Forum Discussion

OzOscroft's avatar
OzOscroft
Iron Contributor
Mar 21, 2023

Preset policies have suddenly started notifying users of quarantined messages

Hi all.  We have been using preset policies (standard and strict) for some time and were happy with the fact that they don't notify users of messages which have been quarantined (and nor is it possib...
  • alexhudish's avatar
    alexhudish
    Mar 25, 2023
    MC505088
OzOscroft's avatar
OzOscroft
Iron Contributor
Mar 27, 2023

Hi all.  As well as encouraging anyone who doesn't like this change to head to https://admin.microsoft.com/Adminportal/Home?source=applauncher#/MessageCenter/:/messages/MC505088 and hit the Dislike button at the bottom, I've added a request in the feedback portal.

 

Please upvote if you think that Admins should be able to configure when users receive quarantine notifications:

Allow Admins to configure quarantine notifications for Standard and Strict preset threat policies · Community (microsoft.com)

tommyg845's avatar
tommyg845
Copper Contributor
Apr 10, 2023

OzOscroft What is the reasoning behind making the default to allow users to release quarantined messages?  

Is there no way to apply another notification policy when using Strict Protection?  

 

In our env, we have a number of companies that designate one or two users to go through quarantine and release etc.  This new policy undermines all of that.  

  • OzOscroft's avatar
    OzOscroft
    Iron Contributor
    Apr 20, 2023

    Hi tommyg845 - I've no idea why Microsoft have made this change.  I agree that it's not a positive one and is increasing the risk of users releasing potentially malicious messages without appropriate due dilligence.  Here's hoping the feedback request to allow us to apply different notification policies gets enough upvotes and is heeded!

Resources