1

I have set up some phishing/malware mail-flow rules that will forward emails to me for review based on attachments or a list of domains. I can then choose to accept or reject the message. It seems to work well. The problem I'm having is that this weekend, some were automatically rejected because I didn't respond in time.

How do I change this time to "auto reject"?

THE JOATMON
  • 266
  • 8
  • 29

1 Answers1

1

Firstly, run this command to verify that the expiry period is 2 days:

get-retentionpolicytag moderatedrecipients | fl

You should see the Agelimitforretention listed as 02.00:00:00, or 2 days exactly

To change it, use the following command:

set-retentionpolicytag moderatedrecipients -agelimitforretention 05.00:00:00

Where 05 in this example is 5 days. Vary it to suit your requirements. (Maximum 9 Days)

Re-run the first command in order to verify that the change has been made.

jfrmilner
  • 406
  • 2
  • 6
  • This is not working. I just received a message that states `requested your approval of the attached message for delivery to the following recipient. Because no moderation decision was made within 2 days, the message has been returned to the sender. ` And it was only 2 days. I have confirmed with the command above that the `ModeratedRecipients` retention policy is still set to `10.00:00:00`. This must be a different policy. – THE JOATMON Oct 25 '21 at 14:48
  • Hah. Per Microsoft Support: `You can increase the number of days from 2 to maximum of 9 days`. I suppose by me setting it to 10 days it just reverted to the default. Testing 9 days now. – THE JOATMON Oct 25 '21 at 16:34
  • 1
    @THEJOATMON Thanks for comment, I've never pushed it past 5 days but I'll update the answer with the limit. – jfrmilner Oct 25 '21 at 16:37