Data Protection Issues

Why Some Emails Cannot Be Previewed or Downloaded in Microsoft 365 Defender

Jason Miller Oct 21, 2026 868 views

Question details

The user is experiencing an issue where certain enterprise email messages in Microsoft 365 Defender cannot be previewed or downloaded, while others are fully accessible.

Why Some Emails Cannot Be Previewed or Downloaded in Microsoft 365 Defender

Product: Microsoft 365 Defender
Device & OS: not provided
Scenario: Attempting to preview or download enterprise email messages during security investigation or auditing tasks.
Observed behavior: Some emails are successfully previewed or downloaded, while others remain inaccessible regardless of their delivery location or the current mailbox being checked.

Before you start

Ensure you have the appropriate Role-Based Access Control (RBAC) permissions, such as Security Administrator or specific eDiscovery roles, before attempting to investigate or preview enterprise emails in Defender.

Solution 1Recommended

Capture the Exact Error Message for Troubleshooting

Because email access restrictions can be caused by various tenant policies or encryption rules, capturing the precise error message is the most reliable way to identify the root cause.

In Microsoft 365 Defender, access to individual emails is governed by complex layers of permissions, compliance policies, and data boundaries. When preview or download fails, the system typically generates an error code or message that points directly to the missing permission or conflicting policy.

Locate the affected email

Navigate to the exact email message within the Microsoft 365 Defender portal that you are unable to access.

Attempt the action

Click the 'Preview' or 'Download' button as you normally would during your investigation.

Record the error message

Carefully note any error codes, pop-up warnings, or access denied messages that appear on the screen.

Capture a screenshot

Take a complete screenshot of your browser window showing the error message and the current Defender workspace.

Escalate to administration

Provide the exact error text and the screenshot to your IT or Global Administrator to cross-check against tenant security policies.

Capture the Exact Error Message for Troubleshooting

Why exact errors matter: Without the specific error code, it is nearly impossible for administrators to distinguish between a transient server issue, an encryption blockade, or a lack of RBAC permissions.

Solution 2

Check Permissions and Information Rights Management (IRM)

Verify if the inaccessible emails are protected by encryption or if your account lacks specific message preview permissions.

Free Microsoft Office alternative

Looking for a Free and Lightweight Alternative to Microsoft Office?

While Microsoft 365 Defender securely manages enterprise emails and compliance, managing your everyday office documents shouldn't require complex licensing. WPS Office offers a highly compatible, powerful, and free alternative to Microsoft Office for creating, editing, and protecting your documents.

Seamlessly compatible with Microsoft Office formats including DOCX, XLSX, and PPTX.Lightweight installation with a familiar, easy-to-use tabbed interface.Includes built-in PDF editing and local file data protection features.Free to use for daily document creation and spreadsheet management.

microsoft office alternative - wps office

Frequently Asked Questions

Why does Microsoft 365 Defender block some emails from being previewed?

This inconsistency usually occurs due to a lack of specific role-based permissions, the email being protected by encryption (such as IRM or Purview Message Encryption), or specific data compliance policies that prevent sensitive data from being exfiltrated by administrators.

What administrative roles are required to preview or download emails in Defender?

Typically, you need the Security Administrator role, Security Reader role (for metadata only), or specific eDiscovery roles. Crucially, the explicit 'Preview' permission must be granted within the Microsoft 365 Defender RBAC settings.

Does the email delivery location affect preview capabilities in Defender?

Although the issue often appears independent of the delivery location, emails that are quarantined for high-confidence phishing or malware may be subject to stricter preview and download restrictions compared to standard inbox deliveries, depending entirely on your organization's custom security policies.

Microsoft Office Security Issues