Standalone EOP - reporting false positives/negatives

Paul, Tanmoy 1

When using Standalone EOP (i.e. with on-prem mailboxes), what is the recommended way of letting end-users report false positives/negatives? The Report Message/Phishing add-ins are not available for on-prem mailboxes per the documentation.

Faery Fu-MSFT 18,776 Reputation points Microsoft Vendor

2023-01-10T07:08:37.85+00:00

Hi @Paul, Tanmoy , Is there any update on this thread? If the issue has been resolved, please mark the helpful replies as answers, this will make answer searching in the forum easier and be beneficial to other community members as well. Thanks for your understanding.
Faery Fu-MSFT 18,776 Reputation points Microsoft Vendor

2023-01-26T23:44:52.75+00:00

Hi @Paul, Tanmoy ,

It has been a while and I am writing to see how things are going on with this issue. Have you had a chance to check the replies provided? Any update would be appreciated.
Paul, Tanmoy 1 Reputation point

2023-10-13T07:49:16.6533333+00:00
Apologies for the delated response here. We got around to testing this only recently.

We were able to install and enable the add-in for a limited set of users in out Hybrid Exchange setup. However, the add-in doesn't appear to function as intended.

As mentioned in the doc I have configured required options in the userSubmission page. even then when I report an email as phish/junk:

The add-in claims to have reported it and moved it to the Deleted Items folder. Neither of these actually happens.

When I check the inbox of the Exchange Online mailbox to which reported emails are supposed to be sent, I don't see the reported email.

I don't see the reported email in the User reported tab of the Submissions page (despite me having the Security Administrator and Compliance Administrator roles).

Do note that I am reporting the email from an on-prem mailbox (given our Hybrid setup). Am I missing something obvious in getting this to work?

1 answer

Andy David - MVP 147.9K Reputation points MVP

2023-01-09T17:50:51.577+00:00

the Admin can report:

https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/submissions-admin?view=o365-worldwide

If you are on-prem and using Hybrid Modern Auth:
https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/submissions-outlook-report-messages?view=o365-worldwide#use-the-report-message-and-report-phishing-add-ins-in-outlook
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Standalone EOP - reporting false positives/negatives

1 answer

Your answer