MC1387578: Microsoft Defender for Office 365 Adds Localization to Default Mark and Notify Email Templates

4 minutes
MWPRO IMPACT SCORE
OPERATIONAL IMPACT
29
0 25 50 75 100
MODERATE IMPACT • ASSESS BUSINESS IMPACT
Recommended Action:
Take a look and decide whether this affects your tenant, users or support teams.
▶ What is MWPro Impact Score? Watch our 60‑second explainer

Primary Audience

Microsoft 365 AdminsSecurity TeamsIT ManagersService Owners
Why this score?
AI Confidence
HIGH
Enough detail is available to trust this assessment.
Assessment Reasoning
Microsoft has adjusted the rollout completion date to end of September 2026, extending from the previous late July timeline. The change localises default notification templates in Defender for Office 365, affecting workflows where admins use the default option. No technical action is required, but admins may want to inform users and review related settings or documentation. User experience impact is limited to language changes in notification emails, and overall urgency is moderate due to the revised date and optional nature of any adjustments.
30
🛡️ Admin Impact
MEDIUM
20
👥 User Impact
LOW
35
⚡ Urgency
MEDIUM
25
🔧 Effort
MEDIUM
ℹ️ WHAT YOU NEED TO KNOW
📌

AT A GLANCE

Microsoft Defender for Office 365 will localize the default ‘Mark and notify’ email template so notifications match the user’s Outlook language.
👥

END USERS

Users may see notification emails in their preferred language.
🛡️

IT ADMINS

Consider informing users and updating any related guidance; review settings if you rely on the default template.
📅

ROLLOUT TIMELINE

Rolling out:
Ends September 2026

📢 Official Microsoft Message Center Announcement

(Updated) Microsoft Defender for Office 365: Localized default mark and notify email template
Message ID: MC1387578 (Updated)

Updated August 21, 2026: We have updated the timeline. Thank you for your patience. 

[What and Why]

Microsoft Defender for Office 365 is introducing localization support for the default “Mark and notify” email template used in admin review and automated notification flows for user-reported messages.

This update ensures that users receive notification emails in their preferred language based on their Outlook settings, improving clarity and understanding of review outcomes. This helps improve engagement and supports stronger security practices.

This message is associated with Microsoft 365 Roadmap ID 557558.

[Rollout Schedule]

General Availability

  • Worldwide: Rollout begins in June 2026 and is expected to complete by end of September 2026 (previously late July).
  • GCC, GCC High, DoD: Rollout begins in mid-July 2026 and is expected to complete by end of September 2026 (previously late July).

[Impact on Your Organization]

Who is affected

  • Organizations using Microsoft Defender for Office 365
  • Admins and users participating in user-reported message workflows
  • Applies only when the default notification template is used

Platforms/Services

  • Microsoft Defender for Office 365
  • Microsoft 365 Defender portal (web)
  • Exchange Online

What will happen

  • Default “Mark and notify” email templates will be localized.
  • Notifications will be delivered in the user’s preferred language based on Outlook settings.
  • Feature is enabled by default when auto-notification is turned on.
  • Notifications will have consistent formatting and messaging across supported languages.
  • No changes to message verdicts or classification logic.
  • No changes to automated investigation behavior.
  • No changes to custom notification templates configured by admins in the user reported settings page.
  • Default ‘safe’ message template will also use softer, clearer wording while continuing to advise users to exercise caution:
    • This email doesn’t appear harmful. But you should always handle suspicious emails with caution.
    • The safe-message template will also advise users to:
      • Contact the sender through another channel to confirm the message’s validity.
      • Avoid links and attachments in unsolicited emails from unfamiliar senders.

Screenshot 1 – Before localization view: 

224a0d5a0eb5810a4b7e038e7a3543ba8acde6a5

Screenshot 1 – Localized template view:

 b01e9a671e896490e1623ae09fdfd4caa9517139

Screenshot 2 – Default safe message:

20816 3


[Action Required/Recommendations]

No action is required.

You may consider the following:

  • Inform users that notification emails may now appear in their preferred language.
  • Review notification settings in Microsoft Defender: Settings > Email and collaboration > User reported settings.
  • Update internal documentation or helpdesk guidance if this workflow is documented.

Learn more: Notify users about admin submitted messages to Microsoft – Use the Submissions page to submit suspected spam, phish, URLs, legitimate email getting blocked, and email attachments to Microsoft | Microsoft Defender for Office 365 | Microsoft Defender | Microsoft Learn

[Compliance considerations]

No compliance considerations identified. Review as appropriate for your organization.

Source: Microsoft Message Center • Analysed by MWPro

<<< [MC1387578] Archive
Tooltip: View earlier revisions of this post

Share This Update
Tags: