MC1171845 Medium
(Updated) Microsoft Defender for Office 365: Enhancing the quarantine experience for administrators
Summary AI-generated
Defender for Office 365 quarantine now lists messages by individual recipient, improving admin clarity; rollout starts early Jan 2026, no end-user changes.
Suggested actions AI-generated
- Review quarantine release practices
- Update internal documentation
- Inform helpdesk or support teams
Written by Azure OpenAI (gpt-4.1) from the text of the post below. It can be incomplete or wrong; the original post is authoritative.
Similar posts
Search for more like this- MC1166867 (Updated) Microsoft Defender for Office 365: Enhancing the quarantine email preview experience
- MC1440701 MDO Encrypted email attachment protection
- MC1476237 Microsoft Defender for Office 365: Remediation actions from the Teams message entity flyout
- MC1163754 Enhancements to the Deep Analysis tab of Email Entity page by Microsoft Defender for Office 365
- MC1422060 (Updated) Microsoft Defender for Office 365: Prompt injection protection for email
- MC1219788 (Updated) Microsoft Defender for Office 365: Enable users to report suspicious Teams messages in Plan 1
Original post from Microsoft
Updated January 9, 2026: We have updated the timeline. Thank you for your patience.
We’re improving the quarantine experience in Microsoft Defender for Office 365 to deliver greater clarity, visibility, and ease of use for administrators. These updates include backend enhancements for improved durability and consistency as well as experience updates to list messages in quarantine by individual recipients to simplify navigation and management.
When this will happen:- General Availability (Worldwide and GCC): We will begin rolling out in early January 2026 (previously early November 2025) and expect to complete by end of March 2026 (previously end of February).
- General Availability (GCCH and DoD): We will begin rolling out in early January 2026 (previously early December 2025) and expect to complete by end of March 2026 (previously end of February).
- Who is affected: Administrators managing quarantined messages in Microsoft Defender for Office 365.
- What will happen:
- Quarantined messages will now be listed by individual recipient instead of grouped by multiple recipients.
- Backend enhancements will improve durability and consistency.
- Existing quarantine release cmdlets will all remain functional. Administrators should be cognizant that `ReleaseToAll` now applies to a single user as aggregation has been removed. Admins must release messages for each intended mailbox individually.
- No changes to end-user experience.
Screenshot 1 - Updated quarantine view showing individual recipients listed separately in the Recipient column:
Screenshot 2 - Existing quarantine view showing multiple recipients in the Recipient column:
What you can do to prepare:
- Review your organization’s quarantine release practices.
- Update any internal documentation to reflect the new recipient-level view.
- Communicate this change to helpdesk or support teams as needed.
- Learn more:
Compliance considerations:
No compliance considerations identified, review as appropriate for your organization.
Additional details from Microsoft
- Summary
- Microsoft Defender for Office 365 is enhancing quarantine for admins by listing messages by individual recipients, improving backend durability, and requiring message release per user. Rollout begins January 2026, completing by March. No changes affect end users. Admins should update practices and documentation accordingly.