Microsoft says Outlook on the web and the new Outlook now handle attachments as a separate application, so existing Conditional Access policies apply to attachment download, preview and upload, and non-compliant users are blocked.
Microsoft Defender for Office 365 turns on Promotions tagging for all tenants by late October 2026; the folder move stays an admin setting
EditorialBy TrustList Editorial
Microsoft says promotional mail will be tagged as Promotions in every Defender for Office 365 tenant at worldwide general availability, completing by late October 2026; moving it to a Promotions folder depends on the Bulk moves setting.
- United States
- Redmond, Wa
- Email Management
- Cybersecurity
About Microsoft Defender for Office 365 turns on Promotions tagging for all tenants by late October 2026; the folder move stays an admin setting
Microsoft Defender for Office 365 turns on Promotions tagging for all tenants by late October 2026; the folder move stays an admin setting
2 October 2026: Microsoft updated Message Center post MC1279093 on 2 October 2026 with the current timetable for a change to how Defender for Office 365 treats promotional e-mail. Marketing mail will be tagged as "promotions" (the label was "Bulk" during preview) and can be moved automatically into a new Promotions folder in users' mailboxes. Microsoft says that at worldwide general availability the tagging is enabled by default for all tenants and will stay that way.
Not yet independently verified. This rests on Microsoft's own Message Center post, read through a public archive; it has been updated seven times since April and its dates have moved before. No independent report had been found at 2026-10-04. We will update this when it can be confirmed, and remove this note.
Update, 6 November 2026: the worldwide roll-out was due to complete by late October, with GCC and DoD tenants following by late November. The archived notice still shows its last update as 2 October, so Microsoft has posted no change we can see, and we have not confirmed completion.
The timetable
According to the post, worldwide general availability began rolling out in late July 2026 and is expected to complete by late October 2026. For GCC, GCC High and DoD tenants, roll-out also began in late July and is expected to complete by late November 2026. Both dates have moved since earlier versions of the post.
What changes, and what admins control
- Tagging becomes default for every tenant at general availability. Incoming mail classed as promotional receives the promotions classification.
- Moving to a folder happens only where the "Bulk moves enabled" setting is turned on in anti-spam policies. When it is, a Promotions folder is created in user mailboxes and tagged messages are moved there.
- Learning from users: Microsoft says the system learns from users moving messages into or out of the Promotions folder and applies those preferences to future mail.
- Both the tagging and the folder routing can be scoped to pilot security groups for a staged roll-out, and users can create inbox rules that refer to the promotions tag.
Who is affected
All organisations using Defender for Office 365. The change matters most to two groups: IT and security teams that manage mail flow and support users who cannot find messages, and marketing or sales teams in any company whose own newsletters and campaigns reach customers on Microsoft 365, since those messages may now be tagged and filed away.
What to do
- Decide whether to turn on Bulk moves enabled, and if so, start with a pilot group.
- Tell users where promotional mail will go and how moving messages trains the filter.
- Check transport rules and third-party mail tools that rely on bulk-mail classification.
- Marketing teams: watch engagement from Microsoft 365 recipients after late October, and make sure transactional messages such as invoices and password resets are sent separately from campaigns, so they are not tagged as promotions.
Why it matters for buyers
Changes to mail classification at a provider this large shift what lands in front of business users. It is an operational change for IT and a deliverability change for anyone who sends B2B e-mail.
Sources
Categories & features
- United States
- Redmond, Wa
- Email Management
- Cybersecurity
TrustList Weekly
The week in software and IT, in one email
The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.
You may be interested in
Microsoft re-released the September 2026 Exchange security updates on 2 October to add CVE-2026-96940 (CVSS 8.8): a signed-in user could read other mailboxes in the same organisation. Hybrid and management-tools servers need it too.
Microsoft begins disabling Exchange Web Services (EWS) in Exchange Online for all organisations in October 2026 and switches it off fully in April 2027. Apps that still use EWS, including Apple Mail and Calendar on macOS, need a migration plan now.
Microsoft says ExchangeOnlineManagement versions before 3.10.1 may fail interactive sign-in once strict logon enforcement begins on 31 March 2027 (rollout to late April), especially PowerShell 7 with WAM disabled. Upgrade and test scripts first.
From 10 October 2026, Exchange Online apps using EWS must be listed in EWSAllowedAppIDs (MC1485116); Microsoft fills the list on 8-9 October from 60 days of use. SharePoint one-time passcodes retire from mid-October to end November (MC1243549).
Thunderbird 158.0.1 and 153.5.1 fix three high-rated flaws, including XMPP stanza injection and an NTLM memory leak; Firefox 158.0.1 and both ESRs build in the block on compromised eMudhra intermediates.
Kiteworks published 125 security advisories on 30 September 2026, 12 rated critical, for Core, the Email Protection Gateway, Secure Data Forms and MFT Server. The most severe, a gateway code-injection flaw, is fixed in 9.4.1; update to 9.5.1.
Subscribers lost Publisher on 1 October, but the removal update only reaches Current Channel in mid-November and Monthly Enterprise in early December. Microsoft says the gap is not an extension.
More on TrustList
Everything here links back to the same verified catalogue. Pick your next stop.
- More United StatesThe ranking for this subject
- CompaniesAgencies, consultancies and IT service providers, ranked by verified reviews.
- ProductsSoftware and SaaS with pricing, features, integrations and alternatives.
- AwardsAnnual recognition decided by verified reviews and an independent jury.
- LaunchesNew products and releases, voted up by the community every day.
- AI ModelsBenchmark scores and community ratings for every major model.
- RequestsBuyers describe what they need; vendors respond directly.
- PeopleReviewers, authors and makers with public profiles.
- ComparePut up to four listings side by side before you shortlist.