Fix Microsoft 365 Defender Submit Button Disabled Issue
Question details
The user is unable to click the Submit button when attempting to submit an analysis in Microsoft 365 Defender, even though they have administrator rights and all required fields appear to be filled out.
- Product
- Microsoft 365 Defender
- Device & OS
- not provided
- Scenario
- An administrator is attempting to submit an email analysis report through the Microsoft 365 Defender portal.
- Observed behavior
- The Submit button remains disabled or grayed out despite the form appearing complete.
Ensure you have the full message headers available for the email in question and confirm that your administrator session has not timed out.
Use the Exchange Network Message ID in GUID Format
The Submit button remains disabled if the portal does not recognize the Message ID format. It requires a specific GUID format rather than a standard email Message-ID.
Microsoft 365 Defender validates the Network Message ID field in real-time. If you input a standard email header format (such as <message-id@domain.com>), the validation fails silently, preventing the Submit button from becoming active.
Open the email in question and view its full internet headers or use the Exchange Admin Center to trace the message properties.
Search the header specifically for 'X-MS-Exchange-Organization-Network-Message-Id'.
Copy the value associated with that header. It must be in a strict GUID format, typically looking like this: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx.
Paste this GUID into the Network Message ID field in the Microsoft 365 Defender form. The validation will pass, and the Submit button will become enabled.
Submit the Report via Exchange Message Trace
If the Microsoft 365 Defender portal continues to malfunction, you can bypass it and submit the report directly through Exchange.
Need a simpler alternative to Microsoft Office?
While advanced administrative tools like Microsoft 365 Defender are vital for corporate IT security, your daily office productivity doesn't need to be weighed down by complexity. WPS Office provides a lightweight, highly compatible alternative to Microsoft Office for creating documents, spreadsheets, and presentations.
- 1. Download the installer: Visit the official WPS Office website and download the free installation package for your operating system.
- 2. Install the suite: Run the installer and follow the simple on-screen instructions to set up the software in minutes.
- 3. Open your files: Launch WPS Office and immediately open your existing Microsoft Office files without losing any formatting.
Frequently Asked Questions
Why doesn't the Defender portal accept standard email Message-IDs?
Microsoft 365 Defender specifically requires the Exchange Network Message ID in a GUID format (e.g., xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx) because it uses this unique internal identifier to track messages across the Exchange network rather than relying on easily spoofed external SMTP headers.
What permissions do I need to submit an analysis in Microsoft 365 Defender?
You must be logged in with adequate administrative privileges, typically as a Security Administrator or Global Administrator. If you lack these permissions, certain features and buttons within the portal will remain disabled.
What should I do if the Submit button is still disabled after entering the correct GUID?
Double-check that all other required fields in the form are completely filled out and that there are no trailing spaces in your GUID entry. Additionally, verify that any necessary Microsoft 365 Defender integrations are properly enabled in your tenant settings.
