Outlook Junk Email False Positives

Starting yesterday I have had several clients call me about false positives (good emails going to Outlook Junk Email folder). In some cases they are even internal emails being mis-routed to Junk email. In all of the cases they are running either
Exchange 2007 or Exchange 2010 onsite and the Outlook clients are 2007 or 2010. As I said everything was fine until yesterday but with the holiday on Wed some may have not noticed until yesterday or today. Is there some update on Tues or Wed of
this week (12/31/13) on the server or Outlook workstations causing this? I have not changed a thing and I need to get this resolved.
Thanks for any help!
-Richard K

ok, that makes sense but there are 2 things that are going on that don't fit that bill.
1. This is happening on multiple domains so I doubt I have an rbl list problem with multiple domains at the same time. I have confirmed this with checking a few of them for rbl listings and they are clean.
2. This is happening even with internal email (email to email in same domain going through the same Exchange server). That is the one that really gets me as internal emails should never be filtered to Junk.
The last definition update I see is from 12/11/13. I am not sure where to look to see where it gets it's daily updates from.

Similar Messages

How to force Outlook's Junk email fitler to not filter Exchange 2010 SP1 accepted domains?

Hello,
I wonder if there really is no way how to reach the result described in the title question. Because
http://support.microsoft.com/kb/2458522 says:
This issue occurs because of a functionality change that is introduced in Exchange Server 2010 SP1. In Exchange Server 2010 SP1, domains that are configured as accepted domains are no longer allowed in the junk email lists of a mailbox.
So please tell us Microsoft how can we force Outlook to accept internal domain as a trusted senders and not apply Junk email filter on it?
There was already a long discussion about the steps here
http://social.technet.microsoft.com/Forums/en-US/outlook/thread/15f857c6-0ed4-4004-9d90-cb5d16361752 so please don't offer anything described there.
Thank you,

Trying to deal with the Outlook Junk Email Filter is not very easy and had been a pain in the butt.
The ONLY way to ensure the Outlook 2010 Junk Email filter honors "white listed" emails is to stamp the email with SCL -1. Setting a transport rule will do that but it is not very flexible.
I was able to resolve these issues by simply enabling the Exchange 2010 Anti-Spam agents on each hub transport server. We have no Edge Server but we use a couple of Ironports at the gateway which provide the bulk of AntiSpam. We didn't think we would
need the Exchange AntiSpam so we hadn't initially enabled. After months of trying to resolve people's complaints of emails from internal system ending up in Junk, this solution worked for us.
This is the order in which it was done.
1. We set the receive connectors for the internal systems for bypassing Anti Spam. We basically have 2 receive connectors, one for internal system with no relay, and one for internal systems who are allowed external relay.
Get-ReceiveConnector "server\name of the recieve connector" | Add-ADPermission -User "“NT Authority\Anonymous Logon” -AccessRights ExtendedRight
-ExtendedRights ms-exch-bypass-anti-spam
Note: If you use SMTP Authentication, Exchange will only mark the emails as "Internal" and not assign a SCL of -1. It can only be on anonymous connections.
Note: We have a separate receive connector for the Ironports delivering external email that will not bypass Anti-Spam. These emails will receive a SCL rating of 0-9
2. We set the global SCL to 6 (default is 4). You can set it to whatever you want.
Set-OrganizationConfig -SCLJunkThreshold 6
So basically, any email tagged with SCL 7-9 will be moved to Junk by Exchange.
3. Set-ContentFilterConfig -SCLQuarantineEnabled $False -SCLDeleteEnabled $False -SCLRejectEnabled $False
We don't want delete, reject or quarantine anything on Exchange. Just move email to Junk folder if SCL 7-9 and have user deal with it.
4. Set the Internal SMTP Servers by adding each Exchange server's IP Address to the Global Transport Settings. I used EMC, Organization Config, Global Settings, Transport Settings properties, Message Delivery tab. Do NOT add any other "internal" servers
here, only the Exchange servers.
5. Then we installed the AS agents on each HT Server.
Starting with the first server
Stop MSExchange Transport service
D:\Program Files\Microsoft\Exchange Server\V14\Scripts>.\install-AntispamAgents.ps1
After installation, disable all the agents except for Content Filtering Agent. This agent has to be enabled for Exchange to stamp the email with SCL -1. I used EMC, Organization Config, Hub Transport. You will see a new tab called Anti-Spam. Disable everything
except Content Filtering.
Start MSExchange Transport service.
Repeat on each HT server. (You won't have to repeat the disabling of the agents as that is a global setting)
6. You can add global safe senders by doing the following.
$list = (Get-ContentFilterConfig).BypassedSenders
$list
$list.add("[email protected]")
$list.add("[email protected]")
Set-ContentFilterConfig -BypassedSenders $list
The message headers are stamped with
For emails sent through the Internal connector
X-MS-Exchange-Organization-Antispam-Report: MessageSecurityAntispamBypass
X-MS-Exchange-Organization-SCL: -1
OR
For external emails from a safe sender
X-MS-Exchange-Organization-Antispam-Report: ContentFilterConfigBypassedSender
X-MS-Exchange-Organization-SCL: -1
OR
For all other external emails
X-MS-Exchange-Organization-SCL: 0
Good Luck. This has basically stopped all the calls about "legitimate" email in Junk Email folder.

False positive junk email

how do i report emails that are apparently filtered by apple as junk and not being sent to my account?

Hello, casa4casa.
Below, I have attached a couple articles that will allow you to mark messages that have been identified as spam "Not Junk". In the second article attached, see the section labeled Troubleshooting false-positives as it has a link that you requested to notify iCloud Support.
iCloud: Manage junk mail
http://support.apple.com/kb/PH2649
iCloud: Identifying and filtering spam
http://support.apple.com/kb/HT4899
Regards,
Jason H.

I am using outlook 2013 for my emails. My junk emails get automatically deleted. I have had several people say they sent me emails and i can not find them. They are not in any of my inboxs. Can anyone please help

I am using outlook 2013 for my emails. My junk emails are gettting automatically deleted. Problem is i am getting sent emails from schools and others that i
am just not receving. It;s not in any of my inboxe. I am losing alot of important info and don't know why. Please help

If you suspect they are being marked as junk and deleted, turn off the auto-delete. Being that Office is a Microsoft product, you should ask them how to do that: http://www.microsoft.com/mac.

Outlook 2010 Junk email options

Hi Team-
Exchange 2010 Sp3 with Outlook 2010 junk email option doesn't work.
added sender email address in blocked sender list but still receive email on the Inbox.
Any hotfix for this
ksrugi

Hi-
I was testing in with outlook 2010 blocking sender email ID and it is not working and email still coming to the inbox.
Tested on few machines with different account still same issue and all machines have single profiles no other profiles.
Email addreess is not in the safe sender's list and No PST is using.
Exchange 2010 and we set also New-FseExtendedOption
–Name CFAllowBlockedSenders –Value
true and still cannot block sender in outlook 2010.
Is this bug in outlook
2010 and any hotfix availaible
ksrugi

How to control junk emails in Outlook 2011

Hi Guys, I have installed MS office 365 on my new Mac Book Pro. I receive lots of junk emails in my outook email. Before I used windows and had Norton Internert Security on my Laptop, was no problem at all. Since I used Mac, I cannot control junk emails. I do not want to install Norton as many used on the forum said it is not good for machine. Need advise what to do ?

My keyboard is the one here http://support.apple.com/kb/HT1171 and the info says that the PC Forward Delete burron is a Delet button with an arrow to the right with an X in it. There is no such button on my keyboard.

HT4899 False positive spam

How do I find a false positive spammail on my iPad? Can't see a junk folder or a spam folder anywhere.

Depends on your email provider and the type of email account (POP vs. IMAP). If it is a POP account, you likely would need to log into the providers website to see it.

Messages going to junk email folder

Hi,
We have exchange 2013 deployed and from few days some emails on all users are going to their outlook 2007, 2010 Junk-Email folder.
How can i stop same from Exchange 2013 Server side?
Best Regards, Ranjit Singh

Is it happening in OWA also (I assume, YES)
After you tested the Test Mailbox, and if it's working without any issue then try these things.
Run Outlook and SafeMode and check the issue.
Disable the Mailbox and Enable it, Test the issue.
I also saw the same issue with one of my client (Exchange 2010) but it was happening with few users only. Tried several things, MFC MPAI, Deleting folder (Junk). These things didn't helped, had to disable the Mailbox and Assign new Mailbox and Import the
PST into it. They are still monitoring the issue.
Cheers,
Gulab Prasad
Technology Consultant
Blog:
http://www.exchangeranger.com    Twitter:
  LinkedIn:
   Check out CodeTwo’s tools for Exchange admins
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

How do I delete mass junk emails?

It seems to me that when I recieve a large quantity of junk emails to my Outlook via my Iphone 5 I shouldn't have to individually mark each one before I can trash them. I should be able to select all and then unmark the ones I want to save.
The guys at the Apple store say there's no way around it, why is that?
They told me to open the emails and scroll to the bottom and unsubscribe! I would be there for years! After a long weekend I could have 800 junk emails. I have had my IT guy set stricter softwate to my Outlook but then some of my customers get bounced out. Any Ideas????

5930 Lakeshore wrote:
The guys at the Apple store say there's no way around it, why is that?
Because Apple hasn't included that feature. That's why.

Outlook Junk Reporting Add-In Not working - No "Report Junk" option

I have installed the "Junk Reporting Add-in for Office 2007, 2010, 2013 (32bit).msi" from Microsoft on 2 computers with Outlook 2013 as part of Office 365. Both are currently on version 15.0.4693 (latest version). On one, when I right click on
a message and go to the Junk options there is, as expected, the new "Report Junk" option. On the other, running on a Windows 8.1 system, that option is not there. I have tried uninstalling and reinstalling to no effect.
Any ideas why the Add-In might not be working on the 8.1 computer? Anything I should try?
Thanks,
Colin
Colin

Hello Colin,
Does the user have any other add-in installed? This issue may occur if a conflict with a plug-in or an add-in causes the Junk Email Reporting Add-in to become disabled. We need to first check if the Junk Reporting Add-in is listed in the Add-in list under
File > Options > Add-ins. If it's not in the list, it means the add-in is disabled or not installed successfully. To check if the Add-in is disabled, go to File > Options > Add-ins, switch the "Manage:" drop-down
list to Disabled Items and press Go. Check if Junk Reporting Add-in is listed there. If so, highlight the add-in and click
Enable.
Please let me know the result.
Regards,
Steve Fan
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs.

Best Practices for disabling OWA Junk Email filter org wide

Users created in Exchange Online appear to have the following attributes set by default
set-mailboxjunkemailconfiguration "identity" -enabled $true
Like most organizations we have a more robust filtering solution and the OWA and Outlook implementations of junk email filtering leave a lot to be desired. Is there a good solution to remove that setting organization wide, and not have to repeat this with
onboarding new users?
Obviously Powershell could be utilized with a Get-Mailbox | Set-MailboxJunkEmailConfiguration command, but I'd like to not have to repeat this

You can use something called as a cmdline extention agents to get this working on newly created mailboxes.
That will execute a set of commandlets when you run new-mailbox or enable-mailbox and it succeeds.
Even if you run this from the Exchange server GUI, it in the background runs either of the above commands depending on whether you are creating a new user also along with mailbox or if you are associating a mailbox with an already existing user.
http://blogs.technet.com/b/fun_with_powershell/archive/2014/04/17/cmdletextension-and-its-magic.aspx
This is one of the example of performing a different action when you have new-mailbox or enable-mailbox.
You can modify this script.

Junk email rule causing problems with mailbox restore

Running the command new-restoremailboxrequest on Exchange 2010 SP1. The restore fails and the following event is logged which seems to indicate a conflict with the Junk Email rule. I've tried disabling junk email by using set-mailboxjunkemailconfiguration
-Enabled $false but still get this failure. Any suggestions?
Request 'RequestGuid (969181be-baf4-46d5-ae1a-693bc66e8bd0), RequestQueue: (f9f94816-2e98-487f-94e5-86fce1bbcc5b)' (969181be-baf4-46d5-ae1a-693bc66e8bd0) failed.
Error code: -2147024809
MapiExceptionInvalidParameter: Unable to modify table. (hr=0x80070057, ec=-2147024809)
Diagnostic context:
   Lid: 55847 EMSMDBPOOL.EcPoolSessionDoRpc called [length=228]
   Lid: 43559 EMSMDBPOOL.EcPoolSessionDoRpc returned [ec=0x0][length=324][latency=1]
   Lid: 23226 --- ROP Parse Start ---
   Lid: 27962 ROP: ropModifyRules [65]
   Lid: 17082 ROP Error: 0x80070057
   Lid: 27745
   Lid: 21921 StoreEc: 0x80070057
   Lid: 27962 ROP: ropExtendedError [250]
   Lid: 1494 ---- Remote Context Beg ----
   Lid: 26426 ROP: ropModifyRules [65]
   Lid: 23921 StoreEc: 0x3EC
   Lid: 21970 StoreEc: 0x8004010F PropTag: 0x668F0040
   Lid: 21970 StoreEc: 0x8004010F PropTag: 0x668F0040
   Lid: 21970 StoreEc: 0x8004010F PropTag: 0x67F60040
   Lid: 21970 StoreEc: 0x8004010F PropTag: 0x67F60040
   Lid: 21970 StoreEc: 0x8004010F PropTag: 0x67F60040
   Lid: 48851
   Lid: 21970 StoreEc: 0x8004010F PropTag: 0x67F60040
   Lid: 51077 dwParam: 0x80000000
   Lid: 65267
   Lid: 40691
   Lid: 5559 StoreEc: 0x80070057
   Lid: 65015
   Lid: 65439
   Lid: 4302 StoreEc: 0x80070057
   Lid: 1750 ---- Remote Context End ----
   Lid: 26849
   Lid: 21817 ROP Failure: 0x80070057
   Lid: 29150
   Lid: 20446 StoreEc: 0x80070057
Context:
Operation: IDestinationFolder.SetRules
OperationSide: Target
Primary (f234b6f4-218a-4c58-9836-c4ddbd585cf6)
Rules: [Rule: Condition: Restriction: AND[OR[OR[]; AND[OR[AND[EXIST[ptag:SpamConfidenceLevel]; PROPERTY[ptag:SpamConfidenceLevel, GreaterThan, val:[Tag:SpamConfidenceLevel, Value:-1(int)]]]; OR[]]; NOT[OR[OR[]; RECIPIENT[OR[]]]]]]; NOT[OR[OR[]; RECIPIENT[OR[]];
OR[]]]]; Actions: [RuleAction: MOVE FolderEID:[len=46, data=00000000B3FC5841BD7F27459CCB06169721971D010028582623C58C9E4BA1B1E020EC7A67820000006B76A80000], StoreEID:[len=175, data=0000000038A1BB1005E5101AA1BB08002B2A56C20000454D534D44422E444C4C00000000000000001B55FA20AA6611CD9BC800AA002FC45A0C000000414C4C49454445584348414E4745002F6F3D4669727374204F7267616E697A6174696F6E2F6F753D45786368616E67652041646D696E6973747261746976652047726F7570202846594449424F484632335350444C54292F636E3D526563697069656E74732F636E3D4D617474204F74697300];
RuleAction: TAG [Tag:0x80850003(NamedProp), Value:-1888028235(int)]]; Name 'Junk E-mail Rule'; Provider: 'JunkEmailRule'; ProviderData: 0100000000000000C71F7C05BF84CA01; ExecutionSequence: 0; Level: 0; StateFlags: 49; UserFlags: 0; IsExtended: True; Rule:
Condition: none; Actions: [RuleAction: OOFREPLY TemplateEID:null, TemplateGuid:65bb6208-5c06-43ef-b7fc-eeea40d1ee0b, Flags:0]; Name 'MSFT:TDX OOF Rules'; Provider: 'MSFT:TDX OOF Rules'; ProviderData: ; ExecutionSequence: 50; Level: 0; StateFlags: 141; UserFlags:
2; IsExtended: False]
Folder: '/Top of Information Store/Inbox', entryId [len=46, data=0000000011C0C13788C2ED45BF6EEB0B92609EEB010048CB676F0A3BCD4DA54CB9A970210A6F00000000001C0000], parentId [len=46, data=0000000011C0C13788C2ED45BF6EEB0B92609EEB010048CB676F0A3BCD4DA54CB9A970210A6F0000000000190000]
Rob

I am having the same issue as well. Following the steps in KB924297 did not allow me to complete the move of a mailbox from Exchange 2003. Does anyone have any other ideas?
Operation: IDestinationFolder.SetRules
OperationSide: Target
Primary (dd49a9b3-38f6-4e22-8d35-97dfed38c8fd)
Rules: [Rule: Condition: none; Actions: [RuleAction: OOFREPLY TemplateEID:[len=70, data=000000008F4E881AABE9194D820DD9443CE5F2680700581DD170AF77084591AEA477934C5D7400000003E00C0000581DD170AF77084591AEA477934C5D7400000003E1F90000], TemplateGuid:062a9465-fc99-4982-b796-108a559ce001,
Flags:0]; Name ''; Provider: 'MSFT:TDX OOF Rules'; ProviderData: ; ExecutionSequence: 50; Level: 0; StateFlags: 13; UserFlags: 2; IsExtended: False]

Email false spam rejections

When is Verizon going to get off its butt and do something about the problem its third party spam filterer is causing with sending email attachments etc.
Email with the following link was rejected over 10 times by Verizon as being a spam. http://navycaptain-therealnavy.blogspot.com/2010/01/number-two-in-our-countdown-is-captain.html
The link is not spam and was only being sent to one person.
This is not the first time I have experienced this PITA.
Twelve hours later the same email went straight away.
Verizon is maybe not ready for prime time with this FIOs.

First, Verizon's webmail and FiOS services are unrelated. Dial, DSL and FiOS customers all use the exact same email.
Second, you can report false positives, and should whenever possible. The spam filters are a dynamic or learning system. Blocks are placed on content based on what people report as spam, and removed based on what people report as not spam. You can send any email that you are trying to send that you do not think is spam as an attachment to [email protected] for review.
If a forum member gives an answer you like, give them the Kudos they deserve. If a member gives you the answer to your question, mark the answer as Accepted Solution so others can see the solution to the problem.
"All knowledge is worth having."

Set Junk Email Filter to "No Automatic Filtering" using regedit

I found
http://support.microsoft.com/kb/2813164/en-us#survey which says to change HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\Options\Mail
to DWORD: JunkMailProtection to value 0xfffffff.
When I went to that location, there was NO existing DWORD JunkMailProtection already in place. I created one. It did not change my filter from Low to No Automatic Filtering.
I ran a registry compare before and after changing manually. No change indicated in the registry, and incidentally in the setting of 0xfffffff, when I changed it manually to any other value.
Does someone know the true whereabouts of the registry that controls the Email Filtering options? I do NOT have the junk email filtering disabled via a UI policy.

Hi,
I added the Key and DWORD in the path:
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\Options\Mail
But it didn't work, then I added the Key and DWORD to this path:
HKEY_CURRENT_USER\Software\Policies\Microsoft\office\14.0\outlook\Options\Mail
It worked like a charm.
I hope this helps.
Regards,
Melon Chen
TechNet Community Support

Junk Email shows in Inbox!?!!

How can I get Blend to NOT show junk mail from my junk folder in my Inbox?
This doesn't happen on the Z10 - but it does in Blend.
Of course I can't find a setting to turn this off...

In this particular case it's an Outlook account and I just checked the sync settings - the Junk folder is not synced.
When I view the Inbox on the device, the junk emails do NOT appear in it. This only happens in Blend - which is frustratingly annoying. And really inappropriate: all of a sudden, several dozen unread junk emails appear in the Inbox.
Strangely enough...I have other Outlook accounts configured on the Z10, with junk emails in their junk folder, and they don't appear in Blend!

Outlook Junk Email False Positives

Similar Messages

Maybe you are looking for