M365 Archive
Back to latest version
Comparing Oct 6, 2025 → latest (Feb 18, 2026) Swap

MC1166867 - Microsoft Defender for Office 365: Enhancing the quarantine email preview experience

Message Center

Metadata at latest

Message ID

MC1166867

View in Message Center

Last Updated

Feb 18, 2026

Published Oct 6, 2025

Service

Microsoft Defender XDR

Tag

Updated message
Feature update
User impact
Admin impact

Metadata changes

Tags
Admin impact, Feature update, User impactAdmin impact, Feature update, Updated message, User impact
End date
Dec 31, 2025Feb 27, 2026

Body changes

removed textadded text

Updated February 18, 2026: We have updated the content. Thank you for your patience. 

We’re improving the email preview experience in Microsoft Defender for Office 365 to provide a clearer, more consistent, and secure workflow. These updates are designed to reduce ambiguity, simplify interactions, and reinforce security protections—helping organizations confidently use this feature as part of their protection strategy.

When this will happen:

General Availability (Worldwide): Rollout will begin in early November 2025 (previously mid-October 2025October) and is expected to complete by mid-December 2025 (previously early November 2025.November).

General Availability (GCC, GCCH, and DoD): Rollout will begin in mid-November 2025 (previously late October 2025October) and is expected to complete by mid-November 2025.December 2025 (previously mid-November).

How this affects your organization:

Who is affected: Quarantine administratorsusers Microsoft Defender for Office 365 as well as users with access to review and preview messages within quarantine.

The update is specifically for the preview capability within the quarantine experience. What will happen:

  • The update consists of three main parts:
    • Streamlined view options: The plain text view option will be retired for users to unify preview behaviors across Defender experiences. It will still be present for admins.
    • Clearer handling of URLs: The hover-over preview for URLs will be limited for users to reinforce that links in quarantine preview are not clickable.
    • Simplified content loading: The “Load external content” button will be removed for some scenarios. Content will render in a secure, isolated environment.

Quarantine administrators and users will experience a simplified preview interface with clearer rendering and reduced visual cues for URL interactivity:

 user settings

What you can do to prepare:

  • Update any internal documentation that references the quarantine preview experience.
  • Communicate these changes to helpdesk and support teams to reduce confusion.
  • No configuration changes are required; the update will apply automatically.

Compliance considerations:

No compliance considerations identified, review as appropriate for your organization.