Feedback by UserVoice

Office 365 Security & Compliance

We have partnered with UserVoice, a third-party service and your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy. Please do not send any novel or patentable ideas, copyrighted materials, samples or demos for which you do not want to grant a license to Microsoft.

Welcome to the Security (Protection) & Compliance UserVoice forum. We’re happy you’re here! If you have suggestions or ideas on how to improve Security or Compliance related features in O365, we’d love to hear them!

How it works
◾Check out the ideas others have suggested and vote on your favorites
◾If you have a suggestion that’s not listed yet, submit your own — 25 words or less, please
◾Include one suggestion per post

Thanks for joining our community and helping improve these features in Office 365!

Need Tech Support? Please see the O365 Community for the product or feature you are having issues with, or open a support ticket through your Office 365 administrator portal.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. J'aimerais pouvoir supprimer une étiquette créée sur la base d'un événement et qui est un enregistrement

    Lors de tests, j'ai créé une étiquette qui est un enregistrement. Cette étiquette n'est reliée à aucun document. Il s'agissait d'un test, en fait d'une erreur. Cette étiquette est impossible à supprimer. Elle ne sert pas, elle a le statut inactif, et elle reste dans ma liste des étiquettes disponibles sans que je puisse l'utiliser, la modifier ou la supprimer. Je suis condamnée à la voir ad vitam aeternam... Merci de trouver une solution...

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  2. Searching in audit logs

    *English follows Japanese
    ■Title(件名):
    監査ログの検索について
    Searching in audit logs


    ■Description(内容):
    セキュリティ & コンプライアンス センターの Office 365 監査ログは、全体管理者ユーザー、Exchange 管理者をはじめ、Exchange Online の [管理者の役割] で View-Only Audit Logs または Audit Logs の役割を割り当てることで取得可能となりますが、全体管理者ではないサイト コレクション管理者に View-Only Audit Logs または Audit Logs の役割を割り当てて監査ログを検索すると、管理者として登録されているサイト コレクション以外の情報まで取得できてしまいます。
    そのため、セキュリティ & コンプライアンス センターの Office 365 監査ログにて監査可能なサイト コレクションの範囲を制限することが可能な機能の拡充を希望いたします。

    In the Security & Compliance Center, Office 365 logs can be obtained by global and Exchange admins with the View-Only Audit Logs or Audit Logs permissions in Exchange Online’s ‘Administrator permissions’, but if a non-global, site collection admin has one of these assigned and searches the logs, they cannot get information for site collections…

    7 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Auditing  ·  Flag idea as inappropriate…  ·  Admin →
  3. Advanced eDiscovery - Review set Display after Sorting by Date

    Currently in the review set if the column widths are changed to see more date and then output is sorted on date the screen refreshes, in date order, but the column widths are reverted.
    It would be nice for the column widths to stay at the amended width.

    also, it would nice to be able to sort on other columns.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  eDiscovery  ·  Flag idea as inappropriate…  ·  Admin →
  4. Add the option to retain or delete content based on last accessed date

    As well as allowing deletion of documents based on created, last modified or date labelled, having last accessed as an option would help with our users OneDrive files where they use documents to keep personal reference information which is frequently used but seldom updated or modified, such as excel formulas, how too's etc.

    9 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  5. Filter "Released" missing in "Quarantaine"

    In https://protection.office.com/quarantine

    The column "Released" is missing as a filter option. If you have been going through quarantaine, and released some legitimate mails, you want to filter those ones out... and not see them again after you released them.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Spam & Phishing  ·  Flag idea as inappropriate…  ·  Admin →
  6. ด้านความปลอดภัย

    ถึงจะเก่งและรวดเร็วก็คงไม่สบายใจหรือมีความกังวลเปรียบเหมือนไปข้างนอกบ้านแล้วลืมล็อคกุจแจ คงเป็นกังวลไม่น้อยใช่ไหมครับ แต่กลับกันเราแค่พอดี แต่รัดกุมตรวจตราให้เรียบร้อย ออกไปไหนก็สบายใจ.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Advanced Security Management  ·  Flag idea as inappropriate…  ·  Admin →
  7. Attack Simulator Integration for Report Message Button

    Track User Reporting



    • Additional features for User Reporting Tracking


      • % of users who reported the campaign email using the Report Message Button to the Overview page

      • List of users who reported the message using the button per each scenario.

      • Total report rate % for all scenarios drilldown by user.



    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  8. I would like the label policy and retention policy display items displayed in [Information Governance] of the Compliance Center to be separa

    I would like the label policy and retention policy display items displayed in [Information Governance] of the Microsoft 365 Compliance Center to be separated.

    Microsoft 365 コンプライアンスセンターの [情報ガバナンス] 内に表示されるラベルポリシー、保持ポリシーの表示項目をそれぞれ分けて欲しい。

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  9. ATP weekly blocked/quarantined phishing/malware reports to tenancy admin

    The ability to routinely have reports delivered based on the specific emails detected by ATP for Malware and Phishing similar to the layout exportable on the 'Explorer' area of ATP when you select either 'Malware' or 'Phishing' from the filter

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Malware  ·  Flag idea as inappropriate…  ·  Admin →
  10. Redact PCI information in emails; Allow them through but strip out sensitive details

    We block emails with credit card numbers, bouncing back a message to the sender. The issue is, the recipients don't know this has happened and rely on the sender getting back in touch.
    Is it possible to strip out sensitive details and replace with a [removed by Office 365] message? Same in attachments - remove the attachment and just add a readme.txt file instead?
    Thanks.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  DLP & Transport Rules  ·  Flag idea as inappropriate…  ·  Admin →
  11. Fix interaction of Outbound Spam Policy Forwarding settings with Mail Transport and Remote Domain exchange settings

    Microsoft recently made changes to streamline 365 security: https://www.microsoft.com/security/blog/?p=91813

    There were changes made to the backend of the Outbound Spam Filter Policy Automatic Forwarding settings.

    Previously, when Forwarding was enabled, Exchange Admins could restrict access using Mail Transport rules or Remote Domains. The Secure Score of Exchange even included a template policy for rejecting messages from inside the organization sent to outside the organization with an auto-forward message type.

    This Transport Rule allowed for a granular exceptions list with Recipient Addresses and Recipient Domains being easy to configure.

    The recent change now overrides both Transport Rules and Remote Domains settings.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Advanced Security Management  ·  Flag idea as inappropriate…  ·  Admin →
  12. the quarantine feature should...

    The quarantine feature should allow us to whitelist email addresses. One particular email that was quarantine was an email repeatedly put in quarantine, even after I released it the first time. The email address that was blocked was clearly not phishing. It was an important vendor contact that provides support for an important application.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  13. I bought windows 365 so that I could encrypt emails with a password but I can't, Why?

    I bought 365 so that I could encrypt emails with a password but it doesn't have that command. I can't find out how to set it up. Why is it so difficult.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Information Protection  ·  Flag idea as inappropriate…  ·  Admin →
  14. Search for Teams chat data for on-premises users

    Microsoft has published an article explaining how to search for Teams chat history in the web UI when in an Exchange Server Hybrid environment. This article indicates PowerShell can be used to perform the search but that it is also possible to search from the web admin center if you open a case with Microsoft to have this provisioned into your tenant.

    The article can be found here: https://docs.microsoft.com/en-us/microsoft-365/compliance/search-cloud-based-mailboxes-for-on-premises-users?view=o365-worldwide

    I opened a case to add this to a client tenant and Microsoft support is not yet able to do this. Please enable Microsoft support teams to deploy this feature as…

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Communication Compliance  ·  Flag idea as inappropriate…  ·  Admin →
  15. Sensitivity Labels - Adobe

    When converting a labeled Word document to PDF, the label is not retained in Adobe.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Information Protection  ·  Flag idea as inappropriate…  ·  Admin →
  16. Sensitivity Labels - User unable to see label in certain applications

    When sharing a labeled Adobe/Publisher(2013)/Visio(2013) document with a user who does not have labeling enabled, the user does not see the label, however, they can see if in other O365 apps, such as Word, Excel, etc.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Information Protection  ·  Flag idea as inappropriate…  ·  Admin →
  17. Secure by Default = Dont Tell me How to Set my Filters

    Secure by Default is GARBAGE BY DEFAULT. Stop trying to push security on people. We are a marketing company, and we NEED dirty emails to be delivered. We run phishing training campaigns, and we NEED phishing emails to be delivered.

    Microsoft should not be forcing security on clients. Security is MY responsibility and should be controlled by ME. ONLY ME. Not a third party.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Spam & Phishing  ·  Flag idea as inappropriate…  ·  Admin →
  18. Display action plans assigned in Compliance Manager in MS Teams Planner

    Display action plans assigned in Compliance Manager in MS Teams Planner.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Compliance Manager  ·  Flag idea as inappropriate…  ·  Admin →
  19. Stop. You are way out of control. Let us manage our systems.

    Stop doing what you are doing let our accepted up list and overrides work. You are stopping valid emails and don’t allow them through even when we report them to you. Either stop blocking or allow what we report to you in a timely manner. I have been reporting legitimate emails from the same sender for months and still have to spend hours delivering them manually even though they are on the allowed sender list. Counter productive.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Spam & Phishing  ·  Flag idea as inappropriate…  ·  Admin →
  20. Science engineering

    Enhanced databases authentic support for new updates

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Advanced Security Management  ·  Flag idea as inappropriate…  ·  Admin →
← Previous 1 3 4 5 120 121
  • Don't see your idea?

Feedback and Knowledge Base