Author: Forrest Zhang

When someone asks whether “Dynamics 365 supports virus scanning or document quarantining,” the correct answer is: it depends on where the document is stored. In Microsoft’s ecosystem, documents attached to Dynamics experiences typically live in one of two places:

SharePoint / OneDrive (via Dynamics 365 “Document Management” integration)
Dataverse (Notes/attachments, File columns, and other Dataverse-backed storage)

Both can provide malware protection, but the capabilities and the operational behavior differ.

1) SharePoint / OneDrive / Teams: Built-in Malware Scanning + Blocking

If your Dynamics 365 solution stores documents in SharePoint/OneDrive, then malware scanning is handled by Microsoft 365 security controls (not “Dynamics” itself). Microsoft documents that files are scanned asynchronously (i.e., scanning occurs after upload), and if malware is detected, the file is blocked so users can’t open it.

Reference: Anti-malware protection for SharePoint Online, OneDrive for Business, and Microsoft Teams (Microsoft Learn)

What this means in practice

Users may be able to upload a file first; scanning happens shortly after (asynchronous scanning).
If malware is detected, Microsoft 365 can prevent users from opening/downloading the file.
Security/response experiences can vary depending on your Microsoft Defender configuration and licensing.

2) Dataverse: Malware Scanning for Files and Attachments (Feature Availability Depends on Tenant/Setup)

For files stored directly in Dataverse (for example, file/attachment storage in Dataverse-backed apps), Microsoft has described a platform capability to scan files and attachments for viruses and malware. This is commonly referenced in release plan documentation and may be controlled by environment/tenant configuration.

Reference: Power Platform Release Plan (2024 Wave 2) – Data Platform / Data workspace (Microsoft Learn)

Important wording note

Microsoft’s public documentation is clear that malware scanning exists, but it may not describe every operational detail (e.g., whether there is a dedicated “quarantine” UI, how admins review items, etc.). So in communications, it’s safest to state: “Dataverse supports malware scanning for files/attachments” and avoid over-specifying “quarantine workflows” unless you’ve verified them in your tenant.

Recommended Guidance for Project Teams

If you want the most mature “document security + governance” experience: store documents in SharePoint/OneDrive and rely on Microsoft 365 protections.
If you store files in Dataverse: confirm the malware scanning feature is available and enabled in your environment, and validate what end-user/admin behavior looks like (blocked access, notifications, etc.).
Be precise when answering “Does Dynamics do virus scanning?” The scanning is performed by the storage platform (SharePoint/OneDrive or Dataverse), not the Dynamics UI itself.

Quick Summary

Storage Location	Malware Scanning	Typical Outcome When Malware Found	Notes
SharePoint / OneDrive / Teams	Yes (asynchronous scanning)	File is blocked from being opened/downloaded	Behavior depends on Microsoft 365 / Defender configuration
Dataverse	Yes (platform feature described by Microsoft)	Depends on tenant/environment configuration	Avoid claiming “quarantine UX” unless verified in your tenant

Document Malware Scanning in Dynamics 365: What’s Covered by SharePoint vs Dataverse