ORCA.107: End-user spam notification is enabled.
| ID | ORCA.107 |
| Severity | Low |
| Suite | ORCA |
| Product | Defender |
| Related products | Exchange Online |
| Feature | Quarantine |
| Security area | Email and collaboration protection |
| Resource type | Policy |
| User impact of fixing | Low |
| Effort to fix | Low |
| Reads from | Exchange Online |
What this checks and how to fix it
Section titled “What this checks and how to fix it”Enable End-user Spam notifications to let users manage their own spam-quarantined messages (Release, Block sender, Review). End-user spam notifications contain a list of all spam-quarantined messages that the end-user has received during a time period. Policies that do not apply to a spam policy as either a spam, or bulk action, will appear disabled below.
Remediation action
Section titled “Remediation action”Enable End-user Spam notifications on a quarantine policy.
Related Links
Section titled “Related Links”- Configure end-user spam notifications in Exchange Online
- Microsoft 365 Defender Portal - Anti-spam settings
- Recommended settings for EOP and Office 365 Microsoft Defender for Office 365 security
Mito check, based on ORCA. Author: soulemike. Open-source licences.
Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).
© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.