Microsoft Refines Restricted Content Discovery Search Controls
Microsoft is deploying updates to Restricted Content Discovery (RCD) for Microsoft 365 Copilot, according to a July 14 Message Center notice reported by Office 365 IT Pros. The changes stop recently accessed files from RCD-protected SharePoint sites from resurfacing through Microsoft Search and Copilot discovery paths, while existing RCD site configurations remain in effect without administrative action.
Microsoft is deploying refinements to Restricted Content Discovery (RCD), a SharePoint Advanced Management control used to prevent content from selected SharePoint Online sites from appearing in Microsoft Search and, consequently, from being available to ground Microsoft 365 Copilot responses. Office 365 IT Pros reports that the changes were announced in Message Center notification MC1427972 on July 14, 2026, and are now being deployed.
The most consequential update closes a discovery path involving recently used files. Office 365 IT Pros reports that files from RCD-protected sites could previously be surfaced after a user viewed, edited, or shared them, because those interactions placed files in Office most-recently-used (MRU) lists. Under the update, files from RCD-enabled sites will no longer become discoverable through Microsoft Search via that mechanism, limiting their availability to Copilot.
According to the same report, no administrative action is required for the service-side update, and existing RCD-protected sites continue to operate as before. The report also describes SharePoint UI changes intended to remove AI-powered entry points from RCD-enabled sites.
Why the MRU change matters
RCD works at the search-discovery layer. As Office 365 IT Pros explains, when Microsoft 365 Copilot queries Microsoft Search for SharePoint Online files, content in RCD-protected sites is excluded from the returned results. If the search service does not return a file, Copilot cannot use that file as grounding material or cite its contents in an answer.
The MRU behavior created an important distinction between ordinary tenant-wide discovery and user-specific recent activity. The reported update narrows that distinction by ensuring recent interaction with a file does not return it to Search or Copilot discovery when its site is protected by RCD.
Microsoft's April 2026 Community Conference material places RCD among SharePoint Advanced Management governance capabilities, alongside permission-state reporting, restricted access control, access reviews, and site lifecycle policies. That material also states that Copilot brings together signals from files, email, meetings, and chats while respecting existing permissions, security-group assignments, sensitivity labels, and data loss prevention policies.
Governance implications
RCD is not a replacement for permissions. It is a discovery control that applies to selected SharePoint sites, whereas underlying access permissions determine whether a user can directly open content. The Microsoft conference material identifies permissions, labels, and DLP as separate controls in the broader Microsoft 365 governance stack.
For teams operating enterprise retrieval-augmented generation systems, the change illustrates a recurring governance issue: excluding a document from a primary search index is insufficient if auxiliary discovery surfaces, such as recent-item lists, can reintroduce it. Comparable systems require testing across every retrieval and recommendation surface that can provide context to an assistant, not just a default search query.
Microsoft's May SharePoint blog describes SharePoint as a content foundation for Teams, OneDrive, Loop, Copilot, and a broader agent ecosystem. In that setting, administrators evaluating RCD should validate the effective behavior of protected sites through both search and Copilot workflows, particularly for content that users have recently opened, edited, or shared.
Key Points
- 1Microsoft's RCD update blocks recently used files from protected SharePoint sites from resurfacing through Microsoft Search and Copilot discovery.
- 2Existing RCD configurations remain active without administrator action, according to Office 365 IT Pros' reporting on the Microsoft notification.
- 3Comparable enterprise AI systems need retrieval testing beyond primary indexes because recent-item and recommendation surfaces can expose additional context paths.
Scoring Rationale
The update affects a meaningful governance control for organizations deploying Microsoft 365 Copilot over SharePoint content. It is especially relevant to administrators and AI governance teams because it closes a reported retrieval path involving recently used files, but it is not a new model or platform-wide product launch.
Sources
Primary source and supporting public references used for this report.
Practice interview problems based on real data
1,625 SQL & Python problems across 15 industry datasets — the exact type of data you work with.
Try 250 free problems
