No longer recieving End-User Spam Notifications since end of Jan/Early Feb

We manage several customers with that use EOP for anti-spam with on-prem Exchange servers.  All of a sudden end-user spam notifications have halted after working for months.   I logged into the EOP admin console on each customer and discovered the content filter settings had reverted to default, and end-user spam notifications were disabled.  Obviously I renabled the features, however notifications still are not arriving and the master quarantine has items.  This seems to be a global issue as I have 4 customers that have been "reset".  What changed?

February 17th, 2015 10:03am

We had this happen for several of our customers as well. Ended up speaking with a Microsoft technician who wasn't able to provide me with a way to roll back the changes, but I was able to use the following steps to get content filter settings back to how they were:

- Navigate to Exchange Admin Center > Compliance Management > Auditing

- Click "Run the admin audit log report"

- Run the audit dating back to when EOP was initially configured

- Find the entry matching the cmdlet of "Set-HostedContentFilterPolicy"

- Select and note the parameters for this entry

- Now, navigate to Protection > Content Filter and manually reconfigure the settings matching the parameters of the audit.

Unfortunately, I was unable to find a way to easily roll-back these settings or use the parameters in PowerShell. It's possible, but the commands would have to be retyped for each item and it would take more time than simply reconfiguring the settings.

Free Windows Admin Tool Kit Click here and download it now
February 23rd, 2015 3:03pm

We had this happen for several of our customers as well. Ended up speaking with a Microsoft technician who wasn't able to provide me with a way to roll back the changes, but I was able to use the following steps to get content filter settings back to how they were:

- Navigate to Exchange Admin Center > Compliance Management > Auditing

- Click "Run the admin audit log report"

- Run the audit dating back to when EOP was initially configured

- Find the entry matching the cmdlet of "Set-HostedContentFilterPolicy"

- Select and note the parameters for this entry

- Now, navigate to Protection > Content Filter and manually reconfigure the settings matching the parameters of the audit.

Unfortunately, I was unable to find a way to easily roll-back these settings or use the parameters in PowerShell. It's possible, but the commands would have to be retyped for each item and it would take more time than simply reconfiguring the settings.

  • Proposed as answer by Josiah Jordan Monday, February 23, 2015 8:26 PM
February 23rd, 2015 11:02pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics