Microsoft 365 security Notifications : You have messages in quarantine - middle of the night.

Ax 0 Reputation points
2025-08-06T04:38:05.3033333+00:00

Hello, I work in a state-run emergency department (on-call in case of emergency) that operates 24/7, so we need to have alerts (email) when something happens.

For some time now, we've been receiving notifications saying "Microsoft 365 security: You have messages in quarantine, Review These Messages." E*xample: Prevented phish messages Sender: ******.com Subject: ******* Date: 06/08/2025 00:57:19 1 message is being held for you to review as of 06/08/2025 01:22:08 (UTC). Review them within 30 days of the received date by going to the Quarantine page in the Security Center.

Sent at 00:57, held at 01:22 (UTC), received at 03:23 (local time),* there's already a significant time difference. > I've already changed the settings to not receive the email with a 2-hour time difference (UTC).

The problem is that we often receive these notifications in the middle of the night in our Outlook inbox. (All our important contacts are whitelisted). = These are junkmails, but if we have a certain number of them, since they don't arrive in the standard "junkmail" inbox of outlook, they are blocked by Microsoft Security, which sends us mail notifications ( in the middle of the night). We've all been having a bad night's sleep since activating this notification system. Is it possible to change these notifications, to not receive them at certain times of the night, without having to specifically create an Outlook rule to put the notification emails elsewhere so as not to be woken up all night?
Thanks in advance.

Microsoft Security | Microsoft Defender | Microsoft Defender for Office 365
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Andy David - MVP 158.7K Reputation points MVP Volunteer Moderator
    2025-08-06T11:34:15.9333333+00:00

    Theres nothing built in to control that.

    You can only set the frequency of the messages. You could consider not sending notifications however, and ask the end users check their quarantine themselves instead of relying on the notifications.

    https://learn.microsoft.com/en-us/defender-office-365/quarantine-policies#configure-global-quarantine-notification-settings-in-the-microsoft-defender-portal

    User's image

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.