How to Fix Microsoft 365 Alert Policy Not Sending Alerts
Question details
Microsoft 365 alert policies are failing to send expected email notifications for triggered events like SharePoint deletions or suspicious emails.
- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- An administrator is configuring security and compliance alert policies and monitoring incoming email notifications.
- Observed behavior
- The alert policy generates fewer alerts than expected, or email notifications are completely missing even after triggering events have occurred.
Ensure you are logged into the Microsoft 365 admin center with Global Administrator or Security Administrator permissions to review and modify alert policies.
Allow 24 Hours for Policy Processing
Microsoft 365 alert policies can take up to 24 hours to fully propagate and process alerts after they are newly created or modified.
When you create a new security policy or update an existing one in the Microsoft Purview compliance portal, the changes do not take effect instantaneously across the entire tenant. It is standard for the system to require a propagation period.
Log into the Microsoft Purview compliance portal, navigate to 'Policies' > 'Alert policies', and verify the exact time your policy was created or last updated.
Allow at least 24 hours to pass from the time of the last modification to ensure the Microsoft 365 backend has fully synced the policy rules.
After the 24-hour window, manually trigger the policy condition (for example, by deleting a test SharePoint file) and monitor your inbox for the email alert.
Open a Microsoft 365 Admin Support Ticket
If alerts remain missing or incomplete after waiting 24 hours, the issue likely requires a backend server investigation by Microsoft support.
Try WPS Office for Your Daily Productivity Needs
While Microsoft 365 handles complex enterprise security policies, backend syncing issues can occasionally disrupt workflows. If you need a reliable, lightweight, and free office suite for daily document tasks without relying on cloud backend syncing, WPS Office is an excellent alternative.
Frequently Asked Questions
Why are my Microsoft 365 alerts delayed?
Microsoft 365 processes millions of signals across tenants. Newly created or modified alert policies can take up to 24 hours to sync across the system and start generating email notifications reliably.
Can I check if the alert fired without receiving an email?
Yes. You can visit the Microsoft Purview compliance portal or Microsoft Defender portal and navigate to the 'Alerts' dashboard to see if the alert was generated internally, even if the email notification failed to send.
What permissions are needed to manage alert policies?
You typically need to be assigned the Security Administrator, Compliance Administrator, or Global Administrator role in Microsoft Entra ID to create, edit, or troubleshoot alert policies in the compliance centers.
