Forum Discussion
How do you identify the "You've joined the xxx group" emails?
When you join a microsoft 365 group via Outlook you get an email (apparently from yourself) to say you have joined it.
How do you actually identify these emails on Exchange? I've looked at the headers but nothing really stands out.
I need to exclude these types emails from rules.
2 Replies
You should be able to filter them out based on the body, i.e. add an exception for the "Use the group to share messages and files, and to coordinate group events." phrase or similar.
Thanks Vasil
We wanted to uniquely identify them and found the following from testing to be good enough
- Identifying by subject based using regular expression e.g. the start of the subject must contain "You've joined the"
- Look for the X-MS-Exchange-CrossTenant-FromEntity Header set to HybridOnPrem
- X-MS-Exchange-CrossTenant-AuthAs header set as Anonymous
