Deception feature in Microsoft Defender for Endpoint will be retired from public preview
The Deception feature in Microsoft Defender for Endpoint will be retired from public preview by October 31, 2025. New onboarding stops August 18, 2025; existing decoys and UI elements will be removed. No admin action is needed, but informing stakeholders and updating documentation is recommended. Introduction We’re retiring the Deception feature from public preview in Microsoft Defender for Endpoint. When this will happen August 18, 2025: Onboarding of new tenants to the Deception feature will be blocked. October 31, 2025: All existing decoys and lures will be removed. Deception-related sections will be removed from the portal. How this affects your organization You’re receiving this message because your organization may be using or had access to Deception techniques in Defender for Endpoint. After October 31, 2025: The Deception feature will no longer be available. Existing decoys and lures will be removed. Related UI elements will be removed from the Defender portal. Microsoft will continue to support offboarding and removal of deception-related artifacts. What you can do to prepare No admin action is required. This change will occur automatically. We recommend: Informing relevant users and stakeholders. Updating internal documentation. Exploring and adopting automatic attack disruption and exposure management capabilities. Learn more: Manage the deception capability in Microsoft Defender XDR Compliance considerations No compliance considerations identified, review as appropriate for your organization. Message ID: MC1137611
The post Deception feature in Microsoft Defender for Endpoint will be retired from public preview appeared first on M365 Admin.
Published on:
Learn moreWe can help you with Deception feature in Microsoft Defender for Endpoint will be retired from public preview
If you want help implementing, troubleshooting, or improving this product, contact us and we’ll point you in the right direction.
Related posts
Cross-post SharePoint News to Engage
SharePoint News can now be cross-posted to Viva Engage communities with full fidelity and synchronized conversations across platforms. Rolling...
Call Quality Dashboard Custom Detailed Reports
Call Quality Dashboard will get a refreshed interface with enhanced accessibility and features like dark mode. Public preview starts mid-Augus...
Microsoft Copilot Pages: Access existing Pages from the “/” menu in chat
Starting late August 2026, users can access existing Pages via the “/” menu in Copilot chat, while the “Edit in Pages”...
Microsoft Teams: Collect information with List Form in Workflows
Microsoft Teams Workflows will add a new trigger, “A form is submitted,” for automating actions based on SharePoint list–backed fo...
Microsoft Viva Engage: Reducing reply notification volume in email
Microsoft Viva Engage will reduce email reply notifications by only sending alerts for direct replies, @mentions, and new posts, cutting down ...
Microsoft Teams: Lobby visibility will align with the “Who can admit from lobby” meeting option
Microsoft Teams will align lobby visibility with the “Who can admit from lobby” setting, so only users allowed to admit participan...
Microsoft Word: Similarity Checker retirement
Microsoft Word’s Similarity Checker will be retired on October 3, 2026, and removed from Microsoft Editor. Other writing and editing fea...
Microsoft Secure Score: New AI-readiness recommendations for device security
Microsoft Secure Score will add four new AI-readiness recommendations for device security in Microsoft Defender for Endpoint, focusing on TPM ...
Dynamics 365 Contact Center- Use data masking to protect customer data
We are announcing the ability to use data masking to protect customer data in Dynamics 365 Contact Center. This feature will reach general ava...
Microsoft Teams: QR code protection in Teams messaging
Microsoft Teams will provide additional protection for QR codes shared by external users in messages. Images containing QR codes from external...