Get-MailDetailATPReport didn't work whereas Get-MailDetailSpamReport and Get-MailDetailMalwareReport worked.

asked 2022-01-20T10:51:46.737+00:00
Tony Oscar 1 Reputation point

Recently, after the deprecation of Get-MailDetailSpamReport and Get-MailDetailMalwareReport command-lets, Microsoft has suggested using Get-MailDetailATPReport to get that information. Even searching for those two deprecated command-lets land on the MS doc for Get-MailDetailATPReport.

But the new command-let, Get-MailDetailATPReport doesn't return any data for my tenant. However, I was using Get-MailDetailSpamReport and Get-MailDetailMalwareReport to get info on my tenant until it was deprecated. Though I am able to see the results in UI (https://security.microsoft.com/reports/TPSEmailSpamReportATP), the Get-MailDetailATPReport returns no data.

I was able to create another trial tenant of the same subscription (M365 E3) yet it didn't work. I did some research and found that It didn't work in M365 Business tenants as well. Contrarily E5 tenants only worked.

It is a bug that the values are displayed in UI but not returned in PowerShell. As the command-lets were deprecated recently, I'm sure this issue will be noticed by many organizations.

Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
6,074 questions
Microsoft 365 Publishing
Microsoft 365 Publishing
Microsoft 365: Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line. Publishing: The process of preparing, producing, and releasing content for distribution or sale.
490 questions
{count} votes

2 answers

Sort by: Most helpful
  1. answered 2022-01-20T13:03:47.75+00:00
    Vasil Michev 61,461 Reputation points Microsoft MVP

    It has a dependence on ATP ("Defender") SKU I believe, though my expectation was that this would be removed once the old cmdlets are deprecated. Oh well...
    You should at least have access to Get-MailTrafficATPReport, which gives the summaries.


  2. answered 2022-10-24T16:13:56.47+00:00
    Faith-Ebenezer Oquong 1 Reputation point Microsoft Employee

    @Tony Oscar this issue was fully resolved Worldwide as of October 14th 2022. please let us know if you are still experiencing issues with the Get-MailDetailATPReport cmdlet.

    No comments