Services
Summary
Starting January 31, 2026, admins must use Exchange Online PowerShell v3.9.0+ and include the -EnableSearchOnlySession parameter with Connect-IPPSession to run Data Lifecycle Management cmdlets. This change enhances security and affects specific retention compliance cmdlets, with no impact on Purview portal users.
Details
Introduction
Connectivity changes between cmdlets and Microsoft 365 services like SharePoint and Exchange now require a new parameter for improved security and modern authentication. Starting Jan 31, 2026, Admins must use Exchange Online PowerShell v3.9.0 or later and include the -EnableSearchOnlySession parameter when running Connect-IPPSession to execute Data Lifecycle Management cmdlets.
When this will happen:
Enforcement begins January 31, 2026.
How this affects your organization:
- Who is affected: Admins using Data Lifecycle Management cmdlets in Security & Compliance PowerShell.
- What will happen:
- You must use Exchange Online PowerShell v3.9.0 or later.
- You must include the
-EnableSearchOnlySessionparameter when runningConnect-IPPSession. - This applies to the following cmdlets:
- No impact for users accessing Data Lifecycle Management through the Purview portal.
- Cmdlets remain incompatible with Certificate-Based Authentication (CBA).
What you can do to prepare:
- Update scripts and workflows to include the
-EnableSearchOnlySessionparameter. - Ensure your organization is using Exchange Online PowerShell version 3.9.0 or later.
- For more information, visit: Learn about Data Lifecycle Management solutions in Microsoft Purview.
Compliance considerations:
No compliance considerations identified, review as appropriate for your organization.