Mailbox Rules
This report lists the inbox rules configured on every mailbox in the selected tenant. Rules that forward, redirect, or quietly file mail are a common sign of a compromised account, so this is usually the first page to check during an investigation, and the one to sweep periodically across a whole estate.
Table Details
User Principal Name
The user principal name of the user's mailbox that the rule has been set for.
Name
The name of the mailbox rule.
Priority
The priority order of the rule. Rules run in this order, lowest first.
Enabled
A Boolean field indicating if the rule is currently enabled.
From
The sender's information the rule applies to, if set.
The row flyout shows the rule's full definition, which is where its actual conditions and actions are, including any forwarding or redirect target, the folder mail is moved to, and whether the rule stops further rules from running.
Table Actions
Enable Mailbox Rule
Enables the mailbox rule so it starts acting on mail again. Greyed out on a rule that is already enabled.
Disable Mailbox Rule
Stops the mailbox rule acting on mail while leaving it in place, so it can be turned back on later. Greyed out on a rule that is already disabled.
Remove Mailbox Rule
Deletes the mailbox rule. This cannot be undone, so disable a rule first if you may need to reinstate it.
More Info
Opens the Extended Info flyout with the full details for the selected row.
Feature Requests / Ideas
We value your feedback and ideas. Please raise any feature requests on GitHub.
Last updated
Was this helpful?

