💡 Our Technical Review in summary
Summary
- Microsoft has announced that the built-in Report button is now General Availability (GA) across all Outlook platforms, including New Outlook for Windows, Mac, Web, and mobile (iOS/Android).
- The legacy “Report Message” and “Report Phishing” add-ins have officially entered maintenance mode. While they remain functional for now, Microsoft will no longer provide updates, improvements, or feature requests for them.
- Organizations are encouraged to transition to the native reporting functionality to ensure a streamlined user experience and long-term support.
Impact
- User Experience: If the legacy add-ins remain deployed, users will see duplicate reporting options in their Outlook ribbon (the add-in button and the built-in button).
- Configuration Limits: It is not possible to disable the built-in Report button while keeping the legacy Microsoft reporting add-ins active.
- Maintenance Mode: While the legacy add-ins are not being retired immediately, they are on a path toward deprecation. No further development will occur on these tools.
- Third-Party Add-ins: Organizations using non-Microsoft reporting tools will also see the built-in button by default unless specific configuration steps are taken in the Microsoft Defender portal.
Action Required
- Audit Add-ins: Identify if your organization is currently deploying the “Report Message” or “Report Phishing” add-ins via the Microsoft 365 Admin Center (Integrated Apps).
- Decommission Legacy Add-ins: To avoid user confusion, remove the legacy Microsoft reporting add-ins and transition users to the built-in Report button.
- Third-Party Integration: If you use a third-party reporting tool, navigate to Microsoft Defender > User reported settings and select “Use a non-Microsoft add-in button” to hide the built-in Microsoft button and ensure reports are routed to your custom mailbox.
- Update Documentation: Update internal IT help desk manuals and user training materials to reflect the look and placement of the native Report button.
- Review Settings: Confirm your “User reported settings” in the Microsoft Defender portal to ensure that reported messages are being sent to the correct location (Microsoft, a custom reporting mailbox, or both).
Microsoft Official Update
Service: N/A
Category: stayInformed
Severity: normal
As communicated in four previously published posts for Microsoft Defender and Microsoft Exchange Online starting in 2022 and ending with MC960818 (Updated) Microsoft Outlook for iOS/Android: New reporting buttons integrated with Microsoft Defender for Office 365 (February 2024), the built-in Report button is available for all Microsoft Outlook platforms. Learn more: Report phishing and suspicious emails in Outlook for admins – Microsoft Defender for Office 365 | Microsoft Learn.
This message announces the maintenance mode status of the Report Message add-in and Report Phishing add-in and explains how to disable all add-ins so users only see one reporting option in Outlook.
This message applies to new Outlook for Windows desktop, Outlook for Mac desktop, Outlook for the web, and Outlook for iOS/Android.
[When this will happen:]
General Availability (Worldwide, GCC, GCC High, DoD): Available now.
[How this will affect your organization:]
Before this change: The Report Message add-in and Report Phishing add-in were available for Outlook.
After this change, the built-in Report button provides these advantages over the add-ins:
The Report Message add-in and Report Phishing add-in are now in maintenance mode, which means we will not make improvements to them. The add-ins will remain functional until we eventually retire them. Any new improvement requests for the add-ins will be rejected. Learn more: Transition from Report Message or the Report Phishing add-ins – Microsoft Defender for Office 365 | Microsoft Learn (includes Frequently Asked Questions).
If you have the Report Message add-in and Report Phishing add-in, users will see two reporting options in Outlook: The Report Message add-in and the built-in Report button. It is not possible to remove the built-in Report button and keep the Report Message add-in. Learn more about removing the add-in.
If you are using a third-party add-in, end users might see two reporting options in Outlook. Follow these steps to remove the in-built report button:
- Go to Microsoft Defender > User reported settings
- Select Monitor reported messages in Outlook.
- Select Use a non-Microsoft add-in button.
- In the Reported message destination section, configure these options:
- For Send reported messages to:, select one of these values:
- My reporting mailbox only
- Microsoft and My reporting mailbox
- For Add an Exchange Online mailbox to send reported messages to:, specify an existing internal reporting mailbox to hold user reported messages from the third-party add-in.
- For Send reported messages to:, select one of these values:
[What you need to do to prepare:]
Review your current configuration to determine the impact for your organization. You may want to notify your users about this change and update any relevant training materials.
Learn more
- Transition from Report Message or the Report Phishing add-ins – Microsoft Defender for Office 365 | Microsoft Learn
- Report phishing and suspicious emails in Outlook for admins – Microsoft Defender for Office 365 | Microsoft Learn
- User reported settings – Microsoft Defender for Office 365 | Microsoft Learn
#newoutlookforwindows
