Deception feature in Microsoft Defender for Endpoint will be retired from public preview
The Deception feature in Microsoft Defender for Endpoint will be retired from public preview by October 31, 2025. New onboarding stops August 18, 2025; existing decoys and UI elements will be removed. No admin action is needed, but informing stakeholders and updating documentation is recommended. Introduction We’re retiring the Deception feature from public preview in Microsoft Defender for Endpoint. When this will happen August 18, 2025: Onboarding of new tenants to the Deception feature will be blocked. October 31, 2025: All existing decoys and lures will be removed. Deception-related sections will be removed from the portal. How this affects your organization You’re receiving this message because your organization may be using or had access to Deception techniques in Defender for Endpoint. After October 31, 2025: The Deception feature will no longer be available. Existing decoys and lures will be removed. Related UI elements will be removed from the Defender portal. Microsoft will continue to support offboarding and removal of deception-related artifacts. What you can do to prepare No admin action is required. This change will occur automatically. We recommend: Informing relevant users and stakeholders. Updating internal documentation. Exploring and adopting automatic attack disruption and exposure management capabilities. Learn more: Manage the deception capability in Microsoft Defender XDR Compliance considerations No compliance considerations identified, review as appropriate for your organization. Message ID: MC1137611
The post Deception feature in Microsoft Defender for Endpoint will be retired from public preview appeared first on M365 Admin.
Published on:
Learn moreWe can help you with Deception feature in Microsoft Defender for Endpoint will be retired from public preview
If you want help implementing, troubleshooting, or improving this product, contact us and we’ll point you in the right direction.
Related posts
Microsoft Copilot (Microsoft 365): Local inferencing
Local inferencing expands Microsoft Copilot’s sovereign controls by enabling AI inferencing for supported Copilot interactions to occur within...
Dynamics 365 Customer Service: Quality evaluation supports knowledge source in criteria
Criteria questions can now use knowledge sources to help evaluate customer interactions. This allows organizations to ground evaluation criter...
Microsoft Viva: Ability for leaders to publish Power BI reports
Microsoft Viva Insights is extending its report publishing capabilities from analysts to leader personas such as Chief Officers, Managers and ...
Dynamics 365 Customer Service: Detailed quality evaluation score breakdown
Evaluation details now include a scoring breakdown at the overall, section, and question level. Users can see how the final evaluation score w...
Dynamics 365 Customer Service: Support Not Applicable answer option for quality evaluation criteria
Criteria questions now support a Not Applicable answer option. When a question is marked as not applicable, it is excluded from scoring instea...
Dynamics 365 Customer Service: Inactivate quality evaluation records
Quality managers can now inactivate evaluation records that should no longer contribute to scoring or reporting. Inactive evaluations are pres...
Microsoft Teams: Granular Conditional Access for Teams meetings
Granular Conditional Access for Teams meetings gives organizations greater control over access to sensitive meetings. Administrators can apply...
Customized PowerBI reports behavior after major report updates
Microsoft Viva Insights customized Power BI reports will remain tied to their original report versions and won’t auto-update with major report...
Microsoft SharePoint: Changes to the FAQ web part authoring experience
The SharePoint FAQ web part will shift AI-assisted FAQ creation to Copilot in SharePoint, while retaining manual FAQ editing in the web part. ...
Microsoft 365 Copilot: Federated Copilot connectors support create, update, and delete actions
Microsoft 365 Copilot’s federated connectors will support create, update, and delete actions in third-party services starting October 20...