From 9ed4512c6324cfb4e49e7eaae38a9f17befc7c80 Mon Sep 17 00:00:00 2001 From: Dhairyya Agarwal <12413099+dhairyya@users.noreply.github.com> Date: Mon, 3 Mar 2025 16:57:47 -0800 Subject: [PATCH 1/4] Updated for creating allow directly from TABL Can add sender and URL allow from TABL --- .../exchange/New-TenantAllowBlockListItems.md | 20 +++++++++++++++++-- 1 file changed, 18 insertions(+), 2 deletions(-) diff --git a/exchange/exchange-ps/exchange/New-TenantAllowBlockListItems.md b/exchange/exchange-ps/exchange/New-TenantAllowBlockListItems.md index c107708874..960c1cc1d0 100644 --- a/exchange/exchange-ps/exchange/New-TenantAllowBlockListItems.md +++ b/exchange/exchange-ps/exchange/New-TenantAllowBlockListItems.md @@ -21,7 +21,8 @@ For information about the parameter sets in the Syntax section below, see [Excha ## SYNTAX ### Expiration -``` + +```powershell New-TenantAllowBlockListItems -Entries -ListType [-ExpirationDate ] [-Allow] [-Block] @@ -35,7 +36,8 @@ New-TenantAllowBlockListItems -Entries -ListType [-Expirat ``` ### NoExpiration -``` + +```powershell New-TenantAllowBlockListItems -Entries -ListType [-NoExpiration] [-Allow] [-Block] @@ -54,6 +56,7 @@ You need to be assigned permissions before you can run this cmdlet. Although thi ## EXAMPLES ### Example 1 + ```powershell New-TenantAllowBlockListItems -ListType Url -Block -Entries ~contoso.com~ ``` @@ -61,6 +64,7 @@ New-TenantAllowBlockListItems -ListType Url -Block -Entries ~contoso.com~ This example adds a URL block entry for contoso.com and all subdomains (for example, contoso.com, www.contoso.com, xyz.abc.contoso.com, and www.contoso.com/b). Because we didn't use the ExpirationDate or NoExpiration parameters, the entry expires after 30 days. ### Example 2 + ```powershell New-TenantAllowBlockListItems -ListType FileHash -Block -Entries "768a813668695ef2483b2bde7cf5d1b2db0423a0d3e63e498f3ab6f2eb13ea3","2c0a35409ff0873cfa28b70b8224e9aca2362241c1f0ed6f622fef8d4722fd9a" -NoExpiration ``` @@ -68,12 +72,22 @@ New-TenantAllowBlockListItems -ListType FileHash -Block -Entries "768a813668695e This example adds a file block entry for the specified files that never expires. ### Example 3 + ```powershell New-TenantAllowBlockListItems -Allow -ListType Url -ListSubType AdvancedDelivery -Entries *.fabrikam.com -NoExpiration ``` This example adds a URL allow entry for the specified third-party phishing simulation URL with no expiration. For more information, see [Configure the advanced delivery policy for third-party phishing simulations and email delivery to SecOps mailboxes](https://learn.microsoft.com/defender-office-365/advanced-delivery-policy-configure). +### Example 4 + +```powershell +New-TenantAllowBlockListItems -Allow -ListType Url -Entries abcd.fabrikam.com -RemoveAfter 45 +``` + +This example adds a URL allow entry for the specified domain with expiration as 45 days after last used date. This allow will permit URLs identified as bulk, spam and regular phish. +For URLs identified as malware or high-confidence phishing, you will need to submit the URL to create allows. [Learn more about submitting good URLs to Microsoft](submissions-admin.md#report-good-urls-to-microsoft). + ## PARAMETERS ### -Entries @@ -281,6 +295,8 @@ The RemoveAfter parameter enables the **Remove on** \> **45 days after last used The only valid value for this parameter is 45. +It can be used with the Allow switch where the ListType parameter value is Sender or FileHash or Url. + You can't use this parameter with the ExpirationDate or NoExpirationDate parameters. ```yaml From 271c3c0f293490f1e56cbf6f09c9d5a340da4163 Mon Sep 17 00:00:00 2001 From: Chris Davis Date: Mon, 3 Mar 2025 17:50:17 -0800 Subject: [PATCH 2/4] Update syntax and examples in documentation --- .../exchange/New-TenantAllowBlockListItems.md | 11 +++-------- 1 file changed, 3 insertions(+), 8 deletions(-) diff --git a/exchange/exchange-ps/exchange/New-TenantAllowBlockListItems.md b/exchange/exchange-ps/exchange/New-TenantAllowBlockListItems.md index 960c1cc1d0..72200314b9 100644 --- a/exchange/exchange-ps/exchange/New-TenantAllowBlockListItems.md +++ b/exchange/exchange-ps/exchange/New-TenantAllowBlockListItems.md @@ -21,7 +21,6 @@ For information about the parameter sets in the Syntax section below, see [Excha ## SYNTAX ### Expiration - ```powershell New-TenantAllowBlockListItems -Entries -ListType [-ExpirationDate ] [-Allow] @@ -36,7 +35,6 @@ New-TenantAllowBlockListItems -Entries -ListType [-Expirat ``` ### NoExpiration - ```powershell New-TenantAllowBlockListItems -Entries -ListType [-NoExpiration] [-Allow] @@ -56,7 +54,6 @@ You need to be assigned permissions before you can run this cmdlet. Although thi ## EXAMPLES ### Example 1 - ```powershell New-TenantAllowBlockListItems -ListType Url -Block -Entries ~contoso.com~ ``` @@ -64,7 +61,6 @@ New-TenantAllowBlockListItems -ListType Url -Block -Entries ~contoso.com~ This example adds a URL block entry for contoso.com and all subdomains (for example, contoso.com, www.contoso.com, xyz.abc.contoso.com, and www.contoso.com/b). Because we didn't use the ExpirationDate or NoExpiration parameters, the entry expires after 30 days. ### Example 2 - ```powershell New-TenantAllowBlockListItems -ListType FileHash -Block -Entries "768a813668695ef2483b2bde7cf5d1b2db0423a0d3e63e498f3ab6f2eb13ea3","2c0a35409ff0873cfa28b70b8224e9aca2362241c1f0ed6f622fef8d4722fd9a" -NoExpiration ``` @@ -72,7 +68,6 @@ New-TenantAllowBlockListItems -ListType FileHash -Block -Entries "768a813668695e This example adds a file block entry for the specified files that never expires. ### Example 3 - ```powershell New-TenantAllowBlockListItems -Allow -ListType Url -ListSubType AdvancedDelivery -Entries *.fabrikam.com -NoExpiration ``` @@ -80,13 +75,13 @@ New-TenantAllowBlockListItems -Allow -ListType Url -ListSubType AdvancedDelivery This example adds a URL allow entry for the specified third-party phishing simulation URL with no expiration. For more information, see [Configure the advanced delivery policy for third-party phishing simulations and email delivery to SecOps mailboxes](https://learn.microsoft.com/defender-office-365/advanced-delivery-policy-configure). ### Example 4 - ```powershell New-TenantAllowBlockListItems -Allow -ListType Url -Entries abcd.fabrikam.com -RemoveAfter 45 ``` -This example adds a URL allow entry for the specified domain with expiration as 45 days after last used date. This allow will permit URLs identified as bulk, spam and regular phish. -For URLs identified as malware or high-confidence phishing, you will need to submit the URL to create allows. [Learn more about submitting good URLs to Microsoft](submissions-admin.md#report-good-urls-to-microsoft). +This example adds a URL allow entry for the specified domain with expiration as 45 days after last used date. This allow entry permits URLs identified as bulk, spam, high confidence spam, and phishing (not high confidence phishing). + +For URLs identified as malware or high-confidence phishing, you need to submit the URLs Microsoft to create allow entries. For instructions, see [Report good URLs to Microsoft](https://learn.microsoft.com/defender-office-365/submissions-admin#report-good-urls-to-microsoft). ## PARAMETERS From a7bab991971e3c376a7b8d4c3c3053596ca45bd6 Mon Sep 17 00:00:00 2001 From: Chris Davis Date: Mon, 3 Mar 2025 17:50:54 -0800 Subject: [PATCH 3/4] Fix code block formatting in documentation --- .../exchange-ps/exchange/New-TenantAllowBlockListItems.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/exchange/exchange-ps/exchange/New-TenantAllowBlockListItems.md b/exchange/exchange-ps/exchange/New-TenantAllowBlockListItems.md index 72200314b9..d1e0fb3780 100644 --- a/exchange/exchange-ps/exchange/New-TenantAllowBlockListItems.md +++ b/exchange/exchange-ps/exchange/New-TenantAllowBlockListItems.md @@ -21,7 +21,7 @@ For information about the parameter sets in the Syntax section below, see [Excha ## SYNTAX ### Expiration -```powershell +``` New-TenantAllowBlockListItems -Entries -ListType [-ExpirationDate ] [-Allow] [-Block] @@ -35,7 +35,7 @@ New-TenantAllowBlockListItems -Entries -ListType [-Expirat ``` ### NoExpiration -```powershell +``` New-TenantAllowBlockListItems -Entries -ListType [-NoExpiration] [-Allow] [-Block] From c53b73602ed4a86fcad719236a83b89ba3cfa37e Mon Sep 17 00:00:00 2001 From: Chris Davis Date: Mon, 3 Mar 2025 17:52:31 -0800 Subject: [PATCH 4/4] Fix grammar in New-TenantAllowBlockListItems.md --- exchange/exchange-ps/exchange/New-TenantAllowBlockListItems.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/exchange/exchange-ps/exchange/New-TenantAllowBlockListItems.md b/exchange/exchange-ps/exchange/New-TenantAllowBlockListItems.md index d1e0fb3780..6ef2975372 100644 --- a/exchange/exchange-ps/exchange/New-TenantAllowBlockListItems.md +++ b/exchange/exchange-ps/exchange/New-TenantAllowBlockListItems.md @@ -290,7 +290,7 @@ The RemoveAfter parameter enables the **Remove on** \> **45 days after last used The only valid value for this parameter is 45. -It can be used with the Allow switch where the ListType parameter value is Sender or FileHash or Url. +You can use this parameter with the Allow switch when the ListType parameter value is Sender, FileHash, or Url. You can't use this parameter with the ExpirationDate or NoExpirationDate parameters.