How to Report Exchange Online Protection False Positives and Negatives for On-Premises Mailboxes
Question details
IT administrators need a method to report false positives and negatives in standalone Exchange Online Protection (EOP) for on-premises mailboxes, as standard add-ins may fail.

- Product
- Exchange Online Protection
- Device & OS
- not provided
- Scenario
- Attempting to report email delivery issues like spam false positives or negatives in a standalone EOP deployment with on-premises or hybrid mailboxes.
- Observed behavior
- The standard Report Message and Report Phishing add-ins are unsupported or fail to function correctly due to the on-premises mailbox configuration.
Verify your current Microsoft Exchange architecture (standalone EOP, hybrid, or strictly on-premises) to ensure you follow the appropriate support and reporting channels.
Consult the Microsoft Exchange Hybrid and On-Premises Forum
Because standard end-user reporting add-ins may not support on-premises mailboxes, Microsoft recommends working directly with hybrid architecture specialists for a custom workflow.
Standalone EOP deployments with on-premises mailboxes require specific routing and reporting configurations that fall outside standard cloud-native documentation. To get the correct reporting workflow for your environment, you should consult the specialized Exchange IT Pro community.
Open your web browser and go to the official Microsoft Q&A platform (learn.microsoft.com/en-us/answers).
Navigate to the specific 'Exchange Hybrid IT Pro' forum section using the topic tag 'office-exchange-hybrid-itpro'.
Create a new thread detailing your standalone EOP setup and on-premises mailbox configuration to request a tailored administrative reporting workflow.

Manually Submit Messages via the Microsoft Defender Portal
If end-user add-ins are unavailable, administrators can manually submit false positives and negatives directly through the security portal.
Manage Your IT Documentation with WPS Office
While troubleshooting Exchange Server configurations, you need a reliable office suite to manage deployment guides, hybrid architectures, and IT policy documentation. WPS Office offers a lightweight, highly compatible alternative to Microsoft Office.
- 1. Download the installer: Visit the official WPS Office website to download the free installation package.
- 2. Install the software: Run the setup file and follow the on-screen prompts to complete the lightweight installation.
- 3. Open your IT documents: Launch WPS Office and immediately start editing your existing Microsoft Office documentation seamlessly.

Frequently Asked Questions
Why doesn't the Report Message add-in work for my on-premises mailboxes?
Standalone Exchange Online Protection deployments with on-premises mailboxes often lack the necessary cloud hooks and mailbox integrations required by standard Report Message and Report Phishing add-ins. This means end-user reporting relies on specific hybrid configurations rather than native cloud add-ins.
How can users report phishing if the add-in is unsupported?
Users can be instructed to forward phishing or spam emails as attachments (.msg or .eml formats) to a dedicated internal IT mailbox. The Exchange administrator can then manually submit these files to Microsoft via the Defender portal.
Can I use EOP without migrating my mailboxes to the cloud?
Yes, Microsoft supports standalone Exchange Online Protection for on-premises mailboxes to filter spam and malware. However, certain cloud-native features and integrated reporting add-ins may have limited functionality compared to a full Exchange Online deployment.




