Enable Users To Block Senders In the Defender Portal

Question

Enable Users To Block Senders In the Defender Portal

TempStar 50

Recently staff have lost the ability to block senders via the ******@messaging.microsoft.com email that is sent to their inboxes.

User's image This option is also greyed out in the defender portal for them as well.

User's image We have a policy in place that is supposed to allow this action so it is not clear as to why this is not available.

User's image

I did find an article stating that MS is taking this away by default however creating a policy should allow this i would think. I am looking for feedback on anything i may have missed.

Thank you in advance.

TempStar 50 Reputation points

2024-04-25T13:34:49.46+00:00

Thank you for your response.

Are you aware of any delay from when the new policy is created and applied to the time users are able to see the changes?
Anonymous

2024-04-26T07:05:14.94+00:00

Hi，

I'm glad to receive your reply. I tested it and theoretically the policy is effective immediately, but considering the network issues, I suggest you wait 24 hours.

If my reply is helpful to you, please mark it as an answer so that users with the same problem can use it as a reference. Thanks for your support and understanding.
Anonymous

2024-04-30T01:23:11.2133333+00:00

Hello, it's been a long time since I've heard from you, did my previous reply help you, if it was useful, you can mark it as an answer. Thank you for your understanding and support.
TempStar 50 Reputation points

2024-04-30T15:50:43.9433333+00:00

Hello.

Sorry to say that this did not work and i am still trying to find a solution.
Anonymous

2024-05-02T05:04:56.4466667+00:00
Hi

1.Did you create a new policy and it still doesn't work?

How did you create the isolation policy and can you provide a screenshot of the complete isolation policy?
TempStar 50 Reputation points

2024-05-02T12:34:00.8466667+00:00

Hi Bruce

I created a new policy and the experience is the same. Screenshot of the policy is below.
Anonymous

2024-05-03T08:48:02.37+00:00
Hi，

I'm glad to hear from you.

First of all just creating a quarantine policy is not complete, you also need to create an anti-spam policy and add the new quarantine policy to the anti-spam policy.

In Microsoft Defender find Policies & rule->Threat policies and click Anti-Spam policie

Select Create Policy and select inbound.

Add members or groups that you want to apply this policy to. In action, the quarantine policy must select the quarantine policy you created.

Finally save the policy.
TempStar 50 Reputation points

2024-05-03T20:30:40.4166667+00:00

Yes. I created the new quarantine policy and added it to the default antispam policy. Since that did not correct the issue, today I created an new antispam poicy and applied the new quarantine policy to it and after several hours i am sad to say that there hasn't been a change.

Thanks for your reply.
Anonymous

2024-05-06T09:33:34.7766667+00:00
Hi，

I'm glad to hear from you.

Thanks for the screenshot of your anti-spam policy.

Based on the screenshots, it looks like there's nothing wrong with your setup. To fully understand your anti-malware policy, the following cmdlet commands can obtain specific parameters.Please provide a screenshot of the result of the cmdlet command below.

Use Get-QuarantinePolicy -Identity "Identity Policy Name" to get the specific parameters of the quarantine policy you created.

2.Use Get-HostedContentFilterPolicy -Identity "PolicyName" | Format-List to get the specific parameters of the policy.

Use the Get-HostedContentFilterRule "PolicyName" | Format-List cmdlet to view spam filter rules.
TempStar 50 Reputation points

2024-05-08T20:00:56.9033333+00:00

Good afternoon and sorry for the late reply. Attached are the screenshots of the commands you have requested. Upon review, nothing jumps out at me. Thank you for reviewing.
Anonymous

2024-05-13T11:57:29.3966667+00:00

Hi，

According to the screenshot you provided, I changed my parameters to be the same as yours, but I can still block the sender.

I have tested the policy which is the same settings as yours, but it also worked as my previous one. I cannot reproduce this issue. I suspect that this issue may be related to your tenant, it is recommended to open a service request to M365 backend team to resolve this issue. Thanks for your understanding。
Bill Baum 0 Reputation points

2024-06-13T21:03:58.3366667+00:00

This is happening to me too. I've made completely new policies, rules, filters, and all that from powershell because the admin centre isn't co-operating with me but still no change. My users cannot "block sender" from their quarantine page unless they're an admin.

5 answers

Your answer

TempStar 50 Reputation points

2024-04-25T13:34:49.46+00:00

Thank you for your response.

Are you aware of any delay from when the new policy is created and applied to the time users are able to see the changes?
Anonymous

2024-04-26T07:05:14.94+00:00

Hi，

I'm glad to receive your reply. I tested it and theoretically the policy is effective immediately, but considering the network issues, I suggest you wait 24 hours.

If my reply is helpful to you, please mark it as an answer so that users with the same problem can use it as a reference. Thanks for your support and understanding.
Anonymous

2024-04-30T01:23:11.2133333+00:00

Hello, it's been a long time since I've heard from you, did my previous reply help you, if it was useful, you can mark it as an answer. Thank you for your understanding and support.
TempStar 50 Reputation points

2024-04-30T15:50:43.9433333+00:00

Hello.

Sorry to say that this did not work and i am still trying to find a solution.
Anonymous

2024-05-02T05:04:56.4466667+00:00

Hi

1.Did you create a new policy and it still doesn't work?

How did you create the isolation policy and can you provide a screenshot of the complete isolation policy?
TempStar 50 Reputation points

2024-05-02T12:34:00.8466667+00:00

Hi Bruce

I created a new policy and the experience is the same. Screenshot of the policy is below.
Anonymous

2024-05-03T08:48:02.37+00:00

Hi，

I'm glad to hear from you.

First of all just creating a quarantine policy is not complete, you also need to create an anti-spam policy and add the new quarantine policy to the anti-spam policy.

In Microsoft Defender find Policies & rule->Threat policies and click Anti-Spam policie

Select Create Policy and select inbound.

Add members or groups that you want to apply this policy to. In action, the quarantine policy must select the quarantine policy you created.

Finally save the policy.
TempStar 50 Reputation points

2024-05-03T20:30:40.4166667+00:00

Yes. I created the new quarantine policy and added it to the default antispam policy. Since that did not correct the issue, today I created an new antispam poicy and applied the new quarantine policy to it and after several hours i am sad to say that there hasn't been a change.

Thanks for your reply.
Anonymous

2024-05-06T09:33:34.7766667+00:00

Hi，

I'm glad to hear from you.

Thanks for the screenshot of your anti-spam policy.

Based on the screenshots, it looks like there's nothing wrong with your setup. To fully understand your anti-malware policy, the following cmdlet commands can obtain specific parameters.Please provide a screenshot of the result of the cmdlet command below.

Use Get-QuarantinePolicy -Identity "Identity Policy Name" to get the specific parameters of the quarantine policy you created.

2.Use Get-HostedContentFilterPolicy -Identity "PolicyName" | Format-List to get the specific parameters of the policy.

Use the Get-HostedContentFilterRule "PolicyName" | Format-List cmdlet to view spam filter rules.
TempStar 50 Reputation points

2024-05-08T20:00:56.9033333+00:00

Good afternoon and sorry for the late reply. Attached are the screenshots of the commands you have requested. Upon review, nothing jumps out at me. Thank you for reviewing.
Anonymous

2024-05-13T11:57:29.3966667+00:00

Hi，

According to the screenshot you provided, I changed my parameters to be the same as yours, but I can still block the sender.

I have tested the policy which is the same settings as yours, but it also worked as my previous one. I cannot reproduce this issue. I suspect that this issue may be related to your tenant, it is recommended to open a service request to M365 backend team to resolve this issue. Thanks for your understanding。
Bill Baum 0 Reputation points

2024-06-13T21:03:58.3366667+00:00

This is happening to me too. I've made completely new policies, rules, filters, and all that from powershell because the admin centre isn't co-operating with me but still no change. My users cannot "block sender" from their quarantine page unless they're an admin.

Answer 1

Anonymous

Hi，

I checked the official Microsoft documentation and it is recommended to create a new quarantine policy if the NotificationsEnable Policy is not in effect. You can refer to this URL for the exact steps:

Quarantine policies - Microsoft Defender for Office 365 | Microsoft Learn.

Answer 2

Alberto-6036 10

I am experiencing the same issue. The 'Block Sender' and 'Deny' options are greyed out, and nothing changed despite following the steps in the 'Manage quarantined messages and files as an admin' document. I have granted global administration privileges and security administrator privileges, but it still didn’t resolve the issue. How is it possible that even an admin cannot block senders from quarantine?

Answer 3

Evandro Amaro 0

Hello everyone. I too am having the same exact issue.

User's image

The notification policy allows users to Block sender

I have disabled this policy and re-enabled it 2 weeks ago. I had to to other stuff in the meantime. While getting back to this topic I checked again and still the same. The screenshot above is from today.

TempStar 50 Reputation points

2024-07-04T13:24:20.0066667+00:00

Check to see if you have any of the preset security policies turned on. I had the standard protection policy turned on and it was preventing the use of block sender.

After turning it off this ability to block senders returned. Make sure you have good Anti-phishing, Anti-spam and quarantine rules in place before turning it off. Hope this helps.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Answer 4

TempStar 50

Check to see if you have one of the preset security policies turned on. I had the standard protection policy turned on and once it was turned off, the ability to block senders returned.

User's image

Ensure you have good anti-phishing, anti-spam and quarantine rules created before turning this off.

Hope this helps

Answer 5

Going by the answer from Andy David on this question "Block sender and Deny Options are Greyed Out" it's only possible to block senders for your own mailbox.

That is, it's not possible to use the "Block sender" button to block senders for another user's mailbox or for a shared mailbox.

I was able to confirm that when viewing all emails in quarantine the "Block sender" button was greyed out and disabled. But when I filtered the "Recipient" list to "Only me" and selected a message for my mailbox, the "Block sender" button was enabled and clickable.

Share via

Enable Users To Block Senders In the Defender Portal

5 answers

Your answer