Microsoft Defender for Office 365: New “Move to Quarantine” Feature Coming Soon

Microsoft introducing Move to Quarantine, a new remediation action in Microsoft Defender for Office 365. It enables security teams to move potentially malicious email messages from users' mailboxes directly to Microsoft Defender quarantine. This provides a safer and more flexible way to contain suspicious messages that bypassed initial detection while preserving the ability to investigate, release, or permanently delete them later.

This capability is available with Microsoft Defender for Office 365 Plan 2, including eligible Microsoft 365 subscriptions that include Plan 2.

Rollout schedule

General Availability (Worldwide): Beginning in early November 2026 and expected to complete by mid-December 2026

Remediate malicious email that was delivered in Office 365 - Microsoft Defender for Office 365 | Microsoft Learn