Forum Discussion
Microsoft Defender e-mail notification for user reported messages
Hi,
Yes, regarding the logo you're right, that was the problem.
Regarding the first issue, have you dealt with it?
Thanks
To my knowledge, messages reported as Junk/Spam will be moved to the user’s Junk folder. And messages reported as Phishing will be moved to Deleted Items. I haven’t seen any built-in functionality to ‘restore’ a reported message when the Admin uses Mark as & Notify to mark the message as No Threats. A quick improvement would be to add this information to the response templates so users know where to look.
I’m interested in pursuing this, though. I’ll take a look this week at some opportunities to implement this behaviour using Logic Apps or similar.
Rutger
- dmarquesgnMar 05, 2024Iron Contributor
Hi,
I'm onto this topic again. That would be one option, to instruct the users to go to their junk or deleted folder and recover the email to the inbox, but of course we would like to automate that process. But for that there's something which isn't right on Microsoft tenant, at least I didn't understood until now.
Every time a user submits an email as phishing, it gets deleted for the user and then we can go to Microsoft Defender Submissions page and mark the email as "Phish", "SPAM" or "No threats found".
But if we go to the Explorer tab and search for one of this reported emails, both the fields "Latest delivery location" and "Original delivery location" are marked "Inbox", where on "Latest delivery location" should be "Junk" or "Deleted", right?
The problem is that this way we can't do the action to release it again to the inbox, where in fact the message is on the deleted folder.
Anyone experienced this?