How to Manage Outbound Email Quarantine in Microsoft 365
Question details
The user needs to manage or temporarily disable outbound email quarantine in Microsoft 365 because outgoing organizational emails are being unexpectedly blocked.

- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Managing outbound spam filter policies to ensure legitimate outgoing organizational emails are successfully delivered.
- Observed behavior
- Messages sent from the organization's domain are being quarantined and not released, requiring an adjustment to outbound filtering settings.
Before modifying outbound filtering policies, ensure that your domain and user accounts have not been compromised by unauthorized senders. Temporarily disabling outbound protection without investigating the root cause can expose your organization to severe security risks and potential domain blacklisting.
Review and Adjust the Outbound Spam Filter Policy
Use the Microsoft Defender portal to review outbound spam policies, investigate quarantined messages, and release false positives safely.
Disabling outbound filtering permanently is highly risky. Instead, administrators should investigate why the emails are being flagged, release legitimate emails manually, and carefully adjust the default outbound policy.
Log in to the Microsoft Defender portal using your Microsoft 365 admin credentials.
Go to 'Policies & Rules' in the left-hand navigation menu, select 'Threat policies', and then click on 'Anti-spam'.
Locate and click on the 'Anti-spam outbound policy (Default)' or your organization's custom outbound policy to review its configuration and sending limits.
Investigate currently quarantined messages in the portal. Manually release legitimate emails and report them as false positives to train the filter and improve future accuracy.

Empower Your Team with a Secure and Efficient Office Suite
While you manage your organization's backend security policies and email configurations in Microsoft 365, consider empowering your workforce with a lightweight, secure, and cost-effective office suite. WPS Office provides excellent performance and seamless workflow integration for your business needs.

Frequently Asked Questions
Why are my outbound emails being quarantined in Microsoft 365?
Microsoft 365 automatically quarantines outbound emails if they trigger anti-spam policies. This usually happens due to a high volume of bulk emails being sent, suspicious content within the emails, or a potentially compromised account sending unauthorized spam.
Can I permanently disable outbound email filtering in Microsoft Defender?
While technically possible through policy modifications, permanently disabling outbound filtering is strongly discouraged. Doing so creates a severe security risk and increases the likelihood of your domain being blacklisted by external email providers.
How do I release an email that was mistakenly quarantined?
As an administrator, navigate to the Microsoft Defender portal, select the Quarantine page under 'Review', select the mistakenly blocked messages, and click 'Release'. You should also choose to report them as false positives to prevent future occurrences.
How can I tell if an email account has been compromised and restricted?
Check the 'Restricted entities' page in the Microsoft Defender portal under the 'Review' section. If a user exceeds outbound sending limits or exhibits highly unusual sending patterns, Microsoft 365 will automatically restrict the account from sending messages and list them there.




