Feb 10 2020
05:40 AM
- last edited on
Feb 01 2023
11:50 AM
by
TechCommunityAP
Feb 10 2020
05:40 AM
- last edited on
Feb 01 2023
11:50 AM
by
TechCommunityAP
Hello Guys. When I purge malicious emails from user inbox via office 365 security and compliance, the users are still able to see them in their inbox. This is something that I am really grappling with.
Has someone come across this issue? Any help on how to successfully purged emails from user inboxes?
Thanks
Tatah
Feb 10 2020 07:15 AM
We aren't talking about quarantined messages, emails in the quarantine are yet to be delivered and will be deleted automatically after the time has elapsed, 30 days by default?
If you are deleting malicious emails you can use a Content Search with PowerShell if that's the process you are following:
"The final step is to run the New-ComplianceSearchAction cmdlet to delete the message. You can soft- or hard-delete the message. A soft-deleted message is moved to a user's Recoverable Items folder and retained until the deleted item retention period expires. Hard-deleted messages are marked for permanent removal from the mailbox and will be permanently removed the next time the mailbox is processed by the Managed Folder Assistant."
https://www.geekshangout.com/office-365-deleting-email-mailboxes-using-content-search-feature/
It easier with Office 365 E5 or ATP Plan 2 add-on, as this is in the interface without needing PowerShell - Find and delete suspicious email that was delivered.
Feb 11 2020 05:09 AM
Feb 11 2020 05:24 AM - edited Feb 11 2020 05:32 AM
@Tatabime Without knowing more on exactly what process you are following (the previous links I posted show how this should work), I'd suggest opening a ticket with Office 365 support if it's not working the way you are expecting, would be the next step I'd do.
Feb 18 2020 01:35 AM