Join Log in
Score:0
avatar Server

Exchange Online - Reporting on blocked users

us flag
Norphus

There is a feature in Exchange Online which blocks users from being able to send email when they send too many emails in a time period. It usually triggers either when a user sends a load of emails via Mail Merge or when their account gets compromised and it's used to send a load of spam.

You can view which accounts have been blocked from sending either by going to the Restricted Users page in the Defender Security Portal or by running the Get-BlockedSenderAddress cmdlet in the Exchange Online EXO PowerShell Module.

The trouble is, these only show the users who are currently blocked. I have been asked by my employer to produce a report on who has been blocked in the last n days. I've looked at the reports in the Defender portal and there isn't one that does exactly that. I'm wondering if this kind of data is kept and if so, how I can extract it?

Thanks in advanced for any help.

110
0 + 0
Score:0
Louisl avatar Server
tr flag
Louisl

Check it in Report > Email & collaboration > Compromised users. You can see the compromised(Suspicious or Restricted) users report in the last 90 days. URL: https://security.microsoft.com/reports/CompromisedUsers

For more information about this: https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/view-email-security-reports?view=o365-worldwide#compromised-users-report

0 + 0
us flag
Norphus
Awesome, thankyou. The reason I couldn't see it was because I hadn't been given the right role in PIM. I've now been given Security Admin and I can get to what I need.
0
Reply
ธงชาติไทย
Elon Musk
I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.