Anti-spam policy vs user's private policy

Question

Hi,
My question is about organization policy and user (personal) policy in Outlook.
Situation is I've added email blocked@contoso in M365 Defender for Exchange in Anti-spam policies.
Defender -> Policies & rules -> Threat policies -> Anti-spam policies

and what's next - we received email from this sender

and as you can see - messages from this sender are quarantined, except messages delivered to one of our users. As I discovered this user added sender into his own Sender address list in Outlook into spam.

vs messages to which Anti-spam policy was applied:

So my question is how does it works? I've found this table...:

https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/how-policies-and-protections-are-combined?view=o365-worldwide

...and correct me if I am wrong:
**1. Filtering stack verdict for Spam - User personal policy wins and that's why it was delivered into user's spam folder instead of beeing Quarantined?

2. If I change blocked sender from Anti-spam policy to Tenant allow/block it will result in this every message from blocked sender will be Quarantined instead of going into spam regardless of user's private policy?**

Answer 1

Hi @Anonymous ,

1. Filtering stack verdict for Spam - User personal policy wins and that's why it was delivered into user's spam folder instead of beeing Quarantined?

Yes, this is exactly as what's displayed in the table you shared:

2.If I change blocked sender from Anti-spam policy to Tenant allow/block it will result in this every message from blocked sender will be Quarantined instead of going into spam regardless of user's private policy?

Yes. According to the last table in the link you mentioned earlier, block entries in Tenant allow/block list overrides user's block sender list:

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hello,
Thank you for your answer. Case closed. :)