← Back
(Updated) Microsoft Defender for Office 365: Enhancing how we handle promotional mail
MC1279093 · build prod-20251231-200323
Category
planForChange
Severity
normal
Major change
True
Last modified
2026-05-04 21:42:14
Summary source
Azure OpenAI (gpt-4.1)
Action by (Graph)
Action by (AI)
2026-04-15 00:00:00
Services
Microsoft Defender XDR
Tags
Updated message, New feature, User impact, Admin impact
Master tags
User, Admin, Security
Roadmap IDs

One-line summary

Microsoft Defender for Office 365 will tag promotional emails as "promotions" and can move them to a Promotions folder, with learning from user actions; general availability starts July 2026.

Similar updates

More like this
MC1163754 Enhancements to the Deep Analysis tab of Email Entity page by Microsoft Defender for Office 365
Enhancements to the Deep Analysis tab of Email Entity page by Microsoft Defender for Office 365 Defender for Office 365's Deep Analysis tab gains enhanced UI, improved detonation chains, expanded metadata, and exportable insights for better threat investigation, rolling out Nov 2025. We’re excited to share recent enhancements to the Deep.
MC1147387 Microsoft Defender for Office 365: Alert experience enhancements for faster triage
Microsoft Defender for Office 365: Alert experience enhancements for faster triage Defender for Office 365 will consolidate related alerts into richer, single alerts starting mid-September 2025, reducing alert fatigue and improving triage without changing detection or workflows. Introduction We’re improving the alert experience in Microsoft.
MC1166867 (Updated) Microsoft Defender for Office 365: Enhancing the quarantine email preview experience
(Updated) Microsoft Defender for Office 365: Enhancing the quarantine email preview experience Defender for Office 365 quarantine email preview will get a simplified interface, retiring plain text view for users, with safer URL and content handling starting November 2025. Updated February 18, 2026: We have updated the content. We’re improving the.
MC1171845 (Updated) Microsoft Defender for Office 365: Enhancing the quarantine experience for administrators
(Updated) Microsoft Defender for Office 365: Enhancing the quarantine experience for administrators Defender for Office 365 quarantine now lists messages by individual recipient, improving admin clarity; rollout starts early Jan 2026, no end-user changes. Updated January 9, 2026: We have updated the timeline. We’re improving the quarantine.
MC1191616 Microsoft Secure Score: New recommendations for Microsoft Defender for Endpoint
Microsoft Secure Score: New recommendations for Microsoft Defender for Endpoint New Secure Score recommendations for Defender for Endpoint will roll out in public preview, helping block attacks and improve endpoint protection by end of Nov 2025. Introduction We’re introducing new Microsoft Secure Score recommendations for Microsoft Defender for.
MC1042925 (Updated) Microsoft Defender for Office 365: Enhancing page load performance
(Updated) Microsoft Defender for Office 365: Enhancing page load performance Defender for Office 365 will improve portal page load times, starting with Submission page in March 2025; no downtime or required admin action during phased rollout. Updated July 9, 2025: We have updated the timeline below. At Microsoft Defender for Office 365, we are.

Details

Summary
Microsoft Defender for Office 365 will tag promotional emails as “promotions” and can auto-move them to a Promotions folder, learning from user actions. Public preview starts mid-April 2026; general availability begins July 2026. Admins can configure settings, and users can train the system by moving messages.

Body (from Message Center)

Updated May 4, 2026: We have updated the timeline. Thank you for your patience. 

[Introduction]

We are enhancing how Microsoft Defender for Office 365 identifies and manages promotional email. Promotional messages will be tagged as “promotions” (previously “Bulk” in preview) and can be moved automatically to a new Promotions folder. The system learns from user actions, such as moving messages into or out of the Promotions folder and applies those preferences to future messages. These improvements reduce inbox clutter and help users stay focused while still receiving promotional content they want.

[When this will happen]

  • Public Preview (Limited): We will begin rolling out in mid-April 2026 and expect to complete by mid-May 2026 (previously end of April). To be included in the public preview program, send an email to BulkMailPreviews@microsoft.com indicating: Organization name, Tenant ID and your onmicrosoft.com domain (e.g contoso.onmicrosoft.com). Slots are limited and will close on May 15th, 2026.
  • General Availability (Worldwide): We will begin rolling out in early July 2026 and expect to complete by late July 2026.
  • General Availability (DoD, GCC, GCC High): We will begin rolling out in early July 2026 and expect to complete by mid-August 2026.

[How this affects your organization]

Who is affected

  • All organizations that use Microsoft Defender for Office 365 across Worldwide, GCC, GCC High, and DoD clouds

What will happen

  • Incoming promotional messages will be tagged as “promotions.” (previously “Bulk” in private and public preview)
  • If the Bulk Moves Enabled setting is turned on, tagged messages will automatically move to a Promotions folder created in user mailboxes.
  • The system will learn from user actions when they move messages into or out of the Promotions folder. Future messages will follow the learned behavior.
  • Users will be able to create inbox rules that reference the promotions tag.
  • During the Public Preview: 
    • Tagging will be opt-in and configured using Exchange transport rules.
    • Folder routing will be enabled through anti-spam policy settings (“Bulk moves enabled”).
    • Both features will be able to be scoped to pilot security groups for a staged rollout.
  • At Worldwide General Availability, tagging will be enabled by default for all tenants and will always remain that way.

Figure one - Admin configuration for tagging using exchange transport rule (required for public preview opt-In):

 user settings

Figure two - Admin configuration for Bulk moves enabled to provision the promotions folder:

 user settings

Figure three - System tagging of “Promotions” in outlook client and promotions folder (previously  tagged as “Bulk” in private and public preview):

 user settings

Figure four - User inbox rules using the promotions” tag:

 user settings

[What you can do to prepare]

  • To be included in the public preview program, send an email to BulkMailPreviews@microsoft.com indicating: Organization name, Tenant ID and your onmicrosoft.com domain (e.g contoso.onmicrosoft.com). Slots are limited and will close on April 30th, 2026.
  • Review your internal mailbox and message handling guidance and update training materials if needed.
  • If you plan to participate in the Public Preview, review your Exchange transport rule and anti-spam policy configurations to determine if you want to opt-in.
  • Monitor the product documentation. A link will be added to this post when it becomes available.

[Compliance considerations]

QuestionAnswer
Does the change alter how existing customer data is processed, stored, or accessed?Yes. Incoming email will receive the promotions classification and may be moved automatically to the Promotions folder depending on admin configuration.

Does the change introduce or significantly modify AI or ML that interacts with customer data?

Yes. The system learns from user actions when they move messages and applies that learning to future similar messages.
Does the change include an admin control, and can it be controlled through Entra ID group membership?Yes. Admins can enable or disable Bulk Moves Enabled and can opt in to tagging during Public Preview. These controls can be scoped using existing admin delegation models.
Does the change allow a user to enable or disable the feature themselves?Yes. Users can override tagging behavior by moving messages in or out of the Promotions folder, which trains the ML model and adjusts future message handling.

Raw JSON (for debugging)

Expand/collapse the full payload below.
Show/hide raw
{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": "2026-04-15T00:00:00Z",
    "ai_actions": [
      "Review mailbox and message handling guidance",
      "Update training materials",
      "Evaluate Exchange transport rule and anti-spam policy settings",
      "Join public preview if desired by emailing BulkMailPreviews@microsoft.com"
    ],
    "ai_master_tags": [
      "User",
      "Admin",
      "Security"
    ],
    "ai_model": "gpt-4.1",
    "ai_summary": "Microsoft Defender for Office 365 will tag promotional emails as \"promotions\" and can move them to a Promotions folder, with learning from user actions; general availability starts July 2026.",
    "ai_topics": [
      "Defender",
      "Exchange",
      "Outlook"
    ],
    "category": "planForChange",
    "details_map": {
      "Summary": "Microsoft Defender for Office 365 will tag promotional emails as \u201cpromotions\u201d and can auto-move them to a Promotions folder, learning from user actions. Public preview starts mid-April 2026; general availability begins July 2026. Admins can configure settings, and users can train the system by moving messages."
    },
    "id": "MC1279093",
    "importance": 5,
    "is_major_change": true,
    "last_modified": "2026-05-04T21:42:14Z",
    "ms_products": [
      "Defender"
    ],
    "platforms": null,
    "roadmap_ids": [],
    "services": [
      "Microsoft Defender XDR"
    ],
    "severity": "normal",
    "tags": [
      "Updated message",
      "New feature",
      "User impact",
      "Admin impact"
    ],
    "title": "(Updated) Microsoft Defender for Office 365: Enhancing how we handle promotional mail"
  }
}