365 Microsoft Defender for Office
Product Information: EMAIL QUARANTINE Microsoft Defender for
Office 365
Microsoft Defender for Office 365 is a solution for protecting
email inboxes from malicious emails that could harm computers and
infrastructure or compromise system data. Emily Carr Art+Design
University has implemented this solution to protect its users and
systems. The solution includes a junk email filter in Outlook that
identifies messages that are likely junk and moves them to the junk
email folder. In addition, there is an email quarantine folder that
holds potentially dangerous or unwanted email messages.
Table of Contents
- Outlook Junk Email
- Email Quarantine Folder
- Shared mailboxes
- Frequently Asked Questions (FAQs)
- Where can I get more help?
1. Outlook Junk Email
Junk email messages can be a nuisance in your inbox, also known
as spam. The junk email filter in Outlook identifies messages that
are likely junk and moves them to the junk email folder. If an
email is in the Junk Email folder that should not have been marked
as ‘junk’, you can easily change the level of junk email protection
by right-clicking on it and selecting the appropriate option from
the pop-up menu.
2. Email Quarantine Folder
The quarantine folder holds potentially dangerous or unwanted
email messages. Depending on why the message was quarantined, you
can view, release, delete messages or block the sender. However,
please note that emails classified as high-confidence phishing and
malware cannot be released.
To view emails in the quarantine folder, you can check your
quarantine here. You can take the following actions on quarantined
email:
- Release message: Releases one or multiple selected emails
- Delete messages: Deletes single or multiple selected emails
from quarantine - Preview message: Allows email to be viewed with all links
disabled or in plain text - View message header: Allows viewing of the email header for
analysis - Block Sender: Adds the sender to the Blocked Senders list in
your mailbox
Messages that are quarantined have been classified as malware,
phishing, spoof, impersonation, or bulk mail. You can review the
messages and decide whether you want to release them. However,
please note that emails classified as high-confidence phishing and
malware cannot be released.
Shared mailboxes are where multiple users have access. Staff can
release quarantined objects if they have been given full access and
send as or send on behalf of permissions.
Please select review on the individual message and not on the
email notification.
4. FAQs
Q: How is it determined what is junk or
quarantine?
A: The scoring is influenced by criteria such as the email
content and the volume of emails sent by the sender. However,
Microsoft does not publicize the rules that control their ‘spam and
phishing scoring’, so we will not always establish why specific
emails are quarantined since this information is not public
knowledge.
5. Where can I get more help?
If you need more help with Microsoft Defender for Office 365,
please contact your IT support team.
Product Usage Instructions
To use Microsoft Defender for Office 365:
- Check your Junk Email folder regularly. If an email is in the
Junk Email folder that should not have been marked as ‘junk’, you
can easily change the level of junk email protection by
right-clicking on it and selecting the appropriate option from the
pop-up menu. - To view emails in the quarantine folder, you can check your
quarantine here. Review the messages and decide whether you want to
release them. However, please note that emails classified as
high-confidence phishing and malware cannot be released. - If you have full access and send as or send on behalf of
permissions for shared mailboxes, you can release quarantined
objects. - If you have any questions or need more help, please contact
your IT support team.
EMAIL QUARANTINE Microsoft Defender for Office 365
University Emily Carr Art+Design has implemented Microsoft Defender for Office 365, Microsoft’s solution for email protection. Defender will help protect ECUADusers and systems from malicious emails that could harm computers and infrastructure or compromise system data. In addition to messages coming to your inbox, you will have a junk and quarantine folder.
Table of Contents
1. Outlook Junk Email 2. Email Quarantine Folder 3. Shared mailboxes 4. Frequently Asked Questions (FAQs) 5. Where can I get more help?
1. Outlook Junk Mail
Junk email messages can be a nuisance in your inbox, also known as spam. The junk email filter in Outlook identifies messages that are likely junk and moves them to the junk email folder. Example: Junk Email folder
Change the level of junk mail protection:
You can easily change the level of junk email protection. If an email is in Junk Email which should not have been marked as ‘junk’, please right-click on it, and from the pop-up menu, select:
· block sender · never block sender · never block sender’s domain · never block this group or mailing list.
Please check the contents of the Junk Mail folder regularly.
2. Email Quarantine Folder
The quarantine folder holds potentially dangerous or unwanted email messages. Depending on why the message was quarantined, you can view, release, delete messages or block sender. However, please note that emails classified as high-confidence phishing and malware cannot be released.
Quarantine Email Notifications:
Once a day, you will receive an email quarantine notification via email. If no emails were quarantined you would not receive this notification. Please follow the instructions to review the messages and the classification reason why it was quarantined (e.g., spam, phishing). You can release emails that have been misclassed, but please note that emails classified deemed as high-confidence phishing or Malware by Microsoft cannot be released. This might happen in an instance when even if you know and trust the sender, Microsoft may have deemed the message as malicious or high-confidence because the sender’s account may have been compromised. Please note that ECUAD has no direct control over this process. Example: Quarantine Email Notification
To view emails in the quarantine folder:
If staff wish to see their quarantine folder in real-time, as they may suspect an expected email may be quarantined ahead of the next scheduled email summary, you can do this here.
.
You can take the following actions on quarantined email:
Quarantine email Release message Delete messages Preview message
Action Releases one or multiple selected emails Deletes single or multiple selected emails from quarantine Allows email to be viewed with all links disabled or in plain text
View message header Allows viewing of the email header for analysis
Block Sender
Add the sender to the Blocked Senders list in your mailbox
To release emails in the quarantine folder
Messages that are quarantined have been classified as malware, phishing, spoof, impersonation, or bulk mail. You can review the messages and decide whether you want to release them.
Staff wishing to release a specific email from a sender can do this. However, please note that emails classified as high-confidence phishing and malware cannot be released.
You can check your quarantine here.
3. Shared mailboxes
Shared mailboxes are where multiple users have access. Staff can release quarantined objects if they have been given full access and send as or send on behalf of permissions.
Please select review on the individual message and not on the email notification.
Example:
4. FAQs
How is it determined what is junk or quarantine? Since it is not good email security practice for Microsoft to publicise the rules that control their ‘spam and phishing scoring’, we will not always establish why specific emails are quarantined since this information is not public knowledge.
We know that the scoring is influenced by criteria such as the email content and the volume of emails sent by the sender.
Please note that ECUAD has no direct control over this process.
How do I add a safe sender to my junk email? Releasing the message doesn’t add the sender to your safe senders. You will still need to add as a safe sender manually.
If these senders are trusted, you can add them as Safe Senders via the guidance here.
Safe senders’ criteria For safe senders to be classed as trusted with the Microsoft detection technology, the senders would need to be following best industry practices here.
What is high-confidence classification? Please note that if the sender does not follow the safe senders’ criteria, then the emails will be sent to your quarantine folder as Microsoft has classed this as high-confidence phishing or malware.
Such emails, if deemed as high-confidence phishing or malware, cannot be released.
I released an email from quarantine but can’t locate it
Released quarantine emails should go to your Inbox in real time.
If you can’t see it, and have your Focussed and Other tabs set on your Outlook Inbox, check your ‘Other’ tab.
Can anti-phishing policies be removed from my ECUAD M365 account? Please note we are unable to make changes to any of the implemented policies for security reasons.
The University has implemented specialised security measures to proactively protect ECUAD and its user base. We take the safety of our staff and students seriously, and our policies are set by the best industry standards and are continually updated to be in line with these.
Can the SafetyTips banner be removed from my ECUAD M365 email account? Outlook includes SafetyTips. This capability adds an extra layer of protection against potential impersonation attacks. You may see a banner the first time you receive a message from a sender, or when you don’t often get messages from the sender. At ECUAD we keep this capability turned on for security reasons.
Where can I get more help? If you need help, you can call the IT Service Desk on 604-630-4565, orgo to around the IT Service Office B1116 8:30 am 4:30 pm, Monday to Friday
Our ECUAD cyber security page contains helpful tips and tricks and guidance on spotting a scam. Please keep vigilant, and if you do ever spot anything suspicious, make sure you tell us straight away via [email protected] .
Tune anti-phishing protection | Microsoft Learn
Tune anti-phishing protection | Microsoft Learn
Sign in to your account
Add recipients of my email messages to the Safe Senders List - Microsoft Support
