logo
search
Compliance Problems

How to Send Automated Quarantine Email Reports in Microsoft 365

Natalie TaylorNatalie Taylor Oct 22, 2026 868 views

Question details

The user needs to automate reports that list quarantined emails and send them to end-users at specified intervals in Microsoft 365.

How to Send Automated Quarantine Email Reports in Microsoft 365
Product
Microsoft 365
Device & OS
not provided
Scenario
Configuring email compliance and setting up automated quarantine notifications for end-users.
Observed behavior
The user wants to establish a scheduled system to notify users about their quarantined messages instead of relying on manual checks by administrators.
Before you start

Verify your Microsoft 365 subscription type, as automated quarantine reporting features are exclusively available for Business and Enterprise environments using Microsoft Defender for Office 365. You will also need global administrator or security administrator permissions to access and configure these policies.

Solution 1Recommended

Configure Quarantine Policies in Microsoft 365 Defender

Set up end-user spam notifications via Quarantine policies in the Microsoft 365 Defender portal to automatically email reports to users.

In Microsoft 365 Business and Enterprise environments, administrators can automate quarantine reports by configuring specific quarantine policies. These policies dictate whether users receive automated notifications about their quarantined messages and control how frequently the reports are sent.

1
Access the Defender Portal

Log in to the Microsoft 365 Defender portal at security.microsoft.com using your administrator credentials.

2
Navigate to Threat Policies

On the left navigation menu, go to 'Email & collaboration', select 'Policies & rules', and then click on 'Threat policies'.

3
Open Quarantine Policies

Under the 'Rules' section of the Threat policies page, click on 'Quarantine policies'.

4
Edit or Create a Policy

Select an existing policy to edit or click 'Add custom policy'. Provide a policy name and proceed to the 'End-user spam notifications' section.

5
Enable Notifications and Set Frequency

Check the box to enable end-user spam notifications. Choose a frequency from the dropdown menu (e.g., daily or every 3 days) to define how often users will receive the automated report, then save the policy.

Configure Quarantine Policies in Microsoft 365 Defender
Licensing Requirement: This feature requires Microsoft Defender for Office 365 Plan 1 or Plan 2, which is included in most Business Premium and Enterprise subscriptions.
Free Microsoft Office alternative

Looking for a Lightweight Office Suite Alternative?

While managing email quarantine policies requires Microsoft 365 admin tools, for your daily document creation and editing needs, WPS Office offers a free, highly compatible, and lightweight alternative to Microsoft Office. Enjoy seamless formatting and an intuitive interface without the heavy subscription costs.

  1. 1. Download the Installer: Visit the official WPS Office website to download the free installation package for your operating system.
  2. 2. Install and Launch: Run the installer, follow the on-screen prompts to set up WPS Office, and open Writer, Spreadsheet, or Presentation to start working.
  3. 3. Open Microsoft Formats: Open your existing Microsoft Office files directly in WPS Office with full formatting preserved.
Fully compatible with Microsoft Word, Excel, and PowerPoint formats (.docx, .xlsx, .pptx).Free to use for basic daily document, spreadsheet, and presentation tasks.Lightweight installation that runs smoothly on Windows, Mac, Linux, and mobile devices.Familiar user interface ensuring zero learning curve when migrating from Microsoft Office.
microsoft office alternative - wps office

Frequently Asked Questions

Can personal Microsoft 365 Family users configure automated quarantine reports?

No, automated end-user spam notifications and customized quarantine policies are advanced security features designed exclusively for Microsoft 365 Business, Enterprise, and Education tenants managed through Microsoft Defender.

How often can Microsoft 365 send quarantine email reports to users?

When configuring end-user spam notifications in Microsoft 365 Defender, administrators can set the delivery frequency for automated quarantine reports to anywhere between 1 and 15 days.

Why are my end-users not receiving their automated quarantine notification emails?

Users might not receive reports if the quarantine policy assigned to the anti-spam rule does not have end-user spam notifications enabled. Additionally, emails quarantined due to high-confidence phishing or malware typically bypass user notifications entirely for security reasons.