Link to home
Start Free TrialLog in
Avatar of Pal Experts
Pal ExpertsFlag for Belgium

asked on

Microsoft Defender ATP sender is quarantine.


We are using  Microsoft Defender ATP.  an email address  "sender" is quarantine.

As to let that sender pass his emails to the precipitants, I created anti-spam policy and inside that policy I add the sender email in the "Allowed senders" section.

But still the sender emails are quarantine.

Any idea to solve this problem?

Avatar of DEMAN-BARCELO (MVP) Thierry
Flag of France image


you should verify the reason of the quarantine! If it is not for a "spam" reason, the antispam policy exclusion will not work.

Alternatively, you can create a transport rule with a condition set to this sender (and perhaps others), and using "Set the spam confidence level (SCL) to '-1' "  as action.

=> This user will be excluded for nearly all rules.

Avatar of Pal Experts


H ello

Thank you for your response

But it was working before and suddenly the email sender quarantine.

Any other idea to look for?

Thank you

It is not because a mail was working and not put in quarantine, that it should remain like that.

The problem can come the content of the message (signature) or even external parameters (IP banned, domain or email marked as spammer in any database) or many other reason.

=> You should find in the header of the message, the SCL,BCL values and some other indicators.


Avatar of Pal Experts
Pal Experts
Flag of Belgium image

Link to home
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial