M365 Changelog: (Updated) Upcoming behavior change to the “DoNotRewrite” List April 25, 2023

MC535702 – Updated April 25, 2023: Based on customer feedback, Microsoft is not proceeding with this change at this time. Thank you for your patience.

With the deployment of the Tenant Allow/Block List, as being the single source of truth for Tenant Allows, other mechanisms for Tenant Allows are being removed. This will give SecOps teams one place to manage all Tenant Allows.

Today, the “DoNotRewrite” list is used to Skip:

  • Wrapping URLs
  • Detonation
  • Verdicts

The intended purpose of “DoNotRewrite” is to give tenants the ability to skip the wrapping of URLs. With the deployment of the Tenant Allow Block List, it is expected that all tenant allows (ex Detonation and Verdicts) shall be managed there.

When this will happen:

Microsoft will not be proceeding with this change at this time.

How this will affect your organization:

With this change, the “DoNotRewrite” list behavior will be changed back to its intended purpose to skip the wrapping of URLs: Learn More here.

What you need to do to prepare:

Review your “DoNotRewrite” URLs list(s) and ensure you have not added entries to it for uses other than to skip wrapping of URLs.

Additional information