In this guide, you will find instructions about filtering e-mails (Microsoft Quarantine).

(info) Eesti keeles


Starting April 15, all university staff and students will receive automatic security notifications once a week titled "Microsoft 365 Security: You Have Messages in Quarantine" in their mailboxes.

More detailed information about email filtering can be found on the intranet.

If you get into trouble with email filtering, feel free to contact IT helpdesk


The IT department emphasizes that special care must be taken when allowing a quarantined e-mail to be sent to the inbox and ensure that it does not contain malware.

Microsoft Quarantine places unwanted emails, such as potential spam, viruses, and phishing emails, into a secure, personal quarantine where you can review the email, then release it to your mailbox or block the sender.

  • Known malicious addresses are automatically blocked.
  • Quarantined messages include messages that are highly likely to be spam or phishing attempts.
  • Messages are quarantined for up to 30 days until user review:
    • If they were misidentified and placed in Microsoft Quarantine, release them to your mailbox;
    • If the quarantined messages are related to spam or phishing, you do not need to take any action (they will be deleted automatically);
    • After 30 days, any messages that are not released from the user's quarantine are automatically deleted and cannot be recovered.

Overview of e-mails in quarantine

  1. To get an overview of e-mails in quarantine, open https://security.microsoft.com/quarantine and use your UT account to log in (using the format: username@ut.ee)
  2. The e-mails added to the quarantine are displayed in the window that opens. Select the e-mail in the list that you want to deal with.

    Click on the image to view it in full size.
  3. Information is displayed and the user can decide the next steps. To release an e-mail from quarantine, click the Release e-mail button.

Overview of shared inbox e-mails in quarantine

NB! e-mails quarantined in a shared mailbox can only be managed by the administrator of the corresponding mailbox.

  1. To get an overview of e-mails in quarantine, open https://security.microsoft.com/quarantine and use your UT account to log in (using the format: username@ut.ee)
  2. The e-mails added to the quarantine are displayed in the window that opens, to view e-mails in the shared infox, click on the Filter button.

    Click on the image to view it in full size.
  3. Insert the e-mail address of the shared mailbox into the Recipient address field and click Apply.
  4. E-mails quarantined in the shared mailbox are displayed.

    Click on the image to view it in full size.