EOP / Office 365: Release a Quarantined Email
This blog is explaining the steps to release the quarantined emails in Exchange Online Protection
Once you login and come to the Exchange or Exchange Online Protection follow the below steps
Expand the Protection and click quarantine
- Now you will see a list of quarantined messages here. Like the below screen. We have an option to configure to quarantine as an action in the rule which will bring the quarantine message here along with the default quarantine messages recognized by EOP itself.
3. Now we need to decide on the action what we would like to do with this quarantined message. Now select the message and click on mail icon which is the second icon from the left. Then you will see 2 possible actions “Release message without reporting it as a false positive” or “Release message and report it as a false positive”
Now you will see a success message and email will be delivered.
After this false positive will be reported and email will be released and you will see the below window
Now email will be delivered.
Add the following command switch at the end of the command to see what this command will do.
To get the quarantined emails from shell run the command
To see the properties of one quarantined email run the below command:
Get-QuarantineMessage –Senderaddress “senderemailid” | fl
If you need to release the all quarantined emails from shell then run the below command
Get-QuarantineMessage | Release-QuarantineMessage –ReleaseToAll
The above command will release all messages which may be spam or transport rule. So if we decide to just release spam or transportrule then run the below commands.
Get-QuarantineMessage -Type “Spam” -PageSize 5000 | Release-QuarantineMessage –ReleaseToAll
Get-QuarantineMessage -Type “TransportRule” -PageSize 5000 | Release-QuarantineMessage –ReleaseToAll
I have also added PageSize which is 1000 by default and can go up to 5000 maximum. This is required to get more than 1000 results.
If you need to Release any one email from shell then run the below command
Get-QuarantineMessage –Senderaddress “senderemailid” | Release-QuarantineMessage –ReleaseToAll
Microsoft MVP | Exchange Server