EEEKB article--Go to the Exchange Online service 27 in Office 365 how to handle and release false positives quarantined messages

There are numerous spam filtering features in Exchange online, with filtered results broadly grouped into four categories:
>Direct refusal to receive;
>Put in the Junk Mail folder;
>The subject is marked as spam;
>Isolation
For direct rejection of this situation, most will be set for the exact sender, sender domain, and the IP address of the sending server, so there are very few cases of false rejection. In the spam folder and in the subject label, these spam messages have actually reached the user's mailbox. The user can see the message even if there is a false positive. Only the last kind of quarantined message, if the user needs to isolate the message, then users will often request to retrieve the message. How can I get the message back to the user in full?
One, view quarantined messages
In the Exchange Admin Center window, click Protection in the navigation bar, select Quarantine in the right window navigation bar to see who has been quarantined and the subject of the message sent. Typically in an enterprise, this list can be very large if you enable the spam quarantine feature. If you want to view a specific quarantined message, it is recommended to use the Advanced search function, click the magnifying glass button to open the Advanced Search window.
650) this.width=650; "title=" 01.png "src=" http://s3.51cto.com/wyfs02/M00/83/77/ Wkiom1dz3mjaexqdaabuwilp44s857.png-wh_500x0-wm_3-wmp_4-s_3945964936.png "alt=" Wkiom1dz3mjaexqdaabuwilp44s857.png-wh_50 "/>
There are several ways to find this window, most commonly the sender address, the recipient address, and the message subject. This supports multi-conditional lookups, and the relationship of these conditions is the relationship. Click OK to return, and only messages that match the filter will be displayed in the quarantine list.
650) this.width=650; "title=" 02.png "src=" http://s3.51cto.com/wyfs02/M01/83/77/wKiom1dz3njS_ Qhmaaa32eg5cyy630.png-wh_500x0-wm_3-wmp_4-s_2230346116.png "alt=" Wkiom1dz3njs_qhmaaa32eg5cyy630.png-wh_50 "/>
Right-click to view message status, message headers, and preview e-mail content.
650) this.width=650; "title=" 03.png "src=" http://s4.51cto.com/wyfs02/M01/83/76/ Wkiol1dz3ojyzasyaaboc6us7ek321.png-wh_500x0-wm_3-wmp_4-s_1965179567.png "alt=" Wkiol1dz3ojyzasyaaboc6us7ek321.png-wh_50 "/>
Select the quarantined messages you want to know about, and click the pen button in the upper left corner to view their message status and details.
650) this.width=650; "title=" 04.png "src=" http://s1.51cto.com/wyfs02/M02/83/76/ Wkiol1dz3vmdle4xaabgsby6osa921.png-wh_500x0-wm_3-wmp_4-s_718439105.png "alt=" Wkiol1dz3vmdle4xaabgsby6osa921.png-wh_50 "/>
Click "View Headers" in the Information Bar on the right to display the message header to provide an analysis of the message. Microsoft also provides a Microsoft message header parser to help administrators better understand why the message was quarantined.
650) this.width=650; "title=" 05.png "src=" Http://s5.51cto.com/wyfs02/M00/83/76/wKioL1dz3s_ Hopylaabx7ntb0va622.png-wh_500x0-wm_3-wmp_4-s_338190442.png "alt=" wkiol1dz3s_hopylaabx7ntb0va622.png-wh_50 "/ >
If you want, you can also click "Preview Email" To view the message contents of the quarantined message. There are two kinds of viewing methods, one is normal view and one is HTML view.
650) this.width=650; "title=" 06.png "src=" http://s2.51cto.com/wyfs02/M01/83/77/ Wkiom1dz3uxd5ompaabuv4vtha4060.png-wh_500x0-wm_3-wmp_4-s_3384361401.png "alt=" Wkiom1dz3uxd5ompaabuv4vtha4060.png-wh_50 "/>
Ii. releasing quarantined messages
By analyzing quarantined messages, or receiving requests from users, you may need to release quarantined spam. You can do this by locating and selecting the messages that need to be released in the Quarantine tab, and clicking the Envelopes button to release them. Release the option to "release the message to a specific recipient."
650) this.width=650; "title=" 07.png "src=" http://s2.51cto.com/wyfs02/M02/83/77/ Wkiom1dz3xmrhy6daabdvuhijus903.png-wh_500x0-wm_3-wmp_4-s_630309068.png "alt=" Wkiom1dz3xmrhy6daabdvuhijus903.png-wh_50 "/>
The Release message window opens, with the option to either release the message to all recipients or release the message to the specified recipient. If you select an item to specify that the recipient releases the message, the selected object can only be a recipient that is included in the message, not other recipients that are not in the message. All recipients also refer to all recipients included in the message. Once you've determined your selection, click "Release" and the recipient you specified will receive the message.
650) this.width=650; "title=" 08.png "src=" http://s3.51cto.com/wyfs02/M00/83/76/ Wkiol1dz3z7xhlacaabeexa8jzs855.png-wh_500x0-wm_3-wmp_4-s_2610393097.png "alt=" Wkiol1dz3z7xhlacaabeexa8jzs855.png-wh_50 "/>
Alternatively, you can select release selected messages to all recipients directly in the drop-down menu of the envelopes button.
650) this.width=650; "title=" 09.png "src=" http://s3.51cto.com/wyfs02/M02/83/77/ Wkiom1dz362irbopaabfpdueh2a453.png-wh_500x0-wm_3-wmp_4-s_3120157828.png "alt=" Wkiom1dz362irbopaabfpdueh2a453.png-wh_50 "/>
You will receive a warning that the message will not be released to recipients who have previously received the message, which means that one recipient can only receive the same quarantined message once.
650) this.width=650; "title=" 10.png "src=" http://s3.51cto.com/wyfs02/M01/83/77/ Wkiom1dz32bq1ybdaaawettw31c102.png-wh_500x0-wm_3-wmp_4-s_1458345585.png "alt=" Wkiom1dz32bq1ybdaaawettw31c102.png-wh_50 "/>
If the message does not belong to spam, but is quarantined by the e-mail policy (not a custom policy) provided by EO, the message can be released and the false positives will be reported to Microsoft.
650) this.width=650; "title=" 11.png "src=" http://s4.51cto.com/wyfs02/M01/83/76/ Wkiol1dz33gbqa8paabaubk4qym941.png-wh_500x0-wm_3-wmp_4-s_1080802154.png "alt=" Wkiol1dz33gbqa8paabaubk4qym941.png-wh_50 "/>
However, it is recommended that you use the whitelist feature to allow senders or domains to be protected from the junk e-mail filtering provided by EO for normal reception.
650) this.width=650; "title=" 12.png "src=" http://s4.51cto.com/wyfs02/M02/83/76/ Wkiol1dz34owebijaaayhon-ply372.png-wh_500x0-wm_3-wmp_4-s_1885818411.png "alt=" Wkiol1dz34owebijaaayhon-ply372.png-wh_50 "/>

This article is from the "Fat Brother Technology Hall" blog, please be sure to keep this source http://liulike.blog.51cto.com/1355103/1794383

EEEKB article--Go to the Exchange Online service 27 in Office 365 how to handle and release false positives quarantined messages