I've been having some trouble in the M365 Admin Center where I keep blocking a user, but their status reverts back to Allowed each time. I'm also unable to delete certain junk emails from the Defender Quarantine. Has anyone else experienced this problem recently? Any tips on how to resolve these issues?
5 Answers
If syncing is the problem, consider changing the user's password and revoking their session. It's a secure way to handle it if you're not able to access the VPN or are off-site.
Have you checked if that user is being synced from your on-premises Active Directory? Sometimes that can cause issues with the blocking feature.
I totally get what you're going through! I've had trouble with quarantine messages being unreliable too. After purging something, I usually wait an hour and then check again to see if the status updates.
You should always check the logs when things go sideways. If you haven't looked at them yet, you might find some clues there.
Looks like the issue was related to not disabling the account in AD. Once I did that, the Quarantine update finally came through. Thanks for the support!
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures