How to Send Automated Quarantine Email Reports in Microsoft 365
Question details
The user needs to automate reports that list quarantined emails and send them to end-users at specified intervals in Microsoft 365.

- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Configuring email compliance and setting up automated quarantine notifications for end-users.
- Observed behavior
- The user wants to establish a scheduled system to notify users about their quarantined messages instead of relying on manual checks by administrators.
Verify your Microsoft 365 subscription type, as automated quarantine reporting features are exclusively available for Business and Enterprise environments using Microsoft Defender for Office 365. You will also need global administrator or security administrator permissions to access and configure these policies.
Configure Quarantine Policies in Microsoft 365 Defender
Set up end-user spam notifications via Quarantine policies in the Microsoft 365 Defender portal to automatically email reports to users.
In Microsoft 365 Business and Enterprise environments, administrators can automate quarantine reports by configuring specific quarantine policies. These policies dictate whether users receive automated notifications about their quarantined messages and control how frequently the reports are sent.
Log in to the Microsoft 365 Defender portal at security.microsoft.com using your administrator credentials.
On the left navigation menu, go to 'Email & collaboration', select 'Policies & rules', and then click on 'Threat policies'.
Under the 'Rules' section of the Threat policies page, click on 'Quarantine policies'.
Select an existing policy to edit or click 'Add custom policy'. Provide a policy name and proceed to the 'End-user spam notifications' section.
Check the box to enable end-user spam notifications. Choose a frequency from the dropdown menu (e.g., daily or every 3 days) to define how often users will receive the automated report, then save the policy.

Enable Notifications via Default Anti-Spam Policies
Activate built-in end-user spam notifications directly within the default anti-spam inbound policy.
Looking for a Lightweight Office Suite Alternative?
While managing email quarantine policies requires Microsoft 365 admin tools, for your daily document creation and editing needs, WPS Office offers a free, highly compatible, and lightweight alternative to Microsoft Office. Enjoy seamless formatting and an intuitive interface without the heavy subscription costs.
- 1. Download the Installer: Visit the official WPS Office website to download the free installation package for your operating system.
- 2. Install and Launch: Run the installer, follow the on-screen prompts to set up WPS Office, and open Writer, Spreadsheet, or Presentation to start working.
- 3. Open Microsoft Formats: Open your existing Microsoft Office files directly in WPS Office with full formatting preserved.

Frequently Asked Questions
Can personal Microsoft 365 Family users configure automated quarantine reports?
No, automated end-user spam notifications and customized quarantine policies are advanced security features designed exclusively for Microsoft 365 Business, Enterprise, and Education tenants managed through Microsoft Defender.
How often can Microsoft 365 send quarantine email reports to users?
When configuring end-user spam notifications in Microsoft 365 Defender, administrators can set the delivery frequency for automated quarantine reports to anywhere between 1 and 15 days.
Why are my end-users not receiving their automated quarantine notification emails?
Users might not receive reports if the quarantine policy assigned to the anti-spam rule does not have end-user spam notifications enabled. Additionally, emails quarantined due to high-confidence phishing or malware typically bypass user notifications entirely for security reasons.




