You need to be assigned permissions before you can perform this procedure or procedures. To see what permissions you need, see the "Anti-spam features" entry in the Anti-Spam and Anti-Malware Permissions topic.

1. Run the following command to verify the Content Filter agent is installed and enabled on the Exchange server:
   
   

   	Copy Code
   Get-TransportAgent "Content Filter Agent"

2. Run the following command to verify content filtering is enabled:
   
   

   	Copy Code
   Get-ContentFilterConfig | Format-List Enabled

For more information, see Manage Content Filtering.

To create a dedicated spam quarantine mailbox, follow these steps:

• Create a dedicated Exchange database   We recommend that you create a dedicated database for the spam quarantine mailbox. The spam quarantine mailbox should have a large database, because if the storage quota limit is reached, messages will be lost. For more information, see Manage Mailbox Databases in Exchange 2013.
  
  
• Create a dedicated mailbox and user account   We recommend that you create a dedicated mailbox and Active Directory user account for the spam quarantine mailbox. For more information, see Create User Mailboxes.
  
  You may apply recipient policies, such as messaging records management, mailbox quotas, and delegation rights, according to your organization's compliance policies and needs. For more information, see Messaging Records Management.
  
  

  Note:
  If a quarantined message is rejected because of a storage quota, the message will be lost. Exchange doesn't generate NDRs for quarantined messages because the quarantined messages are wrapped as NDRs.

• Configure Outlook   You need to configure the Outlook delegate access permissions to meet the needs of your organization. In addition, we recommend that you configure the Outlook profile to show the original Sender[#0x0069001E], Recipient[#0x0E04001E], and Bcc[#0x0E02001E] fields in the Message view. For more information, see Release Quarantined Messages from the Spam Quarantine Mailbox.
  
  

You need to be assigned permissions before you can perform this procedure or procedures. To see what permissions you need, see the "Anti-spam features" entry in the Anti-Spam and Anti-Malware Permissions topic.

Run the following command:

	Copy Code
Set-ContentFilterConfig -QuarantineMailbox <SmtpAddress>

This example sends all messages that exceed the spam quarantine threshold to spamQ@contoso.com.

	Copy Code
Set-ContentFilterConfig -QuarantineMailbox spamQ@contoso.com

How do you know this step worked?

The SCL quarantine threshold is the value at which a particular message identified as potential spam is delivered to the spam quarantine mailbox. You can set the SCL quarantine threshold to a value from 0 through 9, where 0 is considered less likely to be spam, and 9 is considered most likely to be spam.

For more information about how to adjust SCL thresholds to suit your organization's requirements and how to adjust per-recipient SCL thresholds, see Manage Content Filtering.

When you manage your spam quarantine mailbox, follow these guidelines:

• Release items that have been sent to the spam quarantine mailbox by using the Send Again feature in Outlook to resend the original message.
  
  For more information, see Release Quarantined Messages from the Spam Quarantine Mailbox.
  
  
• Monitor the spam quarantine mailbox so that the size of the spam quarantine mailbox remains in an acceptable range. The volume of email messages can change because of a larger set of recipients, the natural trend of larger messages, or the threshold on the SCL quarantine action.
  
  
• Monitor the spam quarantine mailbox for false positives. If your spam quarantine mailbox includes many false positives, adjust your SCL quarantine threshold. For more information about how to determine why false positives are being delivered to the spam quarantine mailbox, see Anti-Spam Stamps.
  
  
• Use the same Outlook profile to recover quarantined messages from the spam quarantine mailbox. Applying permissions to a different Outlook profile to recover messages isn't supported. You can't use a different Outlook profile to recover or release messages from the spam quarantine mailbox.
  
  

Important:
NDRs identified as spam are deleted, even if their SCL rating indicates that they should be quarantined. NDRs aren't delivered to the spam quarantine mailbox. To track such messages, use the agent log or the message tracking log. For more information, see Anti-Spam Agent Logging.

After you configure the SCL quarantine threshold, periodically monitor the settings and adjust them based on your organization's needs. For example, if too many false positives are filtered into the spam quarantine mailbox, raise the SCL quarantine threshold to a larger number. For more information about how to adjust the SCL quarantine threshold, see Spam Confidence Level Threshold.