Mail Flow rule?

Question

I have an email that keeps getting stuck in Quarantine.  I have sent it from an o365 account as well as my personal gmail account and same results.  Running a Message trace on it tells me that under status it matches a mail flow rule.  and I get this Mail flow rule: 09EE1827-0903-4C0D-9B86-D899498C91F1.  I dont have any rules by that name so I'm thinking that is some sort of ID for one of the rules, but I cant figure out what one.  Any help would be greatly appreciated.

Answer 1

Hi CAISTS,

I have checked the information in private message. In the message trace report, it said there was a DLP policy that blocked this email into quarantine. You can check in the DLP policies on your side to see if there is such a policy. Also you can run a PowerShell command to get all the IDs of the transport rules in your tenant so that you will know which ID and transport rule name is. Here are the steps:

1. Connect to Exchange Online using PowerShell with an admin account.
2. Run the command below:

Get-TransportRule | fl Identity,Guid

Regards,

Yang

Answer 2

This didn't work for me, I get this

Get-TransportRule : The term 'Get-TransportRule' is not recognized as the name

of a cmdlet, function, script file, or operable program. Check the spelling of

the name, or if a path was included, verify that the path is correct and try

again.

At C:\Windows\System32\WindowsPowerShell\v1.0\GetRuleName.ps1:20 char:1

• Get-TransportRule | fl Identity,guid

    + CategoryInfo          : ObjectNotFound: (Get-TransportRule:String) [], C

   ommandNotFoundException

    + FullyQualifiedErrorId : CommandNotFoundException

Answer 3

After lots of trial and error sending parts of the email at a time I was able to narrow down the rule in question and make the needed changes.  This is WAY easier.  Thank you for your help.  I will defiantly be tucking this little command away for future use.  Hopefully in the future MS is able to give you this result with the web interface as well. 

thanks again!!

Answer 4

Hi CAISTS,

If an email is blocked into the quarantine, you can choose to release it from the quarantine in the EAC (Exchange Admin Center). Then the email will be received by the recipient.

Also as said in the message trace report, there is a transport rule (mail flow rule) to move the email to the quarantine. You can check if you have set a rule to move the email to the hosted quarantine.

You can send the screenshot of the entire message trace result to us for further analysis. To protect your privacy, I have sent you a private message to collect the screenshot. Here is the link to access it:

https://answers.microsoft.com/en-us/privatemessages/list

Regards,

Yang