Timing
A common question when making changes is how long it takes for those changes to take effect, I have attempted to gather all known timings estimates below for MDO.
| Change | Time | Reference |
|---|---|---|
| Anti-phish policy change | 30 Minutes | Link |
| Anti-spam policy change | 1 Hour | Link |
| Anti-malware policy change | 1 Hour | Link |
| Safe attachments policy change | 30 Minutes | Link |
| Safe links policy change | 6 Hours | Link |
| Safe links policy change for Teams | 24 Hours | Link |
| Tenant allow/block list entries effective | 5 Minutes | Link |
| ZAP protection effective | 48 Hours | MDO Teams |
| Anti-malware definition updates | 1 Hour | Link |
| Restricted entity removal | 1 hour to 24 hour at most | Link |
| Apply user tags | 8 Hours | Link |
| DKIM Rotation | 96 Hours (4 Days) | Link |
| Attack simulation reports | 30 Minutes | Link |
| MDO Trial effective | 2 Hours | Link |
- Time aware delivery in attack simulation training
- https://learn.microsoft.com/en-us/defender-office-365/attack-simulation-training-faq#q-how-does-region-aware-delivery-work