Views:
Grant permissions on emails quarantined for different reasons and enable users to report false positives and false negatives to Trend Micro in the management console.

Procedure

  1. In Cloud Email and Collaboration Protection, go to AdministrationAdd-in for Outlook.
  2. Specify the quarantine permission settings.
    1. Under Quarantine Management Permissions, turn on the toggle to allow your users to manage quarantined emails.
    2. Specify the permissions that your users can have on emails quarantined for different reasons.
      Note
      Note
      For emails quarantined for containing ransomware, malicious files, or malicious URLs, Trend Micros recommends that you exert caution when granting permissions to your users.
    3. Specify whether your users can add senders to bypass Advanced Spam Protection.
      The senders trusted by your users do not bypass other enabled scan filters, such as Malware Scanning, File Blocking, Web Reputation, and Virtual Analyzer.
      Note
      Note
      Senders trusted by your users can not be blocked by the blocked sender list for Advanced Spam Protection in policy settings. However, such users can be blocked by the Blocked Lists for Exchange Online in global settings.
  3. Specify email reporting settings for your users to report emails to Trend Micro or administrators in your organization.
    1. Turn on Report to Trend Micro to allow your users to report emails as spam, phishing, or not a risk to Trend Micro.
      Note
      Note
      Reporting an email also sends a copy of the email to Trend Micro. However, this action does not move or delete the email.
    2. Require manual approval on the reported emails before they can be sent to Trend Micro by selecting Manually confirm whether end users’ email reporting can be sent to Trend Micro.
      After you enable this option, end users’ email reporting will not be sent to Trend Micro until you manually approve the reporting.
      If you disable reporting approval, the existing emails waiting for approval will be automatically approved.
      To get visibility into or manually approve the emails reported by your users, go to OperationsUser-Reported Emails. For details, see User-Reported Emails.
    3. Turn on Report to administrators to allow your users to report emails to the mailboxes of your organization's administrators for analysis and investigation.
    4. Specify the email address to report emails to.
      Note
      Note
      To prevent reported emails from being scanned and deleted or blocked by Cloud Email and Collaboration Protection, enter an email address in the current organization.
    5. If your add-in is deployed before March 22, 2024, deploy the add-in again in the Microsoft 365 admin center for your users to report emails to administrators in your organization.
    6. To remove reported spam or phishing emails from your end users' inboxes, select When reported as spam or phishing, move the message to the Junk folder.