Submitting phishing and spam emails to Office365 for analysis

I found this link for how you can forward emails that are spam or phishing that are not caught by the Office365 junk filter for further analysis:

https://technet.microsoft.com/en-us/library/jj200769%28v=exchg.150%29.aspx?f=255&MSPPError=-2147217396

Creating an anti-spoofing rule in Office365

Here's how to create a mail flow rule in Office365 to send spammers who spoof your domain to the online quarantine.  These instructions are applicable ass of 8/9/16.  Typically, these spoofed messages will go to your users' junk e-mail boxes, but this can still lead to confusion, so we don't want these messages to go to junk e-mail at all.

In the Exchange Admin Center, go to Mail Flow:

Add a new mail flow rule:

Hit More Options near the bottom of the page:

Give the rule a name of "Spoof Check."  Tell the rule to apply this rule if sender is outside of the organization and the sender's domain is [your public domain] and do the following: deliver the message to the hosted quarantine.

Office 2010 Office Customization Tool (OCT) adjustments

This post documents the changes I make to the Office 2010 Customization Tool to get settings the way I like them.

Microsoft Outlook 2010 -> Outlook Options -> Preferences -> Junk E-Mail -> Enabled
Set to No Protection

Microsoft Outlook 2010 -> Outlook Options -> Other -> Autoarchive
Disable FileArchive -> Enabled

Microsoft Outlook 2010 -> Outlook Options -> Other -> Autoarchive
Autoarchive settings -> Enabled
Clear the box for Turn on Autoarchive

Microsoft Office 2010 -> Privacy -> Trust Settings
Disable Opt-in -> Enabled
Enable Customer Experience -> Enabled
Automatically receive -> Enabled

I also add shortcuts for Outlook, Word, Excel, and PowerPoint to the desktop in Configure Shortcuts.

When using Office365 or Google Apps as I only do, I do not configure the mail profile.  Other than inserting the installation key in Licensing and User Interface, I don't make any changes.

sending spam to junk email folder on Exchange 2007/2010

When configuring actions on detected spam on Exchange 2007 and 2010, there is no option to send it to the junk email folder when configuring it on the EMC. This is absurd. It looks like this (shown here are the actions on the content filter):



As stupid as it is, the way you can configure an SCL to be sent to the junk e-mail folder is through the PowerShell.

This command will send all junk with an SCL of 4 or higher to junk e-mail:

Set-OrganizationConfig -SCLJunkThreshold 4

I put this command on all my Exchange servers. I also disable all outright rejection of spam. Users hate it when legitimate email gets rejected. All spam goes into the junk email folder.


More info on this issue is located here:
http://technet.microsoft.com/en-us/library/bb738127(v=exchg.80).aspx