Updated September 7, 2023: We have updated the rollout timeline below. Thank you for your patience.
It is applicable to customers with Exchange Online Protection, Microsoft Defender for Office plan 1 or plan 2 service plans.
Soon, the results of end user reported messages on User reported tab of the Submissions page will start factoring in human analyst (grader) insights.
It will only happen when on user reported settings, you have configured Send reported messages to > Microsoft only or Microsoft and the reporting mailbox.
With this change, Microsoft analysis of user reported, and admin submitted messages (emails and Microsoft Teams), URLs and email attachments are aligned and consist of the following checks:
- Email authentication check: Whether email authentication passed or failed when it was delivered.
- Policy hits: Information about any policies or overrides that might have allowed or blocked the incoming message, URL or attachment into the organization, thus overriding our filtering verdicts.
- Payload reputation/detonation: Up-to-date examination of sending infrastructure (IP, sender, domain), URLs, and attachments in the message.
- Grader analysis: Review done by human graders to confirm whether messages are malicious, spam, or clean.
As a result, admins need to only submit or resubmit messages that haven’t been submitted to Microsoft, or where you disagree with Microsoft’s analysis.
This message is associated with Microsoft 365 Roadmap ID 124903.
[When this will happen:]
This change will start rolling out in mid-August and should be completed by late September 2023 (previously late August).
[How this will affect your organization:]
You might need to wait a day to see the results from Microsoft’s analysis, but this is true even today for admin submitted messages.
[What you need to do to prepare:]
No changes are required as your current settings in the user reported settings page won’t be affected by this change.
Note: Today, Teams messages end user reporting and admin submission is only available to Microsoft Defender for Office plan 2.
If you have any feedback or questions or concerns, please provide it from this Message center post using the text box after you do thumbs up or thumbs down as it will directly reach the responsible team.
