How to Notify Administrators When Quarantined Email is Released in Microsoft 365
Question details
Administrators need a way to receive automatic email notifications whenever another admin releases or denies a quarantined email.

- Product
- Microsoft 365 Admin Center
- Device & OS
- not provided
- Scenario
- Monitoring quarantine administrative actions and tracking when emails are released or denied by other IT staff.
- Observed behavior
- Microsoft 365 does not currently provide a standard, built-in email notification specifically for these administrator actions.
Ensure you have the necessary administrative privileges (such as Security Administrator or Global Administrator roles) in Microsoft 365 to view and manage alert policies and unified audit logs.
Review and Configure Microsoft 365 Alert Policies
While standard notifications aren't natively available for this exact action, checking the alert policies can help you identify related administrative alerts.
Microsoft 365 Defender allows administrators to create and manage alert policies that trigger notifications for various security and administrative events. Though a direct template for 'admin releasing a quarantine email' may be missing, monitoring audit logs or custom alerts is the recommended workaround.
Log in to the Microsoft 365 Defender portal (security.microsoft.com) using your admin credentials.
Go to 'Email & collaboration' in the left-hand navigation pane, then select 'Policies & rules', and click on 'Alert policies'.
Search through the existing alert policies or attempt to create a new custom policy to see if a trigger matching quarantine release actions can be configured for your specific tenant.

Submit a Feature Request via the Microsoft Feedback Portal
Since this is a known product limitation, submitting feedback to Microsoft can help prioritize the addition of this notification feature in future updates.
Boost Your Team's Productivity with WPS Office
While you manage your organization's IT infrastructure and email security, equip your team with a lightweight, highly compatible alternative to Microsoft Office for everyday document tasks.
- 1. Visit the Official Website: Go to the official WPS Office website from your preferred web browser.
- 2. Download the Installer: Click the 'Download WPS Office Free' button to download the appropriate version for your operating system.
- 3. Install and Launch: Run the installer, follow the on-screen prompts, and start opening your existing Office documents immediately.

Frequently Asked Questions
Can end-users be notified when their email is quarantined?
Yes, administrators can configure quarantine policies in Microsoft 365 Defender to send end-user spam notifications, allowing users to review and request the release of their own quarantined messages.
Where do administrators view quarantined emails in Microsoft 365?
Admins can view and manage quarantined messages by logging into the Microsoft 365 Defender portal, navigating to 'Email & collaboration', and selecting 'Review' followed by 'Quarantine'.
Is there a workaround to track who released a quarantined email?
Administrators can run an audit log search in the Microsoft 365 compliance center to track administrative actions, which includes identifying who released specific emails from the quarantine.
Can I set up rules to bypass quarantine for specific trusted senders?
Yes, admins can use Exchange mail flow rules (transport rules) or configure the Tenant Allow/Block List to ensure that legitimate emails from trusted senders bypass spam filters and are not sent to quarantine.




