Passer au contenu principal
Cette page n’est pas encore traduite et est disponible en anglais.
If your organisation cannot deploy the OutKept add-in, whether due to compatibility issues or by choice, you can use our integration with Outlook’s built-in Report Phishing button instead. With this setup:
  • All reports, including OutKept simulations, are centralised in a single inbox.
  • All reported phishing simulations are tracked in our platform statistics.
  • Users who report emails automatically receive feedback.
Microsoft changed the integration requirements for the Outlook Report Phishing button, so configurations made before that change are no longer valid and may stop phishing emails being reported correctly. If you set this up previously, work through the steps again.

​
Create a shared mailbox for reported emails

1

Add the mailbox

Go to admin.microsoft.com, open Teams & groups then Shared mailboxes, and click Add a shared mailbox.Give it a name that uniquely identifies it, for example phishing, with an address such as phishing@your-domain.
2

Register it as a SecOps mailbox

This tells Microsoft not to quarantine or filter the forwarded mail. Go to the SecOps mailbox settings, click Add, or Edit if a SecOps mailbox already exists.
3

Select and save

Search for and select the shared mailbox you just created, then click Save.
Do not skip the SecOps step. Without it, reported mail can be quarantined before it reaches the shared mailbox, and reports silently go missing.

​
Configure the Outlook Report phishing button

Now point Microsoft’s own button at that shared mailbox.
1

Open user reported settings

Go to Microsoft Defender and navigate to Settings → Email & Collaboration → User reported settings.
2

Set the required options

Many settings here are optional and can follow your own company policy. These are the ones that matter:
3

Save

Click Save.

​
Set up a forwarding rule

This sends a copy of everything reaching the shared mailbox to our reporting address, which is what lets users get feedback on their reports. Create the rule in the Exchange admin center, under Mail flow then Rules, and fill in the three fields as follows.
The exception is not optional. Without it, mail arriving from our reporting address is copied straight back to us and the rule loops.

​
Enable external forwarding

External forwarding has to be allowed for that rule to work.
1

Create an outbound policy

Go to the anti-spam settings, click Create policy and select Outbound.
2

Name and scope it

Fill in the Name field with OutKept reporting forward and click next. Enter the shared mailbox account in the Users field and click next.
3

Set the forwarding options

4

Save

Click Next, then Save.

​
Then what

All reported emails, both OutKept mail and everything else, can now be viewed in the shared mailbox. Reported simulations appear on the dashboard under Reported emails. See Dashboard. Tell people the button now goes somewhere. See Tell people about it.