Forum Discussion
Solved
Preset policies have suddenly started notifying users of quarantined messages
Hi all. We have been using preset policies (standard and strict) for some time and were happy with the fact that they don't notify users of messages which have been quarantined (and nor is it possib...
- MC505088
alexhudish
Microsoft
MicrosoftMC505088
Thanks alexhudish - that's the update we all seem to have missed! Not being able to configure this is terrible, but at least we know why the change has happened.
I'd encourage anyone who doesn't like this change to head to https://admin.microsoft.com/Adminportal/Home?source=applauncher#/MessageCenter/:/messages/MC505088 and hit the Dislike button at the bottom!
Here's the main text (excluding the detailed table of changes) for info.:
------------------------
Message Summary
Updated March 22, 2023: We have updated the rollout timeline below. Thank you for your patience.
We are updating the recommended quarantine notification policy in the Standard and Strict preset security policies.
With the DefaultFullAccessWithNotificationPolicy, Users will receive quarantine notifications for emails quarantined due to the corresponding threat policy.
*Note that the Quarantine policy assigned here is ineffective since the delivery location is Junk folder
Here is what the quarantine notification looks like:
When this will happen:
We will begin rolling this out in mid-February 2023 and complete rolling out by mid-April 2023 (previously mid-March).
How this will affect your organization:
If your organization has enabled preset security policies, these will be automatically updated to include the quarantine notification policies (DefaultFullAccessWithNotificationPolicy) as listed in the above table for the standard and strict protection preset profiles.
What you need to do to prepare:
No action required. Please review the following links to learn more:
- What are quarantine notifications? Quarantine notifications (end-user spam notifications) in Microsoft 365 - Office 365 | Microsoft Learn
- Specific controls set in Preset Security Policies: Microsoft recommendations for EOP and Defender for Office 365 security settings - Office 365 | Microsoft Learn
- We recommend enabling preset security policies for your organization: Steps to quickly set up the Standard or Strict preset security policies for Microsoft Defender for Office 365 - Office 365 | Microsoft Learn
Hi all. As well as encouraging anyone who doesn't like this change to head to https://admin.microsoft.com/Adminportal/Home?source=applauncher#/MessageCenter/:/messages/MC505088 and hit the Dislike button at the bottom, I've added a request in the feedback portal.
Please upvote if you think that Admins should be able to configure when users receive quarantine notifications:
OzOscroft What is the reasoning behind making the default to allow users to release quarantined messages?
Is there no way to apply another notification policy when using Strict Protection?In our env, we have a number of companies that designate one or two users to go through quarantine and release etc. This new policy undermines all of that.
