Security Policy Errors

How to Review Quarantine for a Mail-Enabled Public Folder

Steven ParkerSteven Parker Oct 21, 2026 869 views

Question details

Administrators need a way for delegated users to review quarantined emails sent to a mail-enabled public folder without migrating to a shared mailbox.

How to Review Quarantine for a Mail-Enabled Public Folder
Product
Microsoft Exchange and Microsoft Defender
Device & OS
not provided
Scenario
Managing email filtering and reviewing blocked or quarantined emails directed at an organizational public folder.
Observed behavior
Delegated users cannot natively access the quarantine portal for public folders, requiring administrative intervention or advanced policy configuration.
Before you start

Ensure you have the necessary Exchange Administrator or Security Administrator permissions in your Microsoft 365 tenant to access and manage organization-wide threat policies.

Solution 1Recommended

Review Quarantined Messages via Microsoft 365 Defender Portal

Use the centralized Defender portal as an administrator to manually locate, review, and release emails sent to the public folder.

Because public folders do not function like standard user mailboxes, they cannot log into the Microsoft 365 quarantine portal directly. Therefore, administrators must typically review these blocked messages centrally.

1
Access the Defender Portal

Navigate to the Microsoft 365 Defender portal (security.microsoft.com) and sign in using an account with Security Administrator or Global Administrator credentials.

2
Open the Quarantine page

In the left-hand navigation menu, scroll down to 'Email & collaboration', click on 'Review', and then select 'Quarantine'.

3
Filter by recipient address

Click the 'Filter' button at the top of the Quarantine list. Enter the exact email address of your mail-enabled public folder into the 'Recipient address' field and click 'Apply'.

4
Review and release

Select the quarantined message you want to review. From the details flyout pane, choose to either 'Release email' to deliver it to the public folder or block the sender based on your security policies.

Review Quarantined Messages via Microsoft 365 Defender Portal
Limitation on Delegation: Currently, granting non-admin users direct access to review public folder quarantine is restricted by Microsoft's native role-based access control architecture.
Free Microsoft Office alternative

Looking for a Lightweight, Reliable Office Alternative?

While server-side Exchange and Defender configurations require native Microsoft administrative tools, you don't need an expensive subscription for your local document workflows. WPS Office is a free, powerful alternative designed to help you easily manage spreadsheets, documents, and presentations with full format compatibility.

Highly compatible with Microsoft Office file formats (.docx, .xlsx, .pptx).Lightweight installation ensuring fast performance on any operating system.Intuitive and familiar user interface to maximize your productivity instantly.Includes built-in PDF editing and format conversion tools completely free.
QA img-9

Frequently Asked Questions

Can end-users manage quarantine for public folders directly?

End-users typically cannot log into the Microsoft 365 quarantine portal on behalf of a public folder. Unlike a personal or shared mailbox, a public folder lacks standard credential structures, meaning administrators must usually handle the release of quarantined items.

Why do Microsoft experts recommend shared mailboxes over public folders for quarantine management?

Shared mailboxes seamlessly integrate with Microsoft Defender's delegated access and quarantine notification features. This allows assigned users to review and release their own quarantined messages via portal access or digest emails without requiring global admin rights.

Will quarantine digest emails be sent to the public folder?

No, public folders do not reliably process automated quarantine notification digests. Moving to a shared mailbox or Microsoft 365 Group is often required to enable functional, automated quarantine alerts for delegated users.