How do I stop messages from a sender from being quarantined?

Question

I have emails going to quarantine from a user that shouldn’t be blocked/flagged. How do I stop messages from being quarantined to from this user?

Answer 1

Thanks for the response. How do you whitelist a sender?

Answer 2

This doesn't work. Microsoft defender is literally ruining our business. It blocks emails from our clients, even clients that we've emailed with many times. But it lets all the garbage thru. It doesn't matter what we do, it just keeps blocking our clients' emails. We never asked to have this service and want it removed!!

Answer 3

Hello KB,

My name is Adebayo, I will happy to help.

When you have messages going to quarantined, first thing to check is the reason why it is getting blocked and sent to quarantine. It could be due to your Anti-spam policies, Anti-phish, Safe links policy or safe attachment policy.

When you go to the Microsoft Defender portal, you will see the details when reviewing the emails.

If you think emails should not be blocked, you can adjust your Anti-spam policy so that emails will go directly to the inbox. You can also whitelist the sender's address, so it does not get blocked.

If the emails are being marked as phish then you will need to submit to Microsoft for analysis and then mark as false-positive from the Microsoft Defender portal.

Please do let me know if further assistance is needed.

Kind regards, Adebayo.

Answer 4

Hello KB,

You are welcome.

Whitelisting a sender depends on the policy that blocked the emails (Anti-Spam or Anti-Phish)

If the email is marked as spam;

Go to the Allow & block list page after clicking on the Anti-spam policy in Microsoft defender, you can configure message senders by email address or email domain who are allowed to skip spam filtering.

In the Allowed section, you can configure allowed senders and allowed domain.

You can also go to Microsoft Defender portal >> Policies and Rules >> Tenant Block and Allowed list >> Spoofed Senders >> Click on the Plus sign, enter the sender's email address and the select Allow.

Please note that this can only be done by a Global admin or Security admin in the organization.

See more information below; https://learn.microsoft.com/microsoft-365/security/office-365-security/anti-spam-policies-configure?view=o365-worldwide

Please do let me know if further assistance is needed.

Kind regards, Adebayo.

Answer 5

We are looking for a solution to this as well............... as a workaround, what I have read is to create RULES under the Mail Flow section.

That may work for you to get things flowing a littler better

A