Feedback by UserVoice

Office 365 Security & Compliance

We have partnered with UserVoice, a third-party service and your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy. Please do not send any novel or patentable ideas, copyrighted materials, samples or demos for which you do not want to grant a license to Microsoft.

Welcome to the Security (Protection) & Compliance UserVoice forum. We’re happy you’re here! If you have suggestions or ideas on how to improve Security or Compliance related features in O365, we’d love to hear them!

How it works
◾Check out the ideas others have suggested and vote on your favorites
◾If you have a suggestion that’s not listed yet, submit your own — 25 words or less, please
◾Include one suggestion per post

Thanks for joining our community and helping improve these features in Office 365!

Need Tech Support? Please see the O365 Community for the product or feature you are having issues with, or open a support ticket through your Office 365 administrator portal.

How can we improve compliance or protect your users better in Office 365?

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Improve message tracing in Exchange online

    We have had a lot of issues with spam, whether its cryptovirus emails getting through, or good emails getting improperly blocked. Because of this, we need good message tracing (to find the emails), which we do not feel we have with exchange online. We would like to make the following suggestions:

    1. Need to be able to trace further than 7 days back without a 4 hour wait per trace. Our previous message tracing system could go back the entire year nearly instantly, but we need at least 30 days without the 4 hour wait per trace. This was pitched…

    392 votes
    Vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      16 comments  ·  Message Trace  ·  Flag idea as inappropriate…  ·  Admin →

      Thank you for taking the time to submit this feedback. Since there are multiple pieces and layers of feedback in this single post, it makes it more difficult than many to address. First, let us share a little about what we’ve been doing. Since this post was made, we have prioritized performance and reliability improvements for both Message Trace (inside 7 days) and Historical Search (typically outside of 7 days). We’ve added details to Message Trace that weren’t there before, decreasing the need to run Historical Searches inside of 7 days. For Historical Search, we have improved the results to be more clear for those who are not familiar with the Exchange Message Tracking log format. Additionally, while we get the total value of Message Trace, we’ve also prioritized reducing the constant need to search & destroy. We’ve made tremendous strides in effectiveness, even as the bad guys got more…

    • SMTP Protocol Logs availability

      SMTP Protocol logs are an invaluable tool when troubleshooting message delivery in on-premises Exchange Server.

      I have just had a support case closed because Office 365 support cannot provide SMTP Protocol logs and I'm stuck, not able to determine the cause of a mail flow issue without the logs. The only option for send/receive information on a particular message is advanced message trace, which does not provide details of the message conversation.

      Can you provide a way for admins to request these logs from the Office 365 support team, if not provide a way to access them via Remote PowerShell?…

      145 votes
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        0 comments  ·  Message Trace  ·  Flag idea as inappropriate…  ·  Admin →
      • More details in message trace (client type and message class)

        On on-prem exchange servers, there are valuable information that are showing what client was used to send a message or meeting (like AirSync or MOMT, etc.), and Message Class (like IPM.Note or IPM.Schedule.Meeting.Request, etc.).
        This has proven to be valuable in determining some mailflow issues and would also be valuable information in Office 365 message trace.
        Thank you.

        119 votes
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          0 comments  ·  Message Trace  ·  Flag idea as inappropriate…  ·  Admin →
        • Increase Message Trace Limits

          Increase Message Trace limits from 5000 and 3000 (for detailed traces). Either increase the limits by default or allow a certain number of traces that include larger numbers of messages.

          Certain organizations rely heavily on running message traces for all of their messages.

          It is a requirement for our client to be able to trace all of their messages with detailed information and it's a clumsy solution to have to create a trace for every day out of the past 90 days (which they must do because they send and receive more than 3000 messages within a couple of days).

          102 votes
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            4 comments  ·  Message Trace  ·  Flag idea as inappropriate…  ·  Admin →
          • Add download option to the Forwarding Report

            The recent addition of Mail Flow insights to the Security & Compliance centre is helpful. But the FORWARDING REPORT is missing the facility to DOWNLOAD the data, or to schedule the creation of a report on FORWARDING.

            Can you please look at the option to either allow the data to be downloaded, or for a report to be created/scheduled.

            Thanks

            94 votes
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              6 comments  ·  Message Trace  ·  Flag idea as inappropriate…  ·  Admin →
            • Add multiple wildcard options to message trace capabilities

              Please allow for the ability to use get-messagetrace in combination with multiple wildcard scenarios. For instance, if I want to see *@*.co.uk via a PowerShell query.

              Example script
              $mystart = (Get-Date).addhours(-72)
              $myend = Get-Date
              Get-MessageTrace -StartDate $mystart -EndDate $myend | where {$_.senderaddress -like "*@*.co.uk"}

              This information use to be available with the ForeFront for Exchange on-prem solution and is still available with the Exchange on-prem Get-MessageTrackingLog function currently.

              71 votes
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                Signed in as (Sign out)
                You have left! (?) (thinking…)
                2 comments  ·  Message Trace  ·  Flag idea as inappropriate…  ·  Admin →
              • Message Trace Attachment Attribute missing

                Message Trace do not include Attachment property and by only knowing attachment name you cannot find it. For example knowing a specific attachment has been leaked out from company but you cannot search it from the Trace.

                71 votes
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                  2 comments  ·  Message Trace  ·  Flag idea as inappropriate…  ·  Admin →
                • We do cannot trace emails based on Subject

                  We do cannot trace emails based on Subject , specially when we are dealing with SPAM emails that got delivered to almost all users

                  70 votes
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                    4 comments  ·  Message Trace  ·  Flag idea as inappropriate…  ·  Admin →
                  • enable the adjustment of time zone for message trace tool

                    Hello.I suggest the Time zone on the message trace tool should be adjustable for administrators.This will enable the administrators to view mails trace in their local time as real time.

                    Thank you

                    53 votes
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                      5 comments  ·  Message Trace  ·  Flag idea as inappropriate…  ·  Admin →
                    • Export option in Admin Center "Mail Flow -> message trace"

                      Please allow to export the results of a search in the Mail Flow / Message Trace section of the Echange Online admin site.
                      The only way we have now to get that information is by screenshots.
                      Thank you

                      37 votes
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                        1 comment  ·  Message Trace  ·  Flag idea as inappropriate…  ·  Admin →
                      • Enable message trace log forwarding to on prem storage or SIEM solution.

                        message trace should be forwarded and stored to external sources so that same can be used and leverage for security analysis and other purposes.

                        35 votes
                        Vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          Signed in as (Sign out)
                          You have left! (?) (thinking…)
                          1 comment  ·  Message Trace  ·  Flag idea as inappropriate…  ·  Admin →
                        • show message trace results in specified timezone instead of UTC

                          For convenience when performing the message trace, please show the results of the message trace in the user time-zone instead of UTC.

                          34 votes
                          Vote
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            Signed in as (Sign out)
                            You have left! (?) (thinking…)
                            0 comments  ·  Message Trace  ·  Flag idea as inappropriate…  ·  Admin →
                          • Add functionality to re-deliver failed messages from Message Trace

                            Third party spam filters, such as the offerings from Barracuda, MXLogic, and many others, have the ability to allow administrators to force re-delivery of messages that may have failed due to either a restrictive rule or a SMTP alias that did not exist for a recipient (typically true with migrations from non-Exchange based systems).

                            It would be highly beneficial to admins to have this control and allow for forced re-delivery of messages as necessary.

                            32 votes
                            Vote
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              Signed in as (Sign out)
                              You have left! (?) (thinking…)
                              0 comments  ·  Message Trace  ·  Flag idea as inappropriate…  ·  Admin →
                            • 12 votes
                              Vote
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                Signed in as (Sign out)
                                You have left! (?) (thinking…)
                                0 comments  ·  Message Trace  ·  Flag idea as inappropriate…  ·  Admin →
                              • Be able to obtain message headers from EOP when tracing NDRs from External recipients

                                When working with a customer who is indicating that External senders are sending emails to O365 but the messages are bouncing, this would provide useful when it is difficult to reach out to senders and obtain the headers.

                                10 votes
                                Vote
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  Signed in as (Sign out)
                                  You have left! (?) (thinking…)
                                  0 comments  ·  Message Trace  ·  Flag idea as inappropriate…  ·  Admin →
                                • Should log the actual sending IP address the outside world sees as the fromIP for Get-Messagetrace

                                  The outside world sees a TCP connection from an address under outbound.protection.outlook.com. It should be possible to search on this address to discover the source of a problem. If a recipient reports a problem with mail from the domain and gives the source IP address (as seen in their headers) it won't show up in any search such as the Get-MessageTrace PowerShell comand or a search in the security and compliance center. Therefore if you don't know the MessageId of the message in question (for example in DMARC summary reports) you can't track the problem down. The IP address reported…

                                  9 votes
                                  Vote
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    Signed in as (Sign out)
                                    You have left! (?) (thinking…)
                                    1 comment  ·  Message Trace  ·  Flag idea as inappropriate…  ·  Admin →
                                  • Message body Trace

                                    We are unable to retrieve Body of the Message from Message Trace,
                                    kindly add this functionality

                                    8 votes
                                    Vote
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      Signed in as (Sign out)
                                      You have left! (?) (thinking…)
                                      0 comments  ·  Message Trace  ·  Flag idea as inappropriate…  ·  Admin →
                                    • EOP mail trace currently gives UTC time. Can i get the report in the local time (GMT +5.30 Sri Jayewardenepura). If possible where can i cha

                                      EOP mail trace currently gives UTC time. Can i get the report in the local time (GMT +5.30 Sri Jayewardenepura). If so it would make the administrator life easier.

                                      7 votes
                                      Vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        Signed in as (Sign out)
                                        You have left! (?) (thinking…)
                                        0 comments  ·  Message Trace  ·  Flag idea as inappropriate…  ·  Admin →
                                      • Restore Message Trace Delegation

                                        Message trace capability is an important tier 1 support function which has been broken in Security and Compliance Center.

                                        Currently, only Office 365 global admins and Office 365 Exchange admins can perform message traces in S&SC. The "Mail flow administrator" role only grants access to the useless Mail Flow dashboard. Mail flow administrators must have the ability to perform Message Trace searches. It should not be necessary for this capability to require the level of access within the global admin and Exchange admin roles.

                                        This is a critical support function which must be restored.

                                        6 votes
                                        Vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          Signed in as (Sign out)
                                          You have left! (?) (thinking…)
                                          0 comments  ·  Message Trace  ·  Flag idea as inappropriate…  ·  Admin →
                                        • Add an option to search old emails by specific range of time period

                                          it will be a great help if there is an option to search particular messages by time range in outlook advanced search option.

                                          6 votes
                                          Vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            Signed in as (Sign out)
                                            You have left! (?) (thinking…)
                                            0 comments  ·  Message Trace  ·  Flag idea as inappropriate…  ·  Admin →
                                          ← Previous 1 3
                                          • Don't see your idea?

                                          Feedback and Knowledge Base