Home

Set a alert about mail forward

%3CLINGO-SUB%20id%3D%22lingo-sub-758218%22%20slang%3D%22en-US%22%3ESet%20a%20alert%20about%20mail%20forward%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-758218%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%2C%3CBR%20%2F%3E%3CBR%20%2F%3EToday%20we%20a%20user%20has%20received%20many%26nbsp%3B%20bounce%20back%20mail%20is%20about%20'Undeliverable%3A%20xxxxxxxxx'%20messages%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eafter%20we%20investigation%20and%20check%20Office365Alerts%20mail%20we%20found%26nbsp%3B%26nbsp%3Ba%20user%20account%20has%20hacked%2C%20and%20set%20a%20mail%20forward%2C%26nbsp%3B%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3Ei%20would%20like%20to%20know%20can%20the%20set%20the%26nbsp%3BAlerts%20rule%20only%20for%20forward%20outside%20organization%20or%20the%20IP%20address%20out%20of%20office.%20because%20the%20system%20default%26nbsp%3BAlerts%20mail%20include%26nbsp%3B%20UpdateInboxRules.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-758218%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAdmin%20center%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%20Management%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-772959%22%20slang%3D%22en-US%22%3ERe%3A%20Set%20a%20alert%20about%20mail%20forward%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-772959%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F60759%22%20target%3D%22_blank%22%3E%40CHEUNG%20Peter%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E1.%26nbsp%3B%20If%20you%20would%20like%20to%20Block%20any%20External%20Auto-Forwards%20from%20your%20Organization%20to%20Outside%2C%20configure%20Remote-Domain%20Rules.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESet-RemoteDomain%20-Identity%20%22Default%22%20-AutoForwardenabled%20%24false%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E2.%20If%20you%20would%20like%20to%20setup%20Alert%20whenever%20any%20Forwarding%20Rule%20has%20been%20set%20up%20a%20user%2Fadmin%2C%20you%20can%20configure%20alert%20policies%20in%20Security%20%26amp%3B%20Compliance%20Admin%20Center.%20Refer%20-%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fanswers.microsoft.com%2Fen-us%2Fmsoffice%2Fforum%2Fmsoffice_o365admin-mso_exchon-mso_o365b%2Fmail-forwarding-low-severity-alert%2F5e5ec7bb-3159-4e94-851a-5b6433333607%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fanswers.microsoft.com%2Fen-us%2Fmsoffice%2Fforum%2Fmsoffice_o365admin-mso_exchon-mso_o365b%2Fmail-forwarding-low-severity-alert%2F5e5ec7bb-3159-4e94-851a-5b6433333607%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E3.%26nbsp%3B%20As%20a%20security%20measure%2C%20you%20can%20enable%20MFA%20for%20your%20User's%20to%20ensure%20even%20if%20they%20someone%20get%20there%20Password%20Hacked%2C%20they%20are%20safe%20until%20they%20give%20up%20on%20there%20Cellphone%20in%20a%20Coffee%20Shop%20%3B)%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHope%20this%20answers%20all%20your%20questions%20%3A)%3C%2Fimg%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECheers%20!!%3C%2FP%3E%3CP%3EAnkit%20Shukla%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Hi all,

Today we a user has received many  bounce back mail is about 'Undeliverable: xxxxxxxxx' messages  

 

after we investigation and check Office365Alerts mail we found  a user account has hacked, and set a mail forward,  

i would like to know can the set the Alerts rule only for forward outside organization or the IP address out of office. because the system default Alerts mail include  UpdateInboxRules.

1 Reply
Highlighted

@CHEUNG Peter 

 

1.  If you would like to Block any External Auto-Forwards from your Organization to Outside, configure Remote-Domain Rules.

 

Set-RemoteDomain -Identity "Default" -AutoForwardenabled $false

 

2. If you would like to setup Alert whenever any Forwarding Rule has been set up a user/admin, you can configure alert policies in Security & Compliance Admin Center. Refer - https://answers.microsoft.com/en-us/msoffice/forum/msoffice_o365admin-mso_exchon-mso_o365b/mail-forw...

 

3.  As a security measure, you can enable MFA for your User's to ensure even if they someone get there Password Hacked, they are safe until they give up on there Cellphone in a Coffee Shop ;)

 

Hope this answers all your questions :) 

 

Cheers !!

Ankit Shukla