How to Block File Hashes in Microsoft 365 Outlook
Question details
A Microsoft 365 business administrator needs to block malicious or unwanted files from circulating via Outlook by blacklisting their specific file hashes.
- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Managing organization-wide email security to prevent the distribution of identified malicious files.
- Observed behavior
- The administrator wants to ensure specific harmful files are blocked using file hashes without relying on unsupported manual workarounds like modifying OutlookToolsSetup.msi.
Ensure you have administrator access to the Microsoft Defender portal and that your organization is using Microsoft 365 work or school accounts, as this feature is not available for personal Outlook.com accounts.
Block File Hashes via Microsoft Defender Portal
Use the web-based Microsoft Defender portal to easily add file hashes to your Tenant Allow/Block List for organization-wide protection.
The Microsoft Defender portal provides a straightforward graphical interface for administrators to manage their Tenant Allow/Block List. This is the officially supported and recommended method for controlling file hashes.
Navigate to the Microsoft Defender portal (security.microsoft.com) and log in using your Microsoft 365 administrator credentials.
On the left-hand navigation menu, go to 'Policies & rules', then select 'Threat policies'.
Under the 'Rules' section, click on 'Tenant Allow/Block Lists'.
Switch to the 'Files' tab, click the 'Block' button, enter the specific file hashes you wish to restrict, and save your changes.
Block File Hashes using Exchange Online PowerShell
For admins who prefer command-line tools or need to script the security policy process, use Exchange Online PowerShell.
Looking for a Free and Secure Microsoft Office Alternative?
While blocking file hashes in Microsoft 365 requires complex enterprise administrator access, individual users and small teams seeking a simpler, secure, and highly compatible document experience can try WPS Office. It provides powerful word processing, spreadsheets, and presentations in a single lightweight application without heavy enterprise overhead.
- 1. Download the Installer: Visit the official WPS Office website and download the free installation package for your specific operating system.
- 2. Install WPS Office: Run the downloaded setup file and follow the straightforward on-screen instructions to complete the installation.
- 3. Open Your Documents: Launch WPS Office and easily open, edit, and save your existing Microsoft Office files with perfect formatting preservation.
Frequently Asked Questions
Can I block file hashes for a personal Outlook.com account?
No, the Tenant Allow/Block List feature in Microsoft Defender is exclusively available for Microsoft 365 business, work, or school accounts. Personal Outlook.com accounts do not have access to this enterprise security feature.
Should I modify OutlookToolsSetup.msi to block malicious files?
No, modifying OutlookToolsSetup.msi is not recommended and is unnecessary for modern Microsoft 365 environments. Always use the built-in Microsoft 365 security controls like the Tenant Allow/Block List to manage threats effectively.
What types of file hashes are supported in Microsoft Defender?
Microsoft Defender primarily supports SHA256 file hashes for identifying and blocking malicious files across your Microsoft 365 environment.
