Security Policy Errors

How to Find Spam Filter Allow and Block Settings in Exchange Admin Center

Huda QurayshiHuda Qurayshi Nov 4, 2026 868 views

Question details

The user needs to locate the settings for allowlisting domains and users, which have been moved in the new Microsoft Exchange Admin Center.

How to Find Spam Filter Allow and Block Settings in the New Exchange Admin Center
Product
Microsoft Exchange
Device & OS
not provided
Scenario
Configuring email security and managing spam filters to allow or block specific senders for an organization.
Observed behavior
The familiar settings for managing allowed and blocked domains and users are no longer visible in the new Exchange Admin Center interface.
Before you start

Ensure you have the appropriate administrator credentials (such as Global Admin or Security Admin roles) to access the Microsoft Defender or Security and Compliance portal.

Solution 1Recommended

Locate Spam Filter Policies in Microsoft Defender / Security and Compliance Portal

Microsoft has moved anti-spam policy management to the dedicated Microsoft Defender and Security and Compliance portals.

In modern Microsoft 365 environments, security settings have been centralized. You must use the Security and Compliance portal to manage inbound and outbound spam filters instead of the standard Exchange Admin Center.

1
Log in to the Security Portal

Open your web browser and navigate to the Microsoft Defender or Security and Compliance portal, then log in using your administrator credentials.

2
Navigate to Threat management

On the left-hand navigation pane, locate and click on 'Threat management', then select 'Policy' from the expanded menu.

3
Open Anti-spam settings

Click on 'Anti-spam' to view the list of available inbound and outbound spam filter policies for your organization.

4
Edit allow and block lists

Select an existing policy to edit it, or create a new policy to specify allowed and blocked domains or specific email addresses.

Locate Spam Filter Policies in Microsoft Defender / Security and Compliance Portal
Wildcard Domains Support: Wildcard domains may not be supported directly in these standard anti-spam policies. You will need to use alternative methods like Mail Flow rules for wildcard scenarios.
Free Microsoft Office alternative

Looking for a Lightweight and Powerful Office Suite? Try WPS Office

While managing Exchange server policies requires Microsoft admin portals, your daily document processing does not have to rely on heavy, expensive software. WPS Office offers a free, highly compatible alternative for Word, Excel, and PowerPoint files with a user-friendly interface.

  1. 1. Download WPS Office: Visit the official WPS Office website and download the free installer for your operating system.
  2. 2. Install the application: Run the setup file and follow the quick installation prompts.
  3. 3. Open existing Office files: Launch WPS Office and instantly open and edit your existing Microsoft Word, Excel, and PowerPoint documents without format loss.
Fully compatible with Microsoft Office formats including .docx, .xlsx, and .pptx.Lightweight installation that runs smoothly on almost any desktop or mobile device.Free access to powerful Writer, Spreadsheet, Presentation, and built-in PDF tools.Familiar tabbed interface making migration from Microsoft Office seamless.
microsoft office alternative - wps office

Frequently Asked Questions

Why did Microsoft remove spam filter settings from the Exchange Admin Center?

Microsoft centralized security and threat management to streamline administration. Advanced security features, including spam filters, were migrated to the Microsoft Defender and Security and Compliance portals to provide a unified security dashboard.

Can I block a wildcard domain directly in the new anti-spam policies?

No, wildcard domains are generally not supported directly in the Microsoft Defender anti-spam policy settings. If you need wildcard support, you should create a Mail Flow rule in the Exchange Admin Center to manage those specific messages.

Who has permission to change anti-spam policies in the Security portal?

Only users who have been assigned specific administrator roles, such as Global Administrator or Security Administrator in Microsoft Entra ID (formerly Azure AD), have the required permissions to view and edit these security policies.