← Back
(Updated) Quarantine experience update in Microsoft Defender and Exchange Online: Restore temporarily deleted items
MC1134736 · build prod-20251231-200323
Category
stayInformed
Severity
normal
Major change
False
Last modified
2025-09-11 21:30:57
Summary source
Azure OpenAI (gpt-4.1)
Action by (Graph)
Action by (AI)
Services
Exchange Online, Microsoft Defender XDR
Tags
Updated message, Feature update
Master tags
Security
Roadmap IDs

One-line summary

Defender and Exchange Online quarantine portals will let users view and restore messages temporarily deleted from quarantine using new filter and restore options.

Similar updates

More like this
MC1166867 (Updated) Microsoft Defender for Office 365: Enhancing the quarantine email preview experience
(Updated) Microsoft Defender for Office 365: Enhancing the quarantine email preview experience Defender for Office 365 quarantine email preview is being updated for clarity and security; plain text view retired, URL previews limited, and external content loading simplified. Updated October 23, 2025: We have updated the timelines. We’re improving.
MC1171845 (Updated) Microsoft Defender for Office 365: Enhancing the quarantine experience for administrators
(Updated) Microsoft Defender for Office 365: Enhancing the quarantine experience for administrators Defender for Office 365 quarantine will list messages by individual recipient, improving admin clarity; rollout starts early January 2026 with backend enhancements and cmdlet behavior changes. Updated November 12, 2025: We have updated the.
MC1042925 (Updated) Microsoft Defender for Office 365: Enhancing page load performance
(Updated) Microsoft Defender for Office 365: Enhancing page load performance Defender for Office 365 will improve portal page load times, starting with Submission page in March 2025; no downtime or required admin action during phased rollout. Updated July 9, 2025: We have updated the timeline below. At Microsoft Defender for Office 365, we are.
MC1187837 Microsoft Defender for Office 365 Zero-hour auto-purge (ZAP) Teams protection capabilities to Defender for Office Plan 1
Microsoft Defender for Office 365 Zero-hour auto-purge (ZAP) Teams protection capabilities to Defender for Office Plan 1 Starting January 6, 2026, Zero-hour auto-purge (ZAP) will be enabled by default for Teams in Defender for Office 365 Plan 1, automatically quarantining malicious messages. [Introduction] Starting January 6, 2026 ,  Zero-hour.
MC992217 (Updated) Microsoft Defender: Changes to Defender for Cloud Apps alerts
(Updated) Microsoft Defender: Changes to Defender for Cloud Apps alerts Defender for Cloud Apps alerts in Defender XDR will update alert source fields and alert ID prefixes for new alerts, affecting APIs, SIEM, and custom automations; rollout completes by late June 2025. Coming soon for Microsoft Defender for Cloud Apps: A change to alerts.
MC1147387 Microsoft Defender for Office 365: Alert experience enhancements for faster triage
Microsoft Defender for Office 365: Alert experience enhancements for faster triage Defender for Office 365 will consolidate related alerts into richer, single alerts starting mid-September 2025, reducing alert fatigue and improving triage without changing detection or workflows. Introduction We’re improving the alert experience in Microsoft.

Details

Summary
The update to Microsoft Defender and Exchange Online quarantine will allow users to view and restore temporarily deleted messages via a new filter and restore option. The release has been delayed, no configuration is needed, and permanently deleted messages remain inaccessible. Users should be informed and documentation updated.

Body (from Message Center)

Updated August 22, 2025: After further review, this has been delayed to a later date. We apologize for any inconvenience.

Introduction

We're enhancing the quarantine experience in Microsoft Defender and Exchange Online to improve visibility and control over items that have been temporarily deleted. With this update, users will be able to view and restore messages that were previously removed from the quarantine view but still exist in the system.

When this will happen

  • General Availability (Worldwide): We will communicate via Message center when we are ready to proceed. 
  • General Availability (GCC, GCC High, DoD): We will communicate via Message center when we are ready to proceed.

How this affects your organization

Users in both Microsoft Defender and Exchange Online quarantine portals will gain the ability to:

  • View messages that were temporarily deleted from quarantine using the new Temporarily deleted filter under Release Status.
  • Restore these messages back to the quarantine view using the new Restore temporarily deleted option.

Messages that have been permanently deleted will remain inaccessible. This feature is on by default and applies only to temporarily deleted items.

What you can do to prepare

  • Inform users about the new filter and restore option to reduce confusion and potential help desk calls.
  • Update internal documentation or training materials to reflect the new functionality.
  • Monitor user feedback and usage to determine if additional guidance or support is needed.

No configuration changes are required to enable this feature.

Compliance considerations

No compliance considerations identified, review as appropriate for your organization.

Raw JSON (for debugging)

Expand/collapse the full payload below.
Show/hide raw
{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": null,
    "ai_actions": [
      "Inform users about new filter and restore option",
      "Update internal documentation or training",
      "Monitor user feedback"
    ],
    "ai_master_tags": [
      "Security"
    ],
    "ai_model": "gpt-4.1",
    "ai_summary": "Defender and Exchange Online quarantine portals will let users view and restore messages temporarily deleted from quarantine using new filter and restore options.",
    "ai_topics": [
      "Exchange",
      "Defender"
    ],
    "category": "stayInformed",
    "details_map": {
      "Summary": "The update to Microsoft Defender and Exchange Online quarantine will allow users to view and restore temporarily deleted messages via a new filter and restore option. The release has been delayed, no configuration is needed, and permanently deleted messages remain inaccessible. Users should be informed and documentation updated."
    },
    "id": "MC1134736",
    "importance": 0,
    "is_major_change": false,
    "last_modified": "2025-09-11T21:30:57Z",
    "ms_products": [
      "Exchange",
      "Defender"
    ],
    "platforms": null,
    "roadmap_ids": [],
    "services": [
      "Exchange Online",
      "Microsoft Defender XDR"
    ],
    "severity": "normal",
    "tags": [
      "Updated message",
      "Feature update"
    ],
    "title": "(Updated) Quarantine experience update in Microsoft Defender and Exchange Online: Restore temporarily deleted items"
  }
}