Feedback by UserVoice

Office 365 Security & Compliance

We have partnered with UserVoice, a third-party service and your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy. Please do not send any novel or patentable ideas, copyrighted materials, samples or demos for which you do not want to grant a license to Microsoft.

Welcome to the Security (Protection) & Compliance UserVoice forum. We’re happy you’re here! If you have suggestions or ideas on how to improve Security or Compliance related features in O365, we’d love to hear them!

How it works
◾Check out the ideas others have suggested and vote on your favorites
◾If you have a suggestion that’s not listed yet, submit your own — 25 words or less, please
◾Include one suggestion per post

Thanks for joining our community and helping improve these features in Office 365!

Need Tech Support? Please see the O365 Community for the product or feature you are having issues with, or open a support ticket through your Office 365 administrator portal.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Send disposition reviews to end user

    Currently reviewers can be individual users, distribution or security groups, or Office 365 groups.

    In many mid-size companies there isn't resources to have dedicated people to this.

    It would be preferable to have the document owner receive an email notification that they have content to review, and decide next step.

    24 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  2. Apply a retention policy based on delete item event

    Need an option to create a retention policy that will be applied to an object based on an event. In particular we need to ability to detect that an item has been deleted and automatically have a retention policy applied to the object.

    23 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  3. Exchange online retention policy - log and report

    Currently there is no logging/reporting functions on exchange online retention policy. It would be good if a log can be extracted which contains information on what happened and what has been destroyed. Information such as message subject, sender/recipient, date sent/received, date destroyed and name of retention policy applied could be valuable for compliance and auditing.

    19 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  4. Allow Programatic application of default Compliance Labels to document libraries/folders

    Within the new Advanced Data Governance Framework you have made it possible to apply default compliance labels to document libraries via the UI.

    Could you please enable this capability via the API so we can set this value programmatically for libraries.

    It would also be very useful to have the capability to set compliance label default values at a folder level both via the UI and through the API.

    18 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  5. Get-RetentionCompliancePolicy Doesn't Return Values for SharepointLocation

    I have added sites to a Preservation Policy and need to continue adding sites to new policies. To do this I'm employing Powershell and the Compliance Center cmdlets to automate the provisioning of new policies as the current policy fills with sites.
    To do this I am running Get-RetentionCompliancePolicy and accessing the SharepointLocation property of the resultant objects. However, when I run the cmdlet without any arguments all the policies are returned, but the SharepointLocation property is empty. If I run the same cmdlet and pass in a policy name to the -Identity parameter then values are returned for the…

    18 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  6. Enable Information Barrier feature on all education licenses for use in Scoped Directory Search on Teams

    Is it possible to enable the Information Barrier Feature on all educational licenses? I can't regulate who my students are chatting with and they are starting inappropriate group chats with each other. Scoped Directory Search would solve this problem but the New-InformationBarrierPolicy cmdlet is not available with an A1 education license, only A5 and E5 have this feature available. This would be extremely beneficial in helping our school to move forward with remote education through the Teams. We are a small district and cannot afford the upgraded the licensing for our user base in order to enable this one feature.

    18 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  7. Mailboxes without license should be automatically excluded from Retention Policy hold

    Retention Policy in Data Governance section requires Exchange Online Plan 2 license to be assigned to each mailboxes on hold.

    However ,when user chooses "Exchange mailbox" in "Select Location" section of the Retention Policy, mailboxes without appropriate license (such as resource mailbox, shared mailbox) are
    included without any notification.

    In order to avoid unintended license violation, there should be a function to automatically exclude mailboxes without appropriate license from being on hold by Retention Policy.

    18 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  8. Add option to automatically include any new mailboxes or onedrive for business sites in a preservation policy

    Provide a way to set a preservation policy on all existing content (mailboxes, public folders, and onedrive for business sites) and have that policy apply to any new user's added to our tenant.

    Right now we have 1500 users and a requirement to keep any documents or emails for 13 months. I have to add each mailbox to a preservation policy and have multiples preservation policies because of the 1000 cap. I then have to use a powershell script to create new users so that their mailbox and onedrive for business sites are included in the preservation policy as well.

    17 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  9. Automatic deletion of search results for GDPR requests

    We need the ability to Automatically delete the data that was found in a content search for GDPR requests. We currently have to review the report of what was found and then manually delete the data across the entire O365 suite of products. Its a pain and time consuming. There should be a "DELETE SEARCH RESULTS ACROSS O365" button in Security & Compliance Center.

    16 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  10. Mandatory (or required) Retention Label

    It would be very useful to have the ability to make a Retention Label mandatory, in a similar way to SharePoint columns. Ideally, it would be useful to be able to set a specific Retention Label to be required at the following levels:


    • Content Type - require all items using a given content type to have a Retention label

    • Library - require all items in a given libary to have a Retention label

    • Folder (both SharePoint/OneDrive/Outlook folders) - require all items in the given folder to have a Retenton label

    Additionally, when a label is mandatory, it will be importan…

    16 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  11. Add a new permission roles to manage Records Management

    The new Records Management feature is great but it would be great to have 2 new permission roles that we can use to assign to some users without giving them access to configure the entire Compliance centre. The roles are: Records Manager - who can manage and administer the Records Management configurations and Disposition Manager - who can manage or approve any record/files that has been marked for disposal, but not able to manage the configurations set in the Records Management file plan.

    16 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  12. Alert Policy for "Unusual Volume of file deletion" should ignore when Retention Policy expires

    Alert Policy for "Unusual Volume of file deletion" should ignore when Retention Policy expires
    We have a 3 year retention policy.
    During that 3 years, people delete things, but they really don't delete until the end of the 3 year retention policy.
    So every day, we get the "Unusual Volume of file deletion" event, but it's really just the 3 year-old files that are getting deleted due to retention policy timing out the deleted files.
    Can you exclude these types of deletions because clearly the intent of the rule is to alert of sudden deletions, not the ones that happened…

    14 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  13. Create separate retention policies for 1:1 chat and Team / Channel chat

    In Skype for Business, there's an option to log or not log messages, and all one to one or one to many messaging threads are treated as ephemeral messaging if logging is disabled.

    In teams, not logging or retaining messaging in a Team or a Channel reduces the value of the tool. Currently, retention can be configured for chat to team or channel messaging, and the same retention level is applied to all messaging. (30 day minimum)

    It would be great if 1:1 or 1:many chats could be treated as ephemeral messaging, and teams / channel chat could be set…

    13 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  14. Set the retention policy with certain parameter in bulk

    It would be great if we could set or remove the retention policy in bulk for mailboxes such as shared mailboxes or resource mailboxes which contains certain parameter. When setting the retention policy by GUI, we currently have to select only Add or Remove for individual retention items.

    13 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  15. Allow the bulk import of sites or mailboxes when creating a retention policy.

    When creating a retention policy, only one user mailbox, OneDrive site, or SharePoint site can be added at a time. It would be beneficial to have the ability to have the ability to apply multiple mailboxes and/or sites at once to a single retention policy.

    12 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  16. Record status: Locked in SharePoint (lock icon) not synced in OneDrive (no lock icon)

    When applying a retention label with record status locked to a document in SharePoint (lock icon displayed) and opening this document in the synched OneDrive file explorer (no lock icon displayed), it first will show AutoSave enabled and only after some time state “Upload Failed” and turn off AutoSave. If I now edit the document and close it, I can choose to save the changes to this document. Now OneDrive cannot sync the local edited file with SharePoint and the status is permanently showing the “Processing changes” icon. In case the record status of this document is now at some…

    12 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  17. 'Classify Content as a record' should be optional step for all labels

    Currently, users will need to change the label on an item to 'declare it as a record' e.g. move from a label of 'HR (retain for 7 years)' to a label of 'HR Record (retain for 7 years + locked as record).

    Would it be possible to allow users to simply 'declare item as record' on items that have already been classified with an existing label without the need for them to change to a different label?

    This allows content already correctly classified to be locked from further editing at a given point in time. The feature could be configured…

    11 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  18. Provide a return value for Set-RetentionCompliancePolicy and New-RetentionCompliancePolicy

    With the many limitations in the current UI using PowerShell is the only want to manage the Compliance Center at scale, in particular, Retention Policies.

    New- and Set- should return a value on success/fail. for example, we can programmatically set a more than 100 SP Sites on a single policy, without receiving an error.

    11 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  19. Add retention tags for Notes and Calendar

    Please add the Notes and Calendar from the Exchange Admin Center to new Compliance / Security section

    10 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  20. Recording a log of files deleted by retention policy

    Add a feature that can record a log of files deleted by retention policy which set to delete content after its retention period.
    It would be nice if we could see the file names and the deleted data in the log.

    9 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  • Don't see your idea?

Feedback and Knowledge Base