Skip to content

Verify alert settings for restricted user in Microsoft 365 Defender.

Verify alert settings for restricted user in Microsoft 365 Defender.

The default alert policy for restricting users from sending emails will automatically notify admins when a user is blocked from sending outbound mail. In this post we will look at how we can modify this alert policy.

A picture containing text
Description automatically generated

Verify alert Policy

To verify current policy, head over to https://security.microsoft.com

  1. Go to Email & collaboration

Graphical user interface, text, application
Description automatically generated

  1. Click on Policies & Rules > Alert policy

Graphical user interface, text, application
Description automatically generated

  1. On the Alert policy page, scroll down until you see the alert rule β€œUser restricted from sending email”

  1. Click on the alert policy to open the configuration page. Here you can either add additional email recipients or disable the policy.

Graphical user interface, text, application
Description automatically generated

  1. When you click on Edit policy you will be able to modify the following.
  • Enable or disable the policy
  • Add additional email recipients.
  • Modify the daily notification limit

Graphical user interface, application
Description automatically generated

You will notice that this alert policy has sections which cannot be modified because it’s a default policy.

Sharing is caring!

Published inMicrosoft 365Microsoft 365 Defender

Be First to Comment

Leave a Reply

Your email address will not be published. Required fields are marked *