Security

In trying to thread the needle that is anti-spam policy in Defender (Not too much, not too little, Goldilocks, etc) I was adjusting policies and all-of-a-sudden discovered that staff could no longer release messages from quarantine.  I was convinced I had broken it and put in a ticket with Microsoft support.  Within the hour, I had my answer - and it wasn't me.  Microsoft had changed the way quarantines are being managed.  This article was updated on 10/18 - right around the time I had made changes.

Quarantined email messages | Microsoft Learn

"Users can't release their own messages that were quarantined as malware by anti-malware or Safe Attachments policies, or as high confidence phishing by anti-spam policies, regardless of how the quarantine policy is configured. If the policy allows users to release their own quarantined messages, users are instead allowed to request the release of their quarantined malware or high-confidence phishing messages."