skip to content
 

Exchange Online Protection (EOP) is a spam and malware filter available as part of the Exchange Online service. It assesses whether email is spam via both EOP's own Spam Confidence Level ruleset and the SpamAssassin scores assigned by our central mail scanner (ppswitch). Any item of mail that's ranked at a value of five or higher from either of these checks is sent to a central quarantine area, where it is retained for 15 days before being deleted.

Go to your personal quarantine page >

There is no way to disable Exchange Online's quarantine function, but there are two ways to deal with messages that have been quarantined.
 

Notification emails

You'll get a notification email from quarantine@messaging.microsoft.com listing any messages that have been quarantined in the last 24 hours – for example:

You can select the 'Release' or 'Block Sender' links in this email to accept or reject them. However, to be particularly cautious in guarding against potentially fraudulent emails, we recommend you manage your quarantined messages via your personalised web page.
 

How to use your personal Exchange Online quarantine admin web page

Your personal quarantine web page lists all the messages that have been withheld over the past 15 days (even after you have released them to your inbox).

Visit https://security.microsoft.com/quarantine

It will look like this:

 

How to release messages to your inbox

Review the items in your quarantine and ignore any junk messages. If there is a legitimate message you want to move to your Inbox click on the box to the left of the message to select it, then click on Release in the menu bar above:

 

Tip: To select multiple messages for release, you can hold down CTRL and click multiple messages or click on the box the left of 'Time received' to select all.

A message will appear to the side asking you to confirm the release, you can also tick the box here to report a false positive to Microsoft and improve the accuracy of the filter. Click the 'Release message' button at the bottom and the message will deliver to your Inbox:

A confirmation message will appear and you can click the Done button. The message will still appear in the quarantine list but the release status will have changed from 'Needs review' to 'Released'.

How to manage quarantined messages for shared mailboxes

You will need to be a member of the access group for a shared mailbox to view the quarantined messages for that mailbox. If the shared mailbox has received a notification about a quarantined message that you believe to be legitimate then open the quarantine page in a web browser: https://security.microsoft.com/quarantine

Click on the Filter option in the menu bar then enter the shared mailbox address in the 'Recepient address' field:

Click Apply and you should then see the messages quarantined for that mailbox and can follow the same steps as above to release a message.

N.B This is a new feature and we have seen permission errors when the primary address of a personal mailbox is not in the format CRSid@cam.ac.uk, if you see this error please contact the service desk for assistance (inlcude the shared mailbox address and subject line of the message you wish to be released):

UIS Service Desk

Phone padded  Service status line: (01223 7)67999
Website  Sign up for SMS/email status alerts
Website  Read major IT incident reports

UIS bITe-size bulletin

A regular newsletter aimed at the University's IT community, highlighting service and project news from UIS.

Sign up >

Latest news

Change to Raven login screen from Tuesday 14 February

26 January 2023

New login screen for current University members The login screen for Raven-protected websites and applications will change from Tuesday 14 February for current members of the University. It will become the same screen most of you are already familiar with from logging in to your University Microsoft account to access, for...

Changes to Microsoft Stream video sharing from Tues 07 Feb

26 January 2023

26 January 2023 What’s happening UIS is disabling uploads to Microsoft Stream (Classic), the old version of the video sharing app, on Tuesday 07 February. The new version is called Stream (on SharePoint). Teams meeting recordings are already being automatically saved to Stream (on SharePoint). More information: Stream (on...

Institutional File Storage (IFS) service release new features to Self-Service Gateway

18 January 2023

18 January 2023 Several new features are now live on the Self-Service Gateway run by the Institutional File Storage (IFS) service. IFS is a service for institutions to store and share everyday documents with colleagues. IFS Data Owners and Data Managers can use the Self-Service Gateway  portal to buy and administer storage...