Home

Prevent Exchange Online from moving Mails to Spam folder

%3CLINGO-SUB%20id%3D%22lingo-sub-177025%22%20slang%3D%22en-US%22%3EPrevent%20Exchange%20Online%20from%20moving%20Mails%20to%20Spam%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-177025%22%20slang%3D%22en-US%22%3E%3CP%3EExchange%20admin%20center%20-%26gt%3B%20protection%20-%26gt%3B%20spam%20filter%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWe%20don't%20want%20mails%20to%20be%20sorted%20away%20in%20Spam%20folder.%20We%20want%20to%20keep%20Spam%20in%20inbox.%20For%20all%20users.%20So%20I%20changed%20the%20spam%20settings%20from%20'move%20to%20Spam%20folder'%20to%20'prepend%20subject%20line%20with%20text'.%20Text%20is%20'MS_DETECTED_SPAM'%20(see%20attached%20image).%20Ex%20On%20puts%20the%20text%20in%20front%20of%20the%20original%20subject%20line%20but%20still%20moves%20the%20mail%20(with%20the%20altered%20subject%20line)%20to%20user's%20Spam%20folder.%26nbsp%3B%20How%20can%20I%20prevent%20this%3F%26nbsp%3BThe%26nbsp%3Binternal%20compliance%20rules%20require%20this.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-177025%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-180217%22%20slang%3D%22en-US%22%3ERe%3A%20Prevent%20Exchange%20Online%20from%20moving%20Mails%20to%20Spam%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-180217%22%20slang%3D%22en-US%22%3E%3CP%3EI've%20had%20the%20same%20idea.%20Unfortunately%2C%20I%20haven't%20had%20any%20good%20experiences%20with%201st-level%20support%20in%20the%20past.%20Usually%20they%20don't%20understand%20me%20and%20the%20whole%20thing%20ends%20up%20as%20a%20waste%20of%20time.%20This%20was%20completely%20different%20one%20to%20two%20years%20ago.%20But%20maybe%20I%20really%20don't%20have%20another%20option.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-180192%22%20slang%3D%22en-US%22%3ERe%3A%20Prevent%20Exchange%20Online%20from%20moving%20Mails%20to%20Spam%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-180192%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Robert%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIn%20that%20case%20is%20you%20continue%20to%20have%20issues%20with%20those%20tests%20and%20the%20configurations%20are%20ok%2C%20I%20sugests%20to%20open%20a%20Support%20Ticket%20on%20Office%20365%20portal.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-180190%22%20slang%3D%22en-US%22%3ERe%3A%20Prevent%20Exchange%20Online%20from%20moving%20Mails%20to%20Spam%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-180190%22%20slang%3D%22en-US%22%3EThey%20still%20get%20flagged%20as%20Junk%20by%20your%20E-mail%20gateway%2C%20all%20that%20flag%20does%20is%20prevent%20Exchange%20server%20from%20moving%20to%20Junk.%20I%20don't%20know%20how%20your%20mail%20flow%20happens%2C%20but%20Mine%20goes%20through%20spam%20filtering%20first%2C%20gets%20tagged%2C%20etc.%20Then%20into%20Exchange%20which%20that%20flag%20will%20prevent%20from%20moving%20into%20the%20folder.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-180189%22%20slang%3D%22en-US%22%3ERe%3A%20Prevent%20Exchange%20Online%20from%20moving%20Mails%20to%20Spam%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-180189%22%20slang%3D%22en-US%22%3E%3CP%3EThis%20is%20not%20what%20we%20need.%20The%20mails%20should%20be%20flagged%20as%20Junk.%20But%20they%20should%20not%20be%20moved%20to%20the%20Spam%20folder.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-180186%22%20slang%3D%22en-US%22%3ERe%3A%20Prevent%20Exchange%20Online%20from%20moving%20Mails%20to%20Spam%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-180186%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20tested%20this.%20The%20Outlook%20Client%20(for%20Windows%20or%20Mac)%20is%20NOT%20the%20source%20of%20the%20problem.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-180185%22%20slang%3D%22en-US%22%3ERe%3A%20Prevent%20Exchange%20Online%20from%20moving%20Mails%20to%20Spam%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-180185%22%20slang%3D%22en-US%22%3E%3CP%3EIn%20both%20worlds.%20We%20have%20users%20who%20never%20use%20the%20Outlook%20Client.%20And%20we%20have%20other%20user%20who%20never%20use%20OWA.%20Both%20types%20of%20users%26nbsp%3Bare%20affected.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-177121%22%20slang%3D%22en-US%22%3ERe%3A%20Prevent%20Exchange%20Online%20from%20moving%20Mails%20to%20Spam%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-177121%22%20slang%3D%22en-US%22%3EYou%20can%20create%20a%20rule%20to%20set%20all%20your%20messages%20SCL%20to%20-1%20to%20prevent%20it%20going%20to%20junk.%20%3CBR%20%2F%3ESetup%20a%20rule%20to%20do%20the%20following.%20I%20do%20this%20since%20all%20my%20spam%20goes%20through%20another%20external%20spam%20scan%20solution%20first.%20%3CBR%20%2F%3E%20Set%20the%20spam%20confidence%20level%20(SCL)%20to%20'-1'%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-177091%22%20slang%3D%22en-US%22%3ERe%3A%20Prevent%20Exchange%20Online%20from%20moving%20Mails%20to%20Spam%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-177091%22%20slang%3D%22en-US%22%3E%3CP%3EApart%20form%20being%20marked%20as%20Spam%2C%20messages%20can%20end%20up%20in%20the%20folder%20if%20they%20are%20marked%20as%20Phishing%20(read%20for%20example%20this%20recent%20blog%20post%3A%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FSecurity-Privacy-and-Compliance%2FSchooling-A-Sea-of-Phish-Part-2-Enhanced-Anti-spoofing%2Fba-p%2F176209%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FSecurity-Privacy-and-Compliance%2FSchooling-A-Sea-of-Phish-Part-2-Enhanced-Anti-spoofing%2Fba-p%2F176209%3C%2FA%3E)%20or%20if%20the%20Outlook%20junk%20filter%20acted%20on%20them.%20Looking%20at%20the%20message%20headers%20should%20give%20you%20an%20idea%20what%20happened%2C%20and%20you%20can%20also%20run%20a%20message%20trace%20in%20the%20EAC%2FSCC%20to%20get%20additional%20information.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-177059%22%20slang%3D%22en-US%22%3ERe%3A%20Prevent%20Exchange%20Online%20from%20moving%20Mails%20to%20Spam%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-177059%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Robert%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20need%20to%20test%20use%20only%20OWA%20(Outlook%20Closed%20in%20any%20device)%20to%20see%20if%20the%20issue%20that%20you%20are%20experience%20is%20from%20Office%20365%20services%20or%20Outlook%20client.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAnd%20please%20see%20this%20article%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2Fchange-the-level-of-protection-in-the-junk-email-filter-e89c12d8-9d61-4320-8c57-d982c8d52f6b%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2Fchange-the-level-of-protection-in-the-junk-email-filter-e89c12d8-9d61-4320-8c57-d982c8d52f6b%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-177052%22%20slang%3D%22en-US%22%3ERe%3A%20Prevent%20Exchange%20Online%20from%20moving%20Mails%20to%20Spam%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-177052%22%20slang%3D%22en-US%22%3E%3CP%3EThis%20happens%20in%20both%20OWA%20and%20Outlook%20Client.%20If%20I%20try%20to%20kill%20the%20Outlook%26nbsp%3Bclient%2C%20I%20won't%20survive%20this.%20%3B)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-177049%22%20slang%3D%22en-US%22%3ERe%3A%20Prevent%20Exchange%20Online%20from%20moving%20Mails%20to%20Spam%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-177049%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Robert%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThat%20email's%20happens%20within%20OWA%20or%20Outlook%20%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20best%20way%20to%20view%20the%20problem%20is%20only%20use%20Webmail%20without%20Outlook%20client%2C%20because%20the%20Outlook%20client%20can%20also%20put%20the%20mail%20on%20Spam%20folder.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Robert K
Contributor

Exchange admin center -> protection -> spam filter

 

We don't want mails to be sorted away in Spam folder. We want to keep Spam in inbox. For all users. So I changed the spam settings from 'move to Spam folder' to 'prepend subject line with text'. Text is 'MS_DETECTED_SPAM' (see attached image). Ex On puts the text in front of the original subject line but still moves the mail (with the altered subject line) to user's Spam folder.  How can I prevent this? The internal compliance rules require this.

11 Replies

Hi Robert,

 

That email's happens within OWA or Outlook ?

 

The best way to view the problem is only use Webmail without Outlook client, because the Outlook client can also put the mail on Spam folder.

This happens in both OWA and Outlook Client. If I try to kill the Outlook client, I won't survive this. ;)

Hi Robert,

 

You need to test use only OWA (Outlook Closed in any device) to see if the issue that you are experience is from Office 365 services or Outlook client.

 

And please see this article https://support.office.com/en-us/article/change-the-level-of-protection-in-the-junk-email-filter-e89...

Apart form being marked as Spam, messages can end up in the folder if they are marked as Phishing (read for example this recent blog post: https://techcommunity.microsoft.com/t5/Security-Privacy-and-Compliance/Schooling-A-Sea-of-Phish-Part...) or if the Outlook junk filter acted on them. Looking at the message headers should give you an idea what happened, and you can also run a message trace in the EAC/SCC to get additional information.

You can create a rule to set all your messages SCL to -1 to prevent it going to junk.
Setup a rule to do the following. I do this since all my spam goes through another external spam scan solution first.
Set the spam confidence level (SCL) to '-1'

In both worlds. We have users who never use the Outlook Client. And we have other user who never use OWA. Both types of users are affected.

We tested this. The Outlook Client (for Windows or Mac) is NOT the source of the problem.

This is not what we need. The mails should be flagged as Junk. But they should not be moved to the Spam folder.

They still get flagged as Junk by your E-mail gateway, all that flag does is prevent Exchange server from moving to Junk. I don't know how your mail flow happens, but Mine goes through spam filtering first, gets tagged, etc. Then into Exchange which that flag will prevent from moving into the folder.

Hi Robert,

 

In that case is you continue to have issues with those tests and the configurations are ok, I sugests to open a Support Ticket on Office 365 portal. 

I've had the same idea. Unfortunately, I haven't had any good experiences with 1st-level support in the past. Usually they don't understand me and the whole thing ends up as a waste of time. This was completely different one to two years ago. But maybe I really don't have another option.

Related Conversations