | Quarantine | AdminOnlyAccessPolicy | Quarantine |
Anti-Spam | BulkQuarantineTag | DefaultFullAccessPolicy* | Junk flolder | DefaultFullAccessPolicy | Quarantine |
Anti-Phish | SpoofQuarantineTag | DefaultFullAccessPolicy* | Junk flolder | DefaultFullAccessWithNotificationPolicy | Quarantine |
Anti-Phish | TargetedUserQuarantineTag | DefaultFullAccessWithNotificationPolicy | Quarantine | DefaultFullAccessWithNotificationPolicy | Quarantine |
Anti-Phish | TargetedDomainQuarantineTag | DefaultFullAccessWithNotificationPolicy | Quarantine | DefaultFullAccessWithNotificationPolicy | Quarantine |
Anti-Phish | MailboxIntelligenceQuarantineTag | DefaultFullAccessPolicy | Junk folder | DefaultFullAccessPolicy | Quarantine |
Anti-malware | QuarantineTag | AdminOnlyAccessPolicy | Quarantine | AdminOnlyAccessPolicy | Quarantine |
Safe Attachments | QuarantineTag | AdminOnlyAccessPolicy | Quarantine | AdminOnlyAccessPolicy | Quarantine |
With the DefaultFullAccessWithNotificationPolicy, Users will receive quarantine notifications for emails quarantined due to the corresponding threat policy.
*Note that the Quarantine policy assigned here is ineffective since the delivery location is Junk folder
Here is what the quarantine notification looks like:
When this will happen:
We will begin rolling this out in mid-February 2023 and complete rolling out by mid-March 2023.
How this will affect your organization:
If your organization has enabled preset security policies, these will be automatically updated to include the quarantine notification policies (DefaultFullAccessWithNotificationPolicy) as listed in the above table for the standard and strict protection preset profiles.
What you need to do to prepare:
No action required. Please review the following links to learn more:
- What are quarantine notifications? Quarantine notifications (end-user spam notifications) in Microsoft 365 – Office 365 | Microsoft Learn
- Specific controls set in Preset Security Policies: Microsoft recommendations for EOP and Defender for Office 365 security settings – Office 365 | Microsoft Learn
- We recommend enabling preset security policies for your organization: Steps to quickly set up the Standard or Strict preset security policies for Microsoft Defender for Office 365 – Office 365 | Microsoft Learn