O365 ATP - Ensuring Junk Email settings on Exchange Mailboxes are enabled for ZAP and Anti-spam

[PJR_CDF]

Hi All,

I am looking at best practices for O365 ATP deployment and have reviewed a ton of documentation and presentations, and understand the need to ensure that Junk Email Settings are enabled for all mailboxes for Ant-spam and ZAP to work as intended.

I am trying to understand how an end user can disable it for their mailbox in the first place?

Within Outlook the end user only has the ability to alter their Junk email options, but even setting the level to "No Automatic Filtering",  doesn't disable Junk email for the mailbox as far as I can see?

The end user cannot delete the Junk Email folder from their mailbox either and  the Junk Email rule is a hidden inbox rule that end users cannot see.

What am I missing that users can do to potentially break / disable junk email settings on their mailbox? Or is this check, to guard against any admins having disabled Junk Email on user mailboxes in the past?

Thanks

Paul

[#2 · Accepted solution]

End users can disable junk folder in OWA
Click on the Options tool at the top right of the OWA page.
Click on See All Options...
Click on Block or Allow in the column on the left.
Click to select the Don't move e-mail to my Junk E-Mail folder option, which is at the top.
And the more techie end-users can connect to Exchange Online PowerShell and they can run this command against their own user mailbox.
You can prevent end-users from doing this by creating a custom policy, and you can also disable them from launching Exchange remote PowerShell:
for a single user: Set-User -Identity david@contoso.com -RemotePowerShellEnabled $false
for all users: get-user -resultsize unlimited | set-user -RemotePowerShellEnabled $false
(just be sure to exclude yourself and other global admins otherwise you'll lock yourself out.)
You can enable junk mail folder on all mailboxes with this one commnad:
$All = Get-Mailbox -RecipientTypeDetails UserMailbox -ResultSize Unlimited; $All | foreach {Set-MailboxJunkEmailConfiguration $_.Name -Enabled $true}

If this was helpful, please mark as best answer. thanks!
-Joe

[#3]

seems unavailable in OWA now.
i created a rule to move all messages to Inbox. I don't know yet if it will work.

[#4]

Hello,

yes, the option is only in the old Classic view available. . .

New OWA and outlook = no option available to disable this completly.

Maybe an automated job would be nice to disable this for all users...

Regards

Marc