Microsoft 365 Quarantine Messages: A User Guide

Overview of Quarantine Notifications

Upon receiving an email from quarantine@messaging.microsoft.com, it indicates that our security systems have identified one or more emails requiring your assessment. For security purposes, these notifications are explicitly flagged as [EXTERNAL EMAIL].

Interpreting the Notification

  • The notification email will specify the exact number of messages currently under quarantine.

  • It will provide the time of quarantine, referenced in Coordinated Universal Time (UTC).

  • Messages retained in quarantine must be reviewed and acted upon within a strict 30-day period from the date of notification.

  • A hyperlink directing you to the Quarantine page is included for immediate access.

Procedures for Reviewing Messages

1. Accessing the Microsoft Security Center

2. Navigating the Quarantine Interface

  • Upon accessing the quarantine portal, you will be presented with all quarantined messages.

  • Each message includes detailed information such as the sender, the date of quarantine, and the specific reason for quarantine.

  • Verify the expiration timeline, which extends 30 days from the date of receipt, after which the message will be purged.

  • Utilize advanced filtering options to locate specific messages by sender, date, or other relevant criteria.

Releasing Quarantined Messages

  1. Select the quarantined message that you intend to evaluate.

  2. If permitted, click on the Release button.

  3. Based on your permissions, as established by your organizational policy, choose from the available release options.

  4. The status of the message will update to Released upon successful completion of this action.

Critical Security Considerations

  • Always ensure that the quarantine notification originates specifically from quarantine@messaging.microsoft.com to avoid phishing threats.

  • Avoid interacting with hyperlinks contained within [EXTERNAL EMAIL] messages unless their legitimacy is beyond doubt.

  • Should you require further support or have any uncertainties, contact the IT Service Desk immediately.

  • Adhere strictly to the 30-day review window, as failure to act within this timeframe will result in the automatic deletion of quarantined messages.