Back to script library
Entra / Microsoft 365 · Exchange Online

Disable junk email options

An Azure Automation runbook to look for recently added mailboxes and update their junk email configuration if necessary.

Connect & set up

Run these once per session. All scopes are read-only unless the script makes changes.

Connect-ExchangeOnline -ManagedIdentity -Organization practical365.onmicrosoft.com
Connect-MgGraph -Identity -NoWelcome

Run it

The main script. Copy it, or download the .ps1 and run it from your console.

param(
[int] $LookbackDays = 7
)
Function Add-MessageRecipients {
# Function to build an addressee list to send email
[cmdletbinding()]
Param(
[array]$ListOfAddresses )
ForEach ($SMTPAddress in $ListOfAddresses) {
@{ emailAddress = @{address = $SMTPAddress}}
}
}
# replace practical365.onmicrosoft.com with your Microsoft 365 service domain
Connect-ExchangeOnline -ManagedIdentity -Organization practical365.onmicrosoft.com
Connect-MgGraph -Identity -NoWelcome
# Recipient for the email sent at the end of the script - define the addresses you want to use here
$EmailRecipient = "Tony.Redmond@office365itpros.com"
# When run interactively, email will be sent from the account running the script. This is commented out for use with Azure Automation
# If used with the Mail.Send permission in an Azure Automation runbook, the sender can be any mailbox in the organization
# $MsgFrom = (Get-MgContext).Account
$MsgFrom = "Azure.Management.Account@office365itpros.com"
# Establish how far back we look
[string]$CheckDate = (Get-Date).AddDays(-$LookbackDays)
# Find matching mailboxes
[array]$Mbx = Get-ExoMailbox -RecipientTypeDetails UserMailbox -ResultSize Unlimited -Filter "WhenCreated -gt '$CheckDate'"
If ($Mbx) {
$Report = [System.Collections.Generic.List[Object]]::new()
ForEach ($M in $Mbx) {
$CurrentJunkMailConfiguration = Get-MailboxJunkEmailConfiguration -Identity $M.ExternalDirectoryObjectId
If ($CurrentJunkMailConfiguration.Enabled -eq $True) {
Set-MailboxJunkEmailConfiguration -Identity $M.ExternalDirectoryObjectId -Enabled $False `
-BlockedSendersAndDomains $null -TrustedSendersAndDomains $null -TrustedRecipientsAndDomains $null
$DataLine = [PSCustomObject][Ordered]@{
Mailbox = $M.DisplayName
UPN = $M.UserPrincipalName
'Trusted Senders and Domains' = $CurrentJunkMailConfiguration.TrustedSendersAndDomains.Count
'Blocked Senders and Domains' = $CurrentJunkMailConfiguration.BlockedSendersAndDomains.Count
'Contacts Trusted' = $CurrentJunkMailConfiguration.ContactsTrusted
}
$Report.Add($DataLine)
} Else {
Write-Output ("Mailbox {0} already has the junk email rule disabled" -f $M.displayName)
}
}
} Else {
Write-Output "No mailboxes found to update..."
}
$ToRecipientList = @( $EmailRecipient )
[array]$MsgToRecipients = Add-MessageRecipients -ListOfAddresses $ToRecipientList
$MsgSubject = "Mailboxes processed for Junk EMail Settings"
$HtmlHead = "<h2>Mailbox Junk Email Setting Updates</h2><p>The following nailboxes have been disabled for the Outlook Junk Email rule.</p>"
$HtmlBody = $Report | ConvertTo-Html -Fragment
$HtmlMsg = "</body></html><p>" + $HtmlHead + $Htmlbody + "<p>"
# Construct the message body
$MsgBody = @{
Content = "$($HtmlMsg)"
ContentType = 'html'
}
$Message = @{subject = $MsgSubject}
$Message += @{toRecipients = $MsgToRecipients}
$Message += @{body = $MsgBody}
$Params = @{'message' = $Message}
$Params += @{'saveToSentItems' = $True}
$Params += @{'isDeliveryReceiptRequested' = $True}
# And send the message using the parameters that we've filled in
Send-MgUserMail -UserId $MsgFrom -BodyParameter $Params
Write-Output ("Message containing information about Junk Email rule updates for mailboxes sent to {0}!" -f $EmailRecipient)

Parameters

ParameterDefaultNotes
-LookbackDays7How many days back to search for newly created mailboxes or recent activity.
Attribution