{"id":498,"date":"2022-05-02T15:16:59","date_gmt":"2022-05-02T15:16:59","guid":{"rendered":"https:\/\/www.torontohelpdesk.ca\/blog\/?p=498"},"modified":"2022-05-02T15:17:01","modified_gmt":"2022-05-02T15:17:01","slug":"external-sender","status":"publish","type":"post","link":"https:\/\/www.torontohelpdesk.ca\/blog\/external-sender\/","title":{"rendered":"External Sender"},"content":{"rendered":"\n<p><strong>Problem:<\/strong> You wish to have an external sender message<\/p>\n\n\n\n<p><strong>Solution:<\/strong><\/p>\n\n\n\n<p>Microsoft recently introduced the option of creating one internally rather than through rules:<\/p>\n\n\n\n<p>(h\/t alitajran.com)<\/p>\n\n\n\n<h1 class=\"wp-block-heading\">Add tag to external emails in Microsoft 365 for extra security<\/h1>\n\n\n\n<p>You like to secure the infrastructure, and one of the places to have additional security is email. Users click too fast on hyperlinks or attachments, and it\u2019s excellent to make them aware of double-checking the email because it\u2019s sent from an external sender.<\/p>\n\n\n\n<p>Microsoft listened and added a new feature in Microsoft 365 \u2013 Exchange Online. From now on, we can add a tag for external emails. It\u2019s a welcoming new feature and only available for Exchange Online. In this article, you will learn how to enable the external tag feature.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Table of contents<\/h2>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-why-you-should-enable-external-tagging\">Why you should enable external tagging<\/h2>\n\n\n\n<p>Why do you want to add a tag for external received email messages? Even that we have Exchange Online Protection or other spam filters, it\u2019s known that you can\u2019t completely protect the organization from spyware, malicious links. User awareness is important, and that\u2019s what the external tag feature will do.<\/p>\n\n\n\n<p>Microsoft is aware that even if you enable&nbsp;<a href=\"https:\/\/www.alitajran.com\/configure-spf-record-for-office-365\/\">SPF<\/a>,&nbsp;<a href=\"https:\/\/www.alitajran.com\/configure-dkim-record-for-office-365\/\">DKIM<\/a>, and&nbsp;<a href=\"https:\/\/www.alitajran.com\/configure-dmarc-record-for-office-365\/\">DMARC<\/a>&nbsp;to prevent phishing and email spam, it\u2019s not enough. That\u2019s why they created a new PowerShell cmdlet for Exchange Online to enable the protections against spam &amp; phishing threats from external senders. This will be achieved by presenting a new tag on emails called&nbsp;<strong>\u201cExternal\u201d<\/strong>.<\/p>\n\n\n\n<p>It will show in:<\/p>\n\n\n\n<p>Suppose your organization already uses mail flow rules (also known as transport rules) to add text to the subject line of messages from external senders. In that case, you should disable those rules before you enable this feature to avoid duplication.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-connect-to-exchange-online-powershell\">Connect to Exchange Online PowerShell<\/h2>\n\n\n\n<p>The only option to enable the tag for external email messages is with&nbsp;<a href=\"https:\/\/www.alitajran.com\/install-exchange-online-powershell-v2\/\">Exchange Online PowerShell<\/a>. There is no option through the Microsoft 365 Exchange admin center.<\/p>\n\n\n\n<p>Run Windows PowerShell as administrator and&nbsp;<a href=\"https:\/\/www.alitajran.com\/install-exchange-online-powershell-v2\/\">connect to Exchange Online PowerShell.<\/a><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>PS C:\\&gt; Connect-ExchangeOnline<\/code><\/pre>\n\n\n\n<p>Copyhttps:\/\/5c2b085f4d0e7b26837d10b71ee18a6f.safeframe.googlesyndication.com\/safeframe\/1-0-38\/html\/container.html<img decoding=\"async\" src=\"blob:https:\/\/www.torontohelpdesk.ca\/0db32850-7938-46cb-8338-aa359f860ee4\" alt=\"\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-enable-external-email-tag\">Enable external email tag<\/h2>\n\n\n\n<p>Enable external sender identification in supported versions of Outlook. Run the&nbsp;<a href=\"https:\/\/docs.microsoft.com\/en-us\/powershell\/module\/exchange\/set-externalinoutlook?view=exchange-ps\" target=\"_blank\" rel=\"noreferrer noopener\">Set-ExternalInOutlook<\/a>&nbsp;cmdlet.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>PS C:\\&gt; Set-ExternalInOutlook -Enabled $true<\/code><\/pre>\n\n\n\n<p>Copy<\/p>\n\n\n\n<p>Now that it\u2019s enabled, you can verify by running the&nbsp;<a href=\"https:\/\/docs.microsoft.com\/en-us\/powershell\/module\/exchange\/get-externalinoutlook?view=exchange-ps\" target=\"_blank\" rel=\"noreferrer noopener\">Get-ExternalInOutlook<\/a>&nbsp;cmdlet.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>PS C:\\&gt; Get-ExternalInOutlook | Format-Table\n\nRunspaceId                           Identity                             Enabled AllowList\n----------                           --------                             ------- ---------\n262c8cb4-da7e-47b0-bcb4-6ce1569061b6 fe15bfe6-36b2-4c9d-bf42-51b995f8e9af    True {}       <\/code><\/pre>\n\n\n\n<p><\/p>\n\n\n\n<p>After you enable the cmdlet, it can take between 24-48 hours before the users see the external tag from received external emails.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-add-domain-to-allow-list\">Add domain to allow list<\/h3>\n\n\n\n<p>Don\u2019t you want to add an external tag to a domain or multiple domains? Add the domains to the allow list.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>PS C:\\&gt; Set-ExternalInOutlook -AllowList @{Add=\"contoso.com\", \"microsoft.com\"}<\/code><\/pre>\n\n\n\n<p>Let\u2019s see how it looks.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>PS C:\\&gt; Get-ExternalInOutlook | Format-Table Identity, Enabled, AllowList\n\nIdentity                             Enabled AllowList\n--------                             ------- ---------\nfe15bfe6-36b2-4c9d-bf42-51b995f8e9af    True {contoso.com, microsoft.com}<\/code><\/pre>\n\n\n\n<p>Remove domain from allow list<\/p>\n\n\n\n<p>Do you want to remove the domain or domains from the allow list?<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>PS C:\\&gt; Set-ExternalInOutlook -AllowList @{Remove=\"contoso.com\", \"microsoft.com\"}<\/code><\/pre>\n\n\n\n<p><strong>Exchange Online external tag enabled<\/strong><\/p>\n\n\n\n<p>After we set the external tagging feature, we had to wait for 48 hours before the external tag feature did show up. The new emails that arrive are automatically tagged. Older emails that you have do not get the external tag.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/www.alitajran.com\/wp-content\/uploads\/2021\/03\/Add-tag-to-external-emails-in-Microsoft-365-for-extra-security-from-outside-your-organization.png\" alt=\"Add tag to external emails in Microsoft 365 for extra security from outside your organization\" class=\"wp-image-18484\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttps:\/\/5c2b085f4d0e7b26837d10b71ee18a6f.safeframe.googlesyndication.com\/safeframe\/1-0-38\/html\/container.html\n<\/div><\/figure>\n\n\n\n<p>Reply to an email, and the external tag will not show up in the email message. The sender does not know you have external tagging enabled, which is excellent.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/www.alitajran.com\/wp-content\/uploads\/2021\/03\/Add-tag-to-external-emails-in-Microsoft-365-for-extra-security-reply.png\" alt=\"Add tag to external emails in Microsoft 365 for extra security reply\" class=\"wp-image-18485\"\/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-exchange-online-external-tag-not-working\">Exchange Online external tag not working<\/h2>\n\n\n\n<p>Because it\u2019s a new feature, this can take time before it\u2019s available in your Microsoft 365 tenant. To speed that up, you can&nbsp;<a href=\"https:\/\/docs.microsoft.com\/en-us\/microsoft-365\/admin\/manage\/release-options-in-office-365?view=o365-worldwide\" target=\"_blank\" rel=\"noreferrer noopener\">set up the targeted release preferences in Microsoft 365<\/a>.<\/p>\n\n\n\n<p>Sign in to&nbsp;<a href=\"https:\/\/admin.microsoft.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft 365 admin center<\/a>. Go to&nbsp;<strong>Settings&nbsp;<\/strong>&gt;&nbsp;<strong>Org settings<\/strong>&nbsp;&gt;&nbsp;<strong>Organization profile<\/strong>&nbsp;&gt;&nbsp;<strong>Release preferences<\/strong>.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/www.alitajran.com\/wp-content\/uploads\/2021\/03\/Add-tag-to-external-emails-in-Microsoft-365-for-extra-security-release-preferences.png\" alt=\"Add tag to external emails in Microsoft 365 for extra security release preferences\" class=\"wp-image-18498\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttps:\/\/5c2b085f4d0e7b26837d10b71ee18a6f.safeframe.googlesyndication.com\/safeframe\/1-0-38\/html\/container.html\n<\/div><\/figure>\n\n\n\n<p>Select&nbsp;<strong>Targeted release for everyone<\/strong>&nbsp;and click on&nbsp;<strong>Save<\/strong>.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/www.alitajran.com\/wp-content\/uploads\/2021\/03\/Add-tag-to-external-emails-in-Microsoft-365-for-extra-security-targeted-release-for-everyone.png\" alt=\"Add tag to external emails in Microsoft 365 for extra security targeted release for everyone\" class=\"wp-image-18499\"\/><\/figure>\n\n\n\n<p>That\u2019s it! Did you enable the external tag feature in Exchange Online \u2013 Microsoft 365?<\/p>\n\n\n\n<p>Read more:&nbsp;<a href=\"https:\/\/www.alitajran.com\/save-sent-items-in-shared-mailbox-with-powershell\/\">Save sent items in shared mailbox with PowerShell \u00bb<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-conclusion\">Conclusion<\/h2>\n\n\n\n<p>In this article, you learned how to add a tag to received external emails in Exchange Online \u2013 Microsoft 365 for extra security. Spammers will try every way possible to get that mail in your inbox. Using this new and excellent feature by Microsoft will make the users aware that the email is coming from outside the organization.<\/p>\n\n\n\n<p>I recommend enabling this feature on every Microsoft 365 tenant. Don\u2019t forget that the tag feature only is available for Exchange Online, and this will not work for Exchange on-premises. We may see this feature in Exchange on-premises, but there are no words about that yet.<\/p>\n\n\n\n<p>Did you enjoy this article? You may also like&nbsp;<a href=\"https:\/\/www.alitajran.com\/assign-office-365-licenses-with-azure-group-based-licensing\/\">Assign Office 365 licenses with Azure group-based licensing<\/a>. Don\u2019t forget to follow us and share this article.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Problem: You wish to have an external sender message Solution: Microsoft recently introduced the option of creating one internally rather than through rules: (h\/t alitajran.com) Add tag to external emails in Microsoft 365 for extra security You like to secure <a class=\"more-link\" href=\"https:\/\/www.torontohelpdesk.ca\/blog\/external-sender\/\">Continue reading <span class=\"screen-reader-text\">  External Sender<\/span><span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-498","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/www.torontohelpdesk.ca\/blog\/wp-json\/wp\/v2\/posts\/498","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.torontohelpdesk.ca\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.torontohelpdesk.ca\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.torontohelpdesk.ca\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.torontohelpdesk.ca\/blog\/wp-json\/wp\/v2\/comments?post=498"}],"version-history":[{"count":1,"href":"https:\/\/www.torontohelpdesk.ca\/blog\/wp-json\/wp\/v2\/posts\/498\/revisions"}],"predecessor-version":[{"id":499,"href":"https:\/\/www.torontohelpdesk.ca\/blog\/wp-json\/wp\/v2\/posts\/498\/revisions\/499"}],"wp:attachment":[{"href":"https:\/\/www.torontohelpdesk.ca\/blog\/wp-json\/wp\/v2\/media?parent=498"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.torontohelpdesk.ca\/blog\/wp-json\/wp\/v2\/categories?post=498"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.torontohelpdesk.ca\/blog\/wp-json\/wp\/v2\/tags?post=498"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}