(Updated) Microsoft Purview | Data lifecycle Management cmdlet connectivity change

Updated March 24, 2026: We have updated the content. Thank you for your patience. 

Introduction

Connectivity changes between cmdlets and Microsoft 365 services like SharePoint and Exchange now require a new parameter for improved security and modern authentication. Starting Jan 31, 2026, Admins must use Exchange Online PowerShell v3.9.0 or later and include the -EnableSearchOnlySession parameter when running Connect-IPPSession to execute Data Lifecycle Management cmdlets.

When this will happen:

Enforcement begins January 31, 2026.

How this affects your organization:

• Who is affected: Admins using Data Lifecycle Management cmdlets in Security & Compliance PowerShell.
• What will happen:
  • You must use Exchange Online PowerShell v3.9.0 or later.
  • You must include the -EnableSearchOnlySession parameter when running Connect-IPPSession.
  • This applies to the following cmdlets:
    • New-RetentionCompliancePolicy
    • Set-RetentionCompliancePolicy
    • New-RetentionComplianceRule
    • Set-RetentionComplianceRule
    • New-ComplianceTag
    • Set-ComplianceTag
    • Remove-ComplianceTag
    • New-ComplianceRetentionEvent
    • Set- ComplianceRetentionEvent
    • Remove- ComplianceRetentionEvent
    • New-ComplianceRetentionEventType
    • Set-ComplianceRetentionEventType
    • Remove- ComplianceRetentionEventType
  • No impact for users accessing Data Lifecycle Management through the Purview portal.
  • Cmdlets remain incompatible with Certificate-Based Authentication (CBA).

What you can do to prepare:

• Update scripts and workflows to include the -EnableSearchOnlySession parameter.
• Ensure your organization is using Exchange Online PowerShell version 3.9.0 or later.
• For more information, visit: Learn about Data Lifecycle Management solutions in Microsoft Purview.

Compliance considerations:

No compliance considerations identified, review as appropriate for your organization.