MC1213770: Microsoft Purview | Data lifecycle Management cmdlet connectivity change

Introduction

Connectivity changes between cmdlets and Microsoft 365 services like SharePoint and Exchange now require a new parameter for improved security and modern authentication. Starting Jan 31, 2026, Admins must use Exchange Online PowerShell v3.9.0 or later and include the -EnableSearchOnlySession parameter when running Connect-IPPSession to execute Data Lifecycle Management cmdlets.

When this will happen:

Enforcement begins January 31, 2026.

How this affects your organization:

• Who is affected: Admins using Data Lifecycle Management cmdlets in Security & Compliance PowerShell.
• What will happen:
  • You must use Exchange Online PowerShell v3.9.0 or later.
  • You must include the -EnableSearchOnlySession parameter when running Connect-IPPSession.
  • This applies to the following cmdlets:
    • New-RetentionCompliancePolicy
    • Set-RetentionCompliancePolicy
    • New-RetentionComplianceRule
    • Set-RetentionComplianceRule
  • No impact for users accessing Data Lifecycle Management through the Purview portal.
  • Cmdlets remain incompatible with Certificate-Based Authentication (CBA).

What you can do to prepare:

• Update scripts and workflows to include the -EnableSearchOnlySession parameter.
• Ensure your organization is using Exchange Online PowerShell version 3.9.0 or later.
• For more information, visit: Learn about Data Lifecycle Management solutions in Microsoft Purview.

Compliance considerations:

No compliance considerations identified, review as appropriate for your organization.