Microsoft Entra Suite Tech Accelerator
Aug 14 2024, 07:00 AM - 09:30 AM (PDT)
Microsoft Tech Community

Investigating Failed AIR

Silver Contributor

My client has Investigataions with a status of partially remediated and the message "A problem prevented the remediation of some malicious entities." I have opened a support ticket, but I"m not getting any help from them. Has anyone else seen this or have any idea how to investigate?


2 Replies
I have had this issue when the email was already removed.
Is this the case?
That could be it, but I'm not really sure, Explorer shows 3 events, Original Delivery, Success- Message moved to Quarantine, and Failure-message moved or deleted by user. but when I look at the Incidents page, it shows the state as Queued, it seems to have gotten stuck.