SOLVED

Office 365 Exchange Admin Center Spamfilter settings vs. Outlook 2016 Client Junk-Mail settings?

%3CLINGO-SUB%20id%3D%22lingo-sub-324526%22%20slang%3D%22en-US%22%3EOffice%20365%20Exchange%20Admin%20Center%20Spamfilter%20settings%20vs.%20Outlook%202016%20Client%20Junk-Mail%20settings%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-324526%22%20slang%3D%22en-US%22%3E%3CP%3EHow%20are%20the%20two%20areas%3C%2FP%3E%3CUL%3E%3CLI%3EOffice%20365%20Spam%20filter%20settings%20in%20Exchange%20Admin%20Center%3C%2FLI%3E%3CLI%3EOutlook%202016%20Junk-Mail%20settings%3C%2FLI%3E%3C%2FUL%3E%3CP%3Erelated%20to%20each%20other%3F%20Are%20they%20%22interconnected%22%20with%20each%20other%3F%20Or%20are%20they%20totally%20independent%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFor%20example%2C%3C%2FP%3E%3CUL%3E%3CLI%3EWhich%20rules%20take%20precedence%2C%20and%20when%3F%3C%2FLI%3E%3CLI%3EWhat%20happens%20when%20a%20user%20blocks%20a%20sender%20in%20his%20Outlook.%20Is%20that%20kept%20local%20in%20his%20profile%3F%20Is%20this%20blocking%20%22shared%22%20with%20the%20Exchange%20server%20in%20Office%20365%3F%3C%2FLI%3E%3CLI%3EWhat%20happpens%20when%20a%20user%20selects%20a%20message%20in%20the%20Outlook%202016%20Junk-Mail%20folder%20and%20defines%20it%20as%20%22not%20Junk%22%3F%3C%2FLI%3E%3CLI%3EIf%20the%20Office%20365%20spam%20filter%20settings%20deliver%20junk%2Fspam%20to%20the%20junk-mail%20folder%2C%20and%20Outlook%202016%20does%20the%20same%2C%20the%20result%20is%20emails%20in%20the%20junk-mail%20folder%20that%20origin%20from%20two%20different%20mechanisms.%20Am%20I%20correct%3F%3C%2FLI%3E%3C%2FUL%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMoreover%2C%20when%20I%20use%20quarantine%20in%20the%20Exchange%20Server%20Spam%20filter%20settings%2C%20with%20user%20notification%2C%20the%20user%20receives%20regularily%20an%20email%20where%20he%20can%20release%20a%20message%20from%20the%20quarantine%20into%20his%20inbox.%20There%20is%20also%20an%20option%20like%20%22Report%20as%20not%20Junk%22%20or%20similar.%20The%20explanation%20in%20the%20message%20tells%20us%20that%20this%20option%20will%20report%20this%20message%20as%20not%20junk%20to%20Microsoft.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhat%20exactly%20is%20Microsoft%20doing%20with%20these%20messages%3F%20I%20would%20suppose%20they%20analyse%20it%20and%20feed%20the%20results%20somehow%20into%20the%20algorythm%20which%20%22finds%22%20spam%20in%20the%20future.%20I%20would%20be%20interested%20in%20the%20details%20of%20that%20process.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20something%20similar%20happening%20when%20a%20user%20mark%20a%20message%20as%20%22Not%20Junk%22%20in%20his%20Outlook%202016%20junk%20folder%3F%20Or%20is%20that%20something%20totally%20local%20and%20user%20based%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDan%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-324526%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-325112%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Exchange%20Admin%20Center%20Spamfilter%20settings%20vs.%20Outlook%202016%20Client%20Junk-Mail%20settings%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-325112%22%20slang%3D%22en-US%22%3E%3CH1%20id%3D%22toc-hId-1871694885%22%20id%3D%22toc-hId-1929880492%22%3E%3CSTRONG%3EWOW!!%3C%2FSTRONG%3E%3C%2FH1%3E%3CP%3EI%20will%20save%20this%20article%20as%20a%20reference%20for%20me.%20Way%20cool.%3C%2FP%3E%3CP%3EMany%20thanks%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%26nbsp%3B!%3C%2FP%3E%3CP%3EDaniel%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-325103%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Exchange%20Admin%20Center%20Spamfilter%20settings%20vs.%20Outlook%202016%20Client%20Junk-Mail%20settings%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-325103%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20can%20see%20examples%20of%20the%20information%20bar%20in%20this%20article%3A%20%3CA%20href%3D%22https%3A%2F%2Fwww.slipstick.com%2Foutlook%2Frules%2Fmoved-message-junk-email-folder%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.slipstick.com%2Foutlook%2Frules%2Fmoved-message-junk-email-folder%2F%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20bulk%20of%20the%20processing%20is%20always%20done%20on%20the%20server%20side%2C%20so%20the%20EOP%20documentation%20should%20cover%20almost%20all%20the%20details.%20You%20can%20also%20take%20a%20look%20at%20some%20of%20the%20detailed%20sessions%20from%20Ignite%2C%20for%20example%20this%20one%3A%20%3CA%20href%3D%22https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DvrhWwLZmRK4%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DvrhWwLZmRK4%3C%2FA%3E%26nbsp%3Bor%3C%2FP%3E%0A%3CP%20lang%3D%22x-none%22%3E%3CA%20href%3D%22https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DfEmkHZxzwqo%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DfEmkHZxzwqo%3C%2FA%3E.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-324971%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Exchange%20Admin%20Center%20Spamfilter%20settings%20vs.%20Outlook%202016%20Client%20Junk-Mail%20settings%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-324971%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20Vasil%2C%3C%2FP%3E%3CP%3EThanks%20for%20your%20reply.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYes%2C%20you%20are%20correct.%20There%20is%20a%20lot%20of%20information%20to%20read%20on%20this%20matter%2C%20but%20it's%26nbsp%3B%3C%2FP%3E%3CP%3Eeither%20Outlook%20related%3C%2FP%3E%3CP%3Eor%20Office%20365%2FExchange%20related%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20yet%20to%20find%20a%20documentation%20which%20describes%20the%20overall%20approach%20on%20AntiSpam%2FAnti-whatever%20with%20all%20the%20Tools%20and%20possibilities%20of%20the%20Microsoft%20Portfolio.%20That%20is%20actually%20what%20I%20am%20looking%20for.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20questions%20I%20am%20faced%20with%20are%20always%20alike%3A%20Why%20was%20message%20X%20put%20in%20Spam%20folder%3F%20Why%20was%20message%20Y%20%3CSTRONG%3Enot%3C%2FSTRONG%3E%20put%20in%20quarantaine%3F%20..%20and%20variations%20of%20those.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFor%20me%20as%20an%20admin%20for%20several%20customers%20with%20different%20levels%20of%20understanding%20the%20IT%20world%2C%20it's%20a%20challenge%20to%20be%20able%20to%20explain%20users%20why%20a%20certain%20message%20was%20junked%20or%20not.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYour%20nutshell%20confirmed%20most%20of%20my%20suspicions.%20Thanks.%3C%2FP%3E%3CP%3ENonetheless%2C%20if%20you%20could%20point%20me%20to%20the%20extensive%20documentation%20which%20explains%20the%20combined%20workflow%20of%20all%20involved%20parties%20(server%2C%20client%2C%20forefront%2C%20microsoft%20clearing%20center%2C%20etc.)%20that%20would%20be%20great.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnd%20if%20you%20could%20give%20me%20a%20hint%20on%20that%26nbsp%3B%3CSPAN%3E%22information%20tip%22%20you%20mentioned%3F%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EMany%20thanks%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EDaniel%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-324840%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Exchange%20Admin%20Center%20Spamfilter%20settings%20vs.%20Outlook%202016%20Client%20Junk-Mail%20settings%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-324840%22%20slang%3D%22en-US%22%3E%3CP%3EThere's%20an%20extensive%20documentation%20available%20on%20this%2C%20I'd%20strongly%20recommend%20that%20you%20read%20it%20first%2C%20then%20come%20back%20with%20any%20unclear%20details.%20In%20a%20nutshell%2C%20everything%20server-side%20acts%20first%2C%20but%20the%20client-side%20settings%20can%20potentially%20%22override%22%20the%20verdict.%20The%20allowed%2Fblocked%20sender%20list%20is%20kept%20in%20the%20user's%20mailbox.%20Outlook%20will%20inform%20you%20%22who%22%20moved%20the%20message%20to%20the%20Junk%20folder%20by%20an%20%22information%20tip%22.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Deleted
Not applicable

How are the two areas

  • Office 365 Spam filter settings in Exchange Admin Center
  • Outlook 2016 Junk-Mail settings

related to each other? Are they "interconnected" with each other? Or are they totally independent?

 

For example,

  • Which rules take precedence, and when?
  • What happens when a user blocks a sender in his Outlook. Is that kept local in his profile? Is this blocking "shared" with the Exchange server in Office 365?
  • What happpens when a user selects a message in the Outlook 2016 Junk-Mail folder and defines it as "not Junk"?
  • If the Office 365 spam filter settings deliver junk/spam to the junk-mail folder, and Outlook 2016 does the same, the result is emails in the junk-mail folder that origin from two different mechanisms. Am I correct?

 

Moreover, when I use quarantine in the Exchange Server Spam filter settings, with user notification, the user receives regularily an email where he can release a message from the quarantine into his inbox. There is also an option like "Report as not Junk" or similar. The explanation in the message tells us that this option will report this message as not junk to Microsoft.

 

What exactly is Microsoft doing with these messages? I would suppose they analyse it and feed the results somehow into the algorythm which "finds" spam in the future. I would be interested in the details of that process.

 

Is something similar happening when a user mark a message as "Not Junk" in his Outlook 2016 junk folder? Or is that something totally local and user based?

 

Dan

 

 

4 Replies
Highlighted

There's an extensive documentation available on this, I'd strongly recommend that you read it first, then come back with any unclear details. In a nutshell, everything server-side acts first, but the client-side settings can potentially "override" the verdict. The allowed/blocked sender list is kept in the user's mailbox. Outlook will inform you "who" moved the message to the Junk folder by an "information tip".

Highlighted

Hello Vasil,

Thanks for your reply.

 

Yes, you are correct. There is a lot of information to read on this matter, but it's 

either Outlook related

or Office 365/Exchange related

 

I have yet to find a documentation which describes the overall approach on AntiSpam/Anti-whatever with all the Tools and possibilities of the Microsoft Portfolio. That is actually what I am looking for. 

 

The questions I am faced with are always alike: Why was message X put in Spam folder? Why was message Y not put in quarantaine? .. and variations of those. 

 

For me as an admin for several customers with different levels of understanding the IT world, it's a challenge to be able to explain users why a certain message was junked or not. 

 

Your nutshell confirmed most of my suspicions. Thanks.

Nonetheless, if you could point me to the extensive documentation which explains the combined workflow of all involved parties (server, client, forefront, microsoft clearing center, etc.) that would be great.

 

And if you could give me a hint on that "information tip" you mentioned?

 

Many thanks

 

Daniel

 

 

Highlighted
Best Response
Solution

You can see examples of the information bar in this article: https://www.slipstick.com/outlook/rules/moved-message-junk-email-folder/

 

The bulk of the processing is always done on the server side, so the EOP documentation should cover almost all the details. You can also take a look at some of the detailed sessions from Ignite, for example this one: https://www.youtube.com/watch?v=vrhWwLZmRK4 or

https://www.youtube.com/watch?v=fEmkHZxzwqo.

Microsoft Exchange Online Protection (EOP) is the mail filtering component for Microsoft Office 365 mailboxes, but can also be used to protect on-premises ma...
Learn how Microsoft Office 365 protects its customers against rapidly growing Spoof, Phish, Malware and Spam attacks. Get actionable insights for InfoSec as ...
Highlighted

WOW!!

I will save this article as a reference for me. Way cool.

Many thanks @Vasil Michev !

Daniel