Microsoft 365 roadmap roundup – 21st February 2022

Use these buttons to switch between each product’s roadmap updates.

Microsoft Information Protection

Updates listed under this heading combines the following products: Azure Information Protection, 365 compliance center, Information Protection, Office 365 Advanced Threat Protection, Microsoft Defender, Microsoft Intune, Office 365 Data Loss Prevention and Security and Compliance center.

  • Launched (3)
  • Rolling out (1)
  • In development (32)


  • Microsoft 365 compliance center: Information governance – Adaptive retention policies – This update allows admins to create retention policies scoped to geography, department, or other user or site attribute. For example, admins can create a policy specifically for users in the UK’s human resources team by leveraging the adaptive policy scope. Feature ID:70578
  • Microsoft Defender for Office 365: Updates to Threat Explorer and Real-time Detections – We are working towards updating the user experience for Threat Explorer and Real-time detections. As part of this update, we will introduce enhancements like All Email view by Default for Explorer, toggling between chart or grid view, single click data export and more. There is no change in functionality when it comes to core experiences like filtering, export, and this is an update to the user experience. Feature ID:82192
  • Microsoft Defender for Office 365: Priority account filtering for quarantine – We’re including the priority account tag in the quarantine experience, allowing admins to prioritize their focus on the organization’s most targeted and most visible users. Feature ID:85563




Release – February 2022

  • 🆕 Microsoft Defender for Office 365: Streamlining the submissions experience in Microsoft Defender for Office 365 – We are updating the submissions experience to allow you to submit emails, URLs, and email attachments from one easy to use location. Roadmap ID: 88929

Release – March 2022

  • 🆕 Microsoft 365 compliance center: Endpoint DLP – Advanced classification scanning and protection – Advanced classification scanning and protection allows the Microsoft 365 cloud-based data classification service to scan items, classify them, and return the results to the endpoint device. This enables admins to include more advanced classification techniques, such as exact data match and named entities, into data loss prevention policies. Admins will also have the flexibility to set a per-device bandwidth limit for a 24-hour period to regulate bandwidth usage. Roadmap ID: 88935
  • Microsoft Defender for Office 365: Detonation Details for GCC and DoD environments – Detonation details will be exposed within the email entity page for malicious URLs and files which got detonated. These detonation details will contain detonation chain, summary, indicators of compromise, screenshots, and behavior details. Customers can now go through the detonation details and expand their scope of investigation. Feature ID:81991
  • Microsoft Defender for Office 365: Email entity page for GCC and DoD environments – The email entity page will contain information in parity with existing email details flyout in from Threat Explorer, along with new information regarding authentication and detections, a revamped email preview capability for cloud mailbox emails, and detonation details for related files or URLs. These updates eliminate the need to traverse multiple experiences to view email details.  The Email entity page brings a new look to your email investigations, designed to provide a 360-degree view of an email. Feature ID:81992

Release – May 2022

  • 🆕 Microsoft 365 compliance center: Data loss prevention (DLP) support for trainable classifiers – Trainable classifiers can be added as a condition for data loss prevention (DLP) policies, and enhanced templates and default policies will leverage trainable classifiers. Additionally, classifier-related information and alerts will appear within Activity explorer. Roadmap ID: 88937
  • Microsoft Defender for Office 365: Potential Nation State Activity Alerts – Nation state threats are defined as cyber threat activity that originates in a particular country with the apparent intent of furthering national interests. Roadmap ID: 70624

Release – June 2022

  • Microsoft Information Protection: PDF files encrypted with sensitivity label can be searched and eDiscovered – With this update, PDF files with sensitivity label (and encryption) can be reasoned over in SharePoint Online, searched, or eDiscovered. Additionally, labels can be applied to the existing PDF files hosted in SharePoint. Roadmap ID: 85617
  • Microsoft Information Protection: API to set label on files in SharePoint online in bulk – This is a “set-label” API that third parties and ISVs can use to labels many files across SharePoint via scripting or programmatic manner. Roadmap ID: 85620


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s