Forum Discussion

CHEUNG Peter's avatar
CHEUNG Peter
Copper Contributor
Jul 17, 2019

Set a alert about mail forward

Hi all,

Today we a user has received many  bounce back mail is about 'Undeliverable: xxxxxxxxx' messages  

 

after we investigation and check Office365Alerts mail we found  a user account has hacked, and set a mail forward,  

i would like to know can the set the Alerts rule only for forward outside organization or the IP address out of office. because the system default Alerts mail include  UpdateInboxRules.

admin
microsoft 365 admin center
office 365

1 Reply

  • ankit shukla's avatar
    ankit shukla
    Iron Contributor
    Jul 25, 2019

    CHEUNG Peter 

     

    1.  If you would like to Block any External Auto-Forwards from your Organization to Outside, configure Remote-Domain Rules.

     

    Set-RemoteDomain -Identity "Default" -AutoForwardenabled $false

     

    2. If you would like to setup Alert whenever any Forwarding Rule has been set up a user/admin, you can configure alert policies in Security & Compliance Admin Center. Refer - https://answers.microsoft.com/en-us/msoffice/forum/msoffice_o365admin-mso_exchon-mso_o365b/mail-forwarding-low-severity-alert/5e5ec7bb-3159-4e94-851a-5b6433333607

     

    3.  As a security measure, you can enable MFA for your User's to ensure even if they someone get there Password Hacked, they are safe until they give up on there Cellphone in a Coffee Shop ;)

     

    Hope this answers all your questions :) 

     

    Cheers !!

    Ankit Shukla