M365 Changelog: (Updated) Microsoft Defender for Office 365 – Quarantine Notifications enabled for Preset Security Policies

MC505088 – Updated March 22, 2023: Microsoft has updated the rollout timeline below. Thank you for your patience.

Microsoft is updating the recommended quarantine notification policy in the Standard and Strict preset security policies.

Policy	Quarantine Policy	Standard	Strict
Anti-Spam	SpamQuarantineTag	DefaultFullAccessPolicy	DefaultFullAccessWithNotificationPolicy
Anti-Spam	HighConfidenceSpamQuarantineTag	DefaultFullAccessWithNotificationPolicy	DefaultFullAccessWithNotificationPolicy
Anti-Spam	PhishQuarantineTag	DefaultFullAccessWithNotificationPolicy	DefaultFullAccessWithNotificationPolicy
Anti-Spam	HighConfidencePhishQuarantineTag	AdminOnlyAccessPolicy	AdminOnlyAccessPolicy
Anti-Spam	BulkQuarantineTag	DefaultFullAccessPolicy	DefaultFullAccessPolicy
Anti-Phish	TargetedUserQuarantineTag	DefaultFullAccessWithNotificationPolicy	DefaultFullAccessWithNotificationPolicy
Anti-Phish	TargetedDomainQuarantineTag	DefaultFullAccessWithNotificationPolicy	DefaultFullAccessWithNotificationPolicy
Anti-Phish	MailboxIntelligenceQuarantineTag	DefaultFullAccessPolicy	DefaultFullAccessPolicy
Anti-malware	QuarantineTag	AdminOnlyAccessPolicy	AdminOnlyAccessPolicy
Safe Attachments	QuarantineTag	AdminOnlyAccessPolicy	AdminOnlyAccessPolicy

With the DefaultFullAccessWithNotificationPolicy, Users will receive quarantine notifications for emails quarantined due to the corresponding threat policy.

Here is what the quarantine notification looks like: 

View image in new tab

When this will happen:

Microsoft will begin rolling this out in mid-February 2023 and complete rolling out by mid-April 2023 (previously mid-March).

How this will affect your organization:

If your organization has enabled preset security policies, these will be automatically updated to include the quarantine notification policies (DefaultFullAccessWithNotificationPolicy) as listed in the above table for the standard and strict protection preset profiles.

What you need to do to prepare:

No action required. Please review the following links to learn more:

• What are quarantine notifications? Quarantine notifications (end-user spam notifications) in Microsoft 365 – Office 365 | Microsoft Learn
• Specific controls set in Preset Security Policies: Microsoft recommendations for EOP and Defender for Office 365 security settings – Office 365 | Microsoft Learn
• Microsoft recommends enabling preset security policies for your organization: Steps to quickly set up the Standard or Strict preset security policies for Microsoft Defender for Office 365 – Office 365 | Microsoft Learn