4 - ユーザー管理の隔離と管理者の隔離

Last reviewed: over 1 year ago

このチュートリアルでは、SPAMおよびSPOOFメッセージをユーザー管理の隔離に、MALICIOUSメッセージを管理者の隔離に配信する方法を学びます（これには、管理者がメールを解放する必要があります）。

ドメインの設定

You first need to configure the domains you are onboarding on the Email Security (formerly Area 1) dashboard. To configure your domains:

To create quarantine policies:

Open the Microsoft 365 Defender console ↗.
Go to Email & collaboration > Policies & rules.
Select Threat policies.
Under Rules, select Quarantine policies.
Select Add custom policy.
Set the Policy name to UserNotifyUserRelease.
Select Next.
In Recipient message access, select Set specific access (Advanced), and then:
- In Select release action preference, choose Allow recipients to release a message from quarantine.
- In Select additional actions recipients can take on quarantined messages, select the Delete and Preview checkboxes.
Select Next.
In Quarantine notification, select Enable.
Select Next.
Review your settings and select Submit.
Select Done.
Select Add custom policy.
Set the Policy name to UserNotifyAdminRelease.
Select Next.
In Recipient message access, select Set specific access (Advanced), and then:
- In Select release action preference, from the drop-down menu, choose Allow recipients to request a message to be released from quarantine.
- In Select additional actions recipients can take on quarantined messages, select the Delete and Preview checkboxes.
Select Next.
In Quarantine notification, select Enable.
Select Next.
Review your settings and select Submit.
Select Done.

To configure quarantine notifications:

Open the Microsoft 365 Defender console ↗.
Go to Email & collaboration > Policies & rules.
Select Threat policies.
Under Rules, select Quarantine policies.
Select Global settings.
Scroll to the bottom and set the desired frequency in Send end-user spam notifications every (days). This value can only be incremented in days.
Select Save.

迷惑メール対策ポリシーを設定するには：

To create the transport rules that will send emails with certain dispositions to Email Security:

Select Next.
You can use the default values on this screen. Select Next.
Review your settings and select Finish > Done.
Select the rule `Email Security User Quarantine Message` you have just created, and Enable.
Select Add a Rule > Create a new rule.
Set the following rule conditions:
- Name: `Email Security User Quarantine Message Admin Release`.
- Apply this rule if: The message headers > includes any of these words.
  - Enter text: X-Area1Security-Disposition > Save.
  - Enter words: `MALICIOUS` > Add > Save.
- Apply this rule if: Select + to add a second condition.
- And: The sender > IP address is in any of these ranges or exactly matches > enter the egress IPs in the Egress IPs page.
- Do the following: _メッセージのプロパティを変更_ > _スパム信頼度レベル (SCL) を設定_ > _9_.

Select Next.
You can use the default values on this screen. Select Next.
Review your settings and select Finish > Done.
Select the rule `Email Security User Quarantine Message Admin Release` you have just created, and select Enable.