Starting October 1, 2025, Microsoft Defender for Office 365 will retire the "Add to existing remediation" option due to low usage. Users must switch to "Create new remediation." No admin action is needed, but users should be informed and documentation updated accordingly. Other functionalities remain unaffected.
Introduction
Starting October 1, 2025, we will retire the Add to existing remediation option under the Propose remediation action in Microsoft Defender for Office 365. This change is being made due to consistently low usage and is intended to streamline the remediation experience.
When this will happen
This change will take effect on October 1, 2025.
How this affects your organization
Our telemetry indicates negligible usage of the Add to existing remediation option. If users in your organization currently rely on this feature, they will need to transition to using the Create new remediation option under Propose remediation. No other functionality is impacted.
What you can do to prepare
No admin action is required. This change will occur automatically. We recommend:
Compliance considerations
| Compliance Area | Explanation |
|---|---|
| Retirement or removal of features or services | This is a retirement of a UI option within a security feature. |
| Does the change modify, interrupt, or disable any of the following capabilities (Purview)? | It modifies the remediation workflow, but does not impact DLP, eDiscovery, or retention policies. |
| Does the change allow a user to enable and disable the feature themselves? | The feature being removed was user-selectable within the UI. |